Confluence Cloud

Sync spaces, pages, users, and audit logs from Confluence Cloud.

Overview
Setup Guide
Permissions
Troubleshooting

Confluence Cloud setup

Parable lists one Confluence Cloud Provider under Atlassian. In the connection wizard, use Authentication method to choose Email + API Token or OAuth 2.0 Client Credentials (2LO).Both methods sync the same taps: spaces, space permissions, pages, page content, users, groups, group members, and audit logs.

Data streams

This Provider Plugin defines 8 data streams.

Stream	Description	Sync
`spaces`	Confluence spaces	full
`pages`	Confluence pages	incremental
`page_content`	Full page content including body	full
`users`	Confluence users	full
`audit`	Confluence audit logs	incremental
`space_permissions`	View space permissions of each Confluence Cloud space	full
`groups`	Confluence Cloud site groups	full
`group_members`	Members of each Confluence Cloud site group	full

Confluence

What You’ll Need

Credential	What it is
API Token	Generated from Atlassian account settings
Email Address	Your Atlassian account email
Base URL	Your Confluence instance URL (e.g., `https://your-company.atlassian.net`)
Domain	Your Atlassian domain (e.g., `your-company.atlassian.net`)

Prerequisites

Confluence Administrator or Space Administrator for comprehensive data access
View permission on spaces and pages you want to sync
View permission on every space, so that Parable reads the space permissions that source permissions use

Setup

Create an API token at https://id.atlassian.com/manage-profile/security/api-tokens
Note your Confluence site URL (https://your-company.atlassian.net) and domain
In Parable, select Email + API Token, enter credentials and connection settings, then Save & test connection

What You’ll Need

Credential	What it is
Client ID	From the service account OAuth 2.0 credential in Atlassian Administration
Client Secret	From the same OAuth 2.0 credential
Cloud ID	Site identifier for `api.atlassian.com` gateway URLs

Prerequisites

Atlassian organization admin access to create service accounts and OAuth credentials
Confluence product access granted to the service account on the target site
Confluence permissions on the service account in addition to OAuth scopes

The same Atlassian OAuth client credentials can be reused for Jira Cloud and Confluence Cloud when both products are on the same site, as long as the credential includes the scopes for each product you connect.

Setup

In Atlassian Administration, create a service account and grant it Confluence access on the target site
Create OAuth 2.0 credentials on that service account with these scopes:
- read:space:confluence
- read:space-details:confluence
- read:page:confluence
- read:user:confluence
- read:audit-log:confluence
- read:confluence-groups
Copy Client ID and Client Secret
Find Cloud ID via admin console or GET https://api.atlassian.com/oauth/token/accessible-resources (use the site id)
In Parable, select OAuth 2.0 Client Credentials (2LO), enter Client ID, Client Secret, and Cloud ID, then Save & test connection

OAuth scopes

Scope	Purpose
`read:space:confluence`	Spaces list
`read:space-details:confluence`	Space details
`read:page:confluence`	Pages and page content
`read:user:confluence`	User directory
`read:audit-log:confluence`	Audit logs
`read:confluence-groups`	Groups and group members, for source permissions

A 2LO connection without read:confluence-groups fails closed. Confluence refuses the groups and group_members reads, so no member holds the access of a group. A space that only groups may view, and its space_permissions rows, then read only for people with All data access. An Email + API Token connection needs no scope.

Who reads Confluence Cloud rows

In Confluence Cloud, the View space permission of a space decides who sees the space and its content. It names users, groups, or roles. A view restriction on a page, or on a page or folder above it, narrows the page to the users and groups that the restriction names.Parable reads every space that its credential can view. While your Workspace turns on Enforce source permissions, and on a table where a Provider Policy rule reads Source permissions (Source permissions), each member reads only these Confluence Cloud rows:

Tables	Who reads a row
`spaces`	Each user that the space’s View space permission names, and each member of a group it names
`space_permissions`	The people who read the permission’s space
`users`, `groups`, `group_members`	Every active Confluence user with a person (`atlassian`) account who is not a guest
`pages`, `page_content`, `audit`	Only people with All data access

Parable matches each member to their Confluence user by the email they sign in with. Confluence returns a user’s email only when the user’s profile shows it. A member whose Confluence email is hidden reads no Confluence Cloud row until an administrator confirms the link between the member and the Confluence account.
A Confluence user is active only when Confluence lists the Can use global permission among the user’s operations (can_use). A deactivated user does not have it. When Parable cannot read the value, it treats the user as inactive.
Only a person account (accountType atlassian) whose isGuest is false is a member. A guest, an app account, and an account whose type or guest flag Confluence leaves out keep the space permissions that name them and their groups, but read no directory row.
When Confluence deactivates or removes a user, that member reads no Confluence Cloud row after the next sync of users. When a person leaves a group, or a space stops naming them, the change applies after the next sync of group_members or space_permissions, with no action from you.
People with All data access read every row. Each such read is recorded in your Workspace’s audit events.

Parable does not reproduce some Confluence rules. The streams do not read page restrictions, so a page and its body read only for people with All data access, also in a space that a member can view. A View space permission to a role gives no access, because the streams do not read role members. A space that only a role may view reads only for people with All data access. The audit log reads only for people with All data access.

Audit

Developer identifier: auditAudit. Confluence audit logs.

Enables: Trace Confluence audit records to the author, affected object, action, category, source address, and creation time.
Scope: Reads the new records from Confluence Cloud’s /wiki/rest/api/audit operation on each sync, and each row is one event. This stream is opt-in. Visibility follows the Confluence account and space permissions associated with the credential. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. This stream supplies no reliable deletion signal. Only people with All data access read this table. Confluence shows the audit log to administrators, and the stream reads no administrator list.

Synthetic Primary Key

Developer identifier: audit._synthetic_primary_keySynthetic Primary Key. A key Parable builds from the creation date, the summary, and the author’s display name, because Confluence Cloud supplies no ID for an audit entry.

Enables: Match repeated audit entries on audit._synthetic_primary_key. Only entries that share this key are the same record.
Interpretation: Confluence Cloud does not supply this value, and it means nothing outside this table. Two entries with the same creation date, summary, and author display name get the same key. A display name can change, so an entry read again after its author is renamed gets a new key. It is the record key.

Affected Object

Developer identifier: audit.affectedObjectAffected Object. The primary object affected by the action. It preserves the nested context needed to interpret the parent audit.

Enables: Attribute affected object in audit.affectedObject to the parent audit; identify parent records where that nested affected object object is absent.
Interpretation: Confluence Cloud reports affected object as a nested object on each audit; optional children may be absent from a valid response.

Name

Developer identifier: audit.affectedObject.nameName. Name of the object. It gives the Confluence Cloud audit object a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated Confluence Cloud audit object entries on name in audit.affectedObject.name; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Confluence Cloud reports name as display text for each Confluence Cloud audit object; names are mutable and are not stable identities.

Object Type

Developer identifier: audit.affectedObject.objectTypeObject Type. Type of the object (e.g., ‘page’, ‘space’, ‘user’). It identifies the related provider object that gives the Confluence Cloud audit object its parent, owner, or container context.

Enables: Segment Confluence Cloud audit object entries in Audit by object type in audit.affectedObject.objectType; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports object type as a label from its own taxonomy on each Confluence Cloud audit object; preserve unknown labels rather than mapping them by assumption.

Associated Objects

Developer identifier: audit.associatedObjectsAssociated Objects. Additional objects associated with the action (e.g., parent objects). It preserves the nested context needed to interpret the parent audit.

Enables: Attribute every returned Confluence Cloud audit object in audit.associatedObjects to its parent audit; keep each relationship distinct and distinguish an absent array from an explicitly empty one.
Interpretation: Confluence Cloud returns associated objects as an array of Confluence Cloud audit object entries on each audit; missing, empty, and permission-redacted arrays are not equivalent.

Author

Developer identifier: audit.authorAuthor. User who performed the audited action. It preserves the nested context needed to interpret the parent audit.

Enables: Attribute author in audit.author to the parent audit; identify parent records where that nested author object is absent.
Interpretation: Confluence Cloud reports author as a nested object on each audit; optional children may be absent from a valid response.

Account ID

Developer identifier: audit.author.accountIdAccount ID. Atlassian account ID of the author. It provides the reference needed to connect the audit to the corresponding provider object.

Enables: Connect each Confluence Cloud audit author in Audit to the referenced account through audit.author.accountId; flag account ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports account ID as an identifier in its account namespace; it is not a universal identity outside Confluence Cloud.

Display Name

Developer identifier: audit.author.displayNameDisplay Name. Display name of the author. It distinguishes the provider-defined display name state or classification for the Confluence Cloud audit author.

Enables: Label each Confluence Cloud audit author with display name from audit.author.displayName; distinguish records that share that display name but have different Confluence Cloud identifiers.
Interpretation: Confluence Cloud reports display name as display text for each Confluence Cloud audit author; names are mutable and are not stable identities.

Type

Developer identifier: audit.author.typeType. Author type (e.g., ‘user’). It identifies the related provider object that gives the Confluence Cloud audit author its parent, owner, or container context.

Enables: Segment Confluence Cloud audit author entries in Audit by type in audit.author.type; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports type as a label from its own taxonomy on each Confluence Cloud audit author; preserve unknown labels rather than mapping them by assumption.

Category

Developer identifier: audit.categoryCategory. Audit category (e.g., ‘permissions’, ‘pages’). It distinguishes the provider-defined category state or classification for the audit.

Enables: Segment audit entries in Audit by category in audit.category; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports category as a label from its own taxonomy on each audit; preserve unknown labels rather than mapping them by assumption.

Changed Values

Developer identifier: audit.changedValuesChanged Values. List of value changes recorded for the action. It preserves the nested context needed to interpret the parent audit.

Enables: Search the returned changed values content in audit.changedValues while preserving element order and attribution to the parent audit.
Interpretation: Confluence Cloud returns changed values as ordered content or provider-generated content metadata on each audit; truncation, omission, and inaccessible source media can limit completeness.

Name

Developer identifier: audit.changedValues.nameName. Name of the changed field. It gives the Confluence Cloud audit changed value a human-readable provider label while its identifier remains the stable reference.

Enables: Match repeated Confluence Cloud audit changed value entries on name in audit.changedValues.name; it is not a record key, so each entry is identified by its position in the array.
Interpretation: Confluence Cloud reports name as display text for each Confluence Cloud audit changed value; names are mutable and are not stable identities.

New Value

Developer identifier: audit.changedValues.newValueNew Value. New value of the field. It must be interpreted with the enclosing provider field name, type, or custom schema for the Confluence Cloud audit changed value.

Enables: Interpret audit.changedValues.newValue with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Confluence Cloud reports new value under the enclosing custom or typed field contract on each Confluence Cloud audit changed value; compare it only with values from the same provider key and type.

Old Value

Developer identifier: audit.changedValues.oldValueOld Value. Previous value of the field. It must be interpreted with the enclosing provider field name, type, or custom schema for the Confluence Cloud audit changed value.

Enables: Interpret audit.changedValues.oldValue with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Confluence Cloud reports old value under the enclosing custom or typed field contract on each Confluence Cloud audit changed value; compare it only with values from the same provider key and type.

Creation Date

Developer identifier: audit.creationDateCreation Date. Unix epoch milliseconds when the audit entry was created. It anchors the audit on the provider’s reported timeline.

Enables: Order or filter audit entries by creation date in audit.creationDate.
Interpretation: Confluence Cloud reports creation date in milliseconds since the Unix epoch on each audit; it is not ISO-8601 and must be converted with that explicit unit. Two entries can share a creation date. Parable uses this field to keep the latest version of each record. It is the time of the event.

Description

Developer identifier: audit.descriptionDescription. Detailed description of the audited action. It defines the content surface available for this audit.

Enables: Locate audit records by description in audit.description; attribute each text match to its parent audit and, when present, its reported author.
Interpretation: Confluence Cloud supplies description as text on each audit; referenced files or media are not implied unless explicitly represented.

Remote Address

Developer identifier: audit.remoteAddressRemote Address. Remote IP address from which the action was performed. It supplies the provider-reported address or location facet for the audit, not a residency determination.

Enables: Group Audit by the exact remote address in audit.remoteAddress while keeping that address or location separate from geolocation and residency claims.
Interpretation: Confluence Cloud reports remote address as an address or location facet on each audit; it does not establish verified geolocation or data residency.

Summary

Developer identifier: audit.summarySummary. Short human-readable summary of the audited action. It defines the content surface available for this audit.

Enables: Locate audit records by summary in audit.summary; attribute each text match to its parent audit and, when present, its reported author.
Interpretation: Confluence Cloud supplies summary as text on each audit; referenced files or media are not implied unless explicitly represented.

Super Admin

Developer identifier: audit.superAdminSuper Admin. Whether the action was performed by a super administrator. It distinguishes the provider-defined super admin state or classification for the audit.

Enables: Filter Audit by whether the action was performed by a super administrator in audit.superAdmin; count true, false, and missing results separately.
Interpretation: Confluence Cloud reports the action was performed by a super administrator as a boolean on each audit; a missing field is unknown, not false.

Sys Admin

Developer identifier: audit.sysAdminSys Admin. Whether the action was performed by a system administrator. It distinguishes the provider-defined sys admin state or classification for the audit.

Enables: Filter Audit by whether the action was performed by a system administrator in audit.sysAdmin; count true, false, and missing results separately.
Interpretation: Confluence Cloud reports the action was performed by a system administrator as a boolean on each audit; a missing field is unknown, not false.

Group Members

Developer identifier: group_membersGroup Members. The user accounts that belong to each Confluence Cloud site group.

Enables: Resolve which users hold the space permissions of a group, so source permissions give each member the group’s tokens.
Scope: Reads every record from Confluence Cloud’s /wiki/rest/api/group/{id}/membersByGroupId operation for each group in groups on each sync. The credential needs the Can use global permission, and an OAuth 2.0 service account also needs the read:confluence-groups scope. A later complete read treats a previously seen membership that is absent as removed, so a person removed from a group loses its access after the next sync. One row per group and account: the key is a digest of group_id and accountId.

Account ID

Developer identifier: group_members.accountIdAccount ID. The Atlassian account ID of the member.

Enables: Match each membership to the users record with the same account ID.
Interpretation: Confluence Cloud reports one account ID per member. For source permissions, Parable marks this field as the user who holds the membership.

Account Type

Developer identifier: group_members.accountTypeAccount Type. The type of the member’s account.

Enables: Separate person accounts from app accounts in a group.
Interpretation: Confluence Cloud uses its own vocabulary. The users record of the account decides whether it is a member or a guest.

Display Name

Developer identifier: group_members.displayNameDisplay Name. The display name of the member.

Enables: Show who a membership names.
Interpretation: The user’s privacy setting can replace it with the public name. A name labels an account but never joins two.

Group ID

Developer identifier: group_members.group_idGroup ID. The group of the membership. Parable copies it from the parent record in groups. Confluence Cloud does not return this value with the record.

Enables: Match each membership to its group.
Interpretation: For source permissions, Parable marks this field as the group the member belongs to.

Membership Key

Developer identifier: group_members.membership_keyMembership Key. Identifies one membership of one account in one group. Parable computes it from group_id and accountId.

Enables: Keep one row per group and member across syncs.
Interpretation: The value is a digest, not a Confluence identifier. It is the record key.

Groups

Developer identifier: groupsGroups. The user groups of the Confluence Cloud site.

Enables: Resolve the groups that space permissions name, and supply the group principals that source permissions match space permissions against.
Scope: Reads every record from Confluence Cloud’s /wiki/rest/api/group operation on each sync. The credential needs the Can use global permission, and an OAuth 2.0 service account also needs the read:confluence-groups scope. A later complete read treats a previously seen group that is absent as removed.

Developer identifier: groups.idID. The stable identifier of the group. It is the record key, so rows with the same value describe the same group.

Enables: Match each group to group_members.group_id and to the group principals in space_permissions.principal_id.
Interpretation: Confluence Cloud reports one ID per group. For source permissions, Parable marks this field as the ID of a group principal.

Managed By

Developer identifier: groups.managedByManaged By. Who manages the members of the group.

Enables: Separate groups that an identity provider syncs from groups that administrators or members manage.
Interpretation: Confluence Cloud reports ADMINS, EXTERNAL, TEAM_MEMBERS or OPEN. It does not change who the group admits.

Name

Developer identifier: groups.nameName. The display name of the group.

Enables: Show which group a membership or a space permission names.
Interpretation: An administrator can rename a group, so the name is not a stable identifier.

Usage Type

Developer identifier: groups.usageTypeUsage Type. How the site uses the group.

Enables: Separate site groups from teams.
Interpretation: Confluence Cloud reports USERBASE_GROUP or TEAM_COLLABORATION. Both admit their members in the same way.

Page Content

Developer identifier: page_contentPage Content. Full page content including body.

Enables: Search the full page body representation returned by Confluence and attribute it to the page and version.
Scope: Reads every record from Confluence Cloud’s /wiki/api/v2/pages/{id} operation on each sync. This stream is opt-in. Visibility follows the Confluence account and space permissions associated with the credential. The returned page body is included, but binary attachments and content hidden from the credential are not. A later complete read can treat a previously seen record that is absent as removed. Only people with All data access read this table. Confluence can narrow a page with a view restriction on the page or on a page or folder above it, and the connector does not read restrictions, so no page opens to the readers of its space.

Author ID

Developer identifier: page_content.authorIdAuthor ID. Account ID of the page creator. It provides the reference needed to connect the page content to the corresponding provider object.

Enables: Connect each page content in Page Content to the referenced author through page_content.authorId; flag author ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports author ID as an identifier in its author namespace; it is not a universal identity outside Confluence Cloud.

Body

Developer identifier: page_content.bodyBody. Body content of the page in the requested representation(s). It preserves the nested context needed to interpret the parent page content.

Enables: Attribute body in page_content.body to the parent page content; identify parent records where that nested body object is absent.
Interpretation: Confluence Cloud reports body as a nested object on each page content; optional children may be absent from a valid response.

Atlas Doc Format

Developer identifier: page_content.body.atlas_doc_formatAtlas Doc Format. Page body in Atlassian Document Format (JSON-based). It preserves the nested context needed to interpret the parent page content.

Enables: Attribute atlas doc format in page_content.body.atlas_doc_format to the parent page content; identify parent records where that nested atlas doc format object is absent.
Interpretation: Confluence Cloud reports atlas doc format as a nested object on each page content body; optional children may be absent from a valid response.

Representation

Developer identifier: page_content.body.atlas_doc_format.representationRepresentation. The representation type identifier (e.g., ‘storage’, ‘atlas_doc_format’). It identifies the related provider object that gives the page content body representation its parent, owner, or container context.

Enables: Connect each page content body representation to the related representation in page_content.body.atlas_doc_format.representation and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Confluence Cloud reports representation as relationship context on each page content body representation; resolve it in the named provider namespace rather than by display text alone.

Value

Developer identifier: page_content.body.atlas_doc_format.valueValue. The body content string in the given representation format. It supplies the returned value text needed to understand the page content body representation in context.

Enables: Search the returned value text in page_content.body.atlas_doc_format.value and attribute each match to its parent page content and reported author when available.
Interpretation: Confluence Cloud supplies value as returned text on each page content body representation; truncation, formatting, and access boundaries can limit completeness.

Storage

Developer identifier: page_content.body.storageStorage. Page body in Confluence storage format (XHTML-based). It preserves the nested context needed to interpret the parent page content.

Enables: Attribute storage in page_content.body.storage to the parent page content; identify parent records where that nested storage object is absent.
Interpretation: Confluence Cloud reports storage as a nested object on each page content body; optional children may be absent from a valid response.

Representation

Developer identifier: page_content.body.storage.representationRepresentation. The representation type identifier (e.g., ‘storage’, ‘atlas_doc_format’). It identifies the related provider object that gives the page content body representation its parent, owner, or container context.

Enables: Connect each page content body representation to the related representation in page_content.body.storage.representation and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Confluence Cloud reports representation as relationship context on each page content body representation; resolve it in the named provider namespace rather than by display text alone.

Value

Developer identifier: page_content.body.storage.valueValue. The body content string in the given representation format. It supplies the returned value text needed to understand the page content body representation in context.

Enables: Search the returned value text in page_content.body.storage.value and attribute each match to its parent page content and reported author when available.
Interpretation: Confluence Cloud supplies value as storage-format XHTML on each page content body; truncation, formatting, and access boundaries can limit completeness.

Created At

Developer identifier: page_content.createdAtCreated At. Timestamp when the page was originally created (ISO 8601). It anchors the page content on the provider’s reported timeline.

Enables: Order Page Content by created at in page_content.createdAt and isolate records inside an exact provider reporting window.
Interpretation: Confluence Cloud reports created at as a timestamp on each page content; timezone and precision follow this API field, and absence is not an inferred event time.

Developer identifier: page_content.idID. Unique identifier for the page. It provides the reference needed to connect the page content to the corresponding provider object.

Enables: Match repeated page content entries on ID in page_content.id. Only entries that share this key are the same record.
Interpretation: Confluence Cloud reports ID as an identifier in its page content namespace; it is not a universal identity outside Confluence Cloud. It is the record key.

Last Owner ID

Developer identifier: page_content.lastOwnerIdLast Owner ID. Account ID of the previous page owner. It provides the reference needed to connect the page content to the corresponding provider object.

Enables: Connect each page content in Page Content to the referenced last owner through page_content.lastOwnerId; flag last owner ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports last owner ID as an identifier in its last owner namespace; it is not a universal identity outside Confluence Cloud.

Owner ID

Developer identifier: page_content.ownerIdOwner ID. Account ID of the page owner. It provides the reference needed to connect the page content to the corresponding provider object.

Enables: Connect each page content in Page Content to the referenced owner through page_content.ownerId; flag owner ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports owner ID as an identifier in its owner namespace; it is not a universal identity outside Confluence Cloud.

Page ID

Developer identifier: page_content.page_idPage ID. Parent page reference copied into each page content because the child operation does not return that relationship. It provides the reference needed to connect the page content to the corresponding provider object.

Enables: Connect each page content in Page Content to the referenced page through page_content.page_id; flag page ID values that do not resolve in that provider namespace.
Interpretation: Parable copies page ID from the parent record into each page content; the child Confluence Cloud operation does not return it.

Parent ID

Developer identifier: page_content.parentIdParent ID. ID of the parent page, if any. It provides the reference needed to connect the page content to the corresponding provider object.

Enables: Connect each page content in Page Content to the referenced parent through page_content.parentId; flag parent ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports parent ID as an identifier in its parent namespace; it is not a universal identity outside Confluence Cloud.

Parent Type

Developer identifier: page_content.parentTypeParent Type. Type of the parent entity (page or space). It identifies the related provider object that gives the page content its parent, owner, or container context.

Enables: Segment page content entries in Page Content by parent type in page_content.parentType; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports parent type as a label from its own taxonomy on each page content; preserve unknown labels rather than mapping them by assumption.

Position

Developer identifier: page_content.positionPosition. The position of the page relative to its siblings in the page tree. It supplies the position measure for the page content at the provider’s declared unit and grain.

Enables: Measure position through page_content.position for each page content and compare only values with the same unit and record grain.
Interpretation: Confluence Cloud reports position as a measure on each page content; compare only records with the same unit and aggregation grain.

Space ID

Developer identifier: page_content.spaceIdSpace ID. ID of the space containing this page. It provides the reference needed to connect the page content to the corresponding provider object.

Enables: Connect each page content in Page Content to the referenced space through page_content.spaceId; flag space ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports space ID as an identifier in its space namespace; it is not a universal identity outside Confluence Cloud.

Status

Developer identifier: page_content.statusStatus. Page status (current, archived, trashed, draft, deleted). It distinguishes the provider-defined status state or classification for the page content.

Enables: Segment page content entries in Page Content by status in page_content.status; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports status as a label from its own taxonomy on each page content; preserve unknown labels rather than mapping them by assumption.

Title

Developer identifier: page_content.titleTitle. Title of the page. It gives the page content a human-readable provider label while its identifier remains the stable reference.

Enables: Label each page content with title from page_content.title; distinguish records that share that display name but have different Confluence Cloud identifiers.
Interpretation: Confluence Cloud reports title as display text for each page content; names are mutable and are not stable identities.

Version

Developer identifier: page_content.versionVersion. Version information for the latest revision of the page. It preserves the nested context needed to interpret the parent page content.

Enables: Attribute version in page_content.version to the parent page content; identify parent records where that nested version object is absent.
Interpretation: Confluence Cloud reports version as a nested object on each page content; optional children may be absent from a valid response.

Author ID

Developer identifier: page_content.version.authorIdAuthor ID. Account ID of the user who made this version edit. It provides the reference needed to connect the page content to the corresponding provider object.

Enables: Connect each page content version in Page Content to the referenced author through page_content.version.authorId; flag author ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports author ID as an identifier in its author namespace; it is not a universal identity outside Confluence Cloud.

Created At

Developer identifier: page_content.version.createdAtCreated At. Timestamp when this version was created. It anchors the page content on the provider’s reported timeline.

Enables: Order Page Content by created at in page_content.version.createdAt and isolate records inside an exact provider reporting window.
Interpretation: Confluence Cloud reports created at as a timestamp on each page content version; timezone and precision follow this API field, and absence is not an inferred event time. Parable uses this field to keep the latest version of each record.

Message

Developer identifier: page_content.version.messageMessage. Optional message provided by the editor for this version. It supplies the returned message text needed to understand the page content version in context.

Enables: Search the returned message text in page_content.version.message and attribute each match to its parent page content and reported author when available.
Interpretation: Confluence Cloud supplies message as returned text on each page content version; truncation, formatting, and access boundaries can limit completeness.

Minor Edit

Developer identifier: page_content.version.minorEditMinor Edit. Whether this version was flagged as a minor edit. It distinguishes the provider-defined minor edit state or classification for the page content version.

Enables: Filter Page Content by whether this version was flagged as a minor edit in page_content.version.minorEdit; count true, false, and missing results separately.
Interpretation: Confluence Cloud reports this version was flagged as a minor edit as a boolean on each page content version; a missing field is unknown, not false.

Number

Developer identifier: page_content.version.numberNumber. Version number indicating how many times the page has been edited. It supplies the number measure for the page content version at the provider’s declared unit and grain.

Enables: Measure number through page_content.version.number for each page content version and compare only values with the same unit and record grain.
Interpretation: Confluence Cloud reports number as a measure on each page content version; compare only records with the same unit and aggregation grain.

Pages

Developer identifier: pagesPages. Confluence pages.

Enables: Inventory Confluence page metadata and connect each page to its space, parent, author, and content fetch.
Scope: Reads the records that changed since the previous sync from Confluence Cloud’s /wiki/api/v2/pages operation. Visibility follows the Confluence account and space permissions associated with the credential. Page list records are metadata; the separate page-content stream carries the returned body representation. This stream supplies no reliable deletion signal. Only people with All data access read this table. Confluence can narrow a page with a view restriction on the page or on a page or folder above it, and the connector does not read restrictions, so no page opens to the readers of its space.

Links

Developer identifier: pages._linksLinks. Links related to this page resource. It preserves the nested context needed to interpret the parent page.

Enables: Attribute links in pages._links to the parent page; identify parent records where that nested links object is absent.
Interpretation: Confluence Cloud reports links as a nested object on each page; optional children may be absent from a valid response.

Base

Developer identifier: pages._links.baseBase. Base URL of the Confluence instance. It locates the provider resource or path associated with the page link.

Enables: Associate each page link with the resource identified by base in pages._links.base; verify the link resolves to the expected Confluence Cloud object.
Interpretation: Confluence Cloud reports base as a resource locator for each page link; access still depends on viewer permissions and the URL may expire or change.

Editui

Developer identifier: pages._links.edituiEditui. Relative URL to edit the page in the Confluence web UI. It locates the provider resource or path associated with the page link.

Enables: Resolve the page’s provider resource or path through pages._links.editui; verify access separately and do not infer that Parable read the linked content.
Interpretation: Confluence Cloud returns editui as a resource locator or path for each page link; access can expire or depend on viewer permissions, and linked content is not implied.

Developer identifier: pages._links.nextNext. URL or relative path for the next page of results.

Enables: See whether Confluence Cloud returned more results after this page.
Interpretation: Confluence Cloud returns next as a link to the next page of results. It has no business meaning.

Self

Developer identifier: pages._links.selfSelf. Full API URL for this page resource. It locates the provider resource or path associated with the page link.

Enables: Associate each page link with the resource identified by self in pages._links.self; verify the link resolves to the expected Confluence Cloud object.
Interpretation: Confluence Cloud reports self as a resource locator for each page link; access still depends on viewer permissions and the URL may expire or change.

Tinyui

Developer identifier: pages._links.tinyuiTinyui. Short relative URL (tiny link) for the page. It locates the provider resource or path associated with the page link.

Enables: Resolve the page’s provider resource or path through pages._links.tinyui; verify access separately and do not infer that Parable read the linked content.
Interpretation: Confluence Cloud returns tinyui as a resource locator or path for each page link; access can expire or depend on viewer permissions, and linked content is not implied.

Webui

Developer identifier: pages._links.webuiWebui. Relative URL to the page in the Confluence web UI.

Enables: Open the page in the Confluence web UI by adding pages._links.webui to the site’s base URL.
Interpretation: Confluence Cloud returns webui as a path relative to the site’s base URL. Access still follows Confluence Cloud permissions.

Author ID

Developer identifier: pages.authorIdAuthor ID. Account ID of the page creator. It provides the reference needed to connect the page to the corresponding provider object.

Enables: Connect each page in Pages to the referenced author through pages.authorId; flag author ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports author ID as an identifier in its author namespace; it is not a universal identity outside Confluence Cloud.

Body

Developer identifier: pages.bodyBody. Body content of the page in the requested format. It preserves the nested context needed to interpret the parent page.

Enables: Attribute body in pages.body to the parent page; identify parent records where that nested body object is absent.
Interpretation: Confluence Cloud reports body as a nested object on each page; optional children may be absent from a valid response.

Atlas Doc Format

Developer identifier: pages.body.atlas_doc_formatAtlas Doc Format. Page body in Atlassian Document Format (JSON-based). It preserves the nested context needed to interpret the parent page.

Enables: Attribute atlas doc format in pages.body.atlas_doc_format to the parent page; identify parent records where that nested atlas doc format object is absent.
Interpretation: Confluence Cloud reports atlas doc format as a nested object on each page body; optional children may be absent from a valid response.

Representation

Developer identifier: pages.body.atlas_doc_format.representationRepresentation. The representation type identifier (e.g., ‘storage’, ‘atlas_doc_format’). It identifies the related provider object that gives the body representation its parent, owner, or container context.

Enables: Connect each body representation to the related representation in pages.body.atlas_doc_format.representation and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Confluence Cloud reports representation as relationship context on each body representation; resolve it in the named provider namespace rather than by display text alone.

Value

Developer identifier: pages.body.atlas_doc_format.valueValue. The body content string in the given representation format. It supplies the returned value text needed to understand the body representation in context.

Enables: Search the returned value text in pages.body.atlas_doc_format.value and attribute each match to its parent page and reported author when available.
Interpretation: Confluence Cloud supplies value as returned text on each body representation; truncation, formatting, and access boundaries can limit completeness.

Storage

Developer identifier: pages.body.storageStorage. Page body in Confluence storage format (XHTML-based). It preserves the nested context needed to interpret the parent page.

Enables: Attribute storage in pages.body.storage to the parent page; identify parent records where that nested storage object is absent.
Interpretation: Confluence Cloud reports storage as a nested object on each page body; optional children may be absent from a valid response.

Created At

Developer identifier: pages.createdAtCreated At. Timestamp when the page was originally created (ISO 8601). It anchors the page on the provider’s reported timeline.

Enables: Order Pages by created at in pages.createdAt and isolate records inside an exact provider reporting window.
Interpretation: Confluence Cloud reports created at as a timestamp on each page; timezone and precision follow this API field, and absence is not an inferred event time.

Developer identifier: pages.idID. Unique identifier for the page. It provides the reference needed to connect the page to the corresponding provider object.

Enables: Match repeated page entries on ID in pages.id. Only entries that share this key are the same record.
Interpretation: Confluence Cloud reports ID as an identifier in its page namespace; it is not a universal identity outside Confluence Cloud. It is the record key.

Last Owner ID

Developer identifier: pages.lastOwnerIdLast Owner ID. Account ID of the previous page owner. It provides the reference needed to connect the page to the corresponding provider object.

Enables: Connect each page in Pages to the referenced last owner through pages.lastOwnerId; flag last owner ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports last owner ID as an identifier in its last owner namespace; it is not a universal identity outside Confluence Cloud.

Owner ID

Developer identifier: pages.ownerIdOwner ID. Account ID of the page owner (may differ from author). It provides the reference needed to connect the page to the corresponding provider object.

Enables: Connect each page in Pages to the referenced owner through pages.ownerId; flag owner ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports owner ID as an identifier in its owner namespace; it is not a universal identity outside Confluence Cloud.

Parent ID

Developer identifier: pages.parentIdParent ID. ID of the parent page, if any. It provides the reference needed to connect the page to the corresponding provider object.

Enables: Connect each page in Pages to the referenced parent through pages.parentId; flag parent ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports parent ID as an identifier in its parent namespace; it is not a universal identity outside Confluence Cloud.

Parent Type

Developer identifier: pages.parentTypeParent Type. Type of the parent entity (page or space). It distinguishes the provider-defined parent type state or classification for the page.

Enables: Segment page entries in Pages by parent type in pages.parentType; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports parent type as a label from its own taxonomy on each page; preserve unknown labels rather than mapping them by assumption.

Position

Developer identifier: pages.positionPosition. The position of the page relative to its siblings in the page tree. It supplies the position measure for the page at the provider’s declared unit and grain.

Enables: Measure position through pages.position for each page and compare only values with the same unit and record grain.
Interpretation: Confluence Cloud reports position as a measure on each page; compare only records with the same unit and aggregation grain.

Space ID

Developer identifier: pages.spaceIdSpace ID. ID of the space containing this page. It provides the reference needed to connect the page to the corresponding provider object.

Enables: Connect each page in Pages to the referenced space through pages.spaceId; flag space ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports space ID as an identifier in its space namespace; it is not a universal identity outside Confluence Cloud.

Status

Developer identifier: pages.statusStatus. Page status (current, archived, trashed, draft, etc.). It distinguishes the provider-defined status state or classification for the page.

Enables: Segment page entries in Pages by status in pages.status; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports status as a label from its own taxonomy on each page; preserve unknown labels rather than mapping them by assumption.

Title

Developer identifier: pages.titleTitle. Title of the page. It gives the page a human-readable provider label while its identifier remains the stable reference.

Enables: Label each page with title from pages.title; distinguish records that share that display name but have different Confluence Cloud identifiers.
Interpretation: Confluence Cloud reports title as display text for each page; names are mutable and are not stable identities.

Version

Developer identifier: pages.versionVersion. Version information for the latest revision of the page. It preserves the nested context needed to interpret the parent page.

Enables: Attribute version in pages.version to the parent page; identify parent records where that nested version object is absent.
Interpretation: Confluence Cloud reports version as a nested object on each page; optional children may be absent from a valid response.

Author ID

Developer identifier: pages.version.authorIdAuthor ID. Account ID of the user who made this version edit. It provides the reference needed to connect the page to the corresponding provider object.

Enables: Connect each page version in Pages to the referenced author through pages.version.authorId; flag author ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports author ID as an identifier in its author namespace; it is not a universal identity outside Confluence Cloud.

Created At

Developer identifier: pages.version.createdAtCreated At. Timestamp when this version was created (effectively the last modified date). It anchors the page on the provider’s reported timeline.

Enables: Order Pages by created at in pages.version.createdAt and isolate records inside an exact provider reporting window.
Interpretation: Confluence Cloud reports created at as a timestamp on each page version; timezone and precision follow this API field, and absence is not an inferred event time. Parable uses this field to keep the latest version of each record.

Message

Developer identifier: pages.version.messageMessage. Optional message provided by the editor for this version. It supplies the returned message text needed to understand the page version in context.

Enables: Search the returned message text in pages.version.message and attribute each match to its parent page and reported author when available.
Interpretation: Confluence Cloud supplies message as returned text on each page version; truncation, formatting, and access boundaries can limit completeness.

Minor Edit

Developer identifier: pages.version.minorEditMinor Edit. Whether this version was flagged as a minor edit. It distinguishes the provider-defined minor edit state or classification for the page version.

Enables: Filter Pages by whether this version was flagged as a minor edit in pages.version.minorEdit; count true, false, and missing results separately.
Interpretation: Confluence Cloud reports this version was flagged as a minor edit as a boolean on each page version; a missing field is unknown, not false.

Number

Developer identifier: pages.version.numberNumber. Version number indicating how many times the page has been edited. It supplies the number measure for the page version at the provider’s declared unit and grain.

Enables: Measure number through pages.version.number for each page version and compare only values with the same unit and record grain.
Interpretation: Confluence Cloud reports number as a measure on each page version; compare only records with the same unit and aggregation grain.

Space Permissions

Developer identifier: space_permissionsSpace Permissions. The users and groups that may view each Confluence Cloud space.

Enables: Give each space the users and groups that its View space permission names, so source permissions open a space to the same people Confluence does. Pages do not open to the readers of their space, because the connector does not read page restrictions.
Scope: Reads Confluence Cloud’s /wiki/api/v2/spaces/{id}/permissions operation for each space in spaces on each sync, and keeps only the read permissions on the space target. The credential needs permission to view each space. One row per space, principal type and principal: the key is a digest of space_id, principal_type and principal_id. A later complete read treats a permission that is absent as removed.

Operation

Developer identifier: space_permissions.operation_keyOperation. The operation that the permission grants. Parable lifts it from operation.key.

Enables: Confirm that the row is a View space permission.
Interpretation: The read keeps only read, so every row holds read.

Permission ID

Developer identifier: space_permissions.permission_idPermission ID. The Confluence ID of the space permission. Parable lifts it from id.

Enables: Trace a row to the permission in Confluence.
Interpretation: Confluence Cloud reports one ID per permission. The row key is permission_key, not this ID.

Permission Key

Developer identifier: space_permissions.permission_keyPermission Key. Identifies one View space permission of one principal in one space. Parable computes it from space_id, principal_type and principal_id.

Enables: Keep one row per space and principal across syncs.
Interpretation: The value is a digest, not a Confluence identifier. It is the record key.

Principal ID

Developer identifier: space_permissions.principal_idPrincipal ID. The user or group that may view the space. Parable lifts it from principal.id.

Enables: Match a user permission to users.accountId and a group permission to groups.id.
Interpretation: The meaning depends on principal_type. For source permissions, Parable marks this field as the member of the space.

Principal Type

Developer identifier: space_permissions.principal_typePrincipal Type. Whether the permission names a user, a group or a role. Parable lifts it from principal.type.

Enables: Decide how source permissions read the permission: a user or a group becomes a member of the space.
Interpretation: Parable does not read the members of a role, so a role permission gives nothing. A space that only a role can view reads only for All data access.

Space ID

Developer identifier: space_permissions.space_idSpace ID. The space of the permission. Parable copies it from the parent record in spaces. Confluence Cloud does not return this value with the record.

Enables: Match each permission to its space.
Interpretation: For source permissions, the row’s principal is a member of this space, and the row reads as the space does.

Target Type

Developer identifier: space_permissions.target_typeTarget Type. The kind of object that the operation targets. Parable lifts it from operation.targetType.

Enables: Confirm that the row is a View space permission.
Interpretation: The read keeps only space, so every row holds space.

Spaces

Developer identifier: spacesSpaces. Confluence spaces.

Enables: Inventory Confluence spaces by key, name, type, status, homepage, author, and creation time.
Scope: Reads every record from Confluence Cloud’s /wiki/api/v2/spaces operation on each sync. Visibility follows the Confluence account and space permissions associated with the credential. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. A later complete read can treat a previously seen record that is absent as removed. For source permissions, a space admits the users and groups that space_permissions names.

Links

Developer identifier: spaces._linksLinks. Links related to this space resource. It preserves the nested context needed to interpret the parent space.

Enables: Attribute links in spaces._links to the parent space; identify parent records where that nested links object is absent.
Interpretation: Confluence Cloud reports links as a nested object on each space; optional children may be absent from a valid response.

Self

Developer identifier: spaces._links.selfSelf. Self link URL for the space API resource. It locates the provider resource or path associated with the space link.

Enables: Associate each space link with the resource identified by self in spaces._links.self; verify the link resolves to the expected Confluence Cloud object.
Interpretation: Confluence Cloud reports self as a resource locator for each space link; access still depends on viewer permissions and the URL may expire or change.

Webui

Developer identifier: spaces._links.webuiWebui. Relative web UI path for the space.

Enables: Open the space in the Confluence web UI by adding spaces._links.webui to the site’s base URL.
Interpretation: Confluence Cloud returns webui as a path relative to the site’s base URL. Access still follows Confluence Cloud permissions.

Author ID

Developer identifier: spaces.authorIdAuthor ID. Account ID of the space creator. It provides the reference needed to connect the space to the corresponding provider object.

Enables: Connect each space in Spaces to the referenced author through spaces.authorId; flag author ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports author ID as an identifier in its author namespace; it is not a universal identity outside Confluence Cloud.

Created At

Developer identifier: spaces.createdAtCreated At. ISO 8601 timestamp when the space was created. It anchors the space on the provider’s reported timeline.

Enables: Order Spaces by created at in spaces.createdAt and isolate records inside an exact provider reporting window.
Interpretation: Confluence Cloud reports created at as a timestamp on each space; timezone and precision follow this API field, and absence is not an inferred event time.

Current Active Alias

Developer identifier: spaces.currentActiveAliasCurrent Active Alias. Human-readable alias currently in use for the space. For spaces created under the new space-key model this is the value users see and reference, and it can differ from key. It identifies the related provider object that gives the space its parent, owner, or container context.

Enables: Connect each space to the related current active alias in spaces.currentActiveAlias and verify that the referenced provider object resolves in the expected parent or container.
Interpretation: Confluence Cloud reports current active alias as relationship context on each space; resolve it in the named provider namespace rather than by display text alone.

Description

Developer identifier: spaces.descriptionDescription. Description of the space in the requested format. It preserves the nested context needed to interpret the parent space.

Enables: Attribute description in spaces.description to the parent space; identify parent records where that nested description object is absent.
Interpretation: Confluence Cloud reports description as a nested object on each space; optional children may be absent from a valid response.

Plain

Developer identifier: spaces.description.plainPlain. Plain text representation of the space description. It preserves the nested context needed to interpret the parent space.

Enables: Attribute plain in spaces.description.plain to the parent space; identify parent records where that nested plain object is absent.
Interpretation: Confluence Cloud reports plain as a nested object on each space description; optional children may be absent from a valid response.

Representation

Developer identifier: spaces.description.plain.representationRepresentation. The representation format (e.g., ‘plain’, ‘view’). It must be interpreted with the enclosing provider field name, type, or custom schema for the space description body.

Enables: Interpret spaces.description.plain.representation with the enclosing custom field name, declared type, and provider schema; compare only records that share that contract.
Interpretation: Confluence Cloud reports representation under the enclosing custom or typed field contract on each space description body; compare it only with values from the same provider key and type.

Value

Developer identifier: spaces.description.plain.valueValue. The description content in the given representation. It supplies the returned value text needed to understand the space description body in context.

Enables: Search the returned value text in spaces.description.plain.value and attribute each match to its parent space and reported author when available.
Interpretation: Confluence Cloud supplies value as returned text on each space description body; truncation, formatting, and access boundaries can limit completeness.

View

Developer identifier: spaces.description.viewView. View (rendered HTML) representation of the space description. It preserves the nested context needed to interpret the parent space.

Enables: Attribute view in spaces.description.view to the parent space; identify parent records where that nested view object is absent.
Interpretation: Confluence Cloud reports view as a nested object on each space description; optional children may be absent from a valid response.

Homepage ID

Developer identifier: spaces.homepageIdHomepage ID. ID of the space’s homepage content. It provides the reference needed to connect the space to the corresponding provider object.

Enables: Connect each space in Spaces to the referenced homepage through spaces.homepageId; flag homepage ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports homepage ID as an identifier in its homepage namespace; it is not a universal identity outside Confluence Cloud.

Icon

Developer identifier: spaces.iconIcon. Icon associated with the space. Only present when include-icon is true. It preserves the nested context needed to interpret the parent space.

Enables: Attribute icon in spaces.icon to the parent space; identify parent records where that nested icon object is absent.
Interpretation: Confluence Cloud reports icon as a nested object on each space; optional children may be absent from a valid response.

API Download Link

Developer identifier: spaces.icon.apiDownloadLinkAPI Download Link. API download link for the space icon. It locates the provider resource or path associated with the space icon.

Enables: Associate each space icon with the resource identified by API download link in spaces.icon.apiDownloadLink; verify the link resolves to the expected Confluence Cloud object.
Interpretation: Confluence Cloud reports API download link as a resource locator for each space icon; access still depends on viewer permissions and the URL may expire or change.

Path

Developer identifier: spaces.icon.pathPath. Relative path to the space icon image. It locates the provider resource or path associated with the space icon.

Enables: Resolve the space’s provider resource or path through spaces.icon.path; verify access separately and do not infer that Parable read the linked content.
Interpretation: Confluence Cloud returns path as a resource locator or path for each space icon; access can expire or depend on viewer permissions, and linked content is not implied.

Developer identifier: spaces.idID. Unique identifier for the space. It provides the reference needed to connect the space to the corresponding provider object.

Enables: Match repeated space entries on ID in spaces.id. Only entries that share this key are the same record.
Interpretation: Confluence Cloud reports ID as an identifier in its space namespace; it is not a universal identity outside Confluence Cloud. It is the record key. For source permissions, Parable marks this field as the ID of a group principal, and the space is also a resource that admits its own members (grantsSelf): the users and groups of its View space permissions in space_permissions.

Key

Developer identifier: spaces.keyKey. Short unique key for the space (e.g., ‘ENG’). It provides the reference needed to connect the space to the corresponding provider object.

Enables: Connect each space in Spaces to the referenced space through spaces.key; flag key values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports key as an identifier in its space namespace; it is not a universal identity outside Confluence Cloud.

Name

Developer identifier: spaces.nameName. Display name of the space. It gives the space a human-readable provider label while its identifier remains the stable reference.

Enables: Label each space with name from spaces.name; distinguish records that share that display name but have different Confluence Cloud identifiers.
Interpretation: Confluence Cloud reports name as display text for each space; names are mutable and are not stable identities.

Status

Developer identifier: spaces.statusStatus. Space status (current or archived). It distinguishes the provider-defined status state or classification for the space.

Enables: Segment space entries in Spaces by status in spaces.status; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports status as a label from its own taxonomy on each space; preserve unknown labels rather than mapping them by assumption.

Type

Developer identifier: spaces.typeType. Space type (global or personal). It distinguishes the provider-defined type state or classification for the space.

Enables: Segment space entries in Spaces by type in spaces.type; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports type as a label from its own taxonomy on each space; preserve unknown labels rather than mapping them by assumption.

Users

Developer identifier: usersUsers. Confluence users.

Enables: Reconcile Confluence account identifiers and display names to account type and active status when visible to the credential.
Scope: Reads every record from Confluence Cloud’s /wiki/rest/api/search/user operation on each sync. Visibility follows the Confluence account and space permissions associated with the credential. The stream does not include records that the credential, the parent records, the configured filters, or the provider API leave out. A later complete read can treat a previously seen record that is absent as removed. The read expands operations, and Parable computes can_use from them: a user is active for source permissions only when can_use is true.

Links

Developer identifier: users._linksLinks. HAL-style links related to this user resource. It preserves the nested context needed to interpret the parent user.

Enables: Attribute links in users._links to the parent user; identify parent records where that nested links object is absent.
Interpretation: Confluence Cloud reports links as a nested object on each user; optional children may be absent from a valid response.

Base

Developer identifier: users._links.baseBase. Base URL of the Confluence instance. It locates the provider resource or path associated with the Confluence Cloud user link.

Enables: Associate each Confluence Cloud user link with the resource identified by base in users._links.base; verify the link resolves to the expected Confluence Cloud object.
Interpretation: Confluence Cloud reports base as a resource locator for each Confluence Cloud user link; access still depends on viewer permissions and the URL may expire or change.

Developer identifier: users._links.nextNext. Relative URL for the next page of results (present only in list responses, included here for completeness).

Enables: See whether Confluence Cloud returned more results after this page.
Interpretation: Confluence Cloud returns next as a link to the next page of results. It has no business meaning.

Self

Developer identifier: users._links.selfSelf. Full URL to the user API resource. It locates the provider resource or path associated with the Confluence Cloud user link.

Enables: Associate each Confluence Cloud user link with the resource identified by self in users._links.self; verify the link resolves to the expected Confluence Cloud object.
Interpretation: Confluence Cloud reports self as a resource locator for each Confluence Cloud user link; access still depends on viewer permissions and the URL may expire or change.

Account ID

Developer identifier: users.accountIdAccount ID. Unique Atlassian account ID for the user. Primary key for cross-referencing users across all Confluence content and Atlassian products. It provides the reference needed to connect the user to the corresponding provider object.

Enables: Match repeated user entries on account ID in users.accountId. Only entries that share this key are the same record.
Interpretation: Confluence Cloud reports account ID as an identifier in its account namespace; it is not a universal identity outside Confluence Cloud. It is the record key. Parable uses this field as the account’s ID when it links the account to a person. For source permissions, Parable marks this field as the ID of a user principal.

Account Type

Developer identifier: users.accountTypeAccount Type. Type of account. Distinguishes human users from service accounts for accurate tool adoption metrics. It distinguishes the provider-defined account type state or classification for the user.

Enables: Segment user entries in Users by account type in users.accountType; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports account type as a label from its own taxonomy on each user; preserve unknown labels rather than mapping them by assumption. For source permissions, only an atlassian account is a member. An app or customer account, and a missing or unknown type, is a guest.

Can Use

Developer identifier: users.can_useCan Use. Whether the user holds the Can use global permission of the Confluence site. Parable computes it from operations when it reads the user, and always writes true or false.

Enables: Separate the users who can sign in to Confluence from deactivated and unlicensed accounts.
Interpretation: Parable writes false when the operations do not include use on application, as for a deactivated account. For source permissions, a user is active only when this value is true. A false, null or absent value makes the user inactive, so the account gives no token.

Display Name

Developer identifier: users.displayNameDisplay Name. Display name shown in the UI. Fallback display name for user identification. It distinguishes the provider-defined display name state or classification for the user.

Enables: Label each user with display name from users.displayName; distinguish records that share that display name but have different Confluence Cloud identifiers.
Interpretation: Confluence Cloud reports display name as display text for each user; names are mutable and are not stable identities. Parable uses this field as the person’s name.

Developer identifier: users.emailEmail. Email address of the user. Primary cross-connector identity resolution field for matching users across SaaS tools. It supplies the provider-reported address or location facet for the user, not a residency determination.

Enables: Attribute each user to a person or account by the exact email in users.email; identify addresses that do not match the Confluence Cloud directory.
Interpretation: Confluence Cloud reports email as an address on each user; aliases, casing, and unverified addresses can prevent a one-to-one person match. Parable uses this field as the account’s email when it links the account to a person. For source permissions, Parable matches a reader to this account by this email. Confluence returns an empty email when the user’s profile hides it.

Is External Collaborator

Developer identifier: users.isExternalCollaboratorIs External Collaborator. Whether the user is an external collaborator (guest) in the Confluence instance. It distinguishes the provider-defined is external collaborator state or classification for the user.

Enables: Filter Users by whether the user is an external collaborator (guest) in the confluence instance in users.isExternalCollaborator; count true, false, and missing results separately.
Interpretation: Confluence Cloud reports the user is an external collaborator (guest) in the confluence instance as a boolean on each user; a missing field is unknown, not false. For source permissions, a user with this value true is a guest.

Is Guest

Developer identifier: users.isGuestIs Guest. Whether the user is a guest of the Confluence site. Confluence Cloud replaces isExternalCollaborator with this field.

Enables: Separate guests from licensed users.
Interpretation: A missing value is unknown, not false. For source permissions, a user is a member only when this value is false. A true, null or absent value makes the user a guest: the user keeps their own and their groups’ space permissions, but no source_users or domain token.

Operations

Developer identifier: users.operationsOperations. List of permitted operations for this user in the current context. It preserves the nested context needed to interpret the parent user.

Enables: Compare the exact Confluence Cloud-configured operations set in users.operations for each user; preserve provider labels and unknown entries.
Interpretation: Confluence Cloud returns operations as an array of Confluence Cloud operation entries on each user; missing, empty, and permission-redacted arrays are not equivalent.

Operation

Developer identifier: users.operations.operationOperation. The operation type, e.g. ‘use’, ‘create’, ‘read’, ‘update’, ‘delete’, ‘administer’. It distinguishes the provider-defined operation state or classification for the Confluence Cloud operation.

Enables: Filter Users by the exact Confluence Cloud-defined operation in users.operations.operation and preserve unknown values as distinct categories.
Interpretation: Confluence Cloud supplies operation from its own taxonomy on each Confluence Cloud operation; preserve unknown and newly introduced labels.

Target Type

Developer identifier: users.operations.targetTypeTarget Type. The target entity type the operation applies to, e.g. ‘page’, ‘blogpost’, ‘space’, ‘application’. It identifies the related provider object that gives the Confluence Cloud operation its parent, owner, or container context.

Enables: Segment Confluence Cloud operation entries in Users by target type in users.operations.targetType; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports target type as a label from its own taxonomy on each Confluence Cloud operation; preserve unknown labels rather than mapping them by assumption.

Personal Space

Developer identifier: users.personalSpacePersonal Space. Reference to the user’s personal space, if one exists. It preserves the nested context needed to interpret the parent user.

Enables: Attribute personal space in users.personalSpace to the parent user; identify parent records where that nested personal space object is absent.
Interpretation: Confluence Cloud reports personal space as a nested object on each user; optional children may be absent from a valid response.

Links

Developer identifier: users.personalSpace._linksLinks. Links related to this space. It preserves the nested context needed to interpret the parent user.

Enables: Attribute links in users.personalSpace._links to the parent user; identify parent records where that nested links object is absent.
Interpretation: Confluence Cloud reports links as a nested object on each Confluence Cloud personal space; optional children may be absent from a valid response.

Self

Developer identifier: users.personalSpace._links.selfSelf. Full URL to the space API resource. It locates the provider resource or path associated with the Confluence Cloud space link.

Enables: Associate each Confluence Cloud space link with the resource identified by self in users.personalSpace._links.self; verify the link resolves to the expected Confluence Cloud object.
Interpretation: Confluence Cloud reports self as a resource locator for each Confluence Cloud space link; access still depends on viewer permissions and the URL may expire or change.

Webui

Developer identifier: users.personalSpace._links.webuiWebui. Relative URL to the space in the Confluence web UI.

Enables: Open the user’s personal space in the Confluence web UI by adding users.personalSpace._links.webui to the site’s base URL.
Interpretation: Confluence Cloud returns webui as a path relative to the site’s base URL. Access still follows Confluence Cloud permissions.

Developer identifier: users.personalSpace.idID. Numeric ID of the personal space. It provides the reference needed to connect the user to the corresponding provider object.

Enables: Connect each Confluence Cloud personal space in Users to the referenced Confluence Cloud personal space through users.personalSpace.id; flag ID values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports ID as an identifier in its Confluence Cloud personal space namespace; it is not a universal identity outside Confluence Cloud.

Key

Developer identifier: users.personalSpace.keyKey. The space key, typically prefixed with ~ for personal spaces. It provides the reference needed to connect the user to the corresponding provider object.

Enables: Connect each Confluence Cloud personal space in Users to the referenced Confluence Cloud personal space through users.personalSpace.key; flag key values that do not resolve in that provider namespace.
Interpretation: Confluence Cloud reports key as an identifier in its Confluence Cloud personal space namespace; it is not a universal identity outside Confluence Cloud.

Name

Developer identifier: users.personalSpace.nameName. Display name of the personal space. It gives the Confluence Cloud personal space a human-readable provider label while its identifier remains the stable reference.

Enables: Label each Confluence Cloud personal space with name from users.personalSpace.name; distinguish records that share that display name but have different Confluence Cloud identifiers.
Interpretation: Confluence Cloud reports name as display text for each Confluence Cloud personal space; names are mutable and are not stable identities.

Status

Developer identifier: users.personalSpace.statusStatus. Current status of the space, e.g. ‘current’ or ‘archived’. It identifies the related provider object that gives the Confluence Cloud personal space its parent, owner, or container context.

Enables: Segment Confluence Cloud personal space entries in Users by status in users.personalSpace.status; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports status as a label from its own taxonomy on each Confluence Cloud personal space; preserve unknown labels rather than mapping them by assumption.

Type

Developer identifier: users.personalSpace.typeType. Type of space, e.g. ‘personal’ or ‘global’. It identifies the related provider object that gives the Confluence Cloud personal space its parent, owner, or container context.

Enables: Segment Confluence Cloud personal space entries in Users by type in users.personalSpace.type; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports type as a label from its own taxonomy on each Confluence Cloud personal space; preserve unknown labels rather than mapping them by assumption.

Profile Picture

Developer identifier: users.profilePictureProfile Picture. Profile picture metadata for the user. It preserves the nested context needed to interpret the parent user.

Enables: Attribute profile picture in users.profilePicture to the parent user; identify parent records where that nested profile picture object is absent.
Interpretation: Confluence Cloud reports profile picture as a nested object on each user; optional children may be absent from a valid response.

Height

Developer identifier: users.profilePicture.heightHeight. Height of the profile picture in pixels. It supplies the height measure for the Confluence Cloud profile picture at the provider’s declared unit and grain.

Enables: Measure height through users.profilePicture.height for each Confluence Cloud profile picture and compare only values with the same unit and record grain.
Interpretation: Confluence Cloud reports height as a measure on each Confluence Cloud profile picture; compare only records with the same unit and aggregation grain.

Is Default

Developer identifier: users.profilePicture.isDefaultIs Default. Whether this is the default/generated avatar rather than a user-uploaded image. It distinguishes the provider-defined is default state or classification for the Confluence Cloud profile picture.

Enables: Filter Users by whether this is the default/generated avatar rather than a user-uploaded image in users.profilePicture.isDefault; count true, false, and missing results separately.
Interpretation: Confluence Cloud reports this is the default/generated avatar rather than a user-uploaded image as a boolean on each Confluence Cloud profile picture; a missing field is unknown, not false.

Path

Developer identifier: users.profilePicture.pathPath. Relative path to the profile picture resource. It locates the provider resource or path associated with the Confluence Cloud profile picture.

Enables: Resolve the user’s provider resource or path through users.profilePicture.path; verify access separately and do not infer that Parable read the linked content.
Interpretation: Confluence Cloud returns path as a resource locator or path for each Confluence Cloud profile picture; access can expire or depend on viewer permissions, and linked content is not implied.

Width

Developer identifier: users.profilePicture.widthWidth. Width of the profile picture in pixels. It supplies the width measure for the Confluence Cloud profile picture at the provider’s declared unit and grain.

Enables: Measure width through users.profilePicture.width for each Confluence Cloud profile picture and compare only values with the same unit and record grain.
Interpretation: Confluence Cloud reports width as a measure on each Confluence Cloud profile picture; compare only records with the same unit and aggregation grain.

Public Name

Developer identifier: users.publicNamePublic Name. Display name of the user. Human-readable identifier for org overview reporting. It identifies the related provider object that gives the user its parent, owner, or container context.

Enables: Label each user with public name from users.publicName; distinguish records that share that display name but have different Confluence Cloud identifiers.
Interpretation: Confluence Cloud reports public name as display text for each user; names are mutable and are not stable identities.

Type

Developer identifier: users.typeType. The object type identifier, typically ‘known’ for recognized users. It identifies the related provider object that gives the user its parent, owner, or container context.

Enables: Segment user entries in Users by type in users.type; compare counts only within the same Confluence Cloud taxonomy.
Interpretation: Confluence Cloud reports type as a label from its own taxonomy on each user; preserve unknown labels rather than mapping them by assumption.

Error	Meaning	Solution
401 Unauthorized (API token)	Invalid credentials	Check email and API token
401 on token exchange (OAuth)	Invalid client ID/secret or missing `audience`	Recreate credentials; include `audience=api.atlassian.com`
403 Forbidden	Missing scope or Confluence permission	Check scopes and service account access
Empty space list	Wrong Cloud ID or no browse access	Verify Cloud ID; grant Confluence access
403 on `groups` or `group_members` (OAuth)	The credential does not have the `read:confluence-groups` scope	Add the scope to the service account credential. Until then, a space that only groups may view reads only for people with All data access.