Overview for the Procore site owner
TonicDM is an information management system that AECO organizations use to keep and organize their project records. By allowing the connection between your Procore site and TonicDM, people you've allowed access to in Procore will be able to access that same data in TonicDM.
Procore requires that the TonicDM user connect their TonicDM account to their Procore account using their Procore username and password. Procore then gives TonicDM the right to access Procore data as if it was that user.
From then on TonicDM can retrieve data from Procore in the same way that user would. Procore's security restricts access just as it would if the person had logged into the Procore website.
If you change permissions in Procore or deactivate the user in Procore, that user in TonicDM is immediately restricted in the same way. This is because all requests TonicDM makes on behalf of that user go through Procore's security, just like if the user was in the Procore website.
The only benefit this connection has to the TonicDM user is that they can pull their data into TonicDM instead of having to manually copy it from the Procore website, which saves them time.
How to turn on "Allow User Installs" or install the TonicDM Procore app
You will need to be a user with company-level Admin permissions on the Procore site to complete the following steps:
Navigate to the company-level Admin tool.
On the right side of the page under "Company Settings", click "App Management".
In the top-right of the page, you should see the "Allow User Installs" setting. Please turn this on as pictured below, or click Install App and choose TonicDM from the Marketplace.
For more information regarding this setting, please refer to the Procore site: "Allow User Installs" support documentation.
How the TonicDM app accesses your data
It is important to know that by authorizing the TonicDM app you are not exposing anything new. Our customer use TonicDM as a "system of record" for their project information.
Without the connection, the TonicDM user will manually download each Procore item and manually upload it to their TonicDM project in order to save it for their records.
With the connection, they have a button in TonicDM that does this for them. Because the connection is authenticated at the user level, TonicDM's access is restricted to that of the user.
Information from Procore: https://v2.support.procore.com/faq-how-do-integrations-with-procore-access-my-companys-data
There are 2 types of access for third party integrations:
Authorization Code [TonicDM uses this type]
Access is per-user and third party has the same access as the Procore user with the integration. If the user can access the information via the Procore Website, they can access it using the integration. If they can't access the data using the Procore website, they can't access it using the integration.DMSA:
Access is independent of any particular user. A DMSA appears as a user in your Procore Directory, and functions as the integration's way to log in to your Procore account and interact with your company's data. Developers determine the permissions necessary for the app to do its job, and the DMSA user is assigned those permissions by default upon installation. This type of app has the same permissions to your Procore data no matter which user is interacting with it.
You can know that TonicDM is the "Authorization Code" integration type because there is no "TonicDM user" or "Service Account" that you need to create in Procore.