Approve requests to join your workspace

Control who can join your workspace when someone signs in using an email address on one of your verified domains — approval is always manual, so nobody is added without a decision.

#Overview

• Matching a verified domain proves someone has an address at your company, not that they should have access.
• Members can see every domain, DNS record, server and monitor in your workspace, so InfraNest never adds people automatically.
• You choose what happens for each sign-in connection, then approve or deny requests as they come in.

#Choose what a sign-in does

1. Go to Settings → Sign-in.
2. Find the sign-in connection you want to configure, and look for When someone signs in with a verified domain.
3. Choose one of the two options:
   • Do nothing — the default. People need an invitation to join.
   • Ask an admin — people can request to join, and an administrator decides.
4. Your choice applies going forward. Anyone currently waiting appears under Requests to join on the same page, and administrators get a notification.

NoteThe Requests to join section only appears when somebody is actually waiting.

#Approve or deny a request

1. Open Settings → Sign-in and find the Requests to join section.
2. Review each request — it shows who asked and when.
3. Choose Approve to add the person as a member, using the connection's default role.
4. Choose Deny to turn them away. Signing in again won't put them back in the queue — your decision stands until you invite them yourself.

TipNew members always land on a role without write or management permissions. If someone needs more access, raise their role afterwards in Settings → Members — it's safer to grant more access later than to notice too late that someone had too much.

#Troubleshooting

I can't approve a request. Requests still arrive even when your plan is full on seats — you just can't approve until a seat frees up. Trying anyway tells you the member limit is reached. The request stays in the queue, so you can free a seat and come back, or decide later.

What does the person see while they wait? They sign in successfully and keep whatever access they already had elsewhere. They simply aren't in your workspace until you approve. If they had no account before, they get their own personal workspace in the meantime, so they're never left staring at an empty app.