People & access

Control who can join your workspace.

Two simple controls — authorised domains and an email allowlist — decide who can register themselves.

The two controls #

Go to People & access → Registration rules. Here you manage two things together: which domains can self-register, and which specific email addresses are allowed.

Registration rules: authorised domains and email allowlist

Authorised domains #

Add your company's email domain(s) so anyone with an address there can register themselves — ideal for letting your staff join without an individual invite.

Email allowlist #

Allow specific, named email addresses to register — useful for a handful of external people (a contractor or partner) without opening up their whole domain.

Rules vs invitations #

Registration rules govern self-service sign-up. If you'd rather add someone directly — on any email address, regardless of these rules — send them an invitation instead.

Rule of thumb: domains for your own staff, the allowlist for named externals, and invitations when you want to add someone specific right now.

What to read next #