October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk6 min

How to Choose a Data Classification Policy for a Confluence Workspace

Build a Confluence data classification policy around your organization’s real sensitivity and regulatory needs, then configure defaults, ownership, automation, and controls deliberately.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To choose a data classification policy for a Confluence workspace, start with your organization’s existing information-handling rules and the decisions staff must make: what can be shared broadly, what is internal, and what needs stricter handling because it is sensitive or regulated. Define only the distinctions people need to apply consistently, then configure organization, space, and content-level classifications to match how your Confluence environment is governed. Classification labels communicate sensitivity; they do not, by themselves, control who can view a page.

Confirm that your deployment and plan support the feature

Atlassian’s current Cloud documentation describes data classification as an Atlassian Guard Premium capability and also lists availability in Atlassian Government Cloud. Classification levels are defined at the organization level and can be used across Confluence, Jira, and Jira Service Management, rather than maintaining a separate vocabulary for each app. See Atlassian’s overview of data classification and its configuration guidance for current scope and settings.

As an Amazon Associate I earn from qualifying purchases.

In Confluence, supported content includes pages, blog posts, databases, and whiteboards, subject to the organization’s configuration. Users can classify content after an organization administrator configures classification levels; a badge then helps people recognize an item’s sensitivity. Data Center has a separate permissions model and should not be assumed to offer the same classification feature or Cloud interface. Check the documentation for your deployment and the capabilities available on your plan before designing the policy.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choose levels that answer real handling questions

Atlassian does not prescribe one universal taxonomy. Its guidance is that “Data classification can be based on different taxonomies, such as data sensitivity, data type, or regulatory requirements.” Use that flexibility to align Confluence labels with your organization’s established policy where possible, rather than introducing terms that conflict with how staff already handle information.

For each level, specify a recognizable name, a plain-language definition, and examples or handling guidelines. Atlassian offers a template with four commonly used levels or lets administrators create custom levels to match company policy. The template is a starting point, not a universal recommendation. Up to 10 levels are supported; choose the smallest set that preserves distinctions your organization actually needs, since every additional distinction is one staff must understand and apply.

For each proposed label, be able to answer:

  • What kinds of content belong here, with examples that fit Confluence pages and other supported objects?
  • Who may access or share this content, and what handling action is expected?
  • Does this level correspond to a regulatory, contractual, or internal policy obligation?
  • Can the label meaningfully map to a control your organization can configure?

Before making levels available to users, review their definitions and guidelines. Newly created levels are saved as drafts and must be published before users can apply them; see Atlassian’s instructions for configuring data classification.

Set the policy at the right level of Confluence

Confluence classification operates at three scopes. Decide what belongs at each one before assigning defaults:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Scope What it governs Policy decision
Organization default Baseline for content without another applicable classification. Atlassian says it should usually be the organization’s least-sensitive level; the documented default setting is no classification unless an administrator changes it. Choose the least-sensitive classification that makes sense as a baseline, or deliberately retain no classification if that is the chosen configuration.
Space default A space administrator can apply a default to new and existing content objects in that space. Decide which spaces warrant stricter defaults and whether space administrators may select any level or only the organization default or a more sensitive one.
Content-object classification A user with the relevant permission can classify an individual supported object. Its classification does not cascade to child pages, and it cannot be less sensitive than the applicable space or organization default. If a space default becomes more sensitive, object classifications update accordingly. Set who may label or change individual objects, and account for the fact that child pages need their own classification decisions.

A broad organization or space default establishes a baseline; it is not evidence that each item has been reviewed for sensitivity. Use stricter space defaults where the space’s purpose or membership warrants them, and separately determine whether content needs an individual label.

Rank #3
J. J. Keller Vehicle Inspections Handbook - 5.25"W x 8.25"H, Paperback Format - Provides Info to Conduct Successful Pre-Trip, En-Route, and Post-Trip Inspections
  • Vehicle Inspections Handbook provides step-by-step information CMV drivers need to conduct successful pre-trip, en-route, and post-trip inspections, so they can avoid breakdowns, citations, fines, repair bills, and crashes.
  • Information is presented graphically within the vehicle safety handbook so that it's easy to find, with call-outs that address real-life situations drivers may experience during inspections.
  • Vehicle inspection book features checklists that drivers can use to ensure successful vehicle inspections.
  • Major topics covered include: The importance of vehicle inspections; Key regulations; Preparing for inspections; The inspection process; Vehicle inspection reports (DVIRs); Common inspection violations; and more!
  • Softbound handbook measures 5.25" x 8.25", has 76 pages, and is written in English. Copyright 2020.

Decide who can change labels and whether to automate

Manual classification is a governance choice, not just a user-interface setting. Atlassian documents “Anyone with edit access” as the default for who can manually set or change a classification. You can also limit changes to space administrators or disable manual changes. Select the option that fits your policy and make responsibility clear to the people expected to classify content.

Automated rules can assign levels based on detected data and can apply to new and existing content. Decide whether users may raise a rule-assigned classification and whether they can return an item to the default; these override behaviors are configurable and should not be left implicit. When setting up or changing rules, use the preview and detailed breakdown to inspect proposed effects, especially on existing content, before saving. Atlassian documents these settings in its configuration guidance.

When comparing manual and automatic approaches, consider the detections available, the review work they create, the effect on existing content, and who may override an assignment. Automation is useful only to the extent that the organization can explain and govern its rules.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Keep classification separate from permissions and enforcement

A classification is a content attribute, not an access permission. Atlassian says data security policies can allow or block actions based on attributes such as content location or assigned classification. A label can therefore inform controls, but merely selecting a label should not be described as restricting who can view a page.

Access permissions and restrictions must be configured and validated separately. Atlassian’s Data Center documentation describes global permissions, space permissions, and page restrictions as distinct access layers; a page restriction can prevent viewing even where a user has space access. That guidance is specifically for Data Center, so do not assume its exact interface or behavior applies to every Cloud version. For Cloud policy coverage and consequences, use Atlassian’s current data classification configuration documentation.

Guard plan and policy coverage matter when moving from labels to controls. Atlassian’s policy matrix differentiates capabilities across no Guard, Guard Standard, and Guard Premium. Its documentation also warns that controls preventing anonymous access may block licensed users who are not included in a space group, while export restrictions may prevent PDF preview or download. Before enforcing controls broadly, test them with representative roles and workflows, including access, exports, and any affected apps.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Use a sequence that makes policy effects reviewable

  1. Identify your environment. Confirm whether the organization uses Cloud, Government Cloud, or Data Center, and inventory the plan and controls actually available.
  2. Align the vocabulary. Reuse the established organizational taxonomy where it fits. Define each Confluence level with a decision rule, examples, and any handling guidance.
  3. Set the baseline and space rules. Choose the organization default, identify spaces needing stricter defaults, and decide whether space administrators may select a less-sensitive level than the organization default.
  4. Assign responsibility. Choose who may manually classify or change content, and specify whether and how users can override rule-assigned classifications.
  5. Evaluate automation before applying it. Preview proposed rules, inspect their effects on existing content, and confirm that users’ override options match policy.
  6. Validate controls independently. Configure permissions and data security controls separately from labels, then test access, exports, anonymous access, and app workflows with representative roles.
  7. Publish reviewed levels. Make levels available to users only after definitions and guidelines are ready; draft levels are not usable until published.

Choose between a template and custom levels

Both a template and custom levels can be valid choices; neither is a vendor ranking. Compare the options against the policy your organization needs:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Decision factor Template Custom levels
Fit with current policy Check whether the common levels match your organization’s existing handling language. Useful when established policy requires distinctions or terminology the template does not capture.
Definitions and examples Review whether the available meanings are clear for your staff and content. Write definitions, examples, and guidelines that make the intended handling unambiguous.
Number of distinctions The template contains four commonly used levels. Use only the distinctions required by policy; Atlassian permits up to 10 levels.
Control mapping and maintenance Verify that levels map to the controls you need and can be maintained. Verify the same mapping, while accounting for the work of defining and maintaining a bespoke taxonomy.

Choose manual or automated assignment by governance need

Manual assignment keeps decisions with users or administrators, while rules can apply detected-data classifications to new and existing content. The better fit depends on whether the organization can explain the rule’s detections, review its impact, and govern overrides. In either case, define ownership and handling expectations; a label without a usable policy meaning will not resolve what staff should do.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.