Restricting email notifications for your organization

To prevent organization information from leaking into personal email accounts, you can restrict the domains where members can receive email notifications about organization activity.

Who can use this feature?

Organization owners can restrict email notifications for an organization.

In this article

About email restrictions

When restricted email notifications are enabled in an organization, members can only use an email address associated with a verified or approved domain to receive email notifications about organization activity. For more information, see Verifying or approving a domain for your organization.

Note

To restrict email notifications, your organization must use GitHub Enterprise Cloud. For more information about how you can try GitHub Enterprise Cloud for free, see Setting up a trial of GitHub Enterprise Cloud.

To continue receiving email notifications after you enable restrictions, members must verify any email addresses within domains that you verify or approve. For more information, see "Verifying your email address."

Outside collaborators are not subject to restrictions on email notifications for verified or approved domains. For more information about outside collaborators, see Roles in an organization.

If your organization is owned by an enterprise account, organization members will be able to receive notifications from any domains verified or approved for the enterprise account, in addition to any domains verified or approved for the organization. For more information, see Verifying or approving a domain for your enterprise.

Restricting email notifications

Before you can restrict email notifications for your organization, you must verify or approve at least one domain for the organization, or an enterprise owner must have verified or approved at least one domain for the enterprise account. For more information about verifying and approving domains for an organization, see Verifying or approving a domain for your organization.

Users will not be notified when you enable email restrictions. It is your responsibility to inform users that, in the future, they will only receive email notifications related to your organization if they've added an email address belonging to a verified or approved domain to their account settings.

  1. In the upper-right corner of GitHub, select your profile photo, then click Your organizations.
  2. Next to the organization, click Settings.
  3. In the "Security" section of the sidebar, click Verified and approved domains.
  4. Under "Notification preferences", select Restrict email notifications to only approved or verified domains.
  5. Click Save.