Restrict invitations by email domain

The email domain allowlist controls which email addresses can be invited to your organization. It applies to future invitations only, so changing it never removes or changes an existing member.

Only an Organization Admin can view or change this setting.

Choose the allowed domains

Open Settings, select Access Control, then find Email Domain Allowlist.

An empty list means Unrestricted - any email domain may be invited. Add one or more domains to restrict invitations to those domains.

EngiProse removes surrounding spaces and saves domains in lowercase. Do not include @, https://, a path, or an email address. Duplicate entries are ignored.

Remove a restriction

Select the remove control on a domain chip, then select Save. Removing one domain narrows who can be invited and saves without a widening warning.

Removing every domain returns the organization to unrestricted invitations. Because that allows any email domain again, EngiProse asks you to confirm the change before it is saved.

Understand the confirmation

EngiProse asks for confirmation when a save changes who may be invited:

• Setting the first allowed domains changes the organization from unrestricted invitations to the listed domains.
• Adding a domain allows invitations from that additional domain.
• Clearing the whole list allows invitations from every domain.

All Organization Admins are notified when one of these confirmed changes is saved. The page also marks unsaved changes until the save succeeds.

What happens during an invitation

When the allowlist contains domains, a new invitation or membership addition must use an email address from one of them. An address from another domain is refused before the membership is created.

If a legitimate invite is refused, an Organization Admin can add the needed domain under Access Control, save it, and then try the invitation again.