You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Update navigation to scroll to Domains under Workspaces, fix breadcrumb and structure, convert permission settings to task-based headings, and remove redundant sections.
Co-authored-by: Cursor <cursoragent@cursor.com>
description: Learn how to create domain groups to apply different rules to different domain members.
3
+
description: Learn how to create and manage domain groups (domain security groups) to apply different permission rules to different sets of domain members.
4
4
internalScope: Audience is Domain Admins. Covers creating and managing Domain Groups (Domain Security Groups) and what each group permission controls. Does not cover workspace-level rules configuration or troubleshooting user access issues.
Domain Groups, also called Domain Security Groups, let you apply different permissions and rules to different sets of domain members. This is useful when different teams or roles need different permissions, such as employees versus managers.
11
15
16
+
Your domain must be verified before you can create Domain Groups. Learn how to [claim and verify a domain](https://help.expensify.com/articles/new-expensify/domains/Claim-and-Verify-a-Domain).
17
+
12
18
---
13
19
14
20
## Who can use Domain Groups
@@ -19,69 +25,49 @@ Only **Domain Admins** can create and manage Domain Groups.
19
25
20
26
## Where to find Domain Groups
21
27
22
-
1. Click the navigation tabs (on the left on web, on the bottom on mobile).
28
+
1. Click the navigation tabs (on the left on web, on the bottom on mobile).
23
29
2. Click **Workspaces**.
24
-
3. Choose your domain.
25
-
4. Click **Groups**.
30
+
3. Scroll below your workspaces list to find **Domains**.
31
+
4. Click your domain.
32
+
5. Click **Groups**.
26
33
27
34
---
28
35
29
36
## How to create a Domain Group
30
37
31
-
To create a Domain Group:
38
+
Follow the steps in **Where to find Domain Groups** above, then:
32
39
33
-
1. From your domain page, click **Groups**.
34
-
2. Click **Create group**.
35
-
3. Configure the group settings.
36
-
4. Click **Save**.
40
+
1. Click **Create group**.
41
+
2. Configure the group settings and permissions (see **What Domain Group permission settings control** below).
42
+
3. Click **Save**.
37
43
38
44
---
39
45
40
-
## What each Domain Group permission setting controls
41
-
42
46
## What Domain Group permission settings control
43
47
44
-
**Default group**
48
+
## What the Default group setting does
45
49
46
50
Enable this if you want all new domain members to be automatically added to this group. Setting a Default Group ensures new employees receive the correct permissions immediately.
47
51
48
-
**Strictly enforce expense workspace rules**
52
+
## What Strictly enforce expense workspace rules does
49
53
50
54
Use this to ensure workspace-level rules are followed before a report is submitted. Enabling Strictly enforce expense workspace rules ensures workspace rule compliance and prevents incomplete submissions.
51
55
52
-
**Restrict primary contact method selection**
56
+
## What Restrict primary contact method selection does
53
57
54
58
Enable this to require members to use their company email address to access Expensify. Restricting primary contact method selection prevents members from using a personal email to access their Expensify account.
55
59
56
-
**Restrict expense workspace creation/removal**
60
+
## What Restrict expense workspace creation/removal does
57
61
58
62
Enable this to prevent members from creating or removing workspaces. Restrict expense workspace creation/removal ensures centralized workspace management and prevents employees from creating additional workspaces outside the company’s approved setup.
59
63
60
-
**Preferred workspace**
64
+
## What Preferred workspace does
61
65
62
66
Set a preferred workspace to automatically route a group’s expenses and reports to a specific workspace. This is helpful if different members use different workspaces and you want to reduce manual workspace selection. If you have multiple workspaces, use this to route a group’s expenses to the right workspace by default.
63
67
64
-
**Expensify Card preferred workspace**
68
+
## What Expensify Card preferred workspace does
65
69
66
-
If a preferred workspace is set, enable this option to automatically post **Expensify Card** transactions to that workspace. This ensures transactions are routed correctly and reconciliation is simplified.
67
-
68
-
---
69
-
70
-
## How to enforce workspace rules for domain members
71
-
72
-
Create a **Domain Group** and enable **Strictly enforce expense workspace rules** to prevent report submission unless all workspace rules are met. This helps automate compliance and reduce back-and-forth corrections.
73
-
74
-
## How to prevent members from creating workspaces
75
-
76
-
Enable **Restrict expense workspace creation/removal** to block unauthorized workspace creation. This keeps workspace structure controlled and consistent.
77
-
78
-
## How to require employees to use their company email
79
-
80
-
Enable **Restrict primary contact method selection** to ensure members use their company email address instead of a personal email. This improves domain security and access control.
81
-
82
-
## How to automatically route expenses to a Preferred workspace
83
-
84
-
Set a **Preferred workspace** to automatically route expenses and reports for that group. If using the Expensify Card, enable **Expensify Card preferred workspace** to route card transactions as well.
70
+
If a preferred workspace is set, enable this option to automatically post **Expensify Card** transactions to that workspace. This ensures transactions are routed correctly and reconciliation is simplified.
85
71
86
72
---
87
73
@@ -102,3 +88,5 @@ New domain members are automatically assigned to that group, ensuring they recei
102
88
## Does Preferred workspace move existing expenses?
103
89
104
90
No. Preferred workspace applies to new expenses and reports going forward.
0 commit comments