> For the complete documentation index, see [llms.txt](https://guides.mangoapps.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://guides.mangoapps.com/admin-guide/user-provisioning-and-management/guest-users.md).

# Guest Users

### Overview

MangoApps provides flexible user management through domain-wide permissions and team-level member types. This guide explains the capabilities of Guest Users, the differences between Guest Users and Network Users, and the steps to create and manage Guest Users.

***

### **Domain-Wide User Permission Levels**

MangoApps supports three main types of domain user permissions:

#### 1. **Creator/Administrator (Network Admin)**

* Full access to all content, users, groups, and projects.
* Manages administrative settings and permissions.

#### **2. Network User**

* Regular users without administrative privileges.
* Access can be limited to internal email domains or extended to external addresses by the Domain Administrator.
* Can be promoted to Team Admins and/or given limited administrative permissions within the domain.

#### 3. **Guest User**

* Restricted to specific groups and projects they are explicitly invited to.
* Cannot access domain-wide content or communications outside their assigned groups/projects.

{% hint style="warning" %}
Permissions at the domain level do not override or apply to permissions at the team level. These operate independently. For more information on Admin Roles, click [here](https://guides.mangoapps.com/admin-guide/user-provisioning-and-management/admin-roles).
{% endhint %}

***

### **Capabilities of Guest Users**

Guest Users are restricted members who interact within the confines of specific groups or projects.

* **Visibility:** Can only view the groups and projects they are invited to.
* **Communication:** Can only communicate with team members within their groups/projects.
* **Domain Access:** Cannot search or view content outside of their groups/projects.
* **Email Domain:** Must have an external email domain (different from the domain owner’s).

***

### **Key Differences Between Guest and Network Users**

| Feature                    | Guest User                             | Network User              |
| -------------------------- | -------------------------------------- | ------------------------- |
| **Domain-Wide Access**     | No                                     | Yes                       |
| **Colleague Following**    | Not Allowed                            | Allowed                   |
| **External Email Support** | Required                               | Optional                  |
| **Communication Scope**    | Restricted to assigned groups/projects | Domain-wide               |
| **Removal Rights**         | Removable by group/project teammates   | Only by Admins            |
| **Team Membership**        | Can join multiple teams                | Can join and create teams |

***

### **FAQs About Guest Users**

#### **Can Guest Users interact with others outside their groups?**

No, Guest Users are limited to the groups or projects they belong to.

#### **Can Guest Users access private messages?**

Yes, if they are not part of any group, they still retain access to their private messages.
