Configure Workflow Phase Access and Ownership
This article covers how to configure access and ownership settings for a workflow phase, including how the form is accessed and how card ownership is assigned.
Estimated Read Time: 7 minutes
Sections in this article:
For background on workflow access, please read the Workflow Authorisation Overview.
What is Form Access?
Form Access controls who can access a phase and how card ownership is assigned when a card enters it. Each phase has its own Form Access configuration area, where you can:
- Determine how users can interact with the phase by setting the authorisation type
- Determines how card ownership is allocated when a card enters the phase using Auto-Assign Rules and/or selecting a Card Owner
Note: For an interactive introduction to workflow access in Gatekeeper, take our Workflow Access course. You must be logged into Gatekeeper to access this course.
What are Workflow Phase Owners?
Workflow phase owners are the individuals responsible for completing reviews, actions, and approvals on a card at a specific phase. Each phase has its own designated owner, configured in the phase settings.
Unless they have been granted other authorisation to the workflow, phase owners can only see and interact with cards while they are on the phases they own.
The example below shows two different user views of the same workflow:
- The Workflow Administrator can see all cards across all phases.

- The owner for the Legal Review phase can only see cards in that specific phase.

Configure Form Access
Note: Users must be a Workflow Administrator or Local Workflow Administrator to configure phase settings.
To set the authorisation type and assign owners for a workflow phase:
- Navigate to the relevant workflow and click on a phase to edit it.
- Click Form Access.
- Select the relevant radio button for the authorisation type to set how users interact with the phase.
- Under Auto-Assign Rules and Card Owners, select the relevant options to determine how ownership is allocated. The options available in each section will update based on the authorisation type selected.
- If required, select a LuminIQ Agent to work alongside the phase owner.

Note:
-
You can configure both Auto-Assign Rules and a Card Owner. Gatekeeper will first try to automatically assign the owner, and if no match is found, it will assign based on the option selected in the Card Owner section instead.
- Workflow Administrators and Local Workflow Administrators can act on behalf of phase owners directly from the kanban board, regardless of the phase's form access settings.
Authorisation Type
The authorisation type controls how users interact with the phase, for example where an intake form should be completed.
- Internal: available to internal users with a Gatekeeper login
- Vendor Portal: available to Vendor Portal users
- Employee Portal: available via the Employee Portal/Submit Requests dashboard, or contract change requests
- Vendor eNegotiate: enables eNegotiate for vendor users, allowing them to review and negotiate documents
Start phases have additional authorisation types that allow you to distribute request forms:
- Public Form: accessible to anyone with the link, without requiring a Gatekeeper login
- Touchless Contract Form: generates unique, personalised URLs that can be shared with vendors
- Vendor Portal Submit Requests: allows vendor users to submit workflow forms directly through the Vendor Portal.
Auto-Assign Rules
Auto-assign rules allocate a card to a user when it arrives at a workflow phase, based on the vendor or contract it is associated with. This is typically used when an individual needs to complete an action on a workflow card rather than a team. For example, if a contract is expiring, Gatekeeper identifies the owner linked to that contract, and auto-assigns them as the card owner on that phase to review it.
Depending on the authorisation type for the phase, you can select from the following to be auto-assigned as a phase owner:
- None: no automatic assignment
- Team Manager of Card Creator: the owner of the team that the person who submitted the card belongs to.
- Vendor Owner: the vendor owner for the vendor record associated with the card. This will be the internal owner on Internal phases, and the external owner on Vendor Portal/eNegotiate phases.
- Contract Owner: the contract owner for the contract record associated with the card. This will be the internal owner on Internal phases, and the external owner on Vendor Portal/eNegotiate phases.
- Additional Vendor/Contract Owner Types: the additional owner types for the contract or vendor record associated with the card, if they have been configured. This will be the internal owner on Internal phases, and the external owner on Vendor Portal/eNegotiate phases.
- First Vendor User Only: the first vendor user added to the vendor record associated with the card.
- All Vendor Users: any active vendor user from the vendor record associated with the card.
Note: The card must be associated with an existing contract or vendor for auto-assign rules to allocate the card correctly.
Card Owners
Specific users or groups can be assigned as the owner of cards on the workflow phase:
- None: no card owner assigned
- Card Creator: assigns ownership to the user who created the card or submitted the request form.
- Users: select one or more specific users to own all cards within the phase.
- Teams: assigns a specific team (or multiple teams). This is useful when responsibility aligns with existing Gatekeeper teams, reducing the need to create separate workflow groups.
- Workflow Groups: select one or more workflow groups. These are custom groups of users used across workflow configuration, ideal for when ownership doesn’t align with a team but you want to avoid assigning users individually. See Assign a Workflow Group as a Phase Owner for details on how to configure this.
- Form Fields: assigns ownership based on a user or workflow group selected in a form field. You can select which form field will determine ownership.
You can also configure conditional ownership. To learn more, see Configure Conditional Owners on a Workflow Phase.
Reassign Card Ownership
Workflow Administrators and Local Workflow Administrators can reassign card ownership directly within a workflow card. To do this:
- Navigate to the relevant workflow.
- Click on a card title.
- Click the pencil icon next to Phase Owner.

- Select from the Users, Workflow Groups, and/or Teams dropdown lists. You can assign multiple items, including a mix of types (e.g. one user and one team).
- Click Update to save your changes.
FAQs
How is the card creator identified for a triggered workflow?
If Card Creator is selected as a phase owner on a triggered workflow, Gatekeeper will still attempt to populate an owner. Expand the relevant sections for details on the logic Gatekeeper uses.
Date-Based Contract Triggers
- If a contract owner exists, they will be assigned
- If no primary contract owner exists but a different owner type does, the alternative owner type will be assigned
- If no contract owners exist, the contract creator will be assigned
- If the contract was created via API or bulk import, the workflow creator will be assigned
Contract Update Triggers
- If a contract owner exists, they will be assigned
- If no primary contract owner exists but a different owner type does, the alternative owner type will be assigned
- If no contract owners exist, the contract creator will be assigned
- If the contract was created via API or bulk import, the user who made the change that caused the workflow to trigger will be assigned
- If none of the above apply, the workflow creator will be assigned
Vendor Update Triggers
- If a vendor owner exists, they will be assigned
- If no primary vendor owner exists but a different owner type does, the alternative owner type will be assigned
- If no vendor owners exist, the vendor creator will be assigned
- If the vendor was created via API or bulk import, the user who made the change that caused the workflow to trigger will be assigned
- If none of the above apply, the workflow creator will be assigned
What happens if no owner is assigned?
If both auto-assign rules and card owners are set to None, cards will enter the phase without an assigned owner. No one will be notified, and only Workflow Administrators or Local Workflow Administrators will be able to take action on the card.
Do all phases need an owner?
No. For phases that use AutoActions to process cards automatically, an owner does not need to be assigned.
Can a phase have more than one owner?
Yes, teams and workflow groups can be assigned, meaning multiple users share ownership, or multiple individuals can be selected as a card owner.
Can Form Access settings be amended on a workflow that is in use?
The authorisation type cannot be amended if live cards are currently in the phase. Auto-assign rules and card owners can be amended, but changes do not automatically apply to cards that are already in the phase. To apply updated settings to an individual card, open the card and click Re-enter current phase from the Controls tab.
Are owners notified when cards are assigned to them?
Yes, but only if notifications have been enabled for card owners on the phase. See Configure Workflow Notifications for further details.