Last updated

Rules & Restrictions

Each API token is authenticated and authorized. API authorization rules come from your Workspace Settings Restriction configuration.

Gift Recipient Restrictions

RestrictionDescription
Workspace MemberSenders are restricted to sending to active Workspace Members
Preloaded RecipientSenders are restricted to sending to active Preloaded Recipients of the Workspace
Authorized DomainSenders are restricted to sending to whitelisted domain recipients

These restrictions can all be enabled individually. Here is the behaviour of each configuration

  • Workspace and Preloaded is an OR logic, as long as recipient belongs to one
  • Authorized Domain, AND logic, recipient email must be also part of the authorized domain
  • Logic: (Workspace || Preloaded Recipient) && Authorized Domain

Restriction Scenario Matrix

Recipient ScenarioWorkspace RecipientPre-loaded RecipientAuthorized Domain RecipientCan Send?
  • Part of Workspace member
  • Part of authorized domain
Enabled (passed)Enabled (failed)Enabled (passed)✅
  • Part of Pre-loaded Recipient list
  • Part of authorized domain
Enabled (failed)Enabled (passed)Enabled (passed)✅
  • Part of Workspace member
  • Not part of authorized domain
Enabled (passed)Enabled (failed)Enabled (failed)❌
  • Part of Pre-loaded Recipient list
  • Not part of authorized domain
Enabled (failed)Enabled (passed)Enabled (failed)❌
  • Part of Workspace member
Enabled (passed)Enabled (failed)Disabled✅
  • Part of Pre-loaded Recipient list
Enabled (failed)Enabled (passed)Disabled✅
  • Not Pre-loaded or Workspace Recipient
Enabled (failed)Enabled (failed)Disabled❌
  • Part of Workspace member
Enabled (passed)DisabledDisabled✅
  • Not Part of Workspace member
Enabled (failed)DisabledDisabled❌
  • Part of Pre-loaded Recipient list
DisabledEnabled (passed)Disabled✅
  • Not Part of Pre-loaded Recipient list
DisabledEnabled (failed)Disabled❌
  • Part of Authorized domain
DisabledDisabledEnabled (passed)✅
  • Not part of Authorized domain
DisabledDisabledEnabled (failed)❌
  • Part of Workspace member
  • Recipient part of Authorized domain
Enabled (passed)DisabledEnabled (passed)✅
  • Not Part of Workspace member
  • Recipient part of Authorized domain
Enabled (failed)DisabledEnabled (passed)❌
  • Part of Workspace member
  • Not Recipient part of Authorized domain
Enabled (passed)DisabledEnabled (failed)❌
  • Not Part of Workspace member
  • Not Recipient part of Authorized domain
Enabled (failed)DisabledEnabled (failed)❌
  • Part of Pre-loaded Recipient list
  • Recipient part of Authorized domain
DisabledEnabled (passed)Enabled (passed)✅
  • Not Part of Pre-loaded Recipient list
  • Recipient part of Authorized domain
DisabledEnabled (failed)Enabled (passed)❌
  • Part of Pre-loaded Recipient list
  • Not Recipient part of Authorized domain
DisabledEnabled (passed)Enabled (failed)❌
  • Not Part of Pre-loaded Recipient list
  • Not Recipient part of Authorized domain
DisabledEnabled (failed)Enabled (failed)❌

Need to generate a token? See here

Previous page
Next page