diff --git a/app/models.py b/app/models.py
index 7e3aca03..3d79651d 100644
--- a/app/models.py
+++ b/app/models.py
@@ -387,6 +387,11 @@ class User(Base, ModelMixin, UserMixin, PasswordOracle):
         sa.Boolean, default=False, nullable=False, server_default="0"
     )
 
+    # subdomain access is limited at the beginning
+    can_use_subdomain = sa.Column(
+        sa.Boolean, default=False, nullable=False, server_default="0"
+    )
+
     # implement flask-login "alternative token"
     def get_id(self):
         if self.alternative_id:
diff --git a/migrations/versions/2021_110511_dd278f96ca83_.py b/migrations/versions/2021_110511_dd278f96ca83_.py
new file mode 100644
index 00000000..a98d4803
--- /dev/null
+++ b/migrations/versions/2021_110511_dd278f96ca83_.py
@@ -0,0 +1,29 @@
+"""empty message
+
+Revision ID: dd278f96ca83
+Revises: fdb02bd105a8
+Create Date: 2021-11-05 11:42:39.532067
+
+"""
+import sqlalchemy_utils
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision = 'dd278f96ca83'
+down_revision = 'fdb02bd105a8'
+branch_labels = None
+depends_on = None
+
+
+def upgrade():
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.add_column('users', sa.Column('can_use_subdomain', sa.Boolean(), server_default='0', nullable=False))
+    # ### end Alembic commands ###
+
+
+def downgrade():
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.drop_column('users', 'can_use_subdomain')
+    # ### end Alembic commands ###