Skip to main content
Aby
February 3, 2021

Admin/owner restrict authority to invite

  • February 3, 2021
  • 57 replies
  • 8867 views

Is there an option to restrict WHO can invite others to collaborate in an organization?
OR
Is there an option to completely restrict someone outside an organization to access a file, even if he is invited by someone within ? (Admin pains)

Suggestion 1 : Some options for admin to restrict/allow others to invite others.
Suggestion 2 : Some option to restrict organization level files from outside access (even with invite)
Suggestion 3 : A new “FILE_SHARE” Webhook to catch the file share event and do some workarounds to avoid this problem.

57 replies

Gleb
Power Member
August 3, 2021

done!

_Hal
August 3, 2021

Great, Thanks @Gleb .

_Hal
August 3, 2021

Notion’s share panel is what I really want.

Satoru_Kawahara
New Member
August 16, 2021

I also +1 for this.

  • I don’t want Guests to invite anyone.
  • I don’t want anyone to upgrade without admin’s approval.
Peter_Andrews
August 19, 2021

This issue negates literally all security since security settings are not applied to guests. Even if your organization is set so you MUST use SAML to log in, guests don’t have to follow that rule, and guests can self promote, and can invite other guests, and create teams, and do anything they want and there is no way to stop this.

Again, let me reiterate THIS LITERALLY NEGATES ALL SECURITY. GUESTS ARE NOT EFFECTED BY YOUR SECURITY SETTINGS BUT STILL HAVE FULL EDIT ACCESS.

JoshS-PS
New Member
August 20, 2021

It also appears that while I can turn off public link sharing, I can’t turn off the ability to publish a document publicly to the community site.

Hal_Lee
New Member
August 26, 2021

Another disaster week, I spend almost one week to remove almost 150 unintended editors from our organization one by one, have to figure out which one really need editor access. The love for figma is gradually fading away. 😩

Sad, very sad.

ReneLopez
September 16, 2021

So there seems to be a solution for this, at least in the professional plan:

Captura de Pantalla 2021-09-16 a la(s) 1.51.05 p.m.

If you uncheck that option, then viewers can no longer invite people without your authorization. But the problem then is that developers can no longer export assets 🤦‍♂️

Hal_Lee
New Member
October 9, 2021

This won’t solve it. You can’t ask everyone to uncheck it in an org with thousands of members, don’t even say so many members set their files as everyone can edit (this is the main reason that adds some unintended editors). 🤣

Brian_Saunders
New Participant
October 9, 2021

All the problems mentioned in this thread are big issues for me as well as an organization administrator. Wish they would be addressed.