Sharing

Each Deployable has one sharing scope, set by its owner.

Scope	Who can open it	In the catalog
Only me	You alone, or the owning group’s members	no
Specific people and groups	Whoever is on the list	yes, with a request
Everyone in the organization	Every member	yes
Anyone with the link	Anyone the link reaches	yes

Only me is where a Deployable starts. It stays off the catalog entirely.

Specific people and groups is the everyday scope. Only the list can open it, but everyone in the organization sees it in the catalog and can request access, which the owner approves or denies.

Everyone in the organization covers genuinely company-wide tools. It doesn’t include guests, who only ever see what has been shared with them directly.

Anyone with the link is the one scope that reaches outside. It is available only while your organization permits public links; an admin can switch that off for everyone.

Prefer groups to lists of people

Adding a group keeps access correct as people join and leave. Individual grants don’t change when someone moves teams.

Removing access

Revoking takes effect immediately, including for a session already open. Two caveats: a tool leaving the catalog is not the same as revoking, and anything already loaded has already left, since the page ships its files to the browser.