# Software factory: Restricting access to your live app

Limit who can sign in to your live app. Project members get in automatically.

---

The **Access** tab on a software factory project sets who can reach the live
app:

| Mode | Who gets in |
|---|---|
| **Open** | Anyone. |
| **Sign-in required** | Anyone with a verified email. |
| **Restricted** | Only the people listed below. |

## Who gets in when the app is restricted

- **Project members**, any role, viewer included. Invite someone to the
  project and they can sign in. No extra step.
- **People in your organization.**
- **Allowed Emails** on the Access tab. Use this for people who are not
  project members, such as customers.
- **Grants** from a connected sale (Kajabi, Stripe, Teachable, ThriveCart) or
  a manual grant.

People always sign in with their own email. A restricted app checks that the
email is on one of these lists after it is verified.

## Removing access

Remove a member from the project and their access ends on their next request.
Remove an email from Allowed Emails, or revoke a grant, and the same applies.

## Before you switch to restricted

Make sure the people who need the app are members or on Allowed Emails. You
and your organization are always admitted.

Related: [Sharing a project and roles](/docs/guides/software-factory-sharing-and-roles).