Skip to content
Console →
Website →
Asking an AI? Paste this URL https://keelson.dev/llms.txt

Domains and join policies

For larger organizations, you can let people with a company email address join without sending each person an invitation. Share a join link internally, or ask people to request access from the console’s Join or Create a Workspace page.

Owners and Admins configure joining and approve requests. This feature is available on Team plans and above.

MethodWhen the person becomes a member
Open a join link shared internallyAfter signing in with an eligible email address and selecting Join. No administrator approval is needed
Request access from the Join or Create a Workspace pageWhen an Owner or Admin approves the request

Both methods assign the App User role. An Owner or Admin can change it afterward.

Eligibility is determined by the email domain: the part after @. For example, the domain of [email protected] is example.com.

  • The Owner or Admin configuring this feature must have the same email domain as the workspace creator.
  • Join links cannot be enabled for public email domains such as Gmail or Outlook.com.
  • The same domain can be used in multiple workspaces, for example one per department.

Enabling a join link automatically registers the email domain of the Owner or Admin who enables it. You do not need to add the domain first. Check registered domains in Settings → Security → Access Control. If you add a domain manually, it must also match both your email domain and the workspace creator’s.

  1. Open Settings → Security → Team Join Link.
  2. Enable the join link.
  3. Copy the URL and share it in an internal chat or information page.

A person with an eligible address opens the link, signs in, and selects Join to become a member immediately. Check the Members page to confirm they have joined.

When the join link is enabled, the workspace also appears on the Join or Create a Workspace page for people signed in with the eligible email domain. Selecting Request to join sends a request to Owners and Admins.

Approve or reject requests under Pending Join Requests in Settings → Security. Submitting a request does not make someone a member; they cannot access apps until approved.

A join link is for joining the workspace. Share the URLs of the apps you want people to use separately, because App Users cannot see the console’s app list.

The apps they can use after joining depend on app permissions.

  • Reset link invalidates the current URL and creates a new one. Use this when you want to change where the link is shared.
  • Disabling the join link returns the workspace to invitation-only joining. Existing members are not affected.

In the configuration details, joining methods are called join policies. The policy follows whether the join link is enabled; there is no separate policy selector.

PolicyBehavior
Invite only (default)People join through individual invitations from an Owner or Admin
Join linkPeople with an eligible email domain can join through the link without approval. Requests from the Join or Create a Workspace page require administrator approval