Set what each role can do, decide which assets each person can see and download, and manage how people join, from invitations to single sign-on.
A Team or Business label marks the lowest plan that includes a feature; the others are on every plan, Free included.
Each role sets every permission to Inherit, Allow or Deny, and a child role takes what it does not set from its parent role. When a person holds several roles, a Deny on any of them wins. The Effective view shows what each role ends up with before you save.
Each rule combines user conditions, such as role, with asset filters, such as asset class, and sets visibility, preview type, download sizes and AI editing. A rule can show a watermarked preview, require people to acknowledge a message before downloading, or offer a Request Access button. The Access Tester shows which rule applies.
Access rules set download tiers from Thumbnail (128px) to Original. Images download at the sizes you check, video and audio only when Original is included, and Office documents as a PDF preview, with the editable source only when Original is included. A watermarked preview blocks downloads of non-image files.
Turn on Google, Microsoft or both, and each adds a sign-in button to the login page. You choose whether a first sign-in creates an account and with which role, and an email domain allowlist keeps personal addresses out. Require single sign-on makes SSO the only way in for everyone except administrators.
Access Settings turns invitations and self-registration on or off. With accreditation on, people who sign up fill in a request form and see no assets until an administrator approves them. You can limit registration to your email domains and give new users a default role, or a different role per email domain.
Paste one or many email addresses, pick the role invited users get, add a personal message and set how many days the link stays valid (7 by default). The Invitations page lists each invitation as Pending, Accepted or Cancelled and lets you resend or cancel it.
New sign-ups under accreditation and people asking to reactivate an inactive account land in the User Requests queue with their reason for access and sponsor. Reviewers approve or deny each request, choose the role, can set an account expiry date and can send a message to the requester.
Groups can contain subgroups, so you can mirror departments, teams or regions, and you reorder them by drag and drop. Add or remove members one by one or in bulk, send an email to every member from the group menu, and share assets internally with a whole group.
The Users page lists every account with its role, status, last login and expiry date, with filters by role and status. You can import many users from a CSV file, set an expiry date on which the account is deactivated, and change a status or deactivate an account from its Actions menu.
Before an account is deleted, the Delete User dialog counts what the person owns and asks for a new owner. Assets, collections, share links, access rules and templates move to that person, and links already sent keep working. Personal data such as saved searches is removed. Deactivating instead keeps everything in place.
On any administration screen, it sees the form you have open, explains settings, checks a form before saving and looks up why someone cannot see an asset. Proposed changes, such as a new role or access rule, show before and after values, apply only when you confirm, and can be undone for 24 hours.
Each person picks an interface language in their settings or user menu, and the page switches straight away. Administrators choose which languages are active and the default for new users. Content languages for multilingual fields, translation and search are set separately and cover a wider list.
Choose the default view, sort order, page size, and which fields appear under a card or as list columns. The defaults reach every account that has not changed its own gallery, including new ones and public share visitors. You can also clear everyone's personal preferences so the whole workspace follows them.
System Settings groups workspace parameters, such as upload limits and share link settings, into searchable categories. Changes wait as pending until you save them. The Change History tab lists each previous and new value with who changed it and when, and the configuration exports to a JSON file for backup or migration.
Start free · 30 days of paid features · No card
Create a workspace, upload a few hundred assets and see how search, sharing and approvals work for your team.
