Visibility & access
Decide who can see your app, widen its visibility through review, and invite users.
Once your app exists, you decide who can see it. AxHub manages access with three mechanisms — visibility, publishing review, and user invites.
A new app starts visible to you only. So if you do nothing, nobody else can see it.
Four visibility levels
Set the visibility in the app console. Pick one of four.
| Visibility | Who can see it |
|---|---|
| Private | The owner and admins only |
| Invite-only | Only users you invite |
| Internal | The whole company — shown in the store |
| External | Anyone, no login required — people outside your company can open it with just the app's URL. Also shown in the store |
Internal stops at your company (tenant). To open the app to people outside, you need an approved External review — until then, it can't be accessed from outside.
Static apps follow the same rule. The old static-only visibility setting is gone, and the app's single visibility setting decides static page access too. Unpublishing doesn't change the visibility — republish and it opens at the previous scope.
Changing visibility (review)
Every change that widens visibility goes through admin review, each time — Private → Invite-only does, and so does Internal → External. Narrowing takes effect immediately, no review needed.
Request publishing
Wait for review
Automatic switch
Even after passing review, you can only change visibility freely in the narrowing direction. Widening takes a new request every time — for example, an app you turned back to Private needs a new review to become Internal again.
For apps with staging enabled, the visibility changes not at approval time but when the new version is promoted to production.
Invite specific people
An Invite-only app is reachable only by people you invited. Invite them in App console → App users tab.
- You can invite at any time, regardless of visibility or deploy status. The person must be an active member of the same company.
- The invite list actually gates access when visibility is Invite-only — with Internal or External, people can enter without an invite.
- You can also remove access from the same tab. To let someone back in, invite them again.
That's the extent of app user invites — inviting new members into the company itself happens in Invite members & share roles.
Data viewing lock
Separately from visibility, who can view the app's data contents in the console (DB rows, files, environment variable values) can be locked on its own via the resource tab's viewing policy (open · owners_only · locked) — once locked, even admins can't see the contents, and view and blocked-view attempts are recorded for 90 days.