How did someone outside of my org get access to template and request access to our team? Miroverse?

HI ​@Shelly Anderson thanks for reaching out! It is possible that your team’s permission settings is set up to allow external users to join after approval. 

You may check your Security > Permissions tab, scroll down to Invitation settings. You may set up the team invitation settings to Admins only and turn off the invite link.

Learn more here: https://help.miro.com/hc/en-us/articles/360022258119-Invitation-settings?utm_source=miro

Hmmm… ​@Eca, I don’t have that option, “Permissions”. Somewhere else (not sure how I got there), I found a place for “Team Discovery Settings”. It is set to “Invitation Only”.
I’m still wondering how this person even had an option to ask to join our team. I published the template to the Miroverse, but that shouldn’t give users outside of my team the option to ask to join the team, correct? 

Hi ​@Shelly Anderson 

Publishing a template to Miroverse does not automatically allow external users to join your team in Miro.

What likely happened is that the person found your team or profile through a shared link or another public reference, and used the “request to join” option. Even if your Team Discovery setting is “Invitation only,” users may still be able to send a join request, which then requires approval before they can access the team.

Since your setting is already Invitation Only, your team remains secure — the request simply means someone attempted to join, not that they were granted access. If you'd like, you can decline the request. You may also want to double-check your team invitation settings to ensure invite links are disabled if you prefer stricter control.

Let me know if you have any other questions!