> ## Documentation Index
> Fetch the complete documentation index at: https://enterprise-docs.dify.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Control

> Control who can access your published web apps, from specific members to fully public.

Web app access controls who can use your published applications. By default, new apps are restricted to specific team members, so you choose exactly who gets access.

<Info>
  Only Workspace Owner, Admin, and Editor roles can create and publish web apps.
</Info>

## Access Permission Types

Configure access from the Studio → Web App Access Permissions, or from the Publish panel when editing your app.

Three access levels are available:

### Only Members Within the Enterprise

Any member of your workspace can access the app. Users must authenticate through your organization's SSO, as configured by your enterprise administrator.

Members can access the app through the direct URL or the workspace Explorer page.

### Specific Groups or Members

**Default setting for new apps.** Restricts access to chosen groups or individual members within your workspace. Ideal for department-specific tools or sensitive data applications.

<Warning>
  Without any groups or members selected, nobody can access your app, including you.
</Warning>

Configure access by groups or individuals:

<Tabs>
  <Tab title="By Groups">
    Add entire groups for automatic permission management. When someone joins the group, they get app access. When they leave, access is revoked.
  </Tab>

  <Tab title="By Individuals">
    Grant access to specific people. They keep access even if removed from related groups. Other group members cannot access the app.
  </Tab>
</Tabs>

<Info>
  Workspace Owners, Admins, and Editors can always edit any app in the workspace. However, they still need to be explicitly added to the access list to use the published web app.
</Info>

### Anyone

**No authentication required.** Anyone with the URL can access your app immediately. Use for public demos, customer tools, or open resources.

## Find Your Apps

Team members see all accessible apps in the workspace Explorer page:

<Frame>
  ![Accessible apps in the workspace Explorer page](https://assets-docs.dify.ai/2025/04/44a22b6f66f80eae805a307388e5b3e9.png)
</Frame>

## Common Questions

<AccordionGroup>
  <Accordion title="Do permission changes require republishing?">
    No. Changes apply immediately. However, users with active sessions may need to wait for their session to expire before new restrictions take effect.
  </Accordion>

  <Accordion title="How do I check who has access?">
    View current permissions in the **Who can access web app** section of your app's publish settings.
  </Accordion>

  <Accordion title="Which permission level should I choose?">
    * **Only Members Within the Enterprise**: Internal collaboration tools
    * **Specific Groups or Members**: Department-specific or sensitive apps
    * **Anyone**: Public demos (use carefully)
  </Accordion>

  <Accordion title="Do web app permissions affect API access?">
    No. API access is controlled separately by API keys. Changing web app permissions doesn't affect existing API functionality.
  </Accordion>
</AccordionGroup>