Security
Control who can join your workspace with email domain restrictions
Security
The Security tab lets admins restrict workspace membership to users with specific email domains. This is essential for enterprise teams handling sensitive compliance data who need to ensure only authorised personnel from approved organisations can join.
Actions
View Security Settings Admin
Review current security restrictions on your workspace.
- Open Workspace Settings → Security
- View the list of allowed email domains
Only admins can access the Security tab.
Add an Allowed Domain Admin
Restrict invites to specific email domains.
Open the Security tab
Go to Workspace Settings → Security
Enter a domain
In the "Allowed Email Domains" section, type a domain in the input field (e.g., company.com)
Add it
Press Enter or click Add Domain. The domain appears as a badge in the list and is saved immediately.
Examples of valid domains:
company.comteam.orgengineering.company.com
Don't include the @ symbol — just enter the domain part. If you type @company.com, the @ is automatically stripped.
Remove an Allowed Domain Admin
Remove a specific domain restriction, or clear all domains to allow any email.
- Open Workspace Settings → Security
- Find the domain you want to remove
- Click the × button on the domain badge
- The change is saved immediately
How Domain Restrictions Work
When you configure allowed domains, new invites are checked against the list:
| Scenario | With Restrictions | Without Restrictions |
|---|---|---|
Invite user@allowed.com | ✅ Allowed | ✅ Allowed |
Invite user@other.com | ❌ Blocked | ✅ Allowed |
When the domain list is empty, anyone with any email address can be invited — there are no restrictions. This is the default for new workspaces.
Domain comparison is case-insensitive. Adding Company.com is the same as company.com.
Invite Restrictions
Currently, only workspace admins can invite new members. This cannot be changed and ensures proper control over who joins your workspace.
Empty State
When no domains are configured, the Security tab shows:
No domain restrictions — Anyone with a valid email can be invited
This is suitable for small teams or open workspaces that don't need domain-level access control.
FAQ
Related
- Managing Members — Invite members within domain restrictions
- Activity Logs — See security-related events including domain changes
- Overview — All workspace settings tabs