What is the recommended principle for user permissions in Confluence?

• A. Leave permissions unrestricted
• B. Grant the minimum permissions possible
• C. Grant permissions only after auditing roles
• D. Grant all permissions to administrators

Answer: (B)

The principle of least privilege means you grant the minimum permissions needed for someone to do their job. This approach reduces the risk of accidental changes, data exposure, or security issues, and it makes it easier to manage and revoke access when roles change. In Confluence, you implement this by using space and page permission schemes and groups to assign just enough rights for each role. Most users only need to view content and perhaps comment; editing should be limited to those who truly need to update content, and administrative capabilities should be reserved for a trusted few. Granting unrestricted access or giving administrators every possible permission undermines control and governance. Start with the least privilege, then review and adjust permissions as responsibilities evolve, ensuring access matches actual needs.