Shopify Flow now uses the staff permissions you manage in your Shopify admin. Before this change, one Flow app permission let a staff member do everything in Flow. Now, access is set by two Flow automations permissions: "View, create, and delete automations" and "Manage connections and secrets". You find them in Settings > Users > Roles.
Flow also checks each workflow against the other admin permissions a staff member has. To test or turn on a workflow, staff need the permissions for every step in it. For example, a workflow with the Add customer tags action needs the Edit customers permission. This keeps Flow within what each person is already allowed to do in your admin.
What staff can and cannot do
Staff who are missing a required permission can still open Flow, build and edit workflows, and save drafts. They cannot test, turn on or off, apply changes to, or run a workflow manually. They also cannot cancel or retry its runs. Sample data, test results and run details stay hidden from them, and Flow shows a message explaining why a feature is unavailable.
What to do this week
- Open Settings > Users > Roles and review the roles of staff who use Flow.
- Check which steps your active workflows use, and confirm the matching admin permissions are set for anyone who manages them.
- Workflows that are already on keep running, so nothing changes for them today.
- Store owners keep full access to Flow.
Staff who already have Flow access keep it and are given the Flow automations permissions automatically. Workflows that use a connection or secret also need the Manage connections and secrets permission, so check that for anyone who sets those up.
Written with AI from the source above. If something looks off, the source is what counts.
