Private attachments
Private Attachments Sharing
The Private Attachments feature enables external users to upload attachments that are visible only to the uploader on the shared page. This is particularly useful when sharing a page with multiple external users while keeping their uploads confidential.
Example use cases
Sharing a feedback page where each external user can upload documents without exposing them to others.
Allowing clients to privately share design files, contracts, or sensitive documents with you.
Enabling Private Attachments for a Share
Navigate to Apps → External Share → Space Configuration.
Edit the default configuration.
Under Attachment Options, enable View & Add & Private Add.
Option | Description |
|---|---|
Disable | Attachments are not available in shared links. Users cannot view or upload attachments. |
Allow View | All attachments on the page are visible to anyone with access to the shared link. No uploads allowed. |
View & Add | Anyone with access to the link can upload attachments. All uploaded attachments are visible to all viewers. |
View & Add & Private Add | Anyone with access to the link can upload attachments. Private attachments are visible only to the logged-in user who uploaded them. |
After setting up the default configuration, create a share page link.
In the General tab, be sure to check Add private attachments.
If disabled in the parent configuration (Space Configuration default), this option will be locked and cannot be enabled for the share, including via the API.
How It Works
When an external user uploads an attachment on a shared page, a file details message appears when hovering over the file. These details can also be viewed later on the original Confluence page.
Visibility Rules
Refer to the table below for how visibility rules are applied.
Uploader Type | Upload Location | Visible To |
|---|---|---|
Logged-in external user | Shared page | Only the uploader on the shared link (Private) |
Guest (not logged in) | Shared page | Everyone with access to the shared link (Public) |
Confluence user | Original Confluence page | Everyone with access to the shared link (Public) |
How to create an external user account
For Confluence users with page access, all attachments (including private ones) are visible because Confluence does not natively support the private attachments feature.
Delete Their Own Attachments
External users can delete attachments they have uploaded.
Ownership of an attachment is determined by the label added at upload:
external-user-[USER_ID]If an attachment contains this label and matches the currently authenticated external user's ID, the Delete option is available to them.
Not logged-in users can delete attachments uploaded during the same session, similar to comment deletion.
Notifications
Share watchers receive an email notification whenever a private attachment is uploaded.
Notifications currently cannot be disabled for private attachments.
Viewing Attachments in Confluence
On the original Confluence page, any user with page access can view all attachments, including private ones.
Open the Confluence page. There are two ways to view attachments.
A list of attachments will be displayed.
Details shown:
File name
File size
Creator (External Share for Confluence)
Creation date
Labels
external-user(applied to all attachments from any external user.)external-user-[userID](applied only if the external user was logged in.)
Comment
Private attachment uploads get an automatic comment in the format:
Private attachment added by external user: [Full Name] ([Email Address])
Example:Private attachment added by external user: Tianna Daniel (Tiannadaniel@warsawdynamics.com)
Available actions (view, properties, delete)