{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":4423,"path":"build-workflows/workflow-studio/user-access-flow-designer.md","title":"User access to Workflow Studio flows","bundle":null,"doc_type":null,"release":"australia","body":"\n# User access to Workflow Studio flows\n\nAdministrators can grant users access to Workflow Studio flows by assigning delegated development permissions or directly assigning a user role. Administrators can also specify which features and content a user can access based on user roles. Application developers can access Workflow Studio functionality through APIs for flows, subflows, and actions.\n\n## Access by user role\n\nAdministrators can grant access to Workflow Studio flows by directly assigning users the flow\\_designer user role, which includes the role to view flow execution details.\n\n**Warning:** Directly granting a user the flow\\_designer role is equivalent to giving the user the admin role, because Workflow Studio can run flows as the System user, which has access to all tables and all database operations.\n\nAdministrators can also grant users one or more Workflow Studio roles to enable them to create flows and subflows, view flow execution details, and create actions.\n\n<table id=\"table_utq_v2r_nnb\"><thead><tr><th>\n\nRole title \\[name\\]\n\n</th><th>\n\nDescription\n\n</th><th>\n\nContains Roles\n\n</th></tr></thead><tbody><tr><td>\n\nflow\\_admin\n\n</td><td>\n\nEnables limited admin access to all Workflow Studio flow, subflow, and action content.\n\n</td><td>\n\nflow\\_designer, flow\\_operator, flow\\_write\\_enabled, action\\_designer, action\\_category\\_creator, action\\_write\\_enabled, flow\\_designer\\_scripting, connection\\_admin, flow\\_report\\_viewer\n\n</td></tr><tr><td>\n\nflow\\_designer\n\n</td><td>\n\nEnables you to launch the Workflow Studio flow design environment to create and edit flows and subflows.\n\n</td><td>\n\nflow\\_operator, trigger\\_designer\n\n</td></tr><tr><td>\n\nflow\\_designer\\_scripting\n\n</td><td>\n\nEnables someone with the flow\\_designer or action\\_designer role to set and modify input values by writing inline scripts. For information, see [Inline scripts](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/build-workflows/workflow-studio/inline-scripts.md).\n\n</td><td>\n\nnone\n\n</td></tr><tr><td>\n\nflow\\_operator\n\n</td><td>\n\nEnables you to view flow execution details, dashboards, and logs. Administrators can grant this role to users that want to be able to view flow results but not create, change, or test them.\n\n</td><td>\n\nnone\n\n</td></tr><tr><td>\n\nflow\\_report\\_viewer\n\n</td><td>\n\nEnables you to view reports for Workflow Studio flow tables. For a list of relevant flow reporting tables, see [Flow execution details retention](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/build-workflows/workflow-studio/flow-reporting.md).\n\n</td><td>\n\nnone\n\n</td></tr><tr><td>\n\ntrigger\\_designer\n\n</td><td>\n\nEnables you to launch Workflow Studio and create, edit, and delete a saved trigger.\n\n</td><td>\n\nnone\n\n</td></tr><tr><td>\n\naction\\_designer\n\n</td><td>\n\nEnables you to launch the Workflow Studio action design environment to create and edit actions.**Important:** This role provides access to all actions regardless of their application scope.\n\n</td><td>\n\nnone\n\n</td></tr><tr><td>\n\naction\\_category\\_creator\n\n</td><td>\n\nEnables someone with the action\\_designer role to create action categories for actions and subflows.\n\n</td><td>\n\nnone\n\n</td></tr><tr><td>\n\nfd\\_read\n\n</td><td>\n\nEnables you to launch the Workflow Studio flow and action design environments to view the configuration and execution details of flows, subflows, and actions.**Note:** Read only roles are incompatible with roles that provide write access. Avoid granting the same user both a read only and a write access role.\n\n</td><td>\n\nfd\\_read\\_flows, fd\\_read\\_actions, fd\\_read\\_operations\n\n</td></tr><tr><td>\n\nfd\\_read\\_flows\n\n</td><td>\n\nEnables you to launch the Workflow Studio flow design environment to view the configuration and execution details of flows and subflows.**Note:** Read only roles are incompatible with roles that provide write access. Avoid granting the same user both a read only and a write access role.\n\n</td><td>\n\nfd\\_read\\_operations\n\n</td></tr><tr><td>\n\nfd\\_read\\_actions\n\n</td><td>\n\nEnables you to launch the Workflow Studio action design environment to view the configuration of actions.**Note:** Read only roles are incompatible with roles that provide write access. Avoid granting the same user both a read only and a write access role.\n\n</td><td>\n\nnone\n\n</td></tr><tr><td>\n\nfd\\_read\\_operations\n\n</td><td>\n\nEnables you to view basic flow and action execution details. When reporting is enabled, you can only see basic execution details such as the runtime state and duration. If the reporting level generates additional details, you can't see them. Administrators can grant this role to users that only need to view basic execution results but not create, change, or test flows and actions.**Note:** Read only roles are incompatible with roles that provide write access. Avoid granting the same user both a read only and a write access role.\n\n</td><td>\n\nnone\n\n</td></tr><tr><td>\n\nfd\\_read\\_operations\\_all\n\n</td><td>\n\nEnables you to view all generated flow and action execution details. When reporting is enabled, you can view all available execution details. You can only see as much detail as defined by the reporting level system property. Administrators can grant this role to users that need to view all flow results but not create, change, or test flows and actions.**Note:** Read only roles are incompatible with roles that provide write access. Avoid granting the same user both a read only and a write access role.\n\n</td><td>\n\nfd\\_read\\_operations\n\n</td></tr></tbody>\n</table>**Note:** Some applications provide UI actions to view related flow or flow contexts. You need an application-specific user role to view such UI actions. For example, users require the **itil** or equivalent user role to view the **Flow Context** UI action available from Requested Item records.\n\n## API access\n\nApplication developers can access Workflow Studio functionality through APIs for flows, subflows, and actions. Flow authors can enable individual flows, subflows, and actions to be client callable during design. For more information, see [API access to Workflow Studio flows](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/build-workflows/workflow-studio/api-access-flow-designer.md).\n\n## Delegated development access\n\nAdministrators can grant users access to Workflow Studio flows by creating an application and assigning users as developers with the [delegated development](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/application-development/c_DelegatedDevelopment.md) permission. Delegated development allows administrators to control whether flow designers can access features normally restricted to admin users such as assigning user roles, creating access controls, or creating scripts. For more information, see [Developer permissions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/application-development/developer-permissions.md).\n\n## Role-based content filtering\n\nSpecify the user roles necessary to access Workflow Studio flow content. For example, flows, flow triggers, actions, and subflows. Manage content filtering by creating content definitions and content filtering rules. For more information, see [Content filtering for Workflow Studio flows](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/build-workflows/workflow-studio/content-filtering-flow-designer.md).\n\n**Note:** Your users must have the flow\\_designer role to create and edit flows. You can specify the additional roles that a user must have to access particular features or content.\n\n## Role-based feature access\n\nSpecify additional user roles necessary to access the UI elements of Workflow Studio flows. For example, specify a role to access the buttons to save, test, or activate a flow or to access the option to copy a code snippet. Manage feature access directly through the Feature Access List. For more information, see [Manage access to Workflow Studio flow features](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/build-workflows/workflow-studio/manage-access-features.md).\n\n**Note:** Your users must have the flow\\_designer role to create and edit flows. You can specify the additional roles that a user must have to access particular features or content.\n\n"}}