Permissions and sharing
How spaces, pages, groups and guests fit together.
Spaces set the default
Each space has its own permissions. People and groups get a role in the space, and that role decides whether they can view, comment, edit or administer it. Pages in the space inherit those permissions.
Restrict a single page
When one page needs tighter access than its space, add a page restriction. Only the people and groups you name can then view or edit it.
Use groups, not long lists
Put people in groups (such as Product, Legal or Contractors) and grant access to the group. When someone joins or leaves the group, their access follows.
See who has access, and why
Admins can inspect a person’s access to see which space role, group or restriction gives it, and copy permissions from one space to another.
Share outside the team
Admins decide which kinds of outside access the workspace allows:
- Guests can be invited to specific pages without seeing the rest of the space.
- Public links let anyone with the link read one page.
- Anonymous access opens a space to people who aren’t signed in.
Ante AI, the API, OAuth apps and the MCP server all respect the same permissions as the person using them.