Prometheus

🛡️ Access Lens — Documentation

Permissions audit for Confluence · by Prometheus Agency

What it does

Access Lens answers one question that Confluence makes surprisingly hard: who can really see or edit this? It reads space permissions, space roles (RBAC), and page restrictions — including restrictions silently inherited from parent pages — and presents them in one clear, audit-ready view.

Getting started

  1. Install Access Lens from the Atlassian Marketplace.
  2. In Confluence, open Apps → Access Lens.
  3. Pick a space from the selector. You'll see:
    • Space access — every person, group and system-wide grant, sorted most sensitive first. Entries with dangerously broad reach (e.g. all licensed users can edit) are flagged with a red broad access badge.
    • Page locks — every page in the space is scanned for its own restrictions. Pages with a lock show a 🔒 in the page selector.
  4. Select a page to see exactly who can view or edit it — including locks inherited from parent pages, listed with the parent's name.
  5. Click Download CSV to export the full access list for your evidence pack (GDPR, SOC 2, ISO 27001). The file is generated locally in your browser.

How to read the results

Broad access ⚠ — a grant that reaches everyone (anonymous users or all licensed users). Not always wrong, but always worth a look — especially Edit level on sensitive spaces.
Own lock 🔒 — the page has its own view/edit restrictions. Only the listed people and groups (plus space admins) get in.
Inherited lock — a parent page is restricted, which silently restricts this page too. Confluence's UI barely surfaces this; Access Lens names the parent so you can act.

Permissions & privacy

Access Lens reads data as the viewing user — it never sees more than you can. It stores nothing, sets no cookies, includes no tracking, and makes no calls outside Atlassian (eligible for Runs on Atlassian). Details in the privacy policy.

FAQ

Why don't I see a space or page? Access Lens shows what you can access. If a page is restricted away from you, it won't appear — ask a space admin to run the audit.

Does it support the new space roles (RBAC)? Yes — role assignments are read and merged with classic permissions automatically.

Which languages are supported? English and Spanish, auto-detected from your Confluence locale.

Support

Questions, bugs or feature requests: info@prometheus-agency.com — we answer fast.