Hello. It appears that the ability for users to remove attachments from a space is controlled exclusively by the status of the confluence-users group permissions. When I set permissions to remove attachments at the individual user level, the setting appears to have no effect. It seems that removing attachments can only be secured at a group level. More granular control is required in this case.