Restriction approach
The Restriction Approach section (admin console) defines how classification governs who can open and edit pages.
Two global modes
Selective restriction (default)
- Page banner still reflects the strictest classification on the page.
- Space View groups are copied onto the page so members can open it.
- Banner group members get full access (view, edit, all macros).
- Other viewers see the page but inline macros they lack clearance for render empty.
Use when: teams collaborate in one space but not everyone is cleared for every paragraph.
Most restrictive
- Page restrictions include only the banner classification group (+ admins).
- Space default View groups are not copied.
- Users must be in the banner group to open the page at all.
- No separate macro filtering — page access is all-or-nothing.
Use when: every classified page should be fully gated by its banner marking.
Permission options
Additional settings in the same section:
| Option | Description |
|---|---|
| Allow partial view | Related to selective viewing behavior |
| Use full classification | Full vs partial components in group names |
| Classification components | Which parts (level, compartment, release) appear in group names |
| Missing group actions | Notify admin and/or reject save when group missing |
Interaction with space restriction
If a space is classification-restricted, selective viewing is disabled for that space — behavior matches most restrictive plus the space AND rule.
See Restricted spaces.