Overview 

As a Torii admin, you can provide the different application owners access to Torii from which they can View, Control, and Manage the applications under their responsibility.

Note that External users can not access Torii via the App owner access mechanism.

Designated guidance for app owners is located under The Application Owners category in our Help Center. There, they can find targeted information for app management.
Additionally:
When first accessing Torii, the app owners will get a popup referring them to relevant help articles.
Also, while using the Torii app, clicking the "help" icon will direct them to this category. 

Who is an app owner?

• An app owner is a company employee assigned to and in charge of a SaaS application used by the organization.
  • There can be more than one app owner per application. In this case, you can assign whether that person is the primary app owner or not. 
  • An app owner does not have to be a Torii member or have access to the Torii console. 
• App owners can be set for significant apps such as Netsuite or Hibob, owned by finance or HR, or an application that serves only a few users in the organization.
• Currently, app owners don't have permission to remove themselves from ownership or assign another employee as an app owner.
  

• Read more about assigning app owners in the "Assign Application Owners" article.

   

View and Manage App owners

1. Go to Settings 
2. Click on Members & App Owners
3. Select the App Owners tab
4. View the application owners' details, the applications they manage, and their usage level.
   
    
5. You can toggle whether app owners should receive access to the Torii console or not. Please enable this feature if you want app owners in your organization to manage their apps in Torii.
   • When enabling the access toggle: 
     • You will get a notification indicating the outcome of this action and allowing you to approve/cancel the action.  
     • All app owners will receive an invitation email with a link to Torii.
   • Disabling the Toggle will revoke access from all App Owners to Torii. 
   • Note that the default state for the Toggle is "Off".
     
      

Email notifications

• Once the toggle is enabled, whenever a user is assigned as an app owner to an app for the first time, they will receive an invitation email. (click here to see information about SSO)

• The invitation includes the application logos the owner is assigned to and a link to the Torii environment, where the app owners can view and take action on the application assigned to them.
  Note that the email logo can be customized.

  Users who are already app owners and have access to the Torii console that are assigned additional app ownership will not receive an additional invitation email.
  

• Torii Invitation Emails are sent from the user who assigned the app's owner.
• When turning on the "App owners access to Torii" toggle, all assigned app owners will receive an invitation email from the user who turned on the toggle.  
• An option to re-invite users is available for PENDING users (users who have not followed the log-in to Torii via email).
  
   

What can an App owner do?

App Owners who are not Torii Members will be able to view only information about applications they own.

1. The left navigation menu bar is not displayed.
2. App Owners will be able to take action on Applications they own, as well as Users and (in Torii SMP) Contracts for that app (including the ability to upload contracts & documents).

App Owners who are also a Torii member with a defined role:

• Will be able to keep the existing Torii experience and permissions for all Torii pages outside of the single app page.
• In the single app page, these users will have additional app owner permissions for apps they own

Information about SSO

• Organization without SSO
  App owners will need to use the invitation email link to access Torii.
   
• Organization using SSO
  SCIM based provisioning
  The IT should provision app owners with access to Torii as employees (no user type in the SCIM attribute).
  https://support.toriihq.com/hc/en-us/articles/9183460072347-Torii-s-SCIM-User-Provisioning
  Please note that existing Torii users should not be re-provisioned as employees. No additional access is required.
  
  Non-SCIM-based Provisioning
  IT should add App Owners to the Torii provisioned group in the SSO provider.
  You can use the CSV download option on the App owner page to get the most updated list of app owners.

Q&A

• Q: Who is a Torii Member ?
• A: Torii Member is an organization employee that was invited to Torii and was assigned a Torii role.
  Note that only Torii admins can invite employees to Torii.
   
• Q: Can a Torii member be assigned as an app owner?
• A: Yes, and it is expected that some of the Torii Members will also act as app owners, mostly for the core IT Apps.
  • Torii users have scopes and permissions derived by the role assignment defined by Torii admins.
  • The role assigned to the Torii user defines this user's capabilities throughout the Torii platform.
  • The main difference is in the single app page, where the Torii user will gain additional permissions over his owned apps 
    
     
• Q: What will happen once I revoke the access to app owners?
• A: Once revoking access, all App owners' access to Torii is canceled.
  • No email notification is sent. The app owners' assignments don't change.
  • Only their access to Torii is revoked.
    
     
• Q: Can I revoke a specific app owner's access to Torii?

• A: Yes. This can be done by changing the app's ownership

   

• Q: Can app owners change their ownership over apps?
• A: No. Only Torii members with Applications "Take action" permission level can change app ownership
  
   
• Q: What happens when assigning an additional app to an app owner?
• A: The added app will be included in the view created for that app owner; no additional invite mail will be sent.
  
   
• Q: What can I do if an app owner hasn't received the email invitation?
  • Re-invite users is available for PENDING users (users who have not followed the log-in to Torii via email).
  • Re-assign the employee to the app as an app owner. App ownership assignment triggers Email invites to users who do not have access to Torii.
    
     
• Q: Who will be the invite sender?
• A: The invite email is sent from the user who has assigned an owner to an app.
  
   
• Q: Can external users get access to Torii via the app owner access?
• A: No, external users can not access Torii via the app owner access mechanism.