AccessLens — Space & Page Permission Audit

Confluence's User access report lists a group's spaces as admin or user. Full permissions are read space by space, pages one at a time for a user or a group (Premium/Enterprise), and none of it keeps last quarter's state. Restricted pages are listed one space at a time, a page is often hidden by an ancestor, not by itself, and a restriction naming a group with no space access grants nothing.

AccessLens reads every current, non-personal space's permissions, expands group membership, reads page restrictions (200 pages per space by default, or all) and what they hide, and keeps it as evidence to cite.

Three constraints are deliberate. At the retention limit it refuses a new snapshot rather than evicting an old one. When it cannot read something it marks the snapshot partial instead of under-reporting. Where a tenant cannot expose anonymous access at all, it says so rather than reporting “none found”.

It declares no external network access, which Forge enforces at the platform level.