The User List macro from Confluence can cause information leak so it can be disable by administrator. You can use Secured User List macro (SUL) for a replacement to User List macro. It is more secured and convenient for you to use with some extended features.