Domain restriction

Domain restriction limits who can join and remain in your Organization based on their email domain. It is available on the Business plan and above.

This is useful for keeping an Organization to your company's own accounts — for example, allowing only @example.com addresses.

How it works

The Organization setting allowed_email_domains holds a list of permitted domains:

• Empty (default): no restriction — anyone you invite can join.
• Non-empty: only users whose email matches one of the listed domains can join or remain a member.

The restriction is enforced when members join (through invitations) and is checked against existing members when you change the setting.

Setting it up

allowed_email_domains is configured by an Organization owner or admin in Organization settings. A few rules apply:

• Setting it requires a plan that includes domain restriction; submitting it on a lower plan is rejected.
• If any existing member has an email outside the listed domains, the change is rejected and the conflicting members are returned, so you can resolve them first.

Example

Restrict membership to a single company domain:

{
  "allowed_email_domains": ["example.com"]
}

Allow more than one domain:

{
  "allowed_email_domains": ["example.com", "example.co.jp"]
}

Related

• Organization settings — the allowed_email_domains field and its validation rules.
• Roles and permissions — who can change Organization settings.
• Audit logs — settings changes are recorded.