Confluence Permissions and Restrictions Review
Review who can see and edit pages and spot over-sharing risk.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
[VERIFY] is an editorial flag, not a blank to fill. Wherever the prompt shows [VERIFY], check that item against a reliable source before you use it.
Review the permissions of our Confluence space as a defensive review of my own organisation's settings. Space permissions by group and user: [SPACE_PERMISSIONS]. Page restrictions we use: [PAGE_RESTRICTIONS]. Types of content stored (HR, finance, customer data, public): [CONTENT_TYPES]. Our access policy: [ACCESS_POLICY]. Leaver removal deadline in days: [DAYS]. Separate what you can see in my data from what you assume. Check for individuals with direct permissions instead of groups, broad groups with edit or admin rights, restricted pages whose children are open, former staff or guests still listed, and sensitive content in spaces open to everyone. Rate each finding high, medium or low with the reason, and for each risk describe in plain words how it could realistically cause harm, such as an ex-colleague seeing client details, with no instructions for misuse. Return a table with Finding, Risk, Evidence, Fix and Who to ask, prioritising fixes that reduce exposure for the least work, such as moving individuals into groups. Add a quarterly access review, a leaver rule, and a message asking page owners to confirm that their restrictions are still right. Mark points that depend on the permission screens in our version [VERIFY]. Do not suggest changing anything until the space admin agrees.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.