Domain dependence for user management actions
Admins reserve the right to manage users in their organization. However, there are certain restrictions imposed on admins when it comes to resetting a user's password or MFA and few other actions. These restrictions are dependent on the domain of the user's email address.
What is a domain name?
A domain name refers to the address of a website. In simple terms, if your house is a website, then the house address is the domain. When someone buys a domain, they become the domain owner. It's important for the owner to get their domain verified in Zoho One, in order to confirm their identity.
Domains can be broadly classified into verified and unverified domains.
Verified vs. unverified domains
Let's look at a scenario to explain the difference between these types of domain.
Assume that Walter has bought the domain name zylker.com for his company. Next, he hires employees for his company, with each employee getting an email address with the domain zylker.com, such as megan@zylker.com and james@zylker.com. Since Walter owns the domain, he can verify it in Zoho One. Once it is verified, Walter can reset any employee's password.
Now, for some additional work, Walter hires external consultants. These external consultants will have corporate and personal email addresses of their own, for example, leonard@zohomail.com or antony@gmail.com. When Walter adds them to his organization in Zoho One, the domain of their email addresses cannot be verified in Zoho One since Walter doesn't own either of the domains. In such cases, Walter will not be able to reset their password.
Whose password can an admin reset?
Admins can reset the passwords of those users who have email addresses with verified domains. If a particular user has an email address with an unverified domain, they will have to reset their password themselves by signing into Zoho Accounts.
What are all the actions that are restricted for admins to perform?
To strengthen account security and safeguard user management settings, we are imposing domain-based restrictions for user account-focused admin actions in Zoho One. The actions are as follows:
- Reset MFA
- Disable MFA
- Generate backup code for a user
- Create Mailbox
- Manage Email Address
This enhancement will prevent admins from performing these actions on users with unverified domains. This is to prevent unauthorized recovery or access attempts by ensuring that these actions are limited to users belonging to trusted, verified domains.
What is the need for domain verification restriction?
By having domain verification restrictions, only the domain owner gets the authority to perform user action. If you own a domain and got it verified in Zoho One, you can perform all the user actions under that domain. However, if there are external users or users with personal emails, they will have to reset their passwords/generate backup code themselves for identification and security reasons.
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Reset password for users
Overview If a user forgets their password or can't sign in to Zoho One, you can reset their password to help them regain access. After the reset, the user will receive an email containing a one-time password, which they can use to set a new password. ...Reset MFA for users
Note: You cannot reset MFA for external users. However, you can send them an invitation to join your organization, after which you can manage their MFA settings. For users with unverified domains, add and verify their domains to reset MFA. ...Convert external user to organization user
A user in Zoho One is considered to be external if their Zoho account is associated with another organization. Converting an external user as your organization user will allow you to edit, update their account details. You can also manage their ...User classification
User types A user type defines the extent to which a user has consented to become a member of a particular organization. The three user types include Pending users, Confirmed users and External users. Pending users A user added with an email address ...Quick actions
What are Quick Actions? An admin's role is vital in an organization, but there are some parts of the job that are repetitive and mundane. The everyday routine of adding users, assigning groups, and dealing with forgotten passwords can soon begin to ...
New to Zoho LandingPage?
Zoho LandingPage Resources