> ## Documentation Index
> Fetch the complete documentation index at: https://docs.domino.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Operate Apps

> Operate a deployed Domino App: share it, start and stop it, roll back to an earlier version, monitor usage and resources, read logs, and troubleshoot.

After a version is deployed, you control who can open the App, which version runs, and how it behaves. Domino checks access at its proxy before a request reaches your code, and records usage, resource consumption, and logs for every instance.

The examples use the **Synthetic Transaction Review** App you [deployed](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/deploy.md).

## Share the App

Domino checks access at its proxy, so your App code doesn't need its own sign-in. Three permissions are separate:

* **Viewing** decides who can open the App. The sharing mode sets it.
* **Discovering** decides who sees the App in App lists and can request access.
* **Editing** comes from the Project, not the App. Project collaborators can edit every App in the Project, so to add an editor, add a collaborator.

[Identity](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/identity.md) decides what each viewer sees inside the App. Sharing an App URL doesn't bypass any of these controls.

### Choose who can view the App

Set access with **Share** in the App list, or in the **Access and sharing** settings when you publish.

![The Share App dialog, showing sharing mode and the list of users with access.](https://mintcdn.com/dominodatalab-e871cec4/smP26ixb6WHD0bEi/images/6.2/apps/share-app.png?fit=max\&auto=format\&n=smP26ixb6WHD0bEi\&q=85\&s=8a2efe4f3b82f420620809f3d7db37aa)

| Mode | Who can view | Use it for |
| :- | :- | :- |
| **Restricted** | The users and organizations you list, plus Project collaborators. | Apps that handle sensitive data or serve one team. |
| **Anyone in Domino** | Anyone with a Domino account. The dialog shows no user management options. | Internal tools every employee should reach. |

The transaction review App shows transaction details, so keep it **Restricted** and add the compliance team's organization. Domino notifies each user by email and in Domino with a link to the App.

### Let others find the App

In **Restricted** mode, turn on **Globally discoverable** to let every Domino user find the App and request access. Discovery lets people who need the App ask for it without you widening access for everyone. You get an email and an in-app notification for each request, and you accept or deny it in the **Share App** dialog.

Review permissions from time to time. Remove viewers who no longer need access, and move an App from **Anyone in Domino** to **Restricted** if its data becomes sensitive.

## Start, stop, and roll back

Start or stop the selected version from the App's details page. Neither creates a version. A running App uses its Hardware Tier until you stop it, so stop Apps nobody uses. Stopping removes the pod, and files the App wrote to local disk are lost. See [Persist what the App writes](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps#persist-what-the-app-writes).

### Roll back to a previous version

Every version pins its code, environment, and data configuration, so you back out a bad release by starting an older version instead of reverting code and republishing. On the App's details page, start the version that last worked. Domino stops the running instance and starts the selected version exactly as it was published. Then open the App and check the behavior that broke.

Dataset contents and external systems aren't versioned, so the rolled-back version reads their current state.

To fix the problem, [reopen the App in a Workspace](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/develop-and-test#update-an-app-viewers-already-use), test the fix in App Preview, and publish a new version.

## Track usage

Open the App's details page and select **Usage**.

![Accessing the Usage Tab for Apps](https://mintcdn.com/dominodatalab-e871cec4/LnFGSZ2o5jkxCrWN/images/6.1/user-guide/apps-usage-tab.png?fit=max\&auto=format\&n=LnFGSZ2o5jkxCrWN\&q=85\&s=79e124da5cd1baab57a56c1f1795d6c0)

The tab counts HTTP requests over the past 30 days, compares them with the previous 30 days, and charts them by day, for all versions or one. Steady growth means viewers rely on the App. Spikes usually mean demos, training sessions, or automation. A drop usually means an error, a stopped App, or lost interest. Check the logs or ask viewers before you act on a change.

The top of the tab shows the selected instance's status, deployed timestamp, uptime, and who started it.

## Monitor resource consumption

The **Runtime metrics** card on the **Monitoring** tab charts CPU and memory for the selected instance over the last 15 days. Use the instance selector to view another start of the same version.

![Monitor App resource consumption](https://mintcdn.com/dominodatalab-e871cec4/LnFGSZ2o5jkxCrWN/images/6.1/user-guide/apps-monitor-consumption.png?fit=max\&auto=format\&n=LnFGSZ2o5jkxCrWN\&q=85\&s=4dde0e7606e7159c3c7fb11e8ea874f1)

* If usage stays above 80%, move to a larger tier or turn on [autoscaling](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/deploy.md#configure-autoscaling).
* Spikes usually line up with data loads or heavy visualizations. In the transaction review App, a spike on every **Review** points at the endpoint call. Cache scores or batch the calls.
* A gradual increase can mean a memory leak.

Domino keeps resource data for 15 days. For longer retention or alerting, ask your administrator about forwarding metrics to your organization's monitoring system.

## Read logs

Domino keeps logs for every instance, during and after it runs. Read them on the App details page or download them. Look at the App's standard output and error stream first. It holds the stack traces, print statements, and framework messages your code produces. Domino also keeps platform-side logs for each instance, such as routing and scheduling messages, and packages them in a [support bundle](#download-a-support-bundle).

Logs are organized by version. A version can start many times, so use the instance selector to pick one run. A new version starts its logs fresh. With autoscaling, Domino interleaves logs from every pod into one log.

## Audit activity

The [Audit Trail](https://docs.domino.ai/6.3/platform-capabilities/features/governance/audit-trail) records version start and stop events and access changes. Access and visibility events carry the matching resource type, such as `App Access Granted`, `App Visibility Changed`, and `App Discoverability Changed`. The [Audit Trail glossary](https://docs.domino.ai/6.3/platform-capabilities/features/governance/audit-trail/audit-trail-glossary.md) lists every event.

## Troubleshoot

Most App problems show up as a failed start, a blank or broken page, or resources that don't load. Start from the symptom, then use the logs or a support bundle to confirm the cause.

| Symptom | What to check |
| :- | :- |
| App fails to start | The entry point must start a server on `0.0.0.0`, port `8888`. |
| No output in the App logs, or the App never reaches **Running** | Download a [support bundle](#download-a-support-bundle) and share it with your administrator or Domino Support. |
| Blank page, `404`, or `502` after a restart, or Dash assets fail to load | The App builds its base path from the Project name or run ID. Read it from `DOMINO_RUN_HOST_PATH` instead. See [Migrate an App that builds its own path](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/develop-and-test#migrate-an-app-that-builds-its-own-path). |
| Unexpected behavior after a deploy | Compare the running version's configuration and Version Notes with the last good version, then [start the older version](#roll-back-to-a-previous-version) to confirm. |
| Fonts, APIs, or embedded pages fail to load | A content security policy (CSP) or iframe restriction blocks them. See [Allow external resources](#allow-external-resources). |
| Proxy or routing errors | Use the **domino-debug-proxy** [Domino Skill](https://docs.domino.ai/6.3/platform-capabilities/features/coding-assistants/domino-skills.md) in a Workspace. |

Check the logs after every Compute Environment or dependency change.

### Download a support bundle

The support bundle is an archive of everything Domino recorded about one instance: the App's logs, the platform-side logs for routing, scheduling, and execution, the runtime configuration, and the resource history. Download it from the logs panel on the App details page, where your deployment allows support bundle downloads, and attach it when you ask your administrator or Domino Support for help.

### Allow external resources

If your deployment enforces iframe restrictions or a content security policy, an administrator allows external fonts, APIs, and embedded pages by adding their URLs to the allowlist.

**1. Find the blocked URLs**

Run the App and open the browser's developer console, for example with `Cmd+Option+J` or `Ctrl+Shift+J` in Chrome. Look for errors such as:

```shell theme={null}
Refused to connect to https://example.com because it violates the Content Security Policy.
```

**2. Send the list to your administrator**

Include every blocked URL the App depends on.

**3. Restart the App**

After the allowlist is updated, stop and start the App.

## Related

* [Develop and test](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/develop-and-test#update-an-app-viewers-already-use): Fix a problem in a Workspace and publish a new version.
* [Deploy to production](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/deploy.md#size-and-scale-an-app): Change Hardware Tiers and autoscaling.
* [Identity](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/identity.md): Read the viewer's identity, or act as the viewer.


## Related topics

- [Agents](https://docs.domino.ai/6.3/platform-capabilities/features/agents/index.md)
- [Apps](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/index.md)
- [Identity for Apps](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/identity.md)
- [Deploy Apps to production](https://docs.domino.ai/6.3/platform-capabilities/core-concepts/apps/deploy.md)