Vladi Gubler
Vladi Gubler
November 05, 2024

Ultimate Forms is a SharePoint add-in and as such requires access to your SharePoint Online tenant to do its magic. As it is capable to doing basically anything inside SharePoint as well as in other 3rd party applications, the access levels it requires are bound to be quite high. We take the security of your data as our highest priority. We put a lot of effort into creating the most comprehensive implementation possible at the current technological state of the art.

Generally, there are 3 types of permissions Ultimate Forms uses:

  1. Forms and web parts - delegated permissions of the current user obtained by the SharePoint Framework, meaning that the form can do what the user can do and there is no ability to gain access to anything beyond.
  2. Ultimate Forms interface - delegated permissions as well (albeit obtained via a special Entra ID enterprise application added to your tenant when Ultimate Forms is installed). Here as well the user is only allowed to do what they are granted access to in SharePoint itself. The same permission is also used in Print utilities and in manually-triggered Actions.
  3. Backend features - such as event or timer-driven Actions, all Alerts, Import, Item ID, Signature validation and Associated Items Summary calculations. As these happen behind the scenes without user interaction, we are using Application level permission, meaning permissions obtained by the application itself in its own name, without delegating permission of any actual user.

Up until now, Application permissions were tenant-level Full Control permissions, due to the fact Microsoft didn't offer a more granular approach. That has changed and now we are able to assign permissions to specific site collections. Which mean that when one department installs Ultimate Forms on their site collection[s], there is no way for the app to access other, unapproved site collections.

How Does It Work?

When you run our Installation Wizard, we will ask for the permissions and automatically grant permissions to the site collection based on the site URL you provided to the installer. Other site collections will remain inaccessible. If you want to extend permissions to additional site collections, you can do one of the following (in both cases you must have Full Control permissions on the site collections in question):

  1. Run the Wizard again, providing one of the site URLs of the additional site collection.
  2. If you initially installed the app as available to all sites, click on Design on one of the lists in the site collection and then approve the site collection access directly from the warning banner.

 

 

Lower Default Permissions

Another important difference is that now by default we only grant Manage permission to the app. That is enough to perform the vast majority of its functions, except the following Actions, which require Full Control when running on events or timer (not manual) and Alerts with the option Check permissions of recipients activated in Administration:

  • Manage Permissions
  • Create Site
  • Copy list items - only when Copy permissions option is activated

When you create or update one of these Actions or activate the Alerts permissions check option, we will show a permission grant request. You only need to grant it once per site collection, you may ignore it later on, if asked again, the permission is already there and doesn't need to be re-granted.

 

Existing Customers

The change went into effect on November 4th 2024. Customers who installed Ultimate Forms beforehand, will by default keep their existing tenant-wide Full Control permission and may ignore the change altogether. If you do want to implement it in your environment, do the following (preferrable outside of business hours due to a brief loss of authorization):

  1. Delete the Enterpise Application
    1. Go into Entra ID
    2. In the left side navigation go to Application -> Enterprise Applications
    3. Locate Infowise Ultimate Forms Data Access application
    4. Open it, switch to the Properties section, then delete it
  2. Run Installation Wizard
    1. Go to our website as a Global Administrator of your tenant
    2. Click on Try Now Free in the top right corner of the page
    3. Pick Installation and enter your site URL
    4. Grant access in the pop-up window[s]
    5. For any additional site collection, you can either run the Wizard again, or, provided that you made the app available to all sites, simply click on Design and approve directly from the app
    6. If you are using any of the Action types that require Full Control, as a Site Collection or Global Administrator open and re-save a single action per site collection, it will elevate the permission level for that site collection

As you can see, the change can be very important, especially for larger enterprise environments, but implemented in the way that helps minimize any disruptions for existing installation.

Loading...

Add your comment

Comments are not meant for support. If you experiencing an issue, please open a support request.
Build powerful business applications in SharePoint using only your browser.
100% No-Code Solution
It’s never been easier to create, innovate, and share. All you need is your web browser!
Cost-Effective
Address business process pain points immediately. Save time and money.
Fantastic Support Team
In addition to our responsive support team, a wide variety of resources, documentations, tutorials, blogs and webinars is available to you
ULTIMATEforms is a complete platform that enables everyone to easily create and maintain Microsoft SharePoint-based business solutions without a single line of code
Powerful Forms
State-of-the-art responsive forms, complete with tabs, permissions, dynamic rules, repeating sections, electronic signatures and advanced validation, powered by our AI-assisted form generator
Powerful Automation
Replace complex workflows with simple, but powerful actions to create and update data inside SharePoint and in a variety of integrated applications and databases
Powerful Reporting
Transform data into actionable insights with detailed exportable reports, sophisticated dashboards, color-coded calendars and dynamic charts
100’s of Templates
Build and replicate business solutions with ease, selecting from our vast free library and creating your own custom templates, all installed with a single click
Dive deeper
Watch a short introductory video showcasing the different unique capabilities of UltimateForms.
Ready to get started?
Hands-on training is the best way to get proficient. That's why we've created three unique training offerings which will help you master ULTIMATEFORMS. Our interactive sessions are delivered via web meetings and conducted within personal virtual workspaces.
100% No-Code Solution
It’s never been easier to create, innovate, and share. All you need is your web browser!
Cost-Effective
Address business process pain points immediately. Save time and money.
Fantastic Support Team
In addition to our responsive support team, a wide variety of resources, documentations, tutorials, blogs and webinars is available to you
Microsoft partner logo
© 2005-2024 Infowise Solutions Ltd. All rights reserved.
Privacy | Cookie Policy | Accessibility | Cloud SLA