Share app credentials across your organization with managed connections

Managed connections let Enterprise admins create app connections that belong to your organization instead of to one person, then share them with the members who need them. Members can use a managed connection immediately without setting up their own credentials. Use managed connections for two main reasons:

• Business continuity: Keep critical Zap workflows running when people join or leave your organization. Because no individual owns a managed connection, onboarding and offboarding members does not cause downtime for the workflows that use it.
• Safe, wide access to key systems: Give more builders access to important data without risking changes to it. Connect a read-only service account for a system like your CRM or a data warehouse, such as Snowflake or Databricks, then share it widely.

To learn about other ways to control app connections, read admin controls for app connections.

Available on plans:

Free

Professional

Team

Enterprise

What are managed connections?

Managed connections are organization-level app connections that admins create and share with their team. When you create a managed connection:

• Members can use the connection in their Zaps without needing the app credentials.
• Members can still create their own personal connections for the same app if they want to.
• You control who has access and can revoke it at any time.
• The connection stays with your organization, not with individual employees.

Managed connections fit two common patterns:

• Operational connections: For example, a Salesforce connection that runs a core sales workflow. Share it only with the people who build and maintain that workflow.
• Read-only connections: For example, a read-only service account for your CRM or a data warehouse such as Snowflake or Databricks. Set read-only permissions in the source app before you connect it, then share the connection widely so more members can use the data while limiting what they can change.

Before you begin

• You must have admin access to your Enterprise account.

Create a managed connection

To create a managed connection from the Connections page:

1. Go to the App Connections page.
2. Click Create connection. A menu will open.
3. Click Managed.
4. Search for and select the app you want to create a managed connection for.
5. Click the app row.
6. Follow the prompts to connect your app account. After connecting, you can name the connection and share it with the people or teams you want to grant access.

Your new managed connection will appear on the Connections page with a security shield icon.

Share a managed connection

After creating a managed connection, share it with members who need it:

1. Go to the App Connections page.
2. Next to the managed connection you want to share, click the menu icon . A dropdown menu will appear.
3. Select Share connection. A dialog box will appear.
4. In the Share with field, search for users by name, email, or team name, then select them.
5. Click Share.

Users you shared the connection with can then select it when building or editing Zap workflows, agents, and other automations that use that app.

Next steps

You have created and shared a managed connection. Members can now use the connection without needing to authenticate the app themselves.

• To enforce that only managed connections can be created for an app, mark the entire app as managed. Learn how to restrict app connections with managed apps.
• To restrict which domains your team can use for OAuth app connections, use allowed domains.
• To audit all connections in your account, export app connection metadata as a CSV.