IT Admins can utilize Domain Capture within their workspace. Domain capture allows any accounts with the approved domain automatically join the workspace, while also automatically making those accounts subject to your org-level user policies (sharing restrictions, login method restrictions, pack usage restrictions, etc.).