Skip to main content

Control User Signup And Invites

Use Access to control which email domains can join your company in NEXT and which domains non-admin users can invite.

These rules help you onboard users faster while still limiting access to domains your company trusts. NEXT can add another level of security by restricting self signup and non-admin invites to verified email addresses at your approved domains.

Admins can still invite anyone, but non-admin users can only invite colleagues whose email domains are on the approved list. This helps prevent users from inviting external people outside your organization and reinforces that your data is accessed through your managed corporate domains.

Before You Start​

  • You must have the role Admin in the tenant.
  • You should know which email domains are approved for your organization.

Steps​

  1. Open Settings > Tenant > Access.
  2. In User access rules, enter the email domains that should be allowed for self signup and non-admin invites.
  3. Click outside the field to save the updated domain list.

When Should I Use This?​

  • When employees should be able to join without waiting for a manual invite.
  • When non-admin users should only be able to invite coworkers from company-owned domains.
  • When you want one shared rule for both joining and inviting.

Tips​

  • Use only trusted business domains.
  • Use a wildcard such as *.example.com when you want to allow subdomains. For example, *.example.com allows joe@us.example.com and joe@fr.example.com.
  • Remove old domains if your company changes brands or subsidiaries.

Example​

This video shows how to control signup and invite access by setting allowed email domains.

FAQ​

Q: Does this affect both self signup and user invites?​

Yes. The allowed domains control who can self sign up and which domains non-admin users can invite. Admins can still invite users from any domain.

Q: Does self signup work for any email address?​

No. Only addresses from the domains you allow can self sign up.

Q: Can I allow subdomains with a wildcard?​

Yes. You can use a wildcard such as *.example.com to allow email addresses from matching subdomains, such as joe@us.example.com and joe@fr.example.com.