# Domain Reservation

Domain Reservation restricts user access within your organization to approved email domains, ensuring only trusted users can be added as internal members.

When your organization is created, the email domain used during signup becomes the reserved domain for your tenant. This domain defines who can be added as internal users and helps prevent unauthorized access from external parties.

:::info[]
If you sign up using **@mycompany.com** for your email address, this domain will be reserved to your tenant.
:::

## How Domain Reservation Works

### Internal Users (Restricted by Domain)
Domain Reservation enforces strict rules around who can be added to your organization. Only users with email addresses matching your reserved domain can be added as:
- Security Admins
- End Users

### External Users (Not Restricted)
Users with email addresses outside of your reserved domain **cannot** be added as internal users.

**Guests**  
  - Can be invited from any domain  
  - Limited access based on what is shared with them  

**Auditors**  
  - Can be added from any domain  
  - Designed for compliance and audit workflows  

---

## Why Domain Reservation Matters
Domain Reservation helps secure your organization by:
- Preventing unauthorized users from being added as internal members  
- Ensuring only trusted, company-owned email accounts have full access  
- Reducing the risk of accidental or malicious access  
- Supporting compliance requirements for controlled user access