The "Shared app settings" feature allows kintone administrators to manage settings that are applied to all apps.

Settings for each app are configured by app administrators. However, to prevent high-risk settings from affecting all of kintone, kintone administrators can restrict certain settings.

1. Click the Settings icon (the gear-shaped icon) at the top of kintone, then click kintone administration.

2. On the kintone administration screen, click Shared app settings.

3. On the Shared app settings screen, configure the settings as needed.
   For details on the settings, refer to the following section.

   • Prohibit granting the "Manage app" permission to the "Everyone" group on the "Permissions for app" screen
   • Prohibit granting the "Export to file" permission to the "Everyone" group on the "Permissions for app" screen

4. Click Save.

kintone administrators can prohibit app administrators from granting the "Manage app" permission to the Everyone group.

When this option is enabled, the restriction affects not only new apps but also existing apps that already have the "Manage app" permission granted to the Everyone group.

kintone administrators can prohibit app administrators from granting the "Export to file" permission to the Everyone group.

When this option is enabled, it affects not only new apps but also existing apps where the "Export to file" permission is already granted to the Everyone group.

This section describes the impact if a kintone administrator restricts any of the following settings:
Option that can be managed in "Shared app settings"

Impacts on app administrators:

In an app where a prohibited permission is granted to the Everyone group on the Permissions for app screen, an error occurs and the following actions will be unavailable:

• Saving the permission settings
• Updating or activating the app

Impacts on the "View" screen:​

In an app where the prohibited permission is granted to the Everyone group, users with the "Manage app" permission for the app will receive an error and be unable to perform the following actions on the View screen:

• Saving a filter
• Saving a graph

Impacts when using the REST API:

If you execute the following REST APIs for an app where the prohibited permission is granted to the Everyone group, an error will occur and the actions cannot be performed:

• Update App Permissions
• Update Record Permissions (when using /k/v1/record/acl.json)
• Update Field Permissions (when using /k/v1/field/acl.json)
• Deploy App Settings (when executed with "revert: false")

If a kintone administrator prohibits any of the following settings, certain restrictions apply when creating apps using the Garoon "Space" feature.
Option that can be managed in "Shared app settings"

It is not possible to create new apps in Garoon public Spaces.

This is because the following permissions on the kintone Permissions for app screen are automatically granted to the Everyone group when an app is created in a Garoon public Space.

• View records​
• Add records​
• Edit records​
• Delete records​
• Manage app​
• Import from file​
• Export to file​

If you need to create apps in Garoon public Spaces, use one of the following methods:

Create an app in kintone and then place it on a Garoon public Space.
Note that an app with the prohibited permission already granted to the Everyone group can still be placed on Garoon public Spaces.

Only when creating an app, temporarily lift the restrictions by unchecking all the prohibited items in the following settings.
Option that can be managed in "Shared app settings"

After creating the app, check the boxes again to re-enable the restrictions. Then, review the app's access permissions as needed.