Set who can open an app

The Access tab

Everything is on the app's Access tab (or over MCP with set_app_access, set_app_audience and share_app_externally).

• The access list: people and groups who may open the app. Anyone else who signs in can ask for access, and the owner approves.
• Shown in the catalog to: who sees the app's card. No groups means everybody.
• Public app: a card above the access list, one button each way. A public app opens for anyone on the internet without sign-in. The publish wizard also asks this on its security step.
• Public pages: path prefixes that open without sign-in, for example a webhook or a page for a partner.
• Share links: for one person outside the company, for a limited time. A label, an expiry date and, on by default, view only. Links expire by themselves (90 days at most by default) and can be revoked in one click.

For an app that holds sensitive personal data, only an admin can open it to outsiders. See sensitive apps.

Roles on the platform

What someone may do on the platform itself is decided by their role: Admin, Publisher (make and share apps) and Member (use what you are given). Admin, Roles makes more, and Admin, Groups, Roles hands a role to everyone in a group. A group can never hand out the admin role.