You are unable to add a guest to your Notion workspace because their email address ends with a domain that appears blocked or unsupported. This usually happens when the workspace has a domain allowlist or guest restriction policy enabled, or when the guest’s email domain is not recognized by Notion’s authentication system. This article explains the exact reasons why Notion rejects a guest based on their email domain and provides step-by-step fixes to resolve the issue.
Key Takeaways: Fixing a Workspace Guest Domain Restriction
- Settings & Members > Settings > Allowlist: Remove or adjust the domain allowlist that blocks the guest’s email domain.
- Settings & Members > People > Guests: Change the guest’s email to a personal address if the workspace disallows guest accounts from public email providers.
- Check workspace plan limits: Ensure the guest count does not exceed the limit for your plan (Free: 1 guest, Plus: 10 guests, Business: 250 guests).
Why Notion Blocks a Guest Based on Email Domain
Notion workspace owners and admins can set up a domain allowlist to restrict which email domains can be used to join the workspace. When this allowlist is active, only users with email addresses from approved domains can be added as members or guests. If the guest’s email domain is not on the allowlist, Notion displays an error message such as “Cannot add guest with this email domain” or “Email domain not allowed.”
Another common cause is the workspace plan’s guest policy. On the Free plan, you can add only one guest. If you already have a guest, adding another guest fails regardless of the domain. On Plus and Business plans, the guest limit is higher but still capped. If the limit is reached, Notion rejects the invitation.
Some public email domains like gmail.com, yahoo.com, or outlook.com may be blocked by the workspace admin to prevent unauthorized access. If the guest uses such a domain and the workspace requires corporate or school domains, the invitation will fail.
Steps to Allow a Guest With a Blocked Email Domain
Follow these steps in order. After each step, try adding the guest again before proceeding to the next step.
- Check the workspace domain allowlist
Go to Settings & Members in the left sidebar. Select Settings from the top navigation bar. Scroll down to Allowlist. If the allowlist is enabled, you will see a list of approved domains. Check whether the guest’s email domain appears there. If it does not, click Add a domain and enter the guest’s domain (for example, example.com). Save the change. Now try sending the guest invitation again. - Disable the allowlist if not needed
If you do not require a domain restriction, you can turn off the allowlist entirely. In Settings & Members > Settings > Allowlist, toggle the switch to the off position. A confirmation dialog appears. Click Turn off allowlist. This removes all domain restrictions. Invite the guest again. - Verify the workspace plan guest limit
Go to Settings & Members > Settings > Plan. Look at the Guest count section. If the number of current guests equals or exceeds the plan limit, you must remove an existing guest or upgrade the workspace plan. To remove a guest, go to Settings & Members > People, find the guest, click the three dots next to their name, and select Remove from workspace. Then invite the new guest. - Change the guest’s email to a different domain
If the workspace requires a specific domain allowlist and the guest cannot obtain an email from an approved domain, ask the guest to create a free email account with a domain that is allowed. For example, if the workspace allows only company.com, the guest can use a company.com email address. Then invite that email address instead. - Check for workspace security policies
Some Notion workspaces have SAML SSO or SCIM provisioning enabled through enterprise plans. These policies can restrict guest access based on domain rules. If your workspace uses SSO, contact your IT admin to add the guest’s domain to the SSO configuration. This step is not available for standard workspace owners.
If Notion Still Refuses to Add the Guest
Guest receives “You don’t have access to this workspace” after accepting
This error occurs when the guest’s email domain is blocked by the workspace’s allowlist, but the invitation was sent before the allowlist was updated. The guest can accept the invitation, but Notion prevents them from entering. To fix this, the workspace owner must add the guest’s domain to the allowlist and then resend the invitation. Alternatively, remove the guest from the workspace and invite them again after updating the allowlist.
“Cannot add guest because workspace is at maximum guest capacity”
This message appears when the workspace has reached its guest limit for the current plan. The Free plan allows 1 guest, Plus allows 10, and Business allows 250. To add more guests, upgrade to a higher plan or remove existing guests. To upgrade, go to Settings & Members > Settings > Plan and click Change plan.
Guest’s email domain is a public provider and workspace blocks public domains
Some workspace admins enable a setting that blocks all public email domains (gmail.com, yahoo.com, outlook.com, etc.). This is not a standard Notion toggle but is enforced through the allowlist. The only way to allow a public domain guest is to add that public domain to the allowlist. For example, add gmail.com to the allowlist. Note that this will allow all users with gmail.com addresses to join the workspace, which may be a security risk.
Notion Guest Limits by Plan
| Plan | Max Guests | Domain Allowlist |
|---|---|---|
| Free | 1 | Not available |
| Plus | 10 | Available |
| Business | 250 | Available |
| Enterprise | Unlimited | Available with SSO |
After making the necessary changes, you can successfully add a guest with a specific email domain to your Notion workspace. First, verify the allowlist setting under Settings & Members > Settings > Allowlist. Then check the guest count against your plan limit. If the issue persists, consider upgrading the workspace plan or adjusting the allowlist to include the needed domain. As an advanced tip, use the Allowlist feature to restrict guest domains to only trusted corporate addresses, which prevents unauthorized access while allowing legitimate collaborators.