Class SpacePermissionTransitionService

Create a new instance of the service.

Bulk assigns roles for one or more permission combination IDs obtained from the space permission combinations. Supports targeting all spaces, specific spaces, or excluding specific spaces.

Permissions required: User must be a Confluence administrator.

Bulk removes access for one or more permission combination IDs obtained from the space permission combinations. This removes all space permissions for the specified combinations across the targeted spaces.

Permissions required: User must be a Confluence administrator.

Submits a task to refresh the space permission combinations in the database, which identifies all unique permission combinations across the site. This provides permission combination IDs that can be used with the assign-roles and remove-access endpoints.

Permissions required: User must be a Confluence administrator.

Retrieves the status of an async space permission transition task. Use the taskId returned from the generate-combinations, assign-roles, or remove-access endpoints to poll for progress and completion.

Permissions required: User must be a Confluence administrator.

Lists the unique unassigned space permission combinations currently present on the tenant. Combinations that already map to a space role are filtered out server-side. Each row carries the decoded set of space permissions and the principal types that currently hold the combination — these inform which principalType values are valid to include in the matching bulk role-assignments request.

Results are always sorted by principalCount descending. Sort field and sort order are not configurable; page size is controlled by the limit query parameter (default 25, min 1, max 250). Use the cursor field to page through additional results. The generatedAt field reflects the last audit run that populated the combinations table — call the generate-combinations endpoint to refresh stale data.

Permissions required: User must be a Confluence administrator.