summaryrefslogtreecommitdiff
path: root/doc/user/group/index.md
diff options
context:
space:
mode:
authorGosia Ksionek <mksionek@gitlab.com>2019-08-16 22:04:21 +0000
committerPaul Slaughter <pslaughter@gitlab.com>2019-08-16 22:04:21 +0000
commit3b32ac567848990094dc4bd4e67a32c6e22b61e8 (patch)
tree9f75f5f25a1f9d1217b74b9727563bb9ccbc3a17 /doc/user/group/index.md
parent0baadb42e2a0a3aecdb0b9792743887998efbcf8 (diff)
downloadgitlab-ce-3b32ac567848990094dc4bd4e67a32c6e22b61e8.tar.gz
Add new table to store email domain
In order to save user preferences regarding user emails allowed to be invited to group Add foreign_key and down method Change adding foreign key Add partial call to view Add changelog entry Fix schema
Diffstat (limited to 'doc/user/group/index.md')
-rw-r--r--doc/user/group/index.md32
1 files changed, 32 insertions, 0 deletions
diff --git a/doc/user/group/index.md b/doc/user/group/index.md
index 43fd0bfd45a..8ebdb760678 100644
--- a/doc/user/group/index.md
+++ b/doc/user/group/index.md
@@ -350,6 +350,38 @@ Restriction currently applies to UI, API access is not restricted.
To avoid accidental lock-out, admins and group owners are are able to access
the group regardless of the IP restriction.
+#### Allowed domain restriction **(PREMIUM ONLY)**
+
+> [Introduced](https://gitlab.com/gitlab-org/gitlab-ee/issues/7297) in
+[GitLab Premium](https://about.gitlab.com/pricing/) 12.2.
+
+You can restrict access to groups and their underlying projects by
+allowing only users with email addresses in particular domains to be added to the group.
+
+Add email domains you want to whitelist and users with emails from different
+domains won't be allowed to be added to this group.
+
+Some domains cannot be restricted. These are the most popular public email domains, such as:
+
+- `gmail.com`
+- `yahoo.com`
+- `hotmail.com`
+- `aol.com`
+- `msn.com`
+- `hotmail.co.uk`
+- `hotmail.fr`
+- `live.com`
+- `outlook.com`
+- `icloud.com`
+
+To enable this feature:
+
+1. Navigate to the group's **Settings > General** page.
+1. Expand the **Permissions, LFS, 2FA** section, and enter domain name into **Restrict membership by email** field.
+1. Click **Save changes**.
+
+This will enable the domain-checking for all new users added to the group from this moment on.
+
#### Group file templates **(PREMIUM)**
Group file templates allow you to share a set of templates for common file