--- title: How to manage guest users and approved domains description: "Approved domains help you control who is treated as a trusted user in [Accept Mission](https://www.acceptmission.com/fr/encyclopedia/accept-mission/) and who is treated as a guest user. This improves information security and gives admins more control over access to missions and company data. ##…" url: "https://www.acceptmission.com/fr/knowledge/how-to-manage-guest-users-and-approved-domains/" updated: "2026-04-14" category: Application settings / User and Group Management --- # How to manage guest users and approved domains Approved domains help you control who is treated as a trusted user in [Accept Mission](https://www.acceptmission.com/fr/encyclopedia/accept-mission/) and who is treated as a guest user. This improves information security and gives admins more control over access to missions and company data. ## Why this feature is needed Not every user should have the same level of access. Internal employees usually need broader access based on their role, while external partners, clients, or stakeholders often need limited access to specific missions only. Approved domains make this distinction easier to manage. They allow your company to define which email domains are trusted and which users should be treated as guests by default. ## What this feature is This feature lets admins manage a list of approved email domains in Application Settings. Users from approved domains are treated as trusted users and receive access based on their assigned role and the [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/) access settings. Users from domains that are not approved are treated as guest users. Guest users are usually external participants. They do not automatically get access to [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/) content and can only join missions when an [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/) explicitly invites them. In user management and on idea cards, guest users are marked with **(guest)** next to their name. ## Access level [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/) Prerequisites: - The user must have access to Application Settings. - The user must have permission to manage security settings and user access. - The company must be using domain-based access control. ## Navigation path Navigation path: Application Settings → Security ## How to use this feature The Security page shows the approved domains for your company. These domains represent trusted email domains such as employee domains, department domains, regional office domains, or trusted partner domains. Any user whose email domain is not included in this list is treated as a guest user. Guest users have restricted access and can only participate in missions after receiving a direct invitation. ## Step by step instructions 1. Open **Settings**. 2. Go to the **Organization setup**. 3. Go to **Security**. 4. Review the list of approved domains for your company. 5. Check whether the domains on the list match your trusted internal or partner domains. 6. Review users in user management to identify who is marked as **(guest)**. 7. Update the approved domain list when access rules need to change. 8. Save the changes. ![image](http://www.acceptmission.com/wp-content/uploads/2026/04/image-66-1024x526.png) ## User types and access behavior [Accept Mission](https://www.acceptmission.com/fr/encyclopedia/accept-mission/) distinguishes between approved users and guest users. ### Approved users Approved users are users whose email domain is on the approved domain list. Their access depends on both their assigned role and the access settings of a [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/). - **Super [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/)**: can change user roles and company settings. - **[Admin](https://www.acceptmission.com/fr/encyclopedia/admin/)**: can create missions, invite users, view statistics, and analyze ideas. - **User**: can join missions, share ideas, and interact with other ideas through likes and comments. ### Guest users Guest users are users whose email domain is not on the approved domain list. They are usually external users such as partners, suppliers, clients, or stakeholders. Guest users can only join missions after they have been invited by an [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/). They are marked with **(guest)** behind their name in user management and on idea cards. ## What happens when a domain is approved When you add a domain to the approved domain list, users from that domain are treated as approved users. Their access is then determined by their assigned role. - Users from the domain can access the platform according to their role. - If a [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/) is open, users from approved domains can access that [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/) content. - If a [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/) is private, only invited users can access that [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/). For example, if **acceptmission.com** is an approved domain and you invite **jane@acceptmission.com**, that user is treated as an approved user. If you invite **john@hotmail.com**, that user is treated as a guest user because **hotmail.com** is not on the approved list. ## What happens when a domain is removed When you remove a domain from the approved domain list, all [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/) and user accounts from that domain are automatically downgraded to guest user status. This change is applied when the user logs in again or clicks a button while already logged in. Super [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/) accounts are not automatically downgraded when a domain is removed. This prevents accidental loss of full platform access. If you want to downgrade a Super [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/) from an external domain, first change the role manually. After that, the next login or action will apply the guest status. ## How to add a domain 1. Open **Application Settings → Security**. 2. Click **Add domain**. 3. Enter the domain in plain format, such as **domain.com**, **domain.co.uk**, or **domain.nl**. 4. Do not include the **@** symbol. 5. Save the new domain. After saving, users from that domain will be treated as approved users. ![image](http://www.acceptmission.com/wp-content/uploads/2026/04/image-67-1024x348.png) ## How to invite external partners, clients, or stakeholders If you want to involve external participants in a [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/), you do not need to approve their domain. Instead, invite them as guest users through user management. 1. Open **Application Settings → User management**. 2. Click **Invite user**. 3. Enter the external user’s email address. 4. Send the invitation. These users remain guest users and only get access to the missions they are invited to join. ![image](http://www.acceptmission.com/wp-content/uploads/2026/04/image-68.png) ## Configuration and adjustments Approved domains should reflect the set of email domains your organization trusts for broader access. This may include internal company domains, regional office domains, or selected partner domains when appropriate. Before changing the approved domain list, consider the impact on existing users and [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/) visibility. Removing a domain can reduce access immediately after user activity or the next login. Adding a domain can expand access for all users from that domain based on their assigned roles. It is also important to align this setup with [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/) access settings. Open missions are visible to approved users, while private missions remain invitation-based. ## Practical example - Innovationlands Innovationlands uses **innovationlands.com** as an approved domain for internal employees across its theme park organization. Employees from that domain can access missions based on whether they are assigned as Super [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/), [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/), or User. When Innovationlands starts a co-creation [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/) with an external ride technology partner, the partner users have email addresses from a different domain. Innovationlands does not add that external domain to the approved list. Instead, the [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/) invites the partner contacts individually as guest users through user management. This allows the external users to join the specific [Mission](https://www.acceptmission.com/fr/encyclopedia/mission/) they were invited to, while keeping other missions and company-wide content protected. If Innovationlands later decides to trust a separate regional office domain, the [Admin](https://www.acceptmission.com/fr/encyclopedia/admin/) can add that domain to the approved list so users from that office receive access according to their roles. This setup helps Innovationlands balance participation with access control and keeps external collaboration clearly separated from internal access.