Partners
Give another organization's people access to specific apps, with their own admins.
Go to Partners to add an organization and approve its email domains. Each partner has a linked group, a set of members, and an optional identity provider.
What partners can reach
People in a partner organization don't get apps assigned to Everyone. They reach an app in one of two ways:
- Everyone in the partner: assign the app to the partner's linked group, from the app's Assignments tab.
- Chosen members: on the partner's Applications tab, choose an app and select Let partner admins assign it. The partner's admins can then assign it to their own members. Stopping this removes what they assigned.
Policies aimed at Everyone still apply to partners. An employee who's also added to a partner organization loses Everyone's apps too, so put them in a workforce group.
Partner identity providers
A partner's provider can only sign in addresses on the domains you approved. It can create new people, but never signs in to an account that already exists, even one in that organization. Its users can't be mapped into your groups.
Offboarding
An account is suspended and signed out when it leaves its last partner organization, whether by removal, expiry or the partner being deleted. This applies to accounts created by a partner invitation or partner provider. An existing employee who accepted an invitation just loses the organization.
Suspended accounts stay in Directory so the System Log keeps its people. Partner accounts created before this feature aren't marked, so review those by hand after removing them.