Global Permissions Overview

Permissions determine the actions which a user is allowed to perform within Confluence. Global permissions are one of the levels of permission provided by Confluence.

Global permissions control access across the whole Confluence site as follows :

• Can Use: This is the most basic permission that allows users to access the site.
  Users with this permission count towards the number of users allowed by your license. See the information on removing/deactivating users.
  
  
• Attach Files to User Profile: This allows the user to upload files to be stored in their user profile.
  Attaching files to a user profile was a feature made obsolete by personal spaces. This permission is therefore not relevant since Confluence 2.2.
  
  
• Personal Space: This permission allows the user to create a personal space.
  
  
• Create Space(s): This permission allows users to create new spaces within a Confluence site. When a space is created, the creator automatically has the 'Admin' permission for that space and can perform space-wide administrative functions.
  
  
• Administer Confluence: This permission allows users to access the Administration Console that controls site-wide administrative functions.
  

Global Permissions are granted in the Global Permissions section of the Administration Console. In order to assign these permissions, a user must already have the global 'Administer Confluence' permission.

Site administrators can assign global permissions to groups, individual users, and anonymous users. Further permissions are granted from the space administration screens.

Note about 'Administer Confluence' permission

Granting a user 'Administer Confluence' permission will not automatically grant her access to all spaces in the site. It will only grant the user access to the Administration Console.

Automatically being an administrator of all spaces is only available to the special 'confluence-administrators' group (internally called the superuser group). There is an outstanding enhancement request to replace the superuser group with something better.

Be aware, however, that users with 'administer' permission must still be trusted. They have access to modify users and groups in Confluence, so can always add themselves to the 'confluence-administrators' group and become a superuser.

RELATED TOPICS

Adding a Group

Changing Usernames

Setting up Anonymous Access

Global Groups Overview

Adding a New User

Editing User Details

Viewing members of a group

Removing a Group

Security Overview

Enabling or Disabling Public Signup

Global Permissions Overview

Adding or Removing a User from a Group

Removing a User