User roles and permissions
Different roles in Kissflow offer varying levels of access and permissions. To access the Account Administration and Governance page, users must be assigned one of the four available Admin roles. One user can have one or multiple roles assigned to them. Here is a complete list of all the available user roles in Kissflow.
Super Admin
IAM Admin
User Admin
Billing Admin
App Store Admin
In Kissflow, each role has a distinct set of permissions. The Super Admin has access to administrative permissions, while the IAM Admin has access to security-related permissions. Other Admins have access to permissions specific to their user role. Below is a detailed list of all the permissions.
Responsibility/Role |
IAM Admin |
User Admin |
App Store Admin |
Billing Admin |
View/Update Account Details |
β |
β |
β |
β |
View Account Owner |
β |
β |
β |
β |
View/Update Account Customization |
β |
β |
β |
β |
Governance |
β |
β |
β |
β |
View/Update Mobile Branding |
β |
β |
β |
β |
View/Update Connected Domains |
β |
β |
β |
β |
View/Update Format Settings |
β |
β |
β |
β |
Manage Weekends |
β |
β |
β |
β |
View/Update Holidays |
β |
β |
β |
β |
View/Update GeoLocation Settings |
β |
β |
β |
β |
Chat Settings |
β |
β |
β |
β |
File Upload Settings |
β |
β |
β |
β |
Geolocation Settings |
β |
β |
β |
β |
View/Update Account Security |
β |
β |
β |
β |
Notification Settings |
β |
β |
β |
β |
View/Update Flow Settings |
β |
β |
β |
β |
Add/Update User |
β |
β |
β |
β |
Update User Role |
β |
β |
β |
β |
Activate User |
β |
β |
β |
β |
Deactivate User |
β |
β |
β |
β |
2FA Enrollment |
β |
β |
β |
β |
Reset Password |
β |
β |
β |
β |
Resend Verification Mail |
β |
β |
β |
β |
Delete User |
β |
β |
β |
β |
Export User Data |
β |
β |
β |
β |
View User Data |
β |
β |
β |
β |
View IDP |
β |
β |
β |
β |
Configure IDP |
β |
β |
β |
β |
Sync IDP |
β |
β |
β |
β |
Enable IDP |
β |
β |
β |
β |
View Group |
β |
β |
β |
β |
Create Group |
β |
β |
β |
β |
Update Group |
β |
β |
β |
β |
Delete Group |
β |
β |
β |
β |
Update Group Role |
β |
β |
β |
β |
Update Members |
β |
β |
β |
β |
View Subscription Details |
β |
β |
β |
β |
Invoice |
β |
β |
β |
β |
User Management Logs |
β |
β |
β |
β |
Group Management Logs |
β |
β |
β |
β |
Account Management Logs |
β |
β |
β |
β |
Install Apps |
β |
β |
β |
β |
Enquire |
β |
β |
β |
β |
View App Store (and Apps) |
β |
β |
β |
β |
Create Service Account |
β |
β |
β |
β |
View Service Account |
β |
β |
β |
β |
Create Portal |
β |
β |
β |
β |
Create App |
β |
β |
β |
β |
Create Task Delegation |
β |
β |
β |
β |
Update Task Delegation |
β |
β |
β |
β |
Delete Task Delegation |
β |
β |
β |
β |
View Task Delegation |
β |
β |
β |
β |
View/Edit Environment |
β |
β |
β |
β |
Manage Users |
β |
β |
β |
β |
Super Admin
A Super Admin has complete access to all administrative functions associated with the Kissflow Account. This includes access to all tabs on the Account Administration and Governance pages. An account can have multiple Super Admins. However, Super Admins do not automatically have permission to access every flow created. Instead, they can add themselves as a member or an Admin to a flow.
Account Owner
The individual responsible for setting up your Kissflow account is the Account Owner and acts as the main point of contact in case we need to contact you. Only one owner is allowed per account, but you can transfer ownership to another Super Admin if needed.
Transferring account ownership
Go to Account administration > Account details > Account Owner and click Change Owner.
Choose a Super Admin from the dropdown that appears and click Confirm. Ownership will be transferred to the selected Super Admin, and you will remain a Super Admin until someone transfers ownership.
Note:
Only the current Account Owner can transfer ownership.
IAM Admin
IAM Admins are responsible for managing various security-related tasks, including account security, flow settings, user role updates, and user provisioning. They are also responsible for creating and managing service accounts and connected domains. The role of an IAM Admin is critical as they handle Identity and Access Management (IAM) within Kissflow.
User Admin
User Admins can access the User management, Group management, and Audit log tab on the Account Administration page. User Admins can add new users, deactivate users, delete users, create and add users to groups, and access user and group management audit logs.
Billing Admin
Billing Admins can only access the Billing tab on the Account administration page.
A Billing Admin can:
- View the name of the plan
- Nature of the subscription - Monthly, Quarterly, or Annual
- View the number of licenses availed for the account and
- Chat with the customer support executives to upgrade the account and view invoices.
App Store Admin
The App Store Adminβs only responsibility is installing applications from the Kissflow App Store. They can choose which application to install from the list of applications available in the app store.
Users
Users do not have access to the Account administration page and any associated admin activity that other Account Admins can perform. They can create new flows based on the Flow settings. They can access flows based on the share settings of individual flows. Users can access their My Profile page under My Settings and change their profile data based on the User Management settings.