diff options
author | Gosia Ksionek <mksionek@gitlab.com> | 2019-08-16 22:04:21 +0000 |
---|---|---|
committer | Paul Slaughter <pslaughter@gitlab.com> | 2019-08-16 22:04:21 +0000 |
commit | 3b32ac567848990094dc4bd4e67a32c6e22b61e8 (patch) | |
tree | 9f75f5f25a1f9d1217b74b9727563bb9ccbc3a17 /doc/user/group | |
parent | 0baadb42e2a0a3aecdb0b9792743887998efbcf8 (diff) | |
download | gitlab-ce-3b32ac567848990094dc4bd4e67a32c6e22b61e8.tar.gz |
Add new table to store email domain
In order to save user preferences regarding
user emails allowed to be invited to group
Add foreign_key and down method
Change adding foreign key
Add partial call to view
Add changelog entry
Fix schema
Diffstat (limited to 'doc/user/group')
-rw-r--r-- | doc/user/group/index.md | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/doc/user/group/index.md b/doc/user/group/index.md index 43fd0bfd45a..8ebdb760678 100644 --- a/doc/user/group/index.md +++ b/doc/user/group/index.md @@ -350,6 +350,38 @@ Restriction currently applies to UI, API access is not restricted. To avoid accidental lock-out, admins and group owners are are able to access the group regardless of the IP restriction. +#### Allowed domain restriction **(PREMIUM ONLY)** + +> [Introduced](https://gitlab.com/gitlab-org/gitlab-ee/issues/7297) in +[GitLab Premium](https://about.gitlab.com/pricing/) 12.2. + +You can restrict access to groups and their underlying projects by +allowing only users with email addresses in particular domains to be added to the group. + +Add email domains you want to whitelist and users with emails from different +domains won't be allowed to be added to this group. + +Some domains cannot be restricted. These are the most popular public email domains, such as: + +- `gmail.com` +- `yahoo.com` +- `hotmail.com` +- `aol.com` +- `msn.com` +- `hotmail.co.uk` +- `hotmail.fr` +- `live.com` +- `outlook.com` +- `icloud.com` + +To enable this feature: + +1. Navigate to the group's **Settings > General** page. +1. Expand the **Permissions, LFS, 2FA** section, and enter domain name into **Restrict membership by email** field. +1. Click **Save changes**. + +This will enable the domain-checking for all new users added to the group from this moment on. + #### Group file templates **(PREMIUM)** Group file templates allow you to share a set of templates for common file |