Permissions Configured in kintone Administration
The Permission Management settings in kintone Administration let you configure system-wide permissions for kintone. These permissions include the permission to create apps, system administrative permission, and more. You can consider how you want to assign permissions based on your number of kintone users, how they will use kintone, and the specific tasks they handle, then flexibly configure permissions accordingly.
To configure the settings, you need system administrative permission. It can also be granted to users on this screen.
This article describes the permissions you can configure in the Permission Management settings in kintone Administration and the steps to configure them.
Configurable permissions
Permissions inheritance
If you specify a department in the User, department, or group column and then select the Apply to affiliated departments check box in the Permissions inheritance column, the same permission setting is applied to users who belong to sub-departments of the specified department.
For example, if you specify "Sales Department" in the User, department, or group column and then select the Apply to affiliated departments check box, the same permission set is applied to "Sales Team 1" and "Sales Team 2," both of which are sub-departments of the Sales Department.
System administration (kintone administrative permission)
If you select the Allow checkbox in the System administration column for a user, they will be given access to kintone Administration.
Note that cybozu.cn Administrators are granted all permissions and thus they can access kintone Administration even if their Allow check box in the System administration column is not selected.
In kintone Administration, you can configure settings that affect the entire kintone.
Example:
- Configuring permissions to create apps and spaces
- Creating app templates and space templates
- Managing apps and spaces
- Applying system-wide customization for entire kintone
- Configuring the Update Options settings
- Registering plug-ins
- Editing the Announcement section of Portal
- Configure Portal
App groups settings
If you select the Allow checkbox in the App groups settings or App group settings (View only) column for a user, they will be able to perform the actions described below. Note that, to allow a user to perform these actions, you also need to grant the user the "System administration" permission.
-
When the Allow check box in the App groups settings column is selected for a user, they will be able to create and manage app groups.
-
When the Allow checkbox in the App group settings (View only) column is selected for a user, they will only be able to view app groups. The following actions are not allowed:
- Create app groups
- Edit app group names
- Save changes to the permissions for app groups
- Delete app groups
Create apps
If you select the Allow checkbox in the Create apps column for a user, they will be able to create apps.
By default, all users are allowed to create apps.
Create spaces
If you select the Allow checkbox in the Create Spaces column for a user, they will be able to create spaces.
By default, all users are allowed to create spaces.
Create guest spaces
If you select the Allow checkbox in the Create Guest Spaces column for a user, they will be able to create guest spaces.
By default, only cybozu.cn Administrators are allowed to create guest spaces.
Steps to configure the Permission Management settings
-
Click the Settings icon (the gear-shaped icon) at the top of kintone, then select kintone Administration.
-
Click Permission Management under Permissions.
-
If you want to add a user, department, or group, click Add and specify a user, department, or group for which you want to configure permission in the User, department, or group column.
-
Select or deselect the check box for the permission you want to configure.
-
If you want to change the priority for the permission set, drag and drop the Reorder icon in the Priority column.
-
Click Save on the upper left side of the screen.
Priority for permission sets
When multiple permission sets are configured, any permission set that is located higher on the list takes precedence.
For example, if you configure the "Create apps" permission as shown in Example 1, only John Jones can create apps.
User, department, or group | Create apps |
---|---|
John Jones | Allow |
Everyone | Deny |
If you configure the permission as shown in Example 2, all users except for John Jones can create apps.
User, department, or group | Create apps |
---|---|
John Jones | Deny |
Everyone | Allow |