Skip to main content

4 posts tagged with "atlassian"

View All Tags

Confluence Permissions: The Ultimate Guide (2026)

· 5 min read
Quick Answer

Confluence permissions control who can view, edit, and administer content. You manage permissions at three levels: site admin (global), space admin (space-level), and page restrictions (page-level). Understanding the inheritance hierarchy is key — lower-level settings always override higher-level ones.

What Are Confluence Permissions?

Confluence permissions are access controls that determine what actions users can perform on content. Without proper permission management, teams risk exposing sensitive information or blocking collaboration.

Confluence has three permission layers:

LevelControlsManaged By
Site adminGlobal permissions, app access, user groupsSite admins
Space adminSpace-level view/edit/admin permissionsSpace admins
Page restrictionsIndividual page view/edit accessPage owners, space admins

Site Admin Permissions (Global)

Site admins control global access through Global Permissions. This is the highest level of permission control.

How to Access Global Permissions

  1. Click your profile icon → Administration
  2. Navigate to User ManagementGroups
  3. Select Global Permissions

Global Permission Groups

GroupPurposeDefault Members
site-adminsFull site controlManual assignment
confluence-adminsConfluence-specific adminManual assignment
confluence-usersBasic access to ConfluenceAll registered users
confluence-ex-usersUsers with expired licensesAuto-populated

Key Global Permissions

  • Confluence Administrator: Access admin console, manage users, configure apps
  • System Administrator: Full system control (including non-Confluence settings)
  • Can Use: Basic access to log in and use Confluence

Space Admin Permissions

Space admins control permissions within individual spaces. Every space has at least one space admin.

How to Manage Space Permissions

  1. Go to the space → Space SettingsPermissions
  2. Add/remove users or groups
  3. Set view, edit, and admin permissions

Space Permission Types

PermissionWhat It Allows
ViewSee the space and its pages
EditCreate and modify pages
AddAttach files and comments
DeleteRemove pages and attachments
AdminManage space settings and permissions

Inheritance Rules

Permissions follow a hierarchy:

Site Admin → Space Admin → Page Restrictions

Lower-level settings always win. If a page restriction denies access, it overrides space-level grants.


Page Restrictions

Page restrictions let you control access to specific pages without changing space permissions.

Two Types of Restrictions

RestrictionEffect
View restrictionOnly specified users can view the page
Edit restrictionOnly specified users can edit the page

How to Restrict a Page

  1. Open the page
  2. Click More actions (⋯) → Restrictions
  3. Add users or groups to the view or edit restriction list

Key Behaviors

  • Restrictions apply to the page and all child pages
  • Only page owners, space admins, or users with "Admin" permission can set restrictions
  • Restricted pages appear in search results but cannot be accessed by unauthorized users

Permission Inheritance Explained

Inheritance is the most confusing part of Confluence permissions. Here's the complete picture:

The Inheritance Hierarchy

1. Global Permissions (site-wide)

2. Space Permissions (space-level)

3. Page Restrictions (page-level)

How Inheritance Works

ScenarioResult
User has view permission at all levels✅ Can view
User has view permission at space level, but page is restricted❌ Cannot view
User is in a denied group at space level❌ Cannot view (even if page allows)
User has no explicit permission at any level❌ Cannot view

Common Gotchas

  1. "Everyone" group: Adding "Everyone" to space permissions grants access to all logged-in users
  2. Group membership: Users inherit permissions from all groups they belong to
  3. Restriction scope: Page restrictions cascade to child pages
  4. Space key in URL: Users can see the space key in URLs even if they can't access content

Troubleshooting Permission Issues

"I can't see a page"

Check these in order:

  1. Global permissions: Are you in confluence-users?
  2. Space permissions: Does your group have "View" permission?
  3. Page restrictions: Is the page restricted to specific users?

"I can't edit a page"

  1. Space permissions: Does your group have "Edit" permission?
  2. Page restrictions: Is edit access restricted?
  3. Page status: Is the page archived or locked?

"I'm a space admin but can't change permissions"

  • Verify you're a space admin, not just a content creator
  • Check if the space is a archived space (permissions are frozen)

Best Practices

  1. Use groups, not individuals: Assign permissions to groups for easier management
  2. Limit page restrictions: Overusing restrictions creates maintenance overhead
  3. Audit regularly: Review permissions quarterly to remove stale access
  4. Document exceptions: Keep a log of any permission overrides for compliance
  5. Test in production: Use the "Impersonate" feature (site admins) to verify access

Frequently Asked Questions

What's the difference between site admin and space admin? Site admins control global settings and user access. Space admins control permissions within individual spaces. A space admin cannot modify global permissions.

Can I restrict a page without affecting child pages? No. Page restrictions cascade to all child pages. You must manage each child page individually if you need different access.

What happens when a user is removed from a group? They lose all permissions inherited from that group. Existing page restrictions they set remain (if they were page owners).

Can I see who has access to a page? Yes. Go to Page RestrictionsWho can see this? to view the effective permission list.

How do I transfer page ownership? Edit the page → More actionsPage HistoryTake Ownership (requires space admin permission).



This guide is part of our Confluence admin series. Bookmark it for reference.

Jira Workflow Automation: Complete Guide (2026)

· 4 min read
Quick Answer

Jira workflow automation uses rules with triggers, conditions, and actions to automate repetitive tasks. You can auto-assign issues, transition tickets based on status, send notifications, and update fields — all without code. Start with Jira's built-in automation rules, then scale to marketplace apps for complex workflows.

What Is Jira Workflow Automation?

Jira workflow automation eliminates manual steps by triggering actions based on events. Instead of manually assigning issues, updating statuses, or sending notifications, Jira does it automatically.

Key Benefits

BenefitImpact
Reduce manual workSave 5-10 hours/week per team
Eliminate human errorConsistent, repeatable processes
Enforce complianceAutomated checks and balances
Speed up deliveryFaster issue resolution

Jira Automation Rules

Jira's built-in automation engine lets you create rules without code.

Rule Anatomy

Every rule has three parts:

Trigger → Condition → Action
ComponentPurposeExamples
TriggerWhen does the rule run?Issue created, status changed, field updated
ConditionShould the rule proceed?Issue type is Bug, priority is High
ActionWhat happens?Assign to user, transition issue, send email

How to Create a Rule

  1. Go to Project SettingsAutomation
  2. Click Create rule
  3. Select a Trigger
  4. Add Conditions (optional)
  5. Add Actions
  6. Name and enable the rule

Common Automation Patterns

1. Auto-Assign Issues

Trigger: Issue created Condition: None Action: Assign to project lead

Use when: Issues are always triaged by one person.

2. Transition Parent When All Children Done

Trigger: Issue transitioned to Done Condition: All sub-tasks are Done Action: Transition parent to Done

Use when: Epics or stories should auto-close after sub-tasks finish.

3. Notify on High Priority

Trigger: Issue created Condition: Priority = Highest Action: Send Slack/email to team lead

Use when: Critical issues need immediate attention.

4. Auto-Close Stale Issues

Trigger: Scheduled (daily) Condition: Status = To Do, updated > 30 days ago Action: Transition to Closed, add comment

Use when: Backlog hygiene is neglected.

5. Clone Issue on Transition

Trigger: Issue transitioned to Done Condition: Issue type = Bug Action: Create linked issue in QA project

Use when: Bugs need verification after fix.


Advanced Automation

Multi-Branch Rules

Run multiple actions in parallel:

Trigger: Issue created
├── Branch: If issue type = Story
│ ├── Action: Create sub-task "Design"
│ └── Action: Create sub-task "Development"
└── Branch: If issue type = Bug
├── Action: Assign to QA lead
└── Action: Add "needs-investigation" label

Webhook Integration

Connect Jira to external systems:

IntegrationUse Case
SlackPost messages to channels
GitHubSync issues with PRs
ConfluenceAuto-create documentation
Custom APITrigger external workflows

Scheduled Rules

Run rules on a schedule:

ScheduleExample
Daily at 9amSend standup summary
Weekly on MondayClose stale issues
MonthlyGenerate reports

Jira Workflow Automation vs. Marketplace Apps

FeatureJira Built-inMarketplace Apps
SetupNo code, GUIVaries
ComplexitySimple to moderateAdvanced
CostIncludedPer-user pricing
TriggersLimited setExtended triggers
ActionsStandard actionsCustom actions

When to Use Built-in

  • Simple assignment rules
  • Basic transitions
  • Email/Slack notifications
  • Field updates

When to Use Marketplace Apps

  • Complex multi-project workflows
  • Approval chains
  • Time-based SLAs
  • Cross-project automation

Best Practices

  1. Start simple: Begin with one trigger + one action
  2. Test thoroughly: Use the "Audit log" to verify rules
  3. Document rules: Keep a list of active automations
  4. Review regularly: Remove unused rules
  5. Use branches wisely: Avoid overly complex logic

Frequently Asked Questions

Can I automate across multiple projects? Yes. Use "Multi-project" rules or webhooks to trigger actions across projects.

What's the difference between workflow triggers and automation triggers? Workflow triggers are built into the workflow editor. Automation triggers are more flexible and support conditions.

Can I undo an automation? No. Automation actions are permanent. Use the audit log to review what happened.

How many rules can I create? Jira Cloud has limits based on your plan. Check your automation usage in AutomationUsage.

Can I use JQL in conditions? Yes. Many conditions support JQL queries for flexible filtering.



This guide is part of our Jira admin series. Bookmark it for reference.

What Is Atlassian Government Cloud (AGC)? NGPILOT Apps Available (2026)

· 3 min read
Quick Answer

Atlassian Government Cloud (AGC) is a FedRAMP-authorized deployment of Confluence and Jira designed for U.S. government agencies and contractors. It meets FedRAMP Moderate baseline requirements for handling sensitive government data. NGPILOT has apps available on AGC for teams needing compliant diagramming and content tools.

What Is Atlassian Government Cloud?

Atlassian Government Cloud (AGC) is a FedRAMP-authorized version of Atlassian's cloud products (Confluence, Jira, Jira Service Management) designed specifically for U.S. government agencies and their contractors.

Key Features

FeatureDetails
FedRAMP AuthorizationFedRAMP Moderate baseline
Data ResidencyU.S. data centers only
ComplianceFISMA, FIPS 140-2, CJIS
SecurityEnhanced encryption, access controls
AuditContinuous monitoring, annual assessments

Who Needs AGC?

  • Federal agencies (DoD, civilian, intelligence)
  • State and local government
  • Government contractors (defense, IT, consulting)
  • Organizations handling CUI (Controlled Unclassified Information)
  • Any team requiring FedRAMP authorization

AGC vs. Standard Cloud vs. Isolated Cloud

FeatureStandard CloudIsolated CloudGovernment Cloud
FedRAMPNoNoYes (Moderate)
Data LocationGlobalConfigurableU.S. only
ComplianceSOC 2, ISOSOC 2, ISOFISMA, FIPS, CJIS
PriceStandardPremiumPremium
AvailabilityAll regionsLimitedU.S. government

NGPILOT Apps on AGC

NGPILOT apps available on Atlassian Government Cloud:

AppPlatformUse Case for Government
Google Fonts for ConfluenceConfluenceConsistent typography in government docs
Excalidraw Plus WhiteboardsConfluenceArchitecture diagrams, flowcharts
Modern FAQ for ConfluenceConfluenceKnowledge base, policy documentation
Enhanced Markdown for ConfluenceConfluenceTechnical documentation with diagrams
Mermaid Plus Diagrams for ConfluenceConfluenceSystem architecture, process flows
Mermaid Plus Diagrams for JiraJiraVisual task tracking, workflow diagrams

Why NGPILOT on AGC?

AdvantageDetails
Forge-basedRuns on Atlassian's secure platform
No external data callsData stays within your instance
LightweightMinimal attack surface
Free trialsTest in your AGC environment first

How to Get Started with AGC

  1. Check eligibility: AGC is available to U.S. government agencies and contractors
  2. Contact Atlassian Sales: Request AGC pricing and onboarding
  3. Deploy instance: Atlassian provisions your government cloud environment
  4. Install apps: Browse the AGC collection for certified apps

Frequently Asked Questions

Is AGC FedRAMP authorized? Yes. AGC holds FedRAMP Moderate authorization.

Can non-government organizations use AGC? AGC is designed for government and contractors handling CUI. Contact Atlassian for eligibility.

What about ITAR or CJIS compliance? AGC supports CJIS. For ITAR, contact Atlassian sales for specific requirements.

Are all marketplace apps on AGC? No. Only apps certified for AGC are available. Check the AGC collection.

Can I migrate from standard cloud to AGC? Yes. Atlassian provides migration support. Contact sales for assistance.



Looking for isolated cloud (non-government)? See our Isolated Cloud guide.

What Is Atlassian Isolated Cloud? NGPILOT Apps Available (2026)

· 4 min read
Quick Answer

Atlassian Isolated Cloud lets you deploy marketplace apps within your own dedicated Atlassian cloud instance — separate from other tenants. This provides enhanced data isolation while keeping the benefits of cloud (no server maintenance, automatic updates). NGPILOT has 6 apps certified for Isolated Cloud.

What Is Atlassian Isolated Cloud?

Atlassian Isolated Cloud is a deployment option for Confluence and Jira Cloud that gives you a dedicated instance rather than a shared multi-tenant environment.

Standard Cloud vs. Isolated Cloud

FeatureStandard CloudIsolated Cloud
InfrastructureShared across tenantsDedicated to your organization
Data isolationLogical separationPhysical separation
ComplianceSOC 2, ISO 27001Additional FedRAMP-ready options
CostIncluded in cloud pricingPremium pricing
MaintenanceAtlassian managedAtlassian managed

Who Needs Isolated Cloud?

  • Government agencies with strict data requirements
  • Healthcare organizations handling PHI
  • Financial services with regulatory mandates
  • Enterprises with custom compliance policies

NGPILOT Apps on Isolated Cloud

NGPILOT has 14 apps certified for Atlassian Isolated Cloud:

#AppPlatform
1Modern Code Blocks for ConfluenceConfluence
2Excalidraw Diagrams plus Whiteboards for JiraJira
3Mermaid Plus Diagrams for JiraJira
4Modern Questions for ConfluenceConfluence
5Manim for ConfluenceConfluence
6Modern Issue Templates for JiraJira
7Simple Bulk Issues Excel/CSV Export for JiraJira
8Simple Bulk Attachment Downloader for JiraJira
9Content Craft: Free Business SVG LibraryConfluence
10Excalidraw Plus Whiteboards for ConfluenceConfluence
11Enhanced Markdown for ConfluenceConfluence
12Mermaid plus Diagrams for ConfluenceConfluence
13Modern FAQ for ConfluenceConfluence
14Google Fonts for ConfluenceConfluence

How to Install NGPILOT Apps on Isolated Cloud

  1. Go to Atlassian Marketplace - Isolated Cloud
  2. Search for the app name
  3. Click Try it free → Select your isolated instance
  4. Approve installation in your admin console
  5. App is ready to use

Why Choose NGPILOT on Isolated Cloud?

BenefitDetails
Forge-basedRuns on Atlassian's secure Forge platform
No external callsApps process data within your instance
LightweightMinimal performance impact
Free trialsTest before committing

Frequently Asked Questions

Is Isolated Cloud more expensive? Yes. Isolated Cloud instances have premium pricing. Check Atlassian's pricing page for current rates.

Can I move from standard cloud to isolated cloud? Yes. Atlassian provides migration paths. Contact Atlassian support for assistance.

Are all marketplace apps available on Isolated Cloud? No. Only apps certified for Isolated Cloud are available. Check the Isolated Cloud collection for the full list.

Do NGPILOT apps work on both standard and isolated cloud? Yes. NGPILOT apps are certified for both standard and isolated cloud deployments.

What about data residency? Isolated Cloud instances are deployed in specific regions. Check Atlassian's data residency options for available locations.



Looking for government cloud? See our AGC guide.