Skip to main content
Domino enforces App access at the proxy level, before any request reaches your App code. Set it when you publish, or at any time afterwards from the Share App dialog.

​
Choose a sharing mode

Project collaborators can also edit the App, so you add an editor by adding that person as a collaborator on the project that holds the App.
The Share App dialog, showing sharing mode and the list of users with access.

​
Handle access requests

The Share App dialog is where you review pending requests, grant or deny access, and track notifications.
  • Pending requests appear with Accept and Deny options.
  • Access request notifications go out by email and in Domino when someone requests access, naming the requester, the App, the project, and linking to the Share App dialog.
  • Access granted notifications go out by email and in Domino when you grant access, naming the App and linking to its details page.
Domino sends a notification whenever you grant access, whether you accepted a request or assigned access directly.

​
Set an App thumbnail

An App thumbnail helps viewers recognize the App in lists and search results. Apps without a thumbnail show a placeholder. The first time you open a deployed App without a thumbnail, Domino offers to capture the current view. Add a thumbnail? appears in the corner of the App with Capture view and Not now actions. Selecting Capture view triggers the browser’s tab-share prompt; approve it to let Domino grab a single frame of the App and save it as a JPEG thumbnail. The prompt appears only for users who can edit the App, only while the App has no thumbnail, and only in browsers that support the Screen Capture and Region Capture APIs. Dismissing the prompt with Not now or the close button suppresses it for that App on your future visits.

​
Decide whose identity the App uses

By default an App acts with the identity and privileges of its publisher, so every viewer shares the publisher’s permissions when the App reaches Domino resources. Enable Allow App to act for viewers in Domino when the App has to query Datasets under row-level security, start Jobs for a viewer, use Data Sources that need viewer credentials, or take any other action as the viewer. The change takes effect after you restart the App. Only SysAdmins or CloudAdmins can enable this setting.
An App with this setting has full access to Domino on behalf of each viewer, including running Jobs, reaching files and data, and managing Projects. Enable it only for Apps you trust to act responsibly with user-level permissions. App security and identity covers the configuration steps and the security implications.
Last modified on October 16, 2026