
Private links and share links in Canvas
Understand which Canvas links grant access and which links only send someone to an exact page, object, comment, or chat message.
Canvas links do two different jobs. A private link sends a person to an exact place inside a canvas — a page, object, comment thread, or chat message. A share link helps a person get access to the canvas in the first place. Mixing them up is the most common reason a recipient says a link "does not work" even though the URL was copied correctly.
Use private links for precision after access already exists. Use share links when the recipient may need access, guest entry, or a permission check before opening the canvas.
Private links vs share links
"Private" here is not a secret URL format or a separate privacy mode — it means the link follows the canvas's normal access rules. Copy page link, Copy link on an object, Copy comment link, and Copy link on a chat message all produce private links. They point to a normal canvas route and focus the right place after the canvas opens; they do not invite the recipient, change their permission, or make the canvas public. If the recipient does not already have access through the canvas, project, workspace, or a direct share, a private link still leads to an access error.
A share link, created from Share, opens the access path. Depending on the visible settings and workspace rules it may grant the selected permission, ask the recipient to complete guest entry, require a Canvas PIN, or check whether the person is allowed in before the canvas opens. Do not assume a share link bypasses workspace rules — trust the final permission shown in Share. After you copy a precise link, ALLO may show a copied-link message with a Share action; that is the access check that keeps a precise link from becoming an access-denied message.
Compare the links
| Link or action | Where it starts | Who can use it | What it depends on |
|---|---|---|---|
| Private canvas link | Address bar, canvas list, or an internal open action | People who can already open the canvas | Existing canvas, project, workspace, or direct access. |
| Copy page link | Page menu | People who can see the page menu | Existing access and a page that still exists. |
| Copy link for an object | Element menu | People who can open the object menu | Existing access and an object that still exists. |
| Copy comment link | Comments and mentions | People who can see the thread | Existing access and a comment that still exists. |
| Copy chat message link | Canvas chat | People who can see the message action | Existing access, chat access, and a message that still exists. |
| Share link | Share a canvas | Owners or people who can change access | Share settings, workspace settings, and the chosen link permission. |
| Guest share link | Guest collaboration | People outside the workspace when guest access is allowed | Share permission, guest settings, and any Canvas PIN required for entry. |
Guests do not see the normal Share control. If a guest needs another person added, a workspace member or canvas owner should manage access from Share.
Send the right link for the job
For external work, the cleanest handoff often uses two links on purpose: send the share link first as the access link ("Can this person enter, and with what permission?"), then the private link as the navigation link ("Where should they look once inside?"). For example: "Use this share link to enter with comment access. After it opens, use this page link to go straight to the pricing review." That one extra sentence prevents the classic failure where a client opens a precise object URL, signs in with the wrong account, and assumes the canvas is broken. If you send only one link externally, send the share link — the recipient can always navigate once inside.
| Situation | Use this |
|---|---|
| Internal teammate already has access | A page, object, comment, or chat message link — they need precision, not a new invite. |
| Internal teammate may not have access | Share first, then the precise link. |
| External client review | Share link with view or comment permission; avoid edit unless they should change the work. |
| Contractor joining a work session | Share link with the needed permission and a clear boundary. |
| Guest workshop participant | A guest-capable share link, which may open the guest name flow first. |
| External website or YouTube reference | Open the link on the object; a website link follows the external site's own permissions, not ALLO access. |
If a teammate cannot open a precise link, do not keep resending it — open Share, confirm access, then resend. The first link was doing the precision job; it was missing the access job.
URL patterns
ALLO generates these values, so copy the real link from the product instead of typing one by hand.
| Link type | Example pattern |
|---|---|
| Share link | https://allo.io/s/{share-key} |
| Share link with a focused destination | https://allo.io/s/{share-key}?req=obj&cid={object-id}&perm={permission} |
| Private canvas link | https://allo.io/canvas/{canvas-id} or the short https://allo.io/{canvas-url} |
| Private page link | https://allo.io/canvas/{canvas-id}?page={page-token} |
| Private object link | https://allo.io/canvas/{canvas-id}?req=obj&cid={object-id} |
| Private comment link | https://allo.io/canvas/{canvas-id}?req=comment&comment_p_name={object-id}&comment_id={comment-id} |
| Private chat message link | https://allo.io/canvas/{canvas-id}?req=chat&chat_message_id={message-id} |
The share key handles access; the query values only tell ALLO where to focus after entry, so the same focus query can appear after a share link (/s/{share-key}?req=obj&cid=...&perm=...). The values after page, cid, comment_p_name, comment_id, and chat_message_id are generated, not readable, reusable across canvases, or meant to be edited by hand. Object links can also point to other canvases or sub-canvases; the viewer still needs the right access at the destination. If ALLO copied a link while you were on a different entry route, use the copied URL as-is rather than editing it.
Guest and client access
For external review, comment access is safer than edit access. Use edit only when the recipient should change canvas content.
Use Guest collaboration when someone outside the workspace needs temporary or scoped access: a guest sees an entry screen, enters a name, and continues when the shared access allows it. The guest experience can hide owner-level controls such as Share, Present, thread moderation, and workspace metadata. For a contractor who works in the canvas over time, decide whether they should be a guest, external collaborator, or workspace member — do not use an exact object link as a workaround for missing access. Grant the right access first, then use exact links to point them to the work. After access exists, page links suit a review section, object links a specific file or screenshot, comment links a thread that needs an answer, and chat message links a message to inspect (move durable decisions from chat into a comment or visible content).
Troubleshooting
| Symptom | Likely cause | What to do |
|---|---|---|
| The person sees an access error | A private link was sent before access was granted | Use Share to grant or confirm access, then resend the precise link. |
| The canvas opens but not the exact object/page | The target was deleted, the query value changed, or the URL was edited | Copy a fresh link from the object or page menu. |
| The comment link does not open the thread | The comment was deleted or resolved, or the recipient lacks access | Confirm access, then find the thread from the Comments tab if it still exists. |
| The chat link opens the canvas but not the message | The message was deleted, chat is unavailable, or access is missing | Confirm canvas and chat access, then send a fresh link if the message exists. |
| The share link opens a preview or name screen | The recipient is entering as a guest | Have them complete the guest name flow and enter any required PIN. |
| Share is missing after copying a link | You may be a guest or lack sharing permission | Ask a canvas owner or member with sharing access to manage Share. |
| A recipient uses the wrong account | Their ALLO access belongs to a different email or sign-in method | Ask them to sign in with the account that was invited or shared. |
Related articles
- Share a canvas
- Use a Canvas PIN or passcode
- Manage Canvas members
- Collaborate with guests
- Use canvas chat
- Give feedback with comments and mentions
- When you can't access work