Skip to main content
Opal’s integration with Confluence allows you to manage access to Confluence groups.

​
Supported resources

​
Requirements

Before you begin, you must:
  • Be an Opal Admin
  • Be on version 1.1194.0, if you self-host Opal

​
1. Create a Confluence admin API key

To allow Opal to access your Confluence users and groups and grant permission to assign and remove users from groups, you must first create an Admin API key. In admin.atlassian.com, go to Settings > Api Keys > Create API Key. Select the following scopes:
  • read:user:admin
  • read:directory:admin

​
2. Create a Confluence API token

In id.atlassian.com, go to Security > Api Tokens > Create API Tokens. Select the following scopes:
  • read:group:confluence
  • write:group:confluence
  • read:user:confluence

​
2. Create Confluence app in Opal

In Opal, go to Inventory > +App and select Confluence. Name your Confluence app, provide a description, and enter the admin API key and API token you generated in step 1. Enter your Site Domain (e.g. yourcompany for yourcompany.atlassian.net). You will also need your Org ID, which is visible in the URL when you visit admin.atlassian.com: https://admin.atlassian.com/o/<your-org-id>/... And finally the admin email of the admin user that created the admin API key in step 1 After you save the app, you can import groups from … > Import items.
Last modified on August 13, 2026