Flow Permissions
Controlling who can access and trigger your automation flows is essential for maintaining security and ensuring smooth operations in FlowRunner™. Execution permissions let you define exactly who - or what - can call your flows, whether it’s users, roles, or external systems.
This feature allows you to:
- Grant access to specific individuals or groups via roles.
- Enable integration with external systems, ensuring they can invoke flows securely.
By setting clear permissions, you safeguard your automation while giving authorized entities the access they need. Here’s a refined and more concise revision of the "Flow Permission" chapter. The goal is to streamline the explanations, focus on actionable details, and avoid repetitive or overly verbose language, all while preserving the links.
Execution Permissions¶
Execution permissions allow you to control access to your flows, determining which users, roles, or systems can trigger them. These permissions apply to all versions of a flow, ensuring consistent access management across your automation.
Flows can be triggered in two primary ways:
- API Calls: External systems or services can trigger flows via API, enabling integration with tools and platforms outside your FlowRunner automation.
- The
Call Flow
Action Block: Use this to chain flows together, creating complex and efficient automation systems.
Granting or Denying Permissions¶
Each flow in FlowRunner can have a custom set of permissions. You can assign these permissions to:
- Individual Users: Grant or deny access directly to specific user accounts, controlling who can trigger the flow.
- Security Roles: Assign permissions to roles to efficiently manage access for groups of users.
System-Level Roles¶
System-level roles, such as NonAuthenticatedUser
and AuthenticatedUser
, allow you to manage access based on user authentication. For instance, denying permission to the NonAuthenticatedUser
role ensures only logged-in users can trigger certain flows.
Default Permissions¶
By default, all users and roles have permission granted to trigger flows. This setup simplifies testing and integration during development. Once your flows are ready for production, you can restrict permissions in the UI to meet your app’s security needs.
Changing Permissions in the UI¶
Configuring execution permissions is straightforward. Here’s how to manage access for your flows:
- Navigate to the Flow Manager and locate the flow you want to configure.
- Click the Permissions icon (lock symbol) in the flow’s title bar.
- In the Permissions popup, select from two tabs:
- USER PERMISSIONS: Manage access for individual users.
- ROLES PERMISSIONS: Set permissions for user roles.
- Adjust permissions by toggling the icons next to each user or role:
- Gray Checkmark: Permission is inherited from app-wide settings.
- Green Checkmark: Permission is explicitly granted for this flow.
- Red X: Permission is explicitly denied for this flow.
Execution permissions are critical to securing your FlowRunner™ automations. By tailoring access for users, roles, and external systems, you can maintain both efficiency and control. Backendless makes this process intuitive, so you can focus on building great applications while ensuring your automations remain secure.