How to Add Domains in Allowlist in Google Workspace 2026 Easily

The allowlist is an organization-wide setting, so it can only be changed by someone with admin rights on the Workspace account — not a regular user login. Head to your account sign-in and enter the admin credentials for the domain you manage. If you're already signed into a personal Google account in the same browser, switch accounts first rather than trying to layer the admin session on top, since Workspace admin actions need to run under the admin identity specifically.

Once you're signed in, click the grid icon in the top right of any Google page to open the Google apps menu, then look for Admin in the list — it's separate from the everyday apps like Gmail and Drive and only shows up for accounts with admin privileges. If you don't see it, the account you're signed into doesn't have admin access and you'll need to switch to one that does. Clicking through takes you into the Admin console, which is where every Workspace-wide setting, including the allowlist, actually lives.

Inside the Admin console, the allowlist sits under the security settings rather than anywhere near Gmail or Apps, which is the main reason people struggle to find it. Look for a page specifically labeled for allowlisted domains — it's scoped to letting your organization collaborate with another Google Workspace domain in certain services, not general spam whitelisting for any sender. On a fresh setup you'll see a banner explaining that the domain you add must itself be running Google Workspace, plus an empty table showing zero domains allowlisted so far.

Click Add domain and type in the exact domain name of the organization you want to trust — no "www," no email address, just the domain itself, such as partnercompany.com. Double-check the spelling before saving, since a typo here does nothing useful and won't get caught by any validation beyond basic format checks. Save the entry and it takes effect right away across your organization; there's no propagation delay to wait out.

Return to the allowlist page after saving and confirm the domain now appears in the table with the count updated from zero to one. It's worth doing a real test at this point — have someone at the allowlisted domain send a message and confirm it lands normally rather than getting flagged, since a silent typo in the domain name would otherwise go unnoticed until someone complains about missing mail.

An allowlist is only as safe as the domains sitting on it, so it's worth revisiting every few months rather than treating it as a set-and-forget setting. Remove entries for partnerships that have ended, and resist the temptation to allowlist a domain just to make a one-off delivery problem go away — every domain on this list bypasses filtering that would otherwise catch spoofed or malicious mail, so keep it limited to organizations you actively work with.