グローバル権限の概要

Overview of the global permissions

Global permissions control access across the whole Confluence site. Here is a list:

Comparing the System Administrator with the Confluence Administrator Permission

Confluence recognises two levels of administrator:

• System Administrator – Users with this permission can perform all the Confluence administrative functions, including the ones which the 'Confluence Administrator' permission does not allow.
• Confluence Administrator – Users with this permission can perform most, but not all, of the Confluence administrative functions.

Tip: The two-tier administration is useful when you want to delegate some administrator privileges to project managers or team leaders. You can give 'Confluence Administrator' permission to users who should be able to perform most administrative functions, but should not be able to perform functions that can compromise the security of the Confluence system.

The following functions are excluded from the 'Confluence Administrator' permission:

Comparing the Administrator Permissions with the confluence-administrators Group

The 'confluence-administrators' group defines a set of 'super-users' who can access the Administration Console and perform site-wide administration. Members of this group can also see the content of all pages and spaces in the Confluence instance, regardless of space permissions. They cannot immediately see the pages for which they are excluded by page restrictions without knowing the direct URL to the page (restrictions can be removed by members of the confluence-administrators group in the Space Admin screen if need be). For example, they will not see restricted pages displayed by the children macro. But they are able to access restricted pages directly using the page URL. The settings on the 'Global Permissions' screen do not affect the powers allowed to members of this group.

Granting the 'System Administrator' or 'Confluence Administrator' permission to a user will not automatically grant the user access to all spaces in the site. These permissions will only give access to the Administration Console.

しかし、「システム管理者」を持つユーザーは「Confluence 管理者」グループに自分自身を追加し、スーパーユーザーになることができることにご注意ください。

Read more about global groups.

Updating Global Permissions

グループまたはユーザーのグローバル権限を表示するには、

1. Choose Browse > Confluence Admin.
2. Select Global Permissions in the Security section of the left-hand panel. The View Global Permissions screen appears.

グループとユーザーに権限を追加または編集するには、次の手順で行います。

グループに権限を追加するには、

1. First add the group to Confluence, if you have not already done so.
2. Click Edit Permissions. The 'Edit Global Permissions' screen appears, as shown below.
3. Enter the group name in the Grant browse permission to box in the 'Groups' section. You can search for the group name.
4. [追加] をクリックします。
5. グループが一覧に表示され、権限を編集できるようになります。

To add permissions for a specific user:
(Consider adding the user to a group and then assigning the permissions to the group, as described above, instead of assigning permissions to the specific user.)

1. First add the user to Confluence, if you have not already done so.
2. Click Edit Permissions. The 'Edit Global Permissions' screen appears, as shown below.
3. Enter the username in the Grant browse permission to box in the 'Individual Users' section. You can search for the username.
4. [追加] をクリックします。
5. ユーザー名が一覧に表示され、権限を編集できるようになります。

ユーザーまたはグループの権限を追加または編集するには、

1. 該当するユーザーまたはグループの行で、該当の権限の下にあるチェックボックスにチェックを入れるか外すかします。チェックが入ったチェックボックスは、権限が付与されていることを示します。
2. To allow anonymous access to your Confluence site, select the 'Use Confluence' and 'View User Profile' options in the 'Anonymous Access' section.
   For more information about these permissions, refer to Setting up Anonymous Access.
3. Click Save All to save your changes.

スクリーンショット：グローバル権限の編集

C4_globalPermissions.png

エラーメッセージの表示

一部の権限に問題がある場合、Confluence はそのことをユーザーに通知します。まれに、権限の下に次のようなエラーメッセージが表示される場合があります。

• 'User/Group not found' — This message may appear if your LDAP repository is unavailable, or if the user/group has been deleted after the permission was created.
• 'Case incorrect. Correct case is: xxxxxx' — This message may appear if the upper/lower case in the permission does not match the case of the username or group name. If you see a number of occurrences of this message, you should consider running the routine supplied to fix the problem.