> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.moveworks.com/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.moveworks.com/_mcp/server.

# Launch Permissions

# Launch Audience

Launch rules define who can use a published plugin. You can base rules on:

* User roles, such as full-time employees
* Departments, such as HR or engineering
* Conditions, such as weekdays only

For example, you can limit a plugin to one department or exclude contractors.

> *Tip: Test with a small group before rolling out broadly.*

## How It Works

When you launch a plugin, choose one of two modes.

### 1. List Mode (Simple Access Control)

![](https://files.readme.io/fe6b77d3f6be11bace8ef05731feb81bcdc908fce0020f05f7dd93a3fdb588a6-CleanShot_2025-04-08_at_15.22.39.png)

Use List Mode for simple email-based access.

1. **Allow selected users**: enter the email addresses that should have access, separated by commas. Example: `jane.doe@example.com, john.smith@example.com`.
2. **Allow all users**: give everyone in your organization access.
3. **Deny selected users**: enter the email addresses to block. Everyone else will have access.
4. **Launch to no one**: switch to **Advanced Mode** and enter `False`.

### 2. Advanced Mode (Custom DSL Rules)

![](https://files.readme.io/9b3357ad71dd7b74f4c20e79abf8c785031deb83cea773cec76c0c82cec2bf65-CleanShot_2025-04-08_at_15.24.04.png)

Use Advanced Mode for rules based on user attributes, such as department, location, or role. Advanced Mode uses [Moveworks DSL](moveworks-dsl-reference).

1. Allow only HR staff in New York: `user.department == "HR" AND user.location == "New York"`
2. Allow only managers: `user.role == "manager"`

See the [User Attribute Reference](user-attribute-reference) for available fields.

# Data Settings

Data settings control logging and analytics for the plugin.

![](https://files.readme.io/c4f1338b3f3e5eab8e9c6c0c59d6bb68eb7666348603005ba8fc77d44759ebf9-CleanShot_2025-04-08_at_15.29.40.png)

Choose from three options:

1. **Standard Log Redaction (always on)**: redacts personally identifiable information (PII) and credentials from logs.
2. **Strict Log Redaction**: redacts more potentially sensitive data. Logs may be less useful for debugging.
3. **Enable Analytics**: tracks plugin usage in Moveworks analytics dashboards. Keep this off during testing, then turn it on for production.

## Analytics

When you build and test a new plugin, keep analytics off so testing does not affect production analytics.

For classic plugins, analytics appear on the [Agent Studio Analytics dashboard](https://developer.moveworks.com/creator-studio/analytics/overview/) only when analytics are enabled.

Plugins built with the Agentic Automation Engine appear in Assistant Insights.

## Data Redaction Policy

Set the log redaction policy for your plugin. See our [log redaction documentation](/agent-studio/development-and-testing/logs#log-redaction) for details.

# Launch Configuration Troubleshooting

## Error Code: 13120

There are validation errors in the email allow list. Make sure each email is formatted properly and that there are no duplicates.

Check each email in the list.

* For small email lists (\< 20), use `Ctrl+F` or `Cmd+F` to search for each email.
* For larger lists (> 20), paste the emails into Google Sheets or Excel and remove duplicates.

### Duplicate Emails

Check for repeated email addresses.

### Invalid Email Format

Look for malformed email addresses:

* Missing an @domain, such as `@moveworks.ai`
* Using the wrong domain, such as `@moveworks.com` instead of `@moveworks.ai`

## Configuration Saves, But Plugin Does Not Trigger

Make sure your [identity configuration](/agent-studio/core-platform/user-identity/ingest-users) matches your configured values. **Data is case sensitive.**