This article explains how the Permissions for App setting affects the Kintone screen display and actions users can and cannot perform in Kintone.
Configuring Permissions for App

Permissions that can be set in the Permissions for App setting are as follows.

• View records, Add records, Edit records, Delete records, Manage app, Import from file, Export to file

If there are multiple rows of permission sets configured for a single user, any permission set that is located higher on the list takes precedence.

Some permissions in the Permissions for App setting are dependent on another permission. These permissions cannot be granted independently.
When you select such permissions, the permission that must be selected together with them are automatically selected.

• View records, Add records, and Manage app can be selected independently. There are no permissions that must be selected together with these permissions.
• When selecting Edit records, you must also select View records.
• When selecting Delete records, you must also select View records.
• When selecting Import from file, you must also select Add records.
• When selecting Export to file, you must also select View records.

For example, you cannot select Add records and Edit records without selecting View records. Similarly, you cannot select Add records and Delete records without selecting View records.

In a newly created app, the Permissions for App setting is initially set as follows:

• In the App creator row, all permissions are selected.
• In the Everyone row, only record manipulation permissions (View records, Add records, Edit records, and Delete records) are selected. Manage app, Import from file, and Export to file are not selected.

The following sections describe setting samples and actions users can and cannot perform in each case.

When you add a user, group, or department as the target of the permission setting, a row is added with only record manipulation permissions (View records, Add records, Edit records, and Delete records) selected.

• When "View records" and "Add records" are selected
  Users with these permissions can open the app and display its "View" screen. If there are any records added in the app, the users can select a record on the "View" screen and view the record data on the "Record Details" screen.
  These users will see the New record icon on the "View" and "Record Details" screens, which they can use to create a new record.
  They will also see the Duplicate icon on the "Record Details" screen, which can be used to create a new record by duplicating (copying) an existing record.
  

• When "Edit records" is selected
  Users with this permission will see the Edit icon on the "Record Details" screen, which they can use to edit a record.
  
  If there are records displayed on the "View" screen, these users will see the Edit icon in the rightmost column of each record, and they can use the icon to edit each record on the "View" screen.
  

• When "Delete records" is selected
  Users with this permission will see the Delete option in the menu displayed when they click the Options icon on the "Record Details" screen. They can select this menu option to delete the displayed record.
  
  If there are records displayed on the "View" screen, these users will see the Delete icon in the rightmost column of each record, and they can use the icon to delete each record on the "View" screen.
  

Since Manage app is not selected for these users, the App Settings icon is not displayed on the "View" and "Record Details" screens, and these users cannot change the App Settings.

Also, since Import from file and Export to file are not selected for these users, the Import from File and Export to File menu options are not displayed in the menu displayed when the Options icon is clicked on the "Record Details" screen.

For details on record manipulation permissions (View records, Add records, Edit records, and Delete records), refer to When only record manipulation permissions (View/Add/Edit/Delete records) are selected.

• When "Manage app" is selected
  Users with this permission can change the App Settings; they will see the App Settings icon (the gear-shaped icon) on the "View" and "Record Details" screens. In App Settings, users can configure general app settings, such as the Form setting, Views setting, Graphs setting, and so on.
  
  When users are granted this permission in an app, the app appears in the "Apps" section of the "App Management" screen. On the screen, users can click the App Settings icon for the app to directly open its App Settings.
  
  Note that at least one user with the "Manage app" permission must be set for each app.
  
  

• When "Import from file" is selected
  Users with this permission will see the Import from File menu option in the menu displayed when they click the Options icon on the "View" screen. Selecting this menu option allows them to import data from a file into the app to add new records or update existing records.
  
  

• When "Export to file" is selected
  Users with this permission will see the Export to File menu option in the menu displayed when they click the Options icon on the "View" screen. Selecting this menu option allows them to export record data from an app to a file. The file can be used for data migration or as a backup.
  
  These users will also see the Export to CSV File menu option when they click the Options icon on the screen that shows an aggregate result in chart or table format. Selecting this menu option allows them to export the aggregate result to a file.

If a user is granted this permission only, the app is not displayed in the "Apps" section on the user's Portal. If the user tries to display the app's "View" screen by directly accessing the app (e.g., by entering the URL), an error message "No privilege to proceed." is displayed and the user cannot use the app.
Also, the app will not be displayed in the user's search results.

In addition, this user can neither change the App Settings, import data from a file, nor export data to a file.

Users with only this permission can open the app and display its "View" screen. If there are any records added in the app, the users can select a record on the "View" screen and view the record data on the "Record Details" screen.

These users cannot create a new record, and they can neither edit, delete, nor duplicate existing records. In addition, these users can neither change the App Settings, import data from a file, nor export data to a file.

The following actions can be performed also by users with only the "View records" permission.

• Viewing and posting record comments
• Viewing the History of each record (If the Change History feature is enabled)
• Downloading files attached to the "Attachment" field

As for the apps used mainly for reference purposes, such as those used as master data, it is recommended that you deselect Add records, Edit records, and Delete records for users except those who should be able to create records so as to prevent records from being added, edited, or deleted by mistake.

When users with only this permission open the app, no records appear on the "View" screen and an error message "No privilege to proceed." is displayed.
It is possible for these users to create new records; the New record icon is displayed for these users on the "View" and "Record Details" screens. However, when they click Save on the "New Record" screen and a new record is created, an error message "Failed to load record details. No privilege to proceed." appears at the top of the screen and they cannot view the record they have created.

If a user is granted this permission only, the app is not displayed in the "Apps" section on the user's Portal. If the user tries to display the app's "View" screen by directly accessing the app (e.g., by entering the URL), an error message "No privilege to proceed." is displayed and the user cannot use the app.

For users with only this permission to open the app's App Settings, they need to click the settings icon for the app in the "Apps" section of the "App Management" screen.