Skip to main content

Registration domains allowlist (Platform admins)

Goal: Control which email domains are permitted for self-service sign-up across the platform.

Who can do this: Platform administrators only.

:::info This is different from team invite domain restrictions

This allowlist controls platform-wide self-service registration. Per-company team invite domain restrictions are managed separately in Team invites & permissions.

:::

Before you start​

  • Coordinate with your Security team before adding new domains — check for typosquatting variants of customer or partner domains.
  • Communicate any changes to customers who are running pilots — they may hit errors if their domain isn't on the list when signup is expected.

Add a domain​

  1. Go to Portfolio access → /admin/domain-allowlist in your browser (or use the sidebar link if available).
  2. The page loads with the current list of allowed domains.
  3. Enter the domain name (e.g. acme.com) in the input field.
  4. Click the Add button and wait for the list to refresh.

Remove a domain​

  1. Find the domain row in the list.
  2. Click the trash icon on that row.
  3. Confirm the removal.

What happens next​

If a user is trying to register with an email domain that isn't on this list, they'll see a sign-up error. Add their domain here and ask them to try again.