Room access is set on each recipient link, not on the Room as a whole. One Room can have several links for different audiences and access needs.
No email required
Anyone holding the link can enter immediately. This is the lowest-friction mode and the easiest to forward.
Use it for material that is safe to circulate and for recipients who should not face an access step.
Ask for email
The viewer enters an email address and enters immediately. The address is self-reported and is not verified.
Use Ask for lead capture or for a light indication of who entered an open Room. Do not use it to protect confidential content.
Verify email
The viewer enters any email address and receives a one-time access link. This proves control of the inbox but does not require the address to be on a list first.
Use Verify when you want stronger identity confidence while allowing the recipient to forward the Room to another real stakeholder.
Restricted
Only specific email addresses, eligible company domains, or both can request access. Every admitted viewer verifies by one-time email link.
An allowed domain such as acme.com admits addresses at that exact company domain. Add a subdomain separately when it should also qualify. Generic providers such as Gmail should be added as individual addresses rather than broad domain rules.
Restricted verifies inbox control and allowlist membership. It does not prove the viewer’s employment, legal name, or decision authority.
Compare the choices
| Room entry | What the viewer does | Identity confidence | Can an unlisted person use a forwarded link? |
|---|---|---|---|
| No email required | Opens the URL | Link context only | Yes |
| Ask for email | Types an address | Self-reported | Yes |
| Verify email | Confirms a one-time email link | Controls the entered inbox | Yes, after verifying their own inbox |
| Restricted | Uses an allowed address and verifies | Controls an allowed inbox | No |
Access mode is fixed per link
Choose the mode when creating the Room link. To change from Open to Restricted or the reverse, create a new recipient link. This avoids leaving old sessions and in-flight access emails in an ambiguous state.
You can still edit the Restricted allowlist, label, expiration, notifications, discussions, and download controls where the product allows it.