Since 2009
Permissions & Access Review for ConfluenceConfluence Cloud · Atlassian ForgeWho can view and edit each space and page, and why
In Confluence, access is set in three places: space permissions, view restrictions on a page and every page above it, and edit restrictions on the page itself. This app puts them together on one page, lets you fix restrictions on many pages at once, and turns each snapshot into an access review you can sign off. Nothing changes until you confirm it, and every change can be undone.
What it does
"Who can see this page?" should not take an afternoon
Spaces and restricted pages
For every space, which groups and people can view it, add and edit pages, and admin it. Every page and blog post with a view or edit restriction that the app or you can see: who is listed, how many pages sit below it, and which parent page also limits it.
One page, or one person
Paste a page link and see who can view and edit it, and why, next to Confluence's own answer for any person or group. Or pick a person and see their groups, the spaces they reach and through which group, and the restricted pages that name them.
Access reviews
Each snapshot is a review. Mark each person Keep, Remove or Follow up, with a note, and sign off with your name and the time. The next review shows who is new and who became a space admin. Download an Excel evidence file.
Fix restrictions in bulk
Copy a page's edit restriction to the pages below it, or add or remove a person or group on the view or edit restriction of many pages. You see every change first. Each page is logged before it changes, and any change can be undone.
Built to be safe
What it will and won't change
The only write permission adds or removes a person or group on a page's view or edit restriction. The app cannot change page content, space permissions or groups.
Every change shows the full list of pages first. Nothing happens in Confluence until you click Apply changes and confirm.
Each page is written to the change log, with its restrictions as they were, before it changes. Undo any change from the log.
Changes run as the admin who confirmed them, so Confluence checks your own permission on every page and its audit log shows your name.
A restriction is never left empty, because that would open the page to everyone in the space. A change that would shut you out of a page skips that page.
No servers of our own and no API key. Only Confluence admins can open the app. Names, emails and page titles are never stored.
Getting started
Install, take a snapshot, review
Install
From the Atlassian Marketplace, in Confluence under Settings → Find new apps.
Take a snapshot
Open Confluence administration → Permissions & Access Review and click Take a snapshot. It runs in the background. Then click Add the pages I can see.
Look, review, fix
Use the Spaces, Restricted pages, Page and Person tabs, sign off on Reviews, and fix restrictions on Changes.
Paid through the Atlassian Marketplace, per user, billed on your Atlassian invoice, with a free trial. The listing is not public yet. Request access or ask a question.