> ## Documentation Index > Fetch the complete documentation index at: https://docs.hybridbox.io/llms.txt > Use this file to discover all available pages before exploring further. # Domains > Connect, purchase, organize, and manage domains in the Hybridbox web app. Use the Domains page to connect existing domains, purchase new domains, manage DNS records, organize domains with workspaces and tags, configure forwarding, and assign dedicated IPs. ## How can I connect a domain? To connect a domain you already own, open the Domains page and choose **Connect Domain**. Hybridbox will ask you to update the nameservers at your domain registrar. Log in to the registrar where the domain is registered and set the domain's nameservers to: ```text theme={null} {account_id}.ns1.hybridbox.io {account_id}.ns2.hybridbox.io ``` Replace `{account_id}` with your Hybridbox account ID. After updating the nameservers, return to Hybridbox and run domain verification. Nameserver changes can take time to propagate, so a domain may remain pending for a while after you update your registrar. ## Can I purchase a domain? Yes. Hybridbox allows you to purchase non-premium domains at retail prices. Use **Purchase Domain** on the Domains page, search for the domain you want, and follow the purchase flow. Premium domains are not available through this flow. ## What does `Pending` mean? For a connected domain, `Pending` usually means the domain is not using the correct Hybridbox nameservers yet. Check your registrar and make sure the nameservers are set to: ```text theme={null} {account_id}.ns1.hybridbox.io {account_id}.ns2.hybridbox.io ``` Then return to Hybridbox and run verification again. DNS and nameserver changes may take time to propagate globally. ## What role is needed to purchase or connect a domain? Use **Manager** on the account or workspace scope, or **Account owner**. The same **Manager** role can connect existing domains, purchase new domains, and move domains between workspaces it can manage. DNS record editing is separate: use **DNS Manager** on a scope that includes the domain. ## How can I manage DNS records? On the Domains page, click the DNS records icon on the domain row. To manage DNS records, you need **DNS Manager** on a scope that includes the domain. **Viewer**, **Editor**, **Domain Manager**, and **Manager** can view DNS records, but they do not edit DNS records by default. Some records are system-managed by Hybridbox, including records such as A, MX, and SPF records used for mail and routing. If you need to change a system-managed record, open a support ticket instead of editing it directly. ## What are workspaces? Workspaces are like folders for organizing domains and related resources. For example, if you are an agency, you can create a separate workspace for each client. You can then delegate access to a workspace without giving that person access to every item in the account. Workspaces are useful when different teams, customers, or projects should manage different sets of domains. ## What are tags? Tags are mostly for visual organization. They help you label and find domains, but they do not create access rules or change how the domain behaves. Use workspaces and scoped roles when you need access control. ## What is forwarding? Forwarding is a convenience feature that automatically forwards incoming email for SMTP mailboxes under a specific scope to an email address you choose. You can configure forwarding at three levels: * Account-level forwarding * Workspace-level forwarding * Domain-level forwarding More specific rules can be used when only one workspace or one domain should forward mail differently from the rest of the account. ## Can domains be assigned or reassigned to a different dedicated IP? Yes. You can change the dedicated IP assigned to a domain. Hybridbox automatically handles the required DNS records for you. Email is stored on the central mail cluster. Dedicated IPs are receiving and sending proxies; they do not store your messages. Because mail is stored centrally, reassigning a domain to a new dedicated IP does not delete or move your email. A domain that is not assigned to any dedicated IP cannot send or receive email through Hybridbox SMTP mailboxes. ## What roles are required? | Action | Typical role | | ---------------------------------- | --------------------------------------------------------------------------------------------------------------- | | View domains | **Viewer**, **DNS Manager**, **Editor**, **Domain Manager**, or **Manager** on a scope that includes the domain | | Connect an existing domain | **Manager** on the account or workspace scope, or **Account owner** | | Purchase a domain | **Manager** on the account or workspace scope, or **Account owner** | | Verify nameservers | **Editor**, **Domain Manager**, or **Manager** on a scope that includes the domain | | Update domain settings | **Editor**, **Domain Manager**, or **Manager** on a scope that includes the domain | | Delete a domain | **Manager** on the account scope, or **Account owner** | | Move a domain to another workspace | **Manager** on both the source and destination workspaces, or **Account owner** | | View DNS records | **Viewer**, **DNS Manager**, **Domain Manager**, or **Manager** on a scope that includes the domain | | Manage DNS records | **DNS Manager** on a scope that includes the domain | | Edit system-managed DNS records | Support ticket required | | View forwarding rules | **Viewer**, **Editor**, **Domain Manager**, or **Manager** on a scope that includes the domain | | Manage forwarding rules | **Editor**, **Domain Manager**, or **Manager** on a scope that includes the domain | | Assign or reassign a dedicated IP | **Editor**, **Domain Manager**, or **Manager** on a scope that includes the domain | | View workspaces | **Viewer** or **Manager** on the workspace or account scope | | Create or manage workspaces | **Manager** on the account scope, or **Account owner** | | View tags | **Viewer**, **Editor**, **Domain Manager**, or **Manager** on a scope that includes the domain | | Manage tags | **Editor**, **Domain Manager**, or **Manager** on a scope that includes the domain | If a button or row action is hidden, your current account, workspace, domain, or role may not allow that action.