Authorize all my company in Confluence's reading
Asked by Gwena?l GRALL:

Hello,

I need help to setup the granted access to my Confluence.

I have 2 atlassian's applications : Jira Core and Confluence.  
The Access is granted with my company's AD and all people are in groups  
Users and groups are inherited from Jira

All people of my company have access to JiraCore (with licences)

I want to granted access in writing only to some of them in order to limit confluence's license use. For that I add them to a specific group "confluence-user" in jira  
I want to granted access to all my company in reading for all spaces(without licenses)

I want to grant access in writing to some special external users who have references in jira local base (with jira license) to some spaces (they will consume confluence licenses)  
I want to granted access to anonymous persons (others customers) just on one space : the public space (without licences)

I didn't succeed to configure access as stated above. Currently people of my company which do not have license can't read anything

My current configuration :

In Global Permissions :  
Users with licence : I have add here some groups to writing in Confluence (Confluence-admin, confluence-users)  
Users without licences are grant to use Confluence  
Anonymous access are grant to use Confluence

Default spaces permissions :  
Confluence-admin, confluence-users

individual business space (not public space):  
Users with Licence  
Confluence-admin, business_group, company_group in reading only  
Anonymous access : no

Is-it possible to setup what i want to do?


Answers:
author: Gwena?l GRALL
body: I have another question on this subject  
When people connect Confluence, in anonymous profil, they have the search engine enable and they can use it. It's the result I want.

But if I am connected like a active user (with no licence), I have no search engine on menu bar and if the search engine is include in current page, Confluence answer I have no permit to use it.

Have you some idea?

comments: author: Gwena?l GRALL
body: It's my mistake. I have forget in spaces, to give agreement to read page for confluence users...


author: Diego
body: Hello there [@Gwena?l GRALL](/t5/user/viewprofilepage/user-id/1439975) ! This behaviour is most likely being triggered by the fact that you *did not explicitly give permission*to the authenticated users.

Since Confluence works with inclusive permissions (anyone but X can do this) we need to specify who can.

Also, glad to know that you were able to find the hole in such permissions and now everything works!

Come share with the Community if you need anything else.


author: Diego
body: Hello there! Thanks for sharing with us Gwena?l.

We need to enable **Public access**so users who are not authenticated can use content within Confluence:

**[Setting Up Public Access](https://confluence.atlassian.com/doc/setting-up-public-access-156.html)**

As you have stated, the Global can use permission has been set to the Anonymous users. One step that you may still need to finish is setting the **Space permission** for public access:
> 1. Go to the desired space
> 2. Click Space tools \> Permissions
> 3. Scroll down to Anonymous access
> 4. Click to edit
> 5. Select View all option (leave all others out if you need them to view only)
> 6. Save

After that, anonymous users should be able to see content within Confluence.

Let us know about your results Gwena?l. Looking forward to you reply!

comments: author: Gwena?l GRALL
body: Well you don't understood my problem

I would to have one public space and several internal spaces  
I would have in my company some writers (With Licence)  
And some readers (Without licence). This readers have access to internal spaces (in reading)  
and I would to have anonymous access (Without licence) for public space only.

My problem is to allow access to internal spaces for readers of my company (in reading).


author: Gwena?l GRALL
body: I just add, the readers of my company are authentificated


author: Diego
body: Hello there Gwena?l.

Thanks for explaining further! As I understand, you need to **grant access** to a specific set of users in a specific **set of spaces**, is that correct?

For this to work, we will need to grant the **can use permission** globally for the user **groups or even individually.** After that, these users should be granted with the **Space permissions** for such:

**[Global Permissions Overview](https://confluence.atlassian.com/doc/global-permissions-overview-138709.html)**

[**Assign Space Permissions**](https://confluence.atlassian.com/doc/assign-space-permissions-139460.html)

If the users have the general permission of can use, but are not included in the space permissions (via group or individual grant) they will not be able o access the space.

If your users exist in your Active Directory but are not part of **any group that have permissions**to use Confluence, they should be granted individual permissions or be included in one of the groups that have enough permissions.

Let me know if the issue being addressed is now correct! Looking forward to solving the situation.


author: Gwena?l GRALL
body: Thanks for this informations. I had apply this permissions before.  
But this answer has boosted me to looking for why the system don't give to users the good result.

This article put me on the way : <https://confluence.atlassian.com/jirakb/guide-to-link-knowledge-base-to-jira-service-desk-for-unlicensed-user-816677228.html>

Here, the solution I have found. I am not sure is it the normal operating.

* To make active user, I open Jira administration.
* I open Jira Service Desk project.
* In "Knowledge base", I must create a link to every space I want to share with the company users. (I break link and I remake with an another space)

Access is correct for anonymous users and users with licences.

With an active user, I can't log on root of Confluence. (Confluence indicate : user has not access)  
I must write url like : /confluence.url.fr:8090/display/THESPACE

and active user have access in reading to the space.

In my mind, I don't understand why project is linked to differents spaces without relation with project (apart public space) in Jira

I can bring more information like captures of screen if you want.

So thank you to support me

See you soon, cause I have still a lot of questions...

:)


author: Diego
body: Oh, it is great to hear that Gwena?l!

Thanks for sharing the final solution for your case. What I had in mind was that you needed to set access to your users within Confluence itself, not through Jira.

Happy to see that you found our documentation and even happier that you came back to share the results with the rest of our Community!

Now that you have more question, go ahead and shoot them to us. It may also be a good idea to start a new thread, so other customer could jump into that as well!

Looking forward to you reply!


Tags: confluence-server

permission

server