Policy types
| Policy | Discoverable | How people join |
|---|---|---|
| Private | No | Only explicit invitations. The workspace does not appear in search or suggestions. |
| Whitelisted | Yes | People with an email address matching a whitelisted domain can join directly. Others need an explicit invitation. |
| Protected | Yes | People with a matching email domain can request access. An owner must approve the request. Others need an explicit invitation. |
Setting your invite policy
Open General settings
Go to Workspace Settings > General.
Email domains
You can whitelist up to 5 email domains. Only people with email addresses matching one of these domains can auto-join (whitelisted) or request access (protected). For example, if you whitelistacme.com, anyone with an @acme.com email address can join or request access depending on your policy.
Rotating the invite token
If you need to invalidate existing invitation links, you can rotate your workspace’s invite token from the settings page. This invalidates all pending invitations and generates a new token.Only workspace owners can change the invite policy.
Related articles
- Team Management — invite and manage members.
- Access Management — approve or decline access requests (protected policy).
- Roles & Permissions — what each role can do.