Sharing

Every app is shared one of three ways, chosen by its owner, listed here from the most restricted to the least.

Setting	Who can open it
Specific users	The users and groups you add. With nobody added, only you, or the members of the group that owns it
Internal	Everyone in the organization, apart from guests
External	Anyone with the link, without signing in

New apps start at Internal.

External is available only while your organization allows public links, which an organization admin controls. Visitors never sign in, so their settings are not saved. If an admin turns public links off, External apps are open to the organization only, until public links are turned back on.

Sharing decides who can open an app, not whether it is listed. Listing is publishing to the catalog, a separate step. Others can find a published Specific users app and request access.

Prefer groups to lists of people

Adding a group keeps access correct as people join and leave. Access given to one person stays exactly as it is when they change teams.

Removing access

Revoking takes effect immediately, even for someone who has the app open. Two caveats. Unpublishing an app from the catalog is not the same as revoking access. And anything already downloaded is on that person’s machine and stays there, since opening an app sends its files to the browser.