Shopify Flow: Staff now need permissions to test and turn on workflows
By Steven Van ·
Flow now checks each workflow step against staff admin permissions, while existing workflows keep running and current Flow users keep access.
Staff now need the right admin permissions, not just access to the Flow app, to test or turn on a workflow in Shopify Flow. Before this change, a single Flow app permission let a staff member do everything in Flow.
How access is set now
Access to Flow is controlled by two Flow automations permissions in Settings > Users > Roles: "View, create, and delete automations" and "Manage connections and secrets". Flow also checks each workflow against the staff member's other admin permissions. To test or turn on a workflow, staff need the permissions for each of its steps. A workflow with the Add customer tags action, for example, needs the Edit customers permission. Workflows that use a connection or secret also need the Manage connections and secrets permission.
What staff without a required permission can do
Staff who are missing a permission that a workflow needs:
- Can still open Flow, build and edit workflows, and save drafts.
- Can't test, turn on, turn off, or apply changes to that workflow, run it manually, or cancel or retry its runs.
- Won't see data they don't have permission to view, such as sample data, test results, and workflow run details.
- Will see a message in Flow showing why they cannot access a feature.
Existing workflows and staff
Workflows that are already on keep running. Staff who have access to Flow today keep it, and they are given the Flow automations permissions automatically. Store owners always have full access to Flow. To review what staff can do, go to Settings > Users > Roles in the Shopify admin.
