Granting unlicensed (internal) access to Confluence Cloud
Platform Notice: Cloud - This article applies to Atlassian products on the cloud platform.
Summary
Different from anonymous access (anyone on the internet), unlicensed access can be granted internally in Confluence as long as the user has site access, using methods like the following:
- Give access to unlicensed users from Jira Service Management (from the integration between Jira Service Management and Confluence)
- Invite guests for external collaboration
By following one of these practices, even though anonymous access is not granted at a global permission level, additional spaces can have anonymous access enabled, allowing it to be visible by users with site access without a Confluence license (I.E. site access without product access).
This means that in addition to the space open for the guest or unlicensed/Jira Service Management account, users can interact with these other spaces (respecting the permissions applied to anonymous users) and the information will not be exposed to the public/internet.
Environment
Although the process should be simple, there are some pre-requisites to granting unlicensed access:
- For unlicensed users from Jira Service Management
- The Use Confluence permission must be enabled at the JSM access tab of the Global Permissions from Confluence. This way, these accounts can access the instance and then, the spaces.
- The user must be granted site access, but have the product access disabled, like the screenshot below:
- These users will already have access to spaces integrated with Jira Service management.
- For Guests
- Guests will already have access to a single space dedicated to them upon inviting the user. The guest account will respect the permissions assigned to guests in that space.
- For spaces open for anonymous access, guest permissions will correspond to the ones assigned to anonymous.
Solution
To allow guests and users without product access to view different spaces in Confluence, a combination of space permission changes and configuration is necessary for the accounts.
Space permissions
Starting with the permissions for spaces that should be open for unlicensed users, as a space administrator, the following steps must be done for each of them:
- Go to the space in question and select the Space settings option from the sidebar.
- There, select the Space permissions option in the sidebar (or General, under the Space permissions tab).
- Tap the Edit permissions button.
- Under the Anonymous access session, check the permissions that the unlicensed users should have (I.E. View and Comment).
- Tap Save all.
When anonymous access is granted, the following banner will be displayed since the global permission for anonymous is disabled:
Unlicensed user from JSM
Once the spaces have the permissions configured, all unlicensed users from Jira Service Management should be able to access it via the space directory (the Spaces part on the navigation bar) as long as the JSM access tab of the global permission is enabled:
- As an administrator, tap the gear icon at the top-right while in Confluence.
- There, select the Global permissions option from the sidebar.
- Under the JSM access, tap Edit and check the Use Confluence option.
- Tap Save.
Even though the users are not necessarily accessing a Jira Service Management project (or portal), as long as they have site access (and no product access to Confluence, as displayed in the screenshot from the pre-requisites part), the spaces should also be visible when navigating to Confluence.
Guests
For guests, they are already granted access to a space after completing the process to invite them. After enabling the anonymous permission for the other spaces, these will be also visible to guest accounts, and no additional actions are required.
Notes
- Remember that anonymous access must be disabled at a global level (under Global permissions > Anonymous access) to avoid anyone on the internet seeing the content from Confluence.
- When the space is open for anonymous access, any user within Confluence will be able to see it because such permission bypasses existing ones.
- For internal unlicensed users (with site access but no product access to Confluence) logging in to access Confluence, the following bug will be present:
-
CONFCLOUD-72937
-
Getting issue details...
STATUS
- There are two workarounds for this scenario:
- Access the site's URL (I.E. "<example>.atlassian.net", without the "/wiki" context path) which should redirect the user to the customer portal. Once this is done, the site's information will be cached, allowing Confluence to be properly accessed.
- Tap the Log in to another account while presented with the pop-up stating that the user does not have access and enter the same email/account.
- For users with product access on the site or any other instances, Confluence can be accessed through the navigation menu at the top-left > site name or https://id.atlassian.com
- There are two workarounds for this scenario:
-
CONFCLOUD-72937
-
Getting issue details...
STATUS
- Changes around unlicensed access at a space level without global access enabled for anonymous users are tracked under the following suggestions:
- CONFCLOUD-30161 - Getting issue details... STATUS
- CONFCLOUD-28946 - Getting issue details... STATUS
- CONFCLOUD-44116 - Getting issue details... STATUS