Skip to main content

Approved Domains

An approved domain replaces individual invitations for your company. Once the domain is verified, anyone who signs up for Fren One with a verified email address on it joins your workspace automatically as a Member. Auto-join never grants more than Member, and never re-admits someone who has left.

Who can manage domains​

Only the workspace Owner and Admins can add, verify or remove approved domains, on the Approved Domains tab of Team (workspace switcher, Workspace settings, Team). Members don't see the tab.

Adding and verifying a domain​

Verifying proves you control the domain.

  1. Open Team in Settings, go to the Approved Domains tab, and select Add domain.

  2. Enter your company domain, for example acme.com. The domain is added in the Pending DNS state.

  3. Fren One shows you a DNS TXT record to publish. The record name is exactly:

    _frenone.acme.com

    with the verification value Fren One gives you. Add it wherever your domain's DNS is hosted.

  4. Come back and select Verify. If the record is found, the domain flips to Verified and auto-join is live from that moment on.

DNS takes its time

DNS changes can take from a few minutes to a few hours to propagate. If verification fails right after you publish the record, wait for it to propagate and select Verify again. The domain stays pending until verification succeeds.

Domain states​

StateWhat it means
Pending DNSThe domain has been added but the DNS record hasn't been confirmed yet. No one joins automatically while a domain is pending.
VerifiedOwnership is confirmed. Matching sign-ups now join the workspace automatically.

Removing a domain stops future automatic joins. It does not remove anyone who has already joined: take them off the workspace from the Team page if that's what you want.

Public email providers are rejected​

Public email providers such as gmail.com are refused, since approving one would let anyone with an address there join your workspace.

What happens when someone matches​

When a person signs up with a verified email address on an approved domain, they're added to the workspace as a Member:

  • They get standard Member access: they can read the workspace's analytics, Ask AI, reports, inbox, knowledge base, audit log and team roster, but can't change settings, resolve alerts or manage the team. See Who Can Do What for the full matrix.
  • Auto-join never grants Admin, Owner, or a capability grant. If someone needs more, promote them or assign the grant on the Team page afterwards.
  • The email address has to be verified on their Fren One account. An unverified address doesn't match.
Invitations still work, and they win

To bring someone in as an Admin, the Owner can still invite them with that role; the invitation takes precedence over auto-join. Invitations are also how you add people on other email domains.

People who left are not re-admitted​

Leaving a workspace is recorded. Someone who left is not re-added automatically, even if their email matches an approved domain.

To let them back in, send a new invitation or approve a request for access from them. Either one clears the block.

Next steps​

On this page