With managed apps, Enterprise admins can designate specific apps as admin-managed, centralizing control over how app connections are created, shared, and deleted. This ensures sensitive credentials stay with the company and prevents unauthorized access to critical business systems.
Available on plans:
Free
Pro
Team
Enterprise
Managed apps is available as early access by request. Request access.
What are managed apps?
Managed apps lets you mark specific apps in your Zapier account as admin-managed. When an app is managed:
- Only admins can create, share, or delete connections for that app.
- Members can still use admin-shared connections in their Zaps, but cannot create their own connections.
- Connections stay within your account when employees leave, preventing connection loss during offboarding.
This is especially useful for apps that use API keys (such as OpenAI) where allowed domain controls are not available.
Managed apps vs. allowed domains
Managed apps and allowed domains are complementary features that work together to give you full control over app connections.
| Managed apps | Allowed domains | |
|---|---|---|
| What it controls | Who can create, share, and delete connections | Which domains can be used for OAuth connections |
| Auth types covered | All authentication types, including API keys | OAuth apps only |
| How it works | Admins centrally manage connections; members use shared connections | Members can create connections, but only to approved domains |
| Best for | API key-based apps (OpenAI, etc.), sensitive credentials, offboarding protection | OAuth apps where users connect personal vs. business accounts (Gmail, Slack, Microsoft) |
Use managed apps when you need to centralize credential control for an app. Use allowed domains when you want members to create their own connections but need to ensure they authenticate with your business' accounts.
Mark an app as managed
To mark an app as managed:
- In the main navigation, click the Admin center icon. You will be redirected to the Admin Center.
- In the Admin Center sidebar, select App connections.
- In the Managed apps field, click +Add managed apps. A search box will appear.
- Search for and select an app that you want to manage. A dialog box will appear.
- Click Save changes.
Once an app is managed, only admins can create new connections for that app. Zapier does not remove existing member-created connections, but members can no longer create new ones.
Create a managed connection
After you mark an app as managed, you can create managed connections for users in your account to use.
- Next to the app you marked as managed, click Add managed connection. A pop up window will open.
- Connect your app account.
- You will be redirected to the App Connections page.
Share managed connections with members
After marking an app as managed, admins should share connections with members who need them:
- Go to the App Connections page.
- Next to the managed app connection you want to share, click the settings icon. A dropdown menu will appear.
- Select Share connection. A dialog box will appear.
- In the Share with field's input box, search for users by name, email, or the name of a team they belong to in your account, then select one.
- Click Share.
Your managed app connections will display a security shield icon. You can see who has access in the People with access field. Users that you shared the managed account with can then select it when building or editing Zaps that use that app.
Additional info
- Managed apps requires an Enterprise plan.
- Managed apps covers all authentication types, including API keys. You can use it with apps like OpenAI that do not use OAuth.
- To restrict which domains are used for OAuth app connections, use Allowed Domains instead or in addition.
- To control which apps your team can use, use app access settings.