Assign permissions to Flows

For Flows that run in User Context, users must be granted the correct Profile or Permission Set to run the Flow before it will work.

Flows run in a "Context". The contexts in which Flows can run in are as follows:

  • User context: When a Flow runs in user context, its access to Sage People data is defined by the Profile and Permission Sets of the user who initiated the Flow. This means that the Flow can only interact with records and fields that the user has the necessary permissions and field-level access to modify or view. For example, if the user cannot edit a specific object or field, the flow will encounter errors if it tries to perform such operations.

  • System context with sharing: In this mode, the flow respects Salesforce's sharing settings, such as org-wide defaults, sharing rules, and manual sharing. It considers these settings when determining what data is accessible. It does not respect object permissions, field-level access, or other permissions of the user that initiated the Flow.

  • System context without sharing: In this mode, the flow doesn't consider sharing settings. It has access to all data regardless of sharing rules and permissions.

Record-triggered and Scheduled flows are always run in System Context without Sharing. This behavior cannot be changed.

For more information about run context, see the Salesforce article Flow Run Context.

Only users with the following permissions are able to execute flows:

  • Run Flows: this permission is included with Profiles or Permission Sets

  • Flow User: this permission can be assigned to users directly

  • Profile: the Profile has been granted permission to run the Flow in question.

Important If the user in question does not have the required permission, the flow will not run.

Assign permissions

There are 3 ways to assign permissions to run Flows:

Option 1: Grant the Run Flow permission to Profiles

You can assign the Run Flows permission to any profiles that need to be able to run Flows.

  1. Go to Setup, and in Quick Find enter Profiles. Select to open the Profiles page.

    Screenshot: open Profiles in Setup

  2. Beside each Profile that you use within your organization, select Edit.

    Screenshot: edit profile

  3. Search for the Run Flows permission. Select the checkbox to enable the permission.

  4. Select Save.

  5. Repeat the process for any additional profiles you want to use.

Note This is our recommended way to assign Flow permissions to your users.

Option 2: Edit Flow access

You can edit profile access for each Flow individually from the Flows page in Setup.

  1. Go to Setup, and in Quick Find enter Flows. Select to open the Flows page.

    Screenshot: open Flows in Setup

  2. Find the Flow you want to update.

    Screenshot: flows list

  3. Select the arrow on the right side of the list, and select Edit Access .

    Screenshot: edit access option

    Note If you do not see Edit Access, the Flow does not run in User Context and does not need to have its access settings updated.

  4. Select Override default behavior and restrict access to enabled profiles or permission sets.

    Screenshot: assign profiles to flow

    Select the profiles you want to enable to run the Flow and move them to the Enabled Profiles panel.

  5. Select Save.

Users in these profiles will be granted permission to run the Flow.

Option 3: Grant the Flow User permission to users

You can assign the Flow User permission to any individual users that need to be able to run Flows.

  1. Go to Setup, and in Quick Find enter Users. Select to open the Users page.

    Screenshot: select users in setup

  2. Beside each user that you want to run Flows, select Edit.

    Screenshot: edit user

  3. Search for the Flow User permission. Select the checkbox to enable the permission.

    Screenshot: edit user

  4. Select Save.

  5. Repeat the process for any additional users.