Install

Install Permissions Governance for Confluence from the Atlassian Marketplace.
Approve requested OAuth scopes when prompted.
In the Confluence sidebar, open Who can see what? (listed under Apps).

Features

1

Audit

Read-only table of view and edit restrictions on pages and folders. Load more + CSV export.

2

Edit drift

Find children whose edit restrictions differ from their direct parent. CSV export.

3

Cascade edit

Copy a parent’s edit restrictions to all descendants. Preview required.

4

Bulk manage

Add or remove one user or group across a selection. Preview + lockdown warnings.

Roles Only sites

On sites using role-based access control, grant the Forge app user a space role that includes Manage access to individual content in spaces where you cascade or bulk-edit restrictions.

Preview shows planned changes. Apply skips items that return 403 and reports the count in an exportable summary.

Limits

Audit / content lists: 150 items per page, load more up to 2,000 items per space.
Cascade / bulk apply: 100 items per run.
Edit drift scan: batched scan, capped at 2,000 items per space.

Trust & security

Runs on Atlassian eligible — no external data egress.
Granular Confluence OAuth scopes only.
Preview (dry-run) required before any write.
No persistent storage of customer data outside Confluence.