Organization policy

An organization's admins can set rules that apply to everyone working in it through Crewdesk. The server enforces them: the client can't send its own, and a forbidden write is refused even after a yes.

Setting	What it controls	Default
Highest permission mode	The most freedom anyone may choose (ask, accept_edits, workspace or free)	free
Forbidden actions	App actions that never run, by app or app/action pattern	none
Always-ask actions	App actions that always go on a card	none
Deploy card	Whether every deploy asks, or only production ones	production
Own domains, outside addresses	Writes to addresses outside the organization's domains: allow, card, or forbid	allow
Bulk threshold	How many recipients make a write destructive	10
Writes per turn	Writes one turn may run without a card; past it, each asks	no cap
Writes per day	Writes one user may run in 24 hours; past it, each is refused	no cap

The defaults change nothing: no action forbidden, every mode allowed, no caps.

Everyone can read their organization's policy, in Settings or with crewdesk policy. Each change is recorded. To set it, see Setting the org policy.