What are Confluence's roles?

This article describes Confluence’s new role-based access model. This includes existing sites that signed up to participate in the beta for roles as well as new roles-only sites.

When roles are enabled in your Confluence instance, go to Confluence settings, then select Permissions, then Space roles, or go to the Users page in Space settings.

If you don’t see those in your experience, your instance hasn’t been enabled for roles yet.

 

Roles make managing user access to spaces consistent, predictable, and scalable. Each role has a different set of individual permissions associated with it, giving you confidence in what each user can do.

You can also assign roles broadly to different classes of users such as All Confluence users or All Confluence admins, regardless of group membership.

A dropdown menu to select RBAC roles

Confluence’s roles

Confluence has four default roles, as well as the ability to define custom roles.

View the specific permissions included in each default role

Admin

Manages everything in the space.

Best for: IT teams, Space owners

Manager

Manages people and content but not settings.

Best for: Project leads, Team leads

Collaborator

Adds and edits content in the space.

Viewer

Views and comments on content in the space.

How the legacy permissions map to Confluence’s roles

The legacy space permissions table has a new look in the new world of Confluence roles. Here’s how it all fits together.

A view of Confluence's legacy roles interface
A view of Confluence's Manage access screen

Old name

New name

What the permission allows

All
> View

View content

View all content items in a space.

No one can view content they’re restricted from viewing.

All
> Delete own

Delete own content

Delete own content items and folders

Pages, whiteboards, databases, and Smart Links
> Add

Create content

Create new content items and folders

Pages, whiteboards, databases, and Smart Links
> Archive

Archive any content in the space

Archive any content, including content you didn’t create

Pages, whiteboards, databases, and Smart Links
> Delete

Delete anyone’s content

Delete any content, including content you didn’t create

Blogs
> Add

Create blogs

Create blog posts

Blogs
> Delete

Delete blogs

Delete any blog posts, including those you didn’t create

Comments
> Add

Comment on content

Add comments on any content you can view

Comments
> Delete

Delete anyone’s comments

Delete anyone’s comments on any content you can view

Attachments
> Add

Add attachments

Add attachments to content items and comments

Attachments
> Delete

Delete attachments

Delete any attachments on any content you can edit

Restrictions
> Add/Delete

Manage user access to content

Manage content-level permissions — restrict content, open content up, and grant people specific access to content.

Space
> Export

Export space

Export all content in a space

Space
> Admin

Manage everything in space

Manage space features, automation, legacy and related content, and integrations.

  • Anyone holding this permission is listed as a space admin

New permissions
If you transition to roles from the old permissions experience, you’ll notice more permissions available when creating custom roles and assigning access. These new permissions were split from the original Admin, Create blogs, Create content, Comment on content, and View permissions, enabling the creation of the default Manager role and providing more granular control within the role system.

Anyone who had the original permissions will automatically have the new ones when roles is initially enabled. Anyone who didn’t have the original permissions won’t get the new ones by default.

NEW

Split from the Admin permission

Manage all content in space

Add, update, or remove access for users, groups, user classes, and apps

Manage custom content permissions for apps

Note: Even if you have this permission, you can't assign or remove roles that include permissions you don’t have.

NEW

Split from the Admin permission

Create content templates

Manage all content in the space, including content you didn’t create.

Can change content ownership.

If paired with additional space permissions (e.g, Manage access to individual content, Archive content, Delete content, Edit content), it unlocks further bulk actions in the Content manager tool.

NEW

Split from the Admin permission

Manage look and feel of space

Create space-level content templates for pages and live docs

NEW

Split from the Admin permission

Delete own comments

Manage themes, layout, and PDF export formatting in space

NEW

Split from the Admin permission

Manage access to space

Allow or block public link usage in space (assuming public links are allowed on your site)

NEW

Split from the Admin permission

Allow and manage public links

Add, change, and remove access for guest users in the space

NEW

Split from the Admin permission

Manage guest access to space

Allow or block anonymous users from access the space

NEW

Split from the Admin permission

Allow and manage anonymous access

Delete a space and all of its content.

Once deleted, a space will go to the trash where it’ll remain for 60 days before being permanently deleted

NEW

Split from the Admin permission

Delete space

Archive a space and all of its content.

NEW

Split from the Create content permission

Archive space

Edit title, body text, status, and labels for pages and live docs.

Edit title, columns, and cell content for databases.

Edit title and content for whiteboards.

NEW

Split from the Create content permission

Edit content

Edit blog content, including blog post title and body text.

NEW

Split from the Create content permission

Edit blogs

Delete comments that you create

NEW

Split from the Create content permission

Export individual content

Export pages, live docs, blogs, whiteboards, and databases that you can view.

Specific permissions in each role

View of an admin's permissions in Confluence

Permissions included with the Admin role

A view of permissions included in the Manager role

Permissions included with the Manager role

A view of the permissions available for the Collaborator role.

Permissions included with the Collaborator role

A view of the permissions available for the Viewer role.

Permissions included with the Viewer role

 

Still need help?

The Atlassian Community is here for you.