Admin: Entities, roles, SSO, connectors and credits in one place.
Set up your group, its companies and branches, who can do what, single sign-on, connections to other software, approval routines and AI-credit budgets. Every important change needs a second look and is recorded.
What does Kinnow Admin do? Set up your group, its companies and branches, who can do what, single sign-on, connections to other software, approval routines and AI usage limits. Every important change needs a second look and is recorded. Nothing is filed, paid or posted without a person.
Monday morning, before and after
In a 60-person group with three companies, access usually goes to whoever the owner last phoned, and nobody can say who is allowed to approve a payment.
| How it works today | How it works on Kinnow |
|---|---|
| A new joiner is given the same login as the person they replace | The joiner is invited, given a role and the companies and branches they may see, and the request goes to someone who can approve it |
| Approval limits sit in a circular nobody has updated since 2022 | Who signs off, in order, is written in plain words by record and amount; each step shows who holds it now and who covers for them |
| A manager has left and their approvals are stuck in an email chain | A "Waiting on you" list gathers everything needing your sign-off in one place, and each row says why it is yours |
| The auditor asks which controls were on at year end and someone reconstructs it from memory | The control posture statement lists every control, the minimum Kinnow enforces, your setting, who set it and when |
| Third-party tools are connected by whoever had the password | A four-step guide records how data flows, how far back to bring it and what happens when two systems disagree; a dashboard shows whether each connection is healthy |
See who can approve what in your group today. Ask us to set up your companies and roles.
See it work
A real cycle: bringing a second company and a new team onto Kinnow
| Step | Who | What Kinnow does | Where you decide |
|---|---|---|---|
| 1. Company profile | Owner or finance head | Collects the registered name, tax registrations (GSTIN, PAN and CIN for an Indian company), address, contact and the people who may sign for the company | Owner names the signatories and the documents each may sign |
| 2. Add companies | Group admin | Adds each legal company in the group, with its own financial year and reports; switches applications on company by company | The admin chooses which applications each company uses |
| 3. Invite and assign | Admin | Invites people and gives each a role and the companies they may see; a starter set of roles for your industry comes in, for example Partner, Audit Manager, Article Clerk and Client Read-Only for a CA practice | Admin edits, clones or drops any role |
| 4. Access request | Requester, then approver | Sends the request to whoever holds that approval; nobody can approve their own request | Approver grants or declines |
| 5. Sign-in | IT or admin | Sign in once through your company login (single sign-on, over OIDC or SAML), tested before it is made compulsory; or work-account sign-in for people already added | Admin turns enforcement on |
| 6. Connect tools | Admin | Walks through the four-step guide for each connection | Admin picks how data flows and which system wins a clash |
| 7. Starting defaults and sign-offs | Finance head | One click sets up a starting point: order-to-cash, purchase-to-pay and payroll routines, document numbering, approval levels for quotations, sales orders and purchase orders, and notification rules | Finance head edits the amounts and approvers |
| 8. Your rules | Finance head or owner | Writes rules as block, warn, needs approval or auto-fill, and tries them on a sample record before they stop real work | You approve any rule an agent drafted |
| 9. Review access | Another admin | Lists everyone limited to one company; for each, keep access (optionally until a date) or end it, with a reason | You cannot decide your own access |
How the work moves
Tell us your approval limits and who covers for whom. We will set them up in front of you.
Lists, statements and screens
| Output | What it shows |
|---|---|
| Control posture statement | As of a date: every accounting control, the minimum Kinnow enforces, your setting, who set it and when. Controls someone has confirmed and ones nobody has are in separate sections, and each unconfirmed row gives its reason |
| Audit log | Every action: changes to companies and applications, consent updates, erasure, setting changes. Filter by application, importance, person, record and dates |
| Waiting on you | One list of approvals on records, work an agent prepared and changes to shared records, each with the reason it is yours |
| Approval routine versions | Each version of who signs off in order, who holds each place and who covers, with compare and restore |
| Access review | For each company: everyone with limited access, the decision, the reason and any end date |
| Join requests | People who signed in with a matching work address and asked to be added; requests lapse after 14 days |
| Company profile | Tax numbers, address, contact and authorised signatories |
| Reported problems | Issues you reported and where each stands; duplicates merged and every reporter told together |
Ask Kinnow about access and approvals
Most of these are answered on the screen named. The last one goes through the Ask box.
| Question | Where Kinnow answers it |
|---|---|
| Who approves purchase orders above 5,00,000 | Approval routines: who signs off in order, who holds each place now and who covers |
| What is waiting on me | Waiting on you, with the reason for each row |
| Who in one of our companies can see group-wide numbers | Access review for that company, plus the role designer |
| Which controls did we have on at 31 March | The control posture statement as of that date |
| What did this rule stop last week | The rule's record, with the message each person saw when it blocked or held their work |
| I need the software to do something it does not | Describe it in the Ask box; it becomes a change request that someone on the Kinnow team reviews |
Ask Kinnow shows its source and answers within what the asker is allowed to see. Veil, our privacy layer, holds names and identifiers back before anything goes to an AI; it covers Ask Kinnow and most agents today.
Bring a real approval you find slow. We will write it as a rule and try it on a sample.
The controls an owner cares about
- You can tighten a control but never loosen it below the minimum Kinnow enforces. Only what you change is stored, so controls you leave alone pick up later improvements automatically.
- Each rule does one clear thing: block refuses the save, warn flags it, needs approval holds it until the named people sign off, auto-fill supplies a value. Anyone a rule stops sees why on the screen and whom to chase.
- A rule drafted by an agent waits in Agent drafts and starts only once you approve it. A rule that matches nothing and one that matches everything look alike in a list, so a trial run is built in.
- Roles are built from what a person may do. Kinnow has super-admin, admin and viewer; each application adds its own admin, manager, member and viewer. Access is given application by application.
- Access reviews end access straight away, with a reason, keep the record, and do not let anyone decide their own access.
- You can make single sign-on compulsory so password sign-in is switched off. Secret keys are encrypted and shown once.
- Erasure requests run across the applications and keep records the law requires.
- Every action is in the audit log.
Connects to
Admin sets the rules every other application follows: approvals for Buy and Sell, rent-cut approvals in Pact, who controls the numbers in Know, and the org chart in Common that approvals follow. Connections bring in data from other software; see migration for moving from your current software. Capabilities that sit behind Admin: access reviews, agent guardrails and control dials and the auditor statement.
Questions
Is Kinnow priced per user?
No. There is no per-user fee, and there are no login limits. As a team grows, Kinnow offers the role and access tools that suit the size, but it never blocks a hire.
How do connectors sync with our existing tools?
A four-step guide: sign in to the other software, choose how data flows (read-only from the other software, two-way, read-only from Kinnow, or owned by Kinnow), choose how far back to bring data, and decide what happens when the two disagree (latest change wins, Kinnow wins, the other software wins, or someone reviews). A dashboard shows whether each connection is healthy.
Can we control what the AI spends and what it can do?
Yes. A super-admin sets usage limits for the organisation, a role, a user or a company, sees usage agent by agent and can switch any agent on or off. Nothing an agent drafts, including a rule or an access set-up, takes effect until you approve it.
Who approves what, and can we change it ourselves?
You can. In Workflows you choose the record and the amount, such as purchase orders above 5,00,000, and who approves. Before you save, you see how many waiting records would go to different people. Earlier versions are kept and can be restored in a click. The change starts only when someone approves it.
How do we sign in: passwords, a work-account sign-in, or our own identity provider?
Any of them. Sign in once through your company login (single sign-on, over OIDC or SAML) works, with a test before you make it compulsory, and SCIM can add and remove people automatically from your company directory. Sign-in with a work email account is switched on for your company's email domain by the Kinnow team, and it never creates an account by itself.
What happens when an access request or an agent suggestion is wrong?
Someone on your team decides. An access request waits in an inbox for an approver, and nobody can approve their own. A rule an agent drafted sits in Agent drafts and does nothing until approved. Every action is recorded in the audit log.
How long does set-up take?
About two weeks to first results. Company profile, companies, roles and the first sign-off routines usually come first.
Access request to grant and workflow change to live. Each comes from your industry's processes, with an owner on every step and a clock on every hand-off. See the processes →
Start with one need. Switch on the next in a day. Same records, same login, no new licence.
Tell Kinnow what slows you down.
Answer three questions. Get the applications, the agents and a two-week plan for your business.