OasisPro · PermissionWorks · IFS Cloud Upgrade Permissions
IFS Cloud permission management has always been one of the most time-consuming parts of any IFS project. PermissionWorks changes that: for go-lives, for upgrades, and for every day your IFS system is running. Now with full user management built in, it is the only tool your IFS team needs for permissions and users from day one.
Most IFS Cloud teams face the same three permission problems: getting it right on go-live, rebuilding it after every upgrade, and keeping it accurate as the business changes day to day. PermissionWorks solves all three, and you can choose exactly how you want to use it. As a one-time tool for a specific project, as a permanent part of your IFS environment, or with a specialist IFS permission consultant from OasisPro embedded alongside it.
IFS Cloud upgrade permissions are the most underestimated risk in every IFS project. PermissionWorks removes that risk entirely.
PermissionWorks detects how your users actually work in IFS Cloud, then generates accurate, complete permission sets that survive upgrades without manual rework. Navigate the screens, PermissionWorks does the rest.
Why IFS Cloud upgrades break existing permission sets
IFS Cloud upgrades are not cosmetic. Each release reorganises menus, adds new screens, restructures existing functionality, and sometimes removes or renames elements that existing permission sets were built around. When those changes land in your environment, the permission sets you built carefully for the previous version are suddenly pointing at screens and grants that have moved, changed, or no longer exist in the same form.
The result is broken access across your user base on the day of go-live, exactly when you need everything to work. And the fix, without PermissionWorks, means starting the permission mapping process from scratch: screen by screen, role by role, week after week.
IFS Cloud upgrade permissions are the number one cause of delayed go-lives
Most IFS project overruns are not caused by the technical upgrade itself. They are caused by the weeks of permission rework that follow it. Teams that plan for this discover the scale too late. Teams that use PermissionWorks never experience it at all.
Without PermissionWorks
Upgrade lands in environment ↓ Users report broken access ↓ Team identifies affected roles ↓ Manual screen-to-grant remapping begins ↓ Weeks of testing and gap-fixing ↓ New issues found in edge cases ↓ More manual rework ↓ Go-live delayed by 6–12 weeks ↓ Repeat on the next upgrade
With PermissionWorks
Upgrade lands in environment ↓ Navigate updated screens per role ↓ PermissionWorks generates new permission sets automatically ✓ ↓ Validate and deploy ↓ Users working on day one ✓ Ready for the next upgrade too ✓
🔐 No access to IFS Solution Manager required. Ever again.
Once PermissionWorks is integrated, your team no longer needs to access IFS Solution Manager to manage permissions after any upgrade. Every IFS Cloud permission set is built, updated, and deployed entirely through PermissionWorks, with no Solution Manager involvement required at any stage. That means fewer privileged users, a smaller attack surface, and a cleaner, more secure IFS Cloud environment from go-live forward.
What IFS Cloud upgrade permission rework actually costs your business
The visible cost is time. Six to twelve weeks of specialist effort remapping IFS Cloud permissions after every major upgrade. But the real cost is compounding: delayed go-lives, frustrated users, growing support ticket queues, and the risk that someone in finance or operations has been working with incorrect access for weeks before anyone notices.
Delayed go-live
Broken IFS Cloud upgrade permissions on day one push go-live dates back by weeks. Business continuity suffers, confidence drops, and the upgrade project costs more than it should.
Support ticket overload
When IFS Cloud upgrade permissions break, every affected user raises a ticket. Finance, operations, procurement, HR, all at once. Your IFS team spends weeks triaging access issues instead of adding value.
Security and audit risk
To silence tickets quickly, admins often grant broader access than needed. This creates permission sets that are impossible to audit properly and create security exposure that survives long after the upgrade project closes.
How PermissionWorks handles IFS Cloud upgrade permissions
PermissionWorks does not try to translate old permission sets into the new IFS Cloud structure. It builds the correct permission sets for the upgraded environment from real usage, which means the output is always accurate for the version you are actually running, not a best-guess translation of what used to work.
Upgrade lands
Your IFS Cloud environment upgrades to the new version. PermissionWorks is already integrated and ready.
Navigate screens
For each role, a team member navigates the IFS Cloud screens they need access to. No technical knowledge required.
Permission sets generated
PermissionWorks automatically generates accurate IFS Cloud permission sets based on the actual screens navigated in the new version.
Validate and deploy
OasisPro supports validation and deployment. Users are working in the upgraded IFS Cloud environment within days of go-live.
Which IFS Cloud customers face the biggest upgrade permission risk
Every IFS Cloud customer faces this problem at some point, but certain environments are more exposed than others. If any of the following apply to your business, IFS Cloud upgrade permissions are a risk you should be planning for now.
| Situation | Why upgrade permissions become a problem | Risk level |
|---|---|---|
| Large number of IFS Cloud roles | More roles means more permission sets to rebuild after every upgrade. Manual rework scales directly with the number of roles in your environment. | High |
| Major version upgrade planned | Major IFS Cloud upgrades reorganise the most functionality and introduce the most screen changes, making existing permission sets the most likely to break. | High |
| No dedicated IFS permissions resource | Without a specialist who understands IFS Cloud permission architecture, rework takes longer and introduces more errors during the rebuild process. | Medium |
| Tight go-live window | Any project with a fixed go-live date is at risk if permission rework overruns. There is no way to ship the upgrade with broken access. | High |
| Compliance or audit obligations | Broad access granted to silence post-upgrade tickets creates audit findings that are expensive and time-consuming to remediate. | High |
The right time to integrate PermissionWorks for your IFS Cloud upgrade
The best time to integrate PermissionWorks is before your upgrade project begins. That gives you time to deploy, validate, and have the tool ready before the upgrade lands in your environment. But PermissionWorks can be integrated at any stage of an upgrade project and will deliver value from the point of deployment forward.
IFS Cloud upgrade permissions should never delay a go-live. With PermissionWorks, they do not.
The manual approach to IFS Cloud upgrade permissions is not a risk you have to accept. PermissionWorks removes it from the project entirely. Every upgrade from this point forward becomes a planned, predictable event rather than a source of weeks of unplanned rework.
Why IFS Cloud customers choose OasisPro to deploy PermissionWorks
PermissionWorks is deployed and supported by OasisPro's certified IFS Cloud specialists. We have delivered IFS Cloud upgrade projects across the UK and Europe and we understand the permission challenge at every level of the platform, from initial implementation through to complex multi-version upgrades.
- Certified IFS Cloud upgrade specialists: We have delivered IFS Cloud upgrade projects across the UK and Europe and know exactly where permission issues arise and how to prevent them.
- Deployment in one week: PermissionWorks is ready before your upgrade lands. We have a proven, repeatable deployment process that gets the tool live quickly.
- Hands-on support throughout your upgrade: We are with you from PermissionWorks activation through permission generation, validation, and full user rollout on the new version.
- Ready for every future upgrade: Once PermissionWorks is deployed, it handles IFS Cloud upgrade permissions on every subsequent release. You do this once and the problem is solved permanently.
- No unnecessary complexity: We get PermissionWorks working in your specific IFS Cloud environment quickly, cleanly, and correctly, without overengineering the solution.
Stop rebuilding IFS Cloud permissions after every upgrade. Start using PermissionWorks.
Every IFS Cloud upgrade creates the same permission problem. PermissionWorks solves it once, permanently. The businesses integrating PermissionWorks now will save weeks of rework on every upgrade from this point forward. The businesses still doing it manually will keep losing those weeks every time.
Planning an IFS Cloud upgrade? Talk to us about PermissionWorks first.
We will show you exactly how PermissionWorks fits into your IFS Cloud upgrade project, what the deployment looks like in your environment, and how quickly your team will see the difference.
Three ways to use PermissionWorks for IFS Cloud permission management
Every IFS Cloud business has different needs. PermissionWorks is built to fit all of them. Whether you need it for one specific project or want it running permanently, there is a model that works for your team and your budget.
Not sure which model fits your business? OasisPro will tell you honestly.
Some IFS Cloud businesses need PermissionWorks for a one-off project and nothing more. Others benefit from having it running permanently with ongoing specialist support. We will review your environment, understand your roadmap, and recommend the right engagement model for your actual situation, not the most expensive one.
New in PermissionWorks: full IFS Cloud user management
PermissionWorks has expanded beyond permission sets. The latest version introduces a complete IFS Cloud user management capability, bringing all user-related activities into a single, streamlined tool alongside the permission automation your team already relies on.
One tool for permissions and users. Everything IFS Cloud user management requires, in one place.
Managing IFS Cloud users has always meant juggling multiple areas of the platform. PermissionWorks now brings all of that together: user creation, role assignment, access control, onboarding, offboarding, and ongoing user administration, all automated and all managed through a single interface.
User onboarding
New starters in IFS Cloud can be onboarded with the correct permissions and user settings from day one. PermissionWorks generates the right permission set based on their role, assigns it, and has the user ready to work without any manual configuration required from your IFS team.
User offboarding
When a user leaves or changes role, PermissionWorks handles the access removal and reassignment accurately and immediately. No orphaned permissions. No access that outlives the employee. Clean, auditable, and compliant user offboarding every time.
Bulk user management
Restructuring a team? Onboarding a new department? PermissionWorks handles bulk user operations across IFS Cloud at scale, applying the correct permissions and user settings to hundreds of users without any manual effort from your IFS administration team.
Access reviews and audit trail
PermissionWorks maintains a complete audit trail of every user and permission change across your IFS Cloud environment. Run access reviews, produce compliance reports, and demonstrate to auditors exactly who has access to what and when it was granted or removed.
Permissions and users. Both automated. Both accurate. Both in PermissionWorks.
IFS Cloud permission management and IFS Cloud user management are two sides of the same problem. PermissionWorks now solves both. Your IFS team spends less time on administration and more time on the work that actually moves the business forward.
Frequently asked questions about PermissionWorks, IFS Cloud permission management, and user management
Why do IFS Cloud upgrades break existing permission sets?
IFS Cloud upgrades frequently reorganise menus, add new screens, and restructure existing functionality. When this happens, permission sets built against the previous version no longer map correctly to the updated screen structure. Access breaks, users raise tickets, and the permission rebuild process starts again.
How long does permission rework take after an IFS Cloud upgrade?
Without PermissionWorks, permission rework after an IFS Cloud upgrade typically takes between 6 and 12 weeks depending on the number of roles and the scale of the upgrade. With PermissionWorks, the same process takes days.
Can PermissionWorks be deployed during an IFS Cloud upgrade project?
Yes. PermissionWorks can be integrated at any point in an IFS Cloud upgrade project. OasisPro deploys it in approximately one week, and it will handle permission generation as soon as the upgraded environment is live.
Does PermissionWorks require access to IFS Solution Manager?
No. Once PermissionWorks is integrated, your team no longer needs to access IFS Solution Manager to configure or update permissions. All permission sets are built, managed, and deployed entirely through PermissionWorks, at every stage of the IFS Cloud upgrade lifecycle.
What IFS Cloud versions does PermissionWorks support?
PermissionWorks supports IFS Cloud across current and recent versions. OasisPro's IFS Cloud specialists will confirm compatibility with your specific environment and handle the full deployment and validation as part of the engagement.
Can I use PermissionWorks for just one IFS Cloud go-live or upgrade?
Yes. PermissionWorks is available as a one-time engagement for a specific IFS Cloud go-live or upgrade project. OasisPro deploys the tool, supports you through permission generation and validation, and your team goes live on schedule. There is no requirement for an ongoing licence if a one-time use fits your situation better.
What does the consultant-plus-tool model include?
The consultant-plus-tool model gives you PermissionWorks integrated into your IFS Cloud environment alongside a dedicated OasisPro IFS permission management specialist. Your consultant handles the complex permission decisions, guides validation, and remains available as your environment evolves. This model suits businesses with complex role structures, compliance requirements, or frequent IFS Cloud changes.
What user management features does PermissionWorks now include?
The latest version of PermissionWorks includes full IFS Cloud user management: user creation, role assignment, access control, onboarding, offboarding, bulk user operations, access reviews, and a complete audit trail. All user-related activities that previously required manual IFS Cloud administration are now handled through PermissionWorks automatically.
How does PermissionWorks handle IFS Cloud user offboarding?
When a user leaves or changes role, PermissionWorks removes or reassigns their IFS Cloud access accurately and immediately. This prevents orphaned permissions, eliminates the risk of former employees retaining access, and produces a clean audit trail showing exactly when access was removed and by whom.
IFS Cloud permission management and user management. Solved permanently with PermissionWorks.
IFS Cloud permission management and user management have always been treated as unavoidable costs of running the platform. PermissionWorks removes that assumption. Whether you are planning your first major IFS Cloud upgrade or your fifth, PermissionWorks gives your project a faster, more accurate, and more sustainable path through the permission rebuild that every upgrade requires.
The manual approach costs six to twelve weeks after every upgrade. PermissionWorks costs days. For any business that takes IFS Cloud seriously, the choice is straightforward.
OasisPro are IFS Cloud specialists based in Oxfordshire, UK, helping businesses across the UK and Europe get more from their IFS Cloud environments through PermissionWorks, ISO 20022 compliance, eInvoicing, and ERP optimisation. · info@oasispro.co.uk · 01865 538071 · oasispro.co.uk