Managing process members and permissions
Updated 2 months ago
by
Kiruthika
Roles and permissions in a process workflow
Kissflow Workflow supports the following roles to facilitate process sharing:
Process Admin
A Process Admin has the highest privilege in a process. They can perform any operations related to a process and add, remove, or modify the roles of other members in the process.
As a Process Admin, they will be able to:
- assign a role to a user while adding them to a process
- add Process Admins, Process Developers, Data Admins, Report Admins, and Members anytime in the due course of the process
- remove any member belonging to any role in the process
- grant or revoke the permissions a member has in the process
- share reports with the members or anyone outside the process.
Data Admin
A Data Admin can perform any kind of operation on the process data and create reports. We support this role in our Enterprise plan only.
As a Data Admin, they will be able to:
- view, edit, and delete process-related information
- view all the reports, access a process form from a specific report, and access the metrics report of a specific process
Report Admin
A Report Admin can create, modify, or delete reports in a process. They can also access and modify others' reports. We support this role in our Enterprise plan only.
As a Report Admin, they can:
- view, create, edit, share, and delete reports
- access a process form and its relevant comments from a report
- access their reports even if their role is downgraded by the Process Admin. However, a Process Admin can choose to revoke a Report Admin's access to their reports if required.
Developer
A Process Developer can build or modify a process from scratch.
As a Process Developer, they can:
- access a process, initiate items, and edit it
- add Initiators to a process while editing or modifying workflows
- create, edit, share, and delete reports created by them
- access their reports even if their role is downgraded by the Process Admin. However, a Process Admin can choose to revoke a Process Developer's access to their reports if required.
Member
A Member can access a process and initiate items.
As a Process Member, they can:
- initiate items as part of a process
- create reports if relevant permission is granted to them. They can access the reports created by and shared with them respectively.
Here is a detailed overview of the permissions mapped with each of these roles:
Permissions | Process Admin | Data Admin | Report Admin | Developer | Initiator/ Member |
Access process | ✓ | ✓ | ✓ | ✓ | ✓ |
Initiate an item | ✓ | Optional | Optional | ✓ | ✓ |
Manage process settings | ✓ | X | X | ✓ | X |
Add or remove members | ✓ | X | X | X | X |
Edit process | ✓ | X | X | ✓ | X |
Perform bulk actions | ✓ | ✓ | X | X | X |
View audit log | ✓ | X | X | X | X |
Archive and delete process | ✓ | X | X | X | X |
Duplicate a process | ✓ | X | X | X | X |
Create reports | ✓ | ✓ | ✓ | Optional | Optional |
Share reports | ✓ | X | ✓ | ✓ (Applicable to only the reports they own) | ✓ (Applicable to only the reports they own) |
Delete reports | ✓ | X | ✓ | ✓ (Applicable to only the reports they own) | ✓ (Applicable to only the reports they own) |
View all reports | ✓ | ✓ | ✓ | X | X |
View Metrics report | ✓ | ✓ | ✓ | X | X |
View process administration table | ✓ | ✓ | X | X | X |
Modify item | ✓ | ✓ | X | X | X |
Delete item | ✓ | ✓ | X | X | X |
Adding members and groups to a process
Whoever creates a process becomes the Admin of the process by default. They can perform any operation related to a process ranging from adding or removing members to modifying or deleting process data. You can share the process with any flow member or group within your organization and also invite external users to be a part of your process as necessary.
- Navigate to the process for which you would like to add members.
- Click More options
> Share - Click +Add members
- Type the name or email address of the user or group in the text area present under Select users and groups.
- You can also invite an external user who isn't a part of your organization to your process as part of the Share settings.
- Type the email address of the external user like the following and you'll see an Invite link below.
- Click the link to send an invite to the external user.
- You can also invite an external user who isn't a part of your organization to your process as part of the Share settings.
- Select a relevant role from the Role dropdown after adding the users. If you are not sure about which role to choose, learn about the different roles and permissions that Kissflow Workfow offers here.
- We support the Report Admin and Data Admin roles in our Enterprise plan only. Reach out to our Customer Support team to upgrade your plan and enable these roles in your account.
- Click Add.
Changing a member's role
A member will lose their current set of privileges when they are downgraded to a role with less privileges. However, they might continue to have access to the reports they had created and accessed in the past after their role change. However, you can choose to revoke their access to their reports before changing their role as necessary.
- Navigate to the process page >
> Share. - Click this icon
beside a member's name and click Change role.
- Click your preferred role from the list that shows up
- Read the alert message and confirm your action.
- Click Change role to modify the member's role and retain their report access as is or click Revoke report access & Change to restrict them from accessing their old reports after they move to the new role.
Granting additional permissions to a member
- Navigate to the process page > > Share.
- Click this icon beside a member's name.
- Under More permissions, select the checkbox against the relevant permission to let the flow member acquire additional permission outside their actual scope. Similarly, you can deselect additional permissions to restrict the Flow Member from using their additional permission as necessary.
Removing a member from a process
Before removing a member from a process, you must be aware of the fact that the member will continue to have access to the reports they had created and accessed in the past after they are removed. However, you can choose to revoke their access to their reports and then remove them as necessary.
- Navigate to the process page > > Share.
- Click this icon beside a member's name that you would like to remove.
- Click Remove member.
- Read the alert message and confirm your action.
- Click Remove member to remove the member and retain their report access or click Revoke report access & Remove to restrict them from accessing their old reports after they exit the process.
