Workflow permissions

Whether an operation on a workflow is allowed is determined by the workspace role and the workflow's owner assignment.

• Creating a workflow, and managing a workflow you don't own, are determined by the workspace role, as described in Workspace permissions.
• Viewing, editing, running, and deleting an individual workflow is determined by that workflow's owner. Users with the workflow manage permission (Workspace Owners and users whose custom role has Manage selected for Workflows in Roles) can operate every workflow.

For a feature overview, see Workflow.

Owners

An owner is a user or a group. Immediately after creation, only the creator is an owner. You can change this from Owners > Edit > Add owner on the detail screen. A workflow can have 1 to 30 owners (Fixed limits and constraints).

Users and groups assigned as owners can view, edit, run, and delete that workflow.

Operations and required permissions

Operation	Required permission
Viewing the list and details	Owner of the workflow, or has the workflow manage permission
Creating and duplicating	Workspace Editor or higher
Editing, enabling, disabling, deleting, running manually, and changing owners	Owner of the workflow, or has the workflow manage permission

Whether SQL run via Run Query is allowed is also determined by the permissions of the target connection. Connection permissions are checked when the workflow is saved, against the user saving it. They aren't checked at run time, so saved steps keep running SQL even if the user who saved them later loses access to the connection. Owners who can't run SQL on the connection (such as Workspace Viewers) can still run the workflow manually and view its results.