@Stephen_Li thanks, we don’t use SCIM unfortunately but will speak to my account manager. Been trying to understand bit more on this Viewer permission so thanks for link. My suggestion would be a simple approach that appears in the ‘membership’ profile management area for users. Asana could add a 4th level called ‘Viewer’ or ‘Guest member’ that could be set up and therefore treat them like a guest despite having same domain as organisation. We also have Paid Division complexities but wont go into that 
(see example image below)
1 Like