Guest User Accounts
Guest user accounts are password authenticated and allow you to enforce strictly limited access to your organization. Among other security-based limitations, guest users cannot view or request access to content outside of their assigned teams. Guest user accounts are recommended when working with external vendors.
Before guest users can be invited to your organization, this feature must be enabled by an admin.
Requirements
- You must be assigned the Admin account type.
- Guest user accounts do not work if your organization uses SCIM for team and user provisioning.
Guest User Permissions
Guest users can be assigned to any non-Admin account type.
Guest users are unique in that they only have access to workspaces associated with teams to which they are assigned. Unlike standard users, guest users have the following restrictions:
- Cannot access workspaces shared with All Members.
- Are not automatically granted access to folders and documents shared with All Members.
- Cannot request access to documents.
- Can only interact with users assigned to the same team(s).
- Cannot access the Sigma REST API.
All guest users automatically have access to the Sigma Sample Connection.
Guest User Authentication
Guest user accounts are always password authenticated, regardless of whether the organization uses an identity provider (e.g. Okta, Azure) for other users.
If your organization transitions to SCIM for team and user provisioning, guest user accounts will no longer work and guest users will be unable to log in to Sigma.
Allow Guest Users Accounts in Your Organization
- Open your Admin Portal.
- Click Authentication to open the authentication page.
- In the Authentication Method & Options section, click Edit button.
- Turn on the Allow Guest Access toggle.
- Click Save.
Invite a Guest User to Your Organization
-
Open the user menu. Click your profile icon, located in the top right corner of the screen.
-
In the menu, select Invite users.
The Invite people to your Sigma organization modal opens.
-
For Enter email addresses to invite new users, enter one or more email addresses. If you invite multiple users, separate each email address with a comma.
-
Select the Invite as guest users checkbox.
-
From the Select Account Type dropdown, select an account type.
-
(Optional) For Add a custom message, enter a message to include in the emailed invitation.
-
(Optional) For Assign Teams, select one or more teams to assign the user to. Guest users only have access to workspaces associated with their assigned teams.
-
Click Invite.
Disable guest user accounts
To disable guest user accounts across your organization, do the following. When you disable this feature, all existing guest accounts are automatically deactivated.
To disable an individual guest user, see Deactivate users.
- Open the Admin portal.
- Click Authentication to open the authentication page.
- In the Authentication Method & Options section, click Edit.
- Turn on the Allow Guest Access toggle.
- Click Save.
Updated 5 days ago
