3.4 KiB

Raw Blame History

Guest users

You can add users who should have restricted access to your organization as guests. For example, this may be a good choice for contractors or customers invited to a company's Zulip chat.

Guest users can:

View and send messages in streams they have been added to, including viewing message history in the same way as other stream subscribers.

Guest users cannot:

See private or public streams, unless they have been specifically added to the stream.
Create new streams or user groups.
Add or manage bots.
Add custom emoji.
Invite users to join the organization.

You can also configure other permissions for guest users, such as whether they can:

Move or edit messages.
Notify a large number of users with a wildcard mention.

Zulip Cloud plans have special discounted pricing for guest users.

Configure guest indicator

{start_tabs}

{tab|desktop-web}

{settings_tab|organization-permissions}

Under Guests, toggle Display “(guest)” after names of guest users.

{!save-changes.md!}

{end_tabs}

Configure whether guests can see all other users

{!cloud-plus-only.md!}

You can restrict guests' ability to see other users in the organization. If you do so, guests will be able to see information about other users only in the following cases:

The user belongs to a direct message thread with the guest.
The user is subscribed to one or more streams with the guest.

When a guest cannot see information about a user, the guest's experience will be that:

The user does not appear in the right sidebar.
The user does not appear in typeahead suggestions, e.g., in the compose box and search.
Otherwise, such a user will be displayed as an Unknown user in the Zulip app. For example, messages and reactions from a former subscriber of a stream will be shown as from an Unknown user.
An Unknown user's user card will not display information about that user. However, the guest can still search from all messages send by a particular Unknown user from that user's card.

In practice, guests should rarely encounter content from an Unknown user, unless users in your organization frequently change their stream subscriptions or are deactivated.

The only information guests can access about unknown users via the API is which user IDs exist, and availability updates for each user ID.

!!! tip ""

Self-hosted organizations can disable API access to availability updates
by [configuring](https://zulip.readthedocs.io/en/stable/production/settings.html)
`CAN_ACCESS_ALL_USERS_GROUP_LIMITS_PRESENCE = True`. For performance reasons,
this is recommended only for organizations with up to ~100 users.