Workflow Authorisation Overview

   Estimated Read Time: 7 minutes

Sections in this article: 

• Overview
  • Workflow-Level Access
  • Card and Phase-Level Access
• Assign Workflow Authorisation
  
  • Who can Assign Workflow Authorisation?
  • Assign Workflow Administrators
  • Assign Local Workflow Access
  • Assign Dynamic View Only Access
  • Assign Phase Owners
• FAQs

Overview

Workflow authorisation settings control what users can see and do within workflows. Each user can be assigned a different level of access, and this can vary across each workflow board.

Gatekeeper offers several types of workflow authorisation, each suited to a different responsibility. Broadly, these split into two levels:

• Workflow-level access: applies across an entire workflow board, covering every card in every phase.
• Card and phase-level access: applies only to specific cards, or to cards while they sit in a specific phase. This lets a user interact with cards relevant to them, even if they don't otherwise have access to the workflow board itself.

Workflow-Level Access

• Workflow Administrator: The highest level of workflow authorisation, applied globally across the tenant rather than to a single workflow. They can create new workflows, edit all existing ones, and add cards directly to any board. They have admin access to all cards, including the ability to delete or archive cards, and can complete approvals or actions on behalf of the card owner. They also have access to Workflow Reports.

• Local Workflow Administrator: Grants administrative access to specific workflows. They must be explicitly assigned to each relevant workflow, allowing them to edit the workflow configuration and add cards directly to the board. They cannot archive or delete the workflow, or create new workflows.
• Local Workflow Collaborator: Provides read-only access to specific workflows. They can view all cards within the workflow, but cannot edit them. Like Local Workflow Administrators, they must be explicitly assigned as collaborators for each relevant workflow.

Card and Phase-Level Access

These permission types are commonly used for people who don't hold any of the workflow-level access types above.

• Dynamic View Only Access: Automatically grants read-only access to cards on a specific workflow for the card creator and related users. This access follows the card through every phase of its lifecycle, meaning the relevant people can follow a card's progress throughout the whole workflow. This can be granted to the Card Creator themselves, their Team Manager, and their whole team.
• Phase Owners: Lets a user manage a card while it's in a specific phase, even if they don't hold any workflow-level access. A phase owner can view, open, and act on the card for as long as it's in that phase. 
• Phase Collaborators: Lets a user view a specific card while it's in a specific phase, without needing any workflow-level access. Unlike phase owners, they can't make changes or take any action on the card.

Assign Workflow Authorisation

Who Can Assign Workflow Authorisation?

The ability to assign access to others depends on the user's permissions. The table below outlines which users can assign each type of workflow authorisation:

Assign a Workflow Administrator

To assign a user as a Workflow Administrator: 

1. From the navigation menu, expand Settings, then click Users.
2. Expand the 3 dots on the relevant user, then select Edit.
3. From the Additional Permissions section, select the Workflow Administrator checkbox, then click Save.
   

Assign Local Workflow Access

Workflow Administrators can manage access to specific workflows by assigning Local Administrators and Collaborators. To assign local access to a workflow:

1. Click Workflows from the navigation menu.
2. Expand the 3 dots on the relevant workflow, then select Local Workflow Authorisation.
   
3. Click Set Workflow Administrator or Set Workflow Collaborator as required.
   
4. Select the relevant user, team, or workflow group from the dropdown menu, then click Save.

Assign Dynamic View Only Access

To enable read-only access to the Card Creator and related users: 

1. Click Workflows from the navigation menu.
2. Expand the 3 dots on the relevant workflow, then select Local Workflow Authorisation.
   
3. Under Dynamic View Only Access, enable the toggles for the relevant user types.
   
   
   

Once enabled, the relevant people automatically gain read-only access when a card is submitted, which remains in place through every phase of the workflow.

Assign Phase Owners

Phase ownership can be configured on each phase of a workflow. To learn more, see Workflow Phase Owners Overview.

FAQs