Upcoming changes to access control within Kissflow

In the next two weeks, we're rolling out critical changes to how access control functions within Kissflow. 

The issue: Kissflow currently manages access control via user types, inadvertently granting some users more access than intended. For instance, a User Admin, whose primary function was to manage users, also had access to billing data.

The solution: Moving from user types to user roles will ensure more granular and accurate access control of your Kissflow users.

Note:

All existing user types will be automatically mapped to the corresponding user roles. Ex: Super Admin to Super Admin, User Admin to User Admin. 

What’s changing?

1. Optional role assignment: Unlike before, where every user was assigned one of the four user types, role assignment will now be optional.

   

2. Multiple role assignment:  Users can have multiple roles assigned to them. For example, if you want a User Admin to have access to the billing page, you can assign them the Billing Admin role in addition to their User Admin role.

3. New roles and updated permissions: 

   • Introducing IAM Admin and App Store Admin roles.

     • IAM Admin: Manages access control and is responsible for security and user provisioning.

     • App Store Admin: Can install apps from the App Store.

   • Shifting some permissions from User Admin to IAM Admin.

Note:

No permission changes exist for the Billing Admin and Super Admin roles. 

Updated permission list

Roles in user groups

You will have the ability to add roles to user groups. Every user and sub-group within a parent group will inherit the roles assigned to the parent group

Deprecation of UserType field

As we transition to roles, the UserType field will be deprecated and replaced with a Roles field. This may affect instances where UserType field was previously used.

Impact and actions required 

These changes won't affect how roles within Processes, Boards, Datasets, and Applications work. We will roll out these changes around the second week of October, 2023. 

If you're looking forward to this upcoming change, go ahead and like this topic. If you have any questions or queries about it, please comment below, and we'll be happy to assist you.

FAQ

I have used fields such as User Field and User.FirstName in my form. Do I need to fix them?

No. You must only remove the field User.userType from your forms and integrations.