External users not updated with removal of auto-join domain

💬 App Building
1

I recently noticed external-users are now cheaper than end-users, so to keep things organized I'm trying to add the 'External User' group to users that were added via auto-join domain. I've removed the domain from the auto-join list so that future users from that domain will be added as External-User, but I'm unable to update already the already existing users which ends in being billed more than we were expected

Side Note: I had a gmail account I was using as an Admin but it was also marked as an External-User and it seems like we might have been charged twice for this (once for 'Standard-User' and once for 'External-User')?

3

Hi @bobthebear,

Let me check internally with out governance team about how to move users over from external-user to end-users.

For account specifics related to billing, I would advise emailing our support team at support@retool.com so they can help with checking on if there was any double charges and resolving that if there was!

4

Hi @bobthebear,

Just heard back from the governance team.

They want to know if the domain for these users listed under settings > external as an external domain?

They said that that list is the source of truth (not auto join). Updating it should re-partition the existing users as well.

1 Like
5

Ah I see, indeed I did still have the domain listed under Settings -> External Apps -> Internal Domain List

After removing the domain from here also all users were correctly updated.

So just to make sure I have this correct:

  • if a domain is in the Internal Domain list

    • if a domain is not in the Auto Join list
      • new users must request access and are manually approved
      • user is not given External User attribute
    • if a domain is in the Auto Join list
      • new users must request access and are auto-approved
      • user is not given Eternal User attribute

  • if a domain is not in the Internal Domain list

    • if a domain is not in the Auto Join list
      • new users must request access and are manually approved
      • user is given External User attribute
    • if a domain is in the Auto Join list
      • new users must request access and are auto approved
      • user is given External User attribute
1 Like
6

@bobthebear,

Great break down of the logic flow!

From a quick look at our docs here that should be correct.

Let me double check with the Governance team to be 100% certain as I would like to add that to our docs to better help users understand when they need to do a specific action and when they do not.

1 Like
7

Hi @bobthebear,

Can confirm your logic flow is correct, your gov team also responded saying:

"This looks correct. if you read through the different cases outlined, the two settings are disjoint from each other and don't conflict" :+1:

1 Like