グローバル権限の概要

Permissions determine the actions which a user is allowed to perform within Confluence. Global permissions are one of the levels of permission provided by Confluence.

In order to assign these permissions, you must already have the global 'Confluence Administrator' or 'System Administrator' permission (described below). You can then assign global permissions to groups, individual users and anonymous users. Further permissions are granted from the space administration screens.

On this page:

Overview of the Global Permissions

Global permissions control access across the whole Confluence site. Here is a list:

グローバル権限	説明
使用可能	This is the most basic permission that allows users to access the site. Users with this permission count towards the number of users allowed by your license. See the information on removing/deactivating users.
ユーザープロファイルにファイルを添付	This allows the user to upload files to be stored in their user profile. Attaching files to a user profile was a feature made obsolete by personal spaces. This permission is therefore not relevant since Confluence 2.2.
個人用スペース	この権限は、ユーザーに個人用スペースを作成することを許可します。
スペースの作成	This permission allows users to create new spaces within your Confluence site. When a space is created, the creator automatically has the 'Admin' permission for that space and can perform space-wide administrative functions.
Confluence 管理者	This permission allows users to access the Administration Console that controls site-wide administrative functions. Users with this permission can perform most, but not all, of the Confluence administrative functions. See the comparison of 'System Administrator' and 'Confluence Administrator' below.
システム管理者	This permission allows users to access the Administration Console that controls site-wide administrative functions. Users with this permission can perform all the Confluence administrative functions, including the ones which the 'Confluence Administrator' permission does not allow. Users with this permission are listed on the 'Site Administrators' page that is linked from 'Contact Administrators' in the footer throughout the Confluence site. See the comparison of 'System Administrator' and 'Confluence Administrator' below. Refer also to the note about the 'confluence-administrators' group below.

The first system administrator is defined during installation

During the initial configuration of Confluence, the Setup Wizard asks for the username of the System Administrator. This user will have the 'System Administrator' permission and will be a member of the 'confluence-administrators' group.

Comparing the System Administrator with the Confluence Administrator Permission

New with Confluence 2.7 and later comes the ability to have two levels of administrator in Confluence:

System Administrator – Users with this permission can perform all the Confluence administrative functions, including the ones which the 'Confluence Administrator' permission does not allow.
Confluence Administrator – Users with this permission can perform most, but not all, of the Confluence administrative functions.

Tip: The two-tier administration is useful when you want to delegate some administrator privileges to project managers or team leaders. You can give 'Confluence Administrator' permission to users who should be able to perform most administrative functions, but should not be able to perform functions that can compromise the security of the Confluence system.

The following functions are excluded from the 'Confluence Administrator' permission:

管理者画面	Excluded Function
一般設定	以下の機能は許可されません。サーバーベース URL リモート API プラグイン外部ユーザー管理パブリックサインアップ
日次バックアップ管理	この機能はすべて許可されません。
プラグイン	この機能はすべて許可されません。
プラグインリポジトリ	この機能はすべて許可されません。
メールサーバー	この機能はすべて許可されません。
ユーザーマクロ	この機能はすべて許可されません。
添付ファイルのストレージ	この機能はすべて許可されません。
レイアウト	この機能はすべて許可されません。
カスタム HTML	この機能はすべて許可されません。
バックアップとリストア	この機能はすべて許可されません。
SnipSnap Import	この機能はすべて許可されません。
ロギングとプロファイリング	この機能はすべて許可されません。
クラスタ設定	この機能はすべて許可されません。

Comparing the Administrator Permissions with the confluence-administrators Group

The 'confluence-administrators' group defines a set of 'super-users' who can access the Administration Console and perform site-wide administration. Members of this group can also see all pages and spaces in the Confluence instance except pages for which they are excluded by page restrictions (restrictions can be removed by members of the confluence-administrators group in the Space Admin screen if need be). The settings on the 'Global Permissions' screen do not affect the powers allowed to members of this group.

Granting the 'System Administrator' or 'Confluence Administrator' permission to a user will not automatically grant the user access to all spaces in the site. These permissions will only give access to the Administration Console.

しかし、「システム管理者」を持つユーザーは「Confluence 管理者」グループに自分自身を追加し、スーパーユーザーになることができることにご注意ください。

Confluence Administrator permission and confluence-administrators group are not related

Going by the names, you would think the 'confluence-administrators' group and the 'Confluence Administrator' permission are related – but they are not. To resolve confusion, we want to make explicit that granting a user or group 'Confluence Administrator' permission is not the same as granting them membership to the 'confluence-administrators' group. Granting the 'Confluence Administrator' permission enables access to only a subset of the administrative functions. Granting membership to the 'confluence-administrators' group, on the other hand, gives complete access.

There is an outstanding request to remove the 'confluence-administrators' group from a future version of Confluence (see CONF-4616).

Updating Global Permissions

To edit the global permissions for a group or user,

Go to the Confluence 'Administration Console'. To do this:
- Open the 'Browse' menu and select 'Confluence Admin'. The 'Administration Console' view will open.
Select 'Global Permissions' in the 'Security' section of the left-hand panel.
The 'View Global Permissions' screen appears. Click the 'Edit Permissions' button.
The 'Edit Global Permissions' screen appears, as shown below. Add or edit group and user permissions as follows:
- グループに権限を追加するには、
  - First add the group to Confluence, if you have not already done so.
  - Now on the 'Edit Global Permissions' screen, enter the group name in the text box labelled 'Grant browse permission to' in the 'Groups' section. You can click the magnifying glass to search for the group name.
  - 「追加」ボタンをクリックします。
  - グループが一覧に表示され、権限を編集できるようになります。
- To add permissions for a specific user:
  - First add the user to Confluence, if you have not already done so.
  - Consider adding the user to a group and then assigning the permissions to the group, as described above, instead of assigning permissions to the specific user.
  - To assign permissions to a specific user on the 'Edit Global Permissions' screen, enter the username in the text box labelled 'Grant browse permission to' in the 'Individual Users' section. You can click the magnifying glass to search for the username.
  - 「追加」ボタンをクリックします。
  - ユーザー名が一覧に表示され、権限を編集できるようになります。
- To edit the permissions for a user or group:
  - Click the checkbox under the relevant permission and next to the relevant user/group. A tick in the box indicates that the permission is granted. Click again to uncheck the permission.
- To allow anonymous access to your Confluence site, check 'can use' in the 'Anonymous Access' section. See more information.
- Click the 'Save All' button to save your changes.

スクリーンショット：グローバル権限の編集

About some error messages you may see

In Confluence 2.7.2 and later, Confluence will let you know if there is a problem with some permissions. In rare situations, you may see the following error messages below a permission:

'User/Group not found' — This message may appear if your LDAP repository is unavailable, or if the user/group has been deleted after the permission was created.
'Case incorrect. Correct case is: xxxxxx' — This message may appear if the upper/lower case in the permission does not match the case of the username or group name. If you see a number of occurrences of this message, you should consider running the routine supplied to fix the problem.

ページツリー

Overview of the Global Permissions

Comparing the System Administrator with the Confluence Administrator Permission

Comparing the Administrator Permissions with the confluence-administrators Group

Updating Global Permissions

関連トピック