Plan requirement
| Subscription | Suite Growth or higher, Support Professional or higher |
| Access | Owner |
The control is an approved email domain, not a list of named admins. Check this before you plan around it, because it changes what the restriction can and cannot do for you.
Two things come before the setting itself. Data exports are not enabled by default in any account, and switching them on is a request rather than a toggle: ask pluscloud support. So the first control is whether the capability exists in your account at all.
Setting the approved domain
- In Admin Center, click Account in the sidebar, then select Tools > Reports.
- Click the Export tab if the export options are not showing.
- Set Approved email domain.
- Tell the admins who no longer qualify, and how to request an export.
The account owner's own email domain is the approved domain by default, and the account owner is who changes it.
What the setting does
With a domain entered, admins must be signed in with an address on that domain to use the data export option. Leave the field blank and the restriction is off: any admin can export.
It reaches further than the export button. An admin whose secondary email address is on a domain that is not allowlisted cannot open the Reports page in Admin Center at all. If somebody reports that page missing, this setting is the first place to look.
What it cannot do
It does not distinguish between admins inside the approved domain. Everyone who signs in on that domain keeps the capability, so this is a boundary against outside and contractor accounts rather than a way to pick two trusted people.
Where you genuinely need per-person control, the lever is who is an admin at all, not this field.
Why it is worth doing
Every other permission governs what somebody can change. This one governs whether they can take a complete copy of your customer data out of the platform in a few clicks.
It is also a capability a role can do its work without, which makes restricting it cheap where nobody needs it.
Tell people the route
Somebody who needs an export and cannot run one will find another way, usually a worse one: an Explore export, or a colleague running it for them. Say who to ask, so the restriction shapes behaviour rather than being worked around.
Most requests are not really for an export
They are for a number, or a list. A report or a scheduled dashboard answers those better and leaves no file behind, so ask what the export is for before running one.
Review after any change
People change roles and leave, and domains change in a merger or a rebrand. Check this whenever your admin list or your email domain changes, which is exactly when it is easy to forget.
Comments
0 comments
Article is closed for comments.