Configure app access settings for your Enterprise account

You can use app access settings to control which apps members of your Enterprise account can use in Zap workflows and Agents. New Enterprise accounts use allowed apps by default. Some accounts created before October 5, 2026 use the legacy restricted apps setting instead. By the end of this tutorial, you'll have configured your app access settings to allow or restrict apps for your account members.

Available on plans:

Free

Professional

Team

Enterprise

Before you begin

  • You must be an admin, super admin, or owner of your account to enable this feature.
  • Your account must have one or more verified domains.
  • Familiarity with app access policies is helpful to understand the difference between restricted and allowed apps.

Select your app access setting

  1. In the left sidebar on the Zapier home page, click Admin Center.
  2. In the left sidebar under the Governance section, select App permissions.
    • Enterprise accounts created on or after October 5, 2026 display the Allowed apps page. Accounts created before October 5, 2026 display the setting already in use.
    • You cannot switch between settings in the Admin Center. Switching is temporarily unavailable while Zapier builds a new, unified app access experience.
Allow an app Restrict an app

Allow apps

When you add an allowed app, all members of your account can use it. Members cannot use any app that is not in your allowed list.

Add an allowed app

  1. In the left sidebar on the Zapier home page, click Admin Center.
  2. In the left sidebar under the Governance section, select App permissions.
  3. Click Add app. You'll be redirected to the Add allowed app page.
  4. In the Search for an app field, search for and select the app you want to allow.
  5. Click Add allowed app.
    • Zapier may show a notification:
      • If Zap workflows in your account use the app, Zapier held those steps during Zap runs. Review the app connections and affected Zap workflows on your Apps page.
      • If the app is already on your allowed list.

Zapier then redirects you to the allowance page for the app. By default, everyone in your account can use the app.

Remove an allowed app

  1. On the Allowed apps page, select the app. You'll be redirected to the allowed page for that app.
  2. In the top right, click Delete app. A dialog box will appear.
  3. Click Yes, delete to confirm.

(Optional) Prohibit specific triggers and actions

By default, everyone in your account can use all triggers and actions in an allowed app. You can limit which triggers and actions, including API requests, members can use, as well as add exceptions for specific members and teams.

  1. On the Allowed apps page, select the app that you want to add an exemption to. You'll be redirected to the allowed page for that app.
  2. Select a specific user, team, or Everyone. You'll be redirected to the Actions page for the app.
  3. Select the checkbox next to each trigger or action you want to restrict. A menu bar will appear at the bottom of the page.
    • Triggers are listed with a Read operation.
  4. Select Restrict. A dialog box will appear.
  5. Click Restrict to confirm.

(Optional) Remove prohibitions to specific triggers and actions

  1. On the Allowed apps page, select the app that you want to add an exemption to. You'll be redirected to the allowed page for that app.
  2. Select a specific user, team, or Everyone. You'll be redirected to the Actions page for the app.
  3. Select the checkbox next to each trigger or action you want to allow. A menu bar will appear at the bottom of the page.
  4. Select Allow. A dialog box will appear.
  5. Click Allow to confirm.
Example
  • If you add Quickbooks to your allowed apps list, you can add an exception for your accounting team. This will allow only your accounting team to have access to the app. The rest of your account will not be allowed to use the app.
  • Juana is a member of the Sales team in her company's Zapier account. The Sales team is allowed to use the Create a lead action in Salesforce. If an admin removes Juana's permission to use the Create a lead action, she will still be allowed to use the action because it's permitted for the Sales team, which she is a member of.

Limitations

  • You can only enable either restricted apps or allowed apps settings. You cannot enable both.
  • You cannot switch settings in the Admin Center. Learn more about switching policies.
  • Members of your account will still be able to connect their app accounts and use them to set up triggers and actions (including loading or creating test records), but they will not be able to publish and run the Zap. Agents that use a prohibited app may also be impacted.
  • You can only add an exception for one member or team at a time.
  • By default, these settings are account-wide. Account admins, super admins, and owners will be affected by these limits unless you add exceptions.

App limitations

Trigger and action prohibitions

  • Zapier will default to allowing the broadest permissions for an app.
    • This may override a specific restricted trigger or action setting you've enabled.

Plan limitations

  • If your account is on a legacy Company plan with 200,000 tasks or less, you cannot restrict triggers or actions.
  • If you downgrade your Enterprise account, you will lose access to this feature.
Note

App access controls are changing. Zapier is replacing the choice between allowed apps and restricted apps with a single Apps page where you sort apps into control levels, manage them in bulk, and set a safe default for anything you have not reviewed. Switching between allowed apps and restricted apps is temporarily unavailable while this work is in progress. To request early access to the new experience, submit an Enterprise feature request and select Advanced enterprise app controls. Learn more about switching between app access policies.

Next steps

You've configured app access settings for your Enterprise account.

Was this article helpful?
1 out of 1 found this helpful