Settings - Airtable Enterprise Admin Panel

The Settings page of the Admin Panel offers admins 3 main areas of global control over their organization’s Airtable account; Sharing & Access, Apps & Integrations, and SSO & Authentication. The controls in this section help to ensure the right mix of open creation and collaboration in Airtable to match your organization’s security protocols.

Overview

The Settings page can be accessed by clicking on the Settings option in the navigation sidebar of the Admin Panel. This will open up a page with three categories of settings. Clicking each tab will open up the corresponding options.

Sharing & Access

Invite restrictions

The invites setting allows admins to prevent users from inviting other users from outside of your Enterprise domain.

If you toggle this option on, the “Email domain allowlist” option will appear. To allow a new external domain, click the collapsed down arrow so that it appears up and enter the domain (ex. airtable.com). To remove a previously allowed domain from the list, simply click the “x” icon next to that domain.

Share link restrictions and syncing

The “Share link restrictions” section allows admins to set who can access share links across your organization. Individual share link restrictions can also be set within the base UI. This setting can be adjusted by clicking the “Edit” button. There are three options to choose from, each with separate options specific to them:

1. Unrestricted
2. Restricted
3. Restricted Optional (Available by request)

Unrestricted

With this option, share links are unrestricted in the global settings, but can still be restricted on an individual link basis.

Restricted

With this option, admins can prevent users outside of your domain from accessing shared links. Additional options include:

• Email domain allowlist
• Allow unrestricted access to password-protected shares
• Allow unrestricted access to shared forms

Restricted Optional

With this option, by default, shares are restricted to your domain. But, restrictions can be removed on individual shares. Additional options include:

• Email domain allowlist
• Keep existing shares unrestricted - Note that this option will only appear if your organization changes from “Unrestricted” share links to the “Restricted Optional” setting.

Syncing from shared views

Since our Sync feature uses share links to connect a source base to one or many other bases, we also include an option to allow or disallow the ability for shared views to be synced to other bases.

User group restrictions

The next option under the Sharing category has to do with user groups. Toggling this option on means that only admins can create user groups, meaning that users without admin privileges will be unable to create or modify user groups.

Access

The final option in the Sharing category has to do with user access. Specifically, IP range restrictions can be set to prevent users from accessing Airtable unless they are logged into Airtable from an allowed device and/or network. Currently, only IPv4 protocol is supported.

Apps & Integrations

Applications

There are two categories of Apps in this section of the Settings page: Apps by Airtable and Airtable partners and Third party apps. There are three options in either App category that allow Admins to control which Apps can be used:

• Allow all - Allows users to access and use all third party apps.
• Allow without network access - Disallows third party apps that send data to non-Airtable web servers, unless they’re added to the allowlist.
• Allow none - Disallows all third party apps, unless they’re added to the allowlist

Apps by Airtable and Airtable partners are either created by Airtable or closely vetted apps that we have worked with reputable organizations on building and implementing.

Third party apps are those built and submitted to the Marketplace by third parties, and reviewed for security and functionality by Airtable. They do not include existing “Partner Apps” that Airtable has closely vetted.

When an app is disallowed in your Enterprise, users will still be able to see all apps in the marketplace and click “install,” but will be met with an error message instructing them to contact their administrator when they attempt to run the app.

Development of custom code

When this option is turned on, users will not be able to interact with Airtable features that enable the deployment of custom code into your Enterprise environment. This includes the scripting app, script templates, the scripting action within Automations, as well as custom apps. To enable this functionality for your Enterprise, please review this setting to ensure that it is not disabled.

If an admin does disable this feature for your Enterprise, you can optionally add specific users to an allowlist such that they can use these custom code features. To do so, enter a user’s email address into the space provided, and click the “Allow” button. User’s previously added to the allowlist can be removed by clicking on the “x” next to their email address.

Integrations

The “Disable all integrations in Automations and External Source Sync, unless explicitly allowed” setting provides the option to prevent usage of these features where they may communicate with external services (outside of Airtable) unless explicitly allowed.

An allowlist option will appear if you toggle on the option to “Disable all integrations in Automations, unless explicitly allowed.” You can then “Enable” or “Disable” each service based upon your organization’s security practices.

Additionally, at the bottom of the allowlist, admins will find the option to disable or enable all integrations.

SSO & Authentication

To learn more about configuring your organization’s SSO settings, please visit this support article.