If a user is in multiple groups, and one group forbids page creation while another allows it, what happens?

If a user is in multiple groups, and one group forbids page creation while another allows it, what happens?

• A. The user can still add pages
• B. The user cannot add pages
• C. The system selects the highest restriction
• D. The user needs explicit permission from admin

Answer: (A)

Permissions in this scenario are evaluated by combining what each group allows. Confluence grants a user a capability if any group (or the user directly) provides that permission, so the effective result is the union of all granted rights. There isn’t a built-in “deny” that overrides an “allow” from another group in this setup. If one group gives the ability to create pages and another group does not, the user still has the ability to create pages because the enabling group’s permission applies. To actually prevent page creation, an admin would need to remove the user from the group that allows it or explicitly revoke that permission from all groups the user belongs to.

Permissions in this scenario are evaluated by combining what each group allows. Confluence grants a user a capability if any group (or the user directly) provides that permission, so the effective result is the union of all granted rights. There isn’t a built-in “deny” that overrides an “allow” from another group in this setup. If one group gives the ability to create pages and another group does not, the user still has the ability to create pages because the enabling group’s permission applies. To actually prevent page creation, an admin would need to remove the user from the group that allows it or explicitly revoke that permission from all groups the user belongs to.