Can a confluence subtree be more permissive than the root? Good idea! So we put the subtree T to the very root of S, as a sibling of S/Home. Tried it, works. The only problem is that entering the space goes to S/Home, so the external group Y gets "No permission" which is not a very warm welcome. Can I trick Confluence into using a different home page (S/T) for the group Y?