How to remove someone from every Confluence space at once

Confluence Cloud · Last checked against Atlassian's own documentation: 12 September 2026

Short answer. Confluence Cloud has a built-in tool for this: Confluence Administration → Permissions → Bulk space access. You choose the person, group or team, choose which spaces it covers, untick their permissions and save. You do not need an app for that. Read the two warnings below before you press Save.

1. First, see what they can reach

Before removing anything, look at the starting point. As a Confluence administrator, open Confluence Administration → User Access, type the person's name, email or a group name, and Confluence shows their access and lets you download a report of the spaces they can view and administer (Atlassian's article).

Keep that file. After a bulk removal it is the only record you will have of what the access used to be.

2. Remove the access in bulk

Open Confluence Administration → Permissions → Bulk space access.
Choose the person, group or team.
Choose the scope: all spaces (global and personal), only global spaces, or only personal spaces.
To take everything away, click Select all to tick every box, then click Select all again to untick them. Save.

Source: Bulk update permissions in Confluence Cloud, Atlassian Support.

3. The two warnings Atlassian gives

It is a "high-blast-radius action". Select all ticks every space in the scope you chose, so check the scope before saving.
There is no built-in undo for a bulk removal. Atlassian suggests opening two or three of the affected spaces afterwards and checking their permission pages by hand.

And one more, from how Confluence plans work: on the Free plan, space permissions cannot be changed at all — by the built-in screens or by any app. Reviewing works everywhere; changing needs a paid plan.

4. What the built-in route does not tell you

Atlassian's article does not describe any of the following, so plan as if they are not there:

Question	Why it matters
A preview of exactly which spaces will change	You find out what happened after saving, not before.
Protection for the last administrator of a space	A space nobody can administer is hard to repair.
Protection against locking yourself out	Removing a group you belong to removes you too.
A record of what the bulk change did	An access review usually has to show what was removed, when and by whom.

If someone is leaving the company altogether, removing their product access in Atlassian Administration stops them signing in at all. Space-by-space cleanup matters most for the harder cases: a contractor who keeps some spaces, a person changing teams, or a group that should no longer reach a set of spaces.

5. When an app is worth it

For one leaver a year, the built-in tool is enough. If access reviews are a regular job — or an auditor asks what was removed — this is the gap Space Access fills. It is our app, so read this part as the maker's description:

A table of who can reach which space, across every space, searchable and filterable while it loads, and exportable to a spreadsheet.
A preview read fresh from Confluence before anything changes, space by space.
It refuses to remove the last administrator of a space, and refuses a change that would lock you out — including through a group you are in. Both checks run on the server.
Every run ends with three lists: what changed, what did not (with Confluence's reason), and what was not tried. The last 200 runs are kept as a history.
Free for sites up to 10 users. No external servers: it runs inside Atlassian.

What it does not do, so there are no surprises: page-level restrictions, granting access in bulk, or Jira. Full detail in the documentation.

Space Access on the Atlassian Marketplace · About Space Access

Space Access is an independent app, not made by or affiliated with Atlassian. Confluence is a trademark of Atlassian. Menu names change over time — if a step above no longer matches your screen, Atlassian's linked article is the reference.