Policy types
| Policy | Discoverable | How people join |
|---|---|---|
| Private | No | Only explicit invitations. The workspace does not appear in search or suggestions. |
| Whitelisted | Yes | People with an email address matching a whitelisted domain can join directly. Others need an explicit invitation. |
| Protected | Yes | People with a matching email domain can request access. An owner must approve the request. Others need an explicit invitation. |
Setting your invite policy
Open General settings
Select a policy
Choose a policy that matches how you want people to join your workspace.
- Private
- Whitelisted
- Protected
Only explicit invitations. The workspace does not appear in search or suggestions.
Add email domains (optional)
If using Whitelisted or Protected, add email domains to control who can join. See Email domains below for details.
Only workspace owners can change the invite policy.
Email domains
When using the Whitelisted or Protected policy, you configure a list of allowed email domains. Only people with email addresses matching one of these domains can auto-join (whitelisted) or request access (protected). Everyone else needs an explicit invitation.Managing domains
Add or remove domains at any time from the invite policy settings. Enter a domain (e.g.acme.com) and save — anyone with an @acme.com email address can then join or request access depending on your policy. Changes take effect immediately.
Limits
You can whitelist up to 5 email domains per workspace. If you need to support more domains, consider using the Protected policy so an owner can manually approve requests from any email address.Rotating the invite token
If you need to invalidate existing invitation links, you can rotate your workspace’s invite token. This invalidates all pending invitations and generates a new token.Open General settings
Go to Workspace Settings > General and find the invite token section.
Related articles
- Team Management — invite and manage members.
- Access Management — approve or decline access requests (protected policy).
- Roles & Permissions — what each role can do.