cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Anonymous
Not applicable

All about "Manage Run-Only Users"

There is absolutely no documentation on this key function that is prerequisite to getting any value out of Flows at the enterprise level.  Really, Microsoft should provide this.  But Microsoft seems determined to force everyone to pay for premium support by providing no documentation at all on its products.

 

If anyone has a document explaining the options for this and how to set a flow up for each option, I would appreciate you sharing it with me.  I am specifically interested in understanding the whole notion of "inviting a sharepoint list or library", because I have no idea what that means.  Alternatively, I need to better understand how to make a Flow available run-only for my general user community.  I don't have access to create security groups so that really is not an option unless there is an OOTB security group that includes all users.

12 REPLIES 12
v-yuazh-msft
Community Support
Community Support

Hi @Anonymous,

 

Do you want to learn how to create a flow with the run-only users?

Do you want to create a flow with your general user community as run only user?

Could you please share more details about your general user community?

Microsoft flow support to add a security group or the user of your orgnization to be owner or run only user currently,

 

You could refer to link below to learn how to add a run only user to a flow:

https://regarding365.com/how-to-add-new-run-only-users-to-a-flow-bb0e2f6817c2

 

You could refer to link below to learn how to add a list as run only user :

https://flow.microsoft.com/en-us/blog/share-with-sharepoint-office-365/

 

Best regards,

Alice

Anonymous
Not applicable

As I said in a different post, communities are no substitute for proper documentation, and this is a perfect example.  The first link points to an overly simplistic, half-baked explanation of how to add named users as run-only users of a flow.  It neglects to explain any of the other options related to the screens that are used to do this.

 

The second link at least points to something that attempts to explain what Flows is supposed to allow when adding a SharePoint list as a run-only user.  But it does not help me understand why it does not seem to work for me when I have added a list.  It makes quick reference to the fact that the user needs to have read/write access to the SharePoint list.  However, in SharePoint, there is no such privilege as read or write.  There is only add, edit, view, and delete.  So which combination of these equate to "read/write"?

 

So while both of these offer some help, neither comes close to really answering the question.  And they are certainly not an adequate substitute for the documentation that Microsoft should provide itself, written by professional technical writers rather than amateur, good Samaritans with a blog.

@Anonymous, we're very much in the same situation as you. What I've learned is that the concept of "Run Only Users" only applies to "manually triggered" Flows. In particular, this means Flows initiated using a "Flow Button", and NOT those with a "for selected items" trigger (even thought those are "manually triggered"). This severely limits the usefulness of Flow in our environment. 

 

What has worked for us is adding SharePoint lists/libraries as owners. Doing this causes the Flow to "inherit" (for lack of a better term) the permissions of the list. Users with Edit permission or higher can edit the Flow; those with Contribute (the closest equivalent to read/write/execute permissions) can initiate or execute the Flow. However, even in this case, the Flow is using the author's Connections. So, actions taken are attributed to the author of the Flow. This is similar to how Impersonation Steps worked in SharePoint Designer 2010. In some situations, this is acceptable, and even advantageous, but obviously it's not always ideal. 

 

The biggest issue we've run into using this method is that when emails are sent (and we have a LOT of workflows that send emails), they are sent as the Flow Author. However, we've worked around this by setting the "Send As" property to an O365 Group address or Shared Mailbox to which the Author has "Send As" permissions. If nothing else, this disassociates the individual user from the email.

 

I've submitted a suggestion (I don't recall where at the moment) that Flow Authors should be able to set an action to run as the Author or the user executing the Flow. I think that would be provide the best overall flexibility for most purposes. 

 

 

@Anonymous, Actually, the suggestion I made is here if you want to add your vote and maybe follow-up with some of your requirements or use cases: https://powerusers.microsoft.com/t5/Flow-Ideas/Flow-Credentials/idi-p/124581

Anonymous
Not applicable

I understand your fustration really as I am in the same boat. I have created custom connector to call PowerBI APIs and used them with manual flow button with dropdown list to select the Workspace and Dataset to refresh dataset from that group and it's working fine if Owner(s) run it.

 

However, the main reason to create the workflow was to allow Run-Only Usersto run the flow but unfortunately they can't see the workflow at all!! And so far I haven't found a documentation that helps me troubleshoot the issue.

 

Am I missing anything here? Is this the limitation of the flow? or this is a bug! Honestly, I don't know.

 

 

AlexBunning1
Frequent Visitor

Completely agree aswell, I created a workflow "for a selected item".

 

  1. no one could see the workflow except for me.
  2. Then I added the invite SharePoint list.
  3. Everyone could see the button to start the flow but the start flow Pane errored out.
  4. Then I added the person to run-only permissions directly and they could start the flow.
  5. Now I have to tell the client that they have to add new users manually to the flow? Thats not going to fly

I will try adding SharePoint to the owners group but this needs documentation as you look like a muppet trying to work it out.

 

Cheers

Anonymous
Not applicable

Sorry, I completely forgot to get back on this but it did work after trying a couple of time.

 

One thing I observed is, sometime users see a message like "New button is available" before they click on it which later shows the actual button.

Hello,

 

I really don't understand why there is not a documentation on this... we can find example but it doesn't explain how it really works...

Btw, here is my issue ; i have 3 flows initiated with "manually triggered". Connections are Office 365 Outlook and SharePoint. I want my user to be able to use this flow without modifying it so i put it in run-user only.

My user only use the owner's flow connection and can't use any of these 3 flows. I thought he would be able to use them from the sharepoint list but it's not working.

 

flow.PNG

Hi, I'm facing this issue right now where I have the flow to send out the emails, but the emails are sent as the author of the flow instead of the user who triggers the flow. It's been 4 years, i wonder if there is a solution to this yet? I have a hard time finding related documents that are not a blog.

See https://docs.microsoft.com/en-us/sharepoint/dev/business-apps/power-automate/guidance/manage-list-fl.... Specifically, the last paragraph (starting "As an added bonus...". Basically, the way you've added those run only users, they are using the OWNER'S Outlook connection and therefore can only send as them. If you set the drop-down under Office 365 Outlook to "Provided by run-only user", then the flow will run using THEIR Outlook connection. Be aware that this will prompt users (the first time they use the flow) to "allow" it to use their Outlook connection. If you have security- or privacy-conscious users, they may question why this flow wants to access their Outlook account. Unfortunately, there isn't any way to insert any kind of explanation into that dialog.

Hi! thank you for your answer,

I read that document, and it doesn't say what triggers or connections are allowed users to run using their credentials. when I go to manage run-only users, I don't have the option to select "Provide by run-only user" showing. I can't find the solution and don't know why I don't have that option unless it doesn't support a Power BI connection. The document shows the example using the SharePoint List connection and no other support documents.
Even the one explaining how to use Power Automate in the Power BI report doesn't explain this option. https://docs.microsoft.com/en-us/power-automate/trigger-flow-powerbi-report

According to the connector documentation, the Power BI connection is "not shareable", so you won't see that drop down for that connection. However, assuming the flow also uses the "Office 365 Outlook" connector, you should see the drop down for that connector and be able to set it so that users running the flow will need to use their own connection. You can set that option separately for each "shareable" connector, but if you use multiple actions from the same connector, they will ALL run using the chosen connection. For example, if you want to use the Office 365 Outlook connector's "Send an email" action once as the flow owner and another time as the person running the flow, you can't do that. ALL Office 365 Outlook actions in that flow will use the SAME connection.

Helpful resources

Announcements

Celebrating the May Super User of the Month: Laurens Martens

  @LaurensM  is an exceptional contributor to the Power Platform Community. Super Users like Laurens inspire others through their example, encouragement, and active participation. We are excited to celebrated Laurens as our Super User of the Month for May 2024.   Consistent Engagement:  He consistently engages with the community by answering forum questions, sharing insights, and providing solutions. Laurens dedication helps other users find answers and overcome challenges.   Community Expertise: As a Super User, Laurens plays a crucial role in maintaining a knowledge sharing environment. Always ensuring a positive experience for everyone.   Leadership: He shares valuable insights on community growth, engagement, and future trends. Their contributions help shape the Power Platform Community.   Congratulations, Laurens Martens, for your outstanding work! Keep inspiring others and making a difference in the community!   Keep up the fantastic work!        

Check out the Copilot Studio Cookbook today!

We are excited to announce our new Copilot Cookbook Gallery in the Copilot Studio Community. We can't wait for you to share your expertise and your experience!    Join us for an amazing opportunity where you'll be one of the first to contribute to the Copilot Cookbook—your ultimate guide to mastering Microsoft Copilot. Whether you're seeking inspiration or grappling with a challenge while crafting apps, you probably already know that Copilot Cookbook is your reliable assistant, offering a wealth of tips and tricks at your fingertips--and we want you to add your expertise. What can you "cook" up?   Click this link to get started: https://aka.ms/CS_Copilot_Cookbook_Gallery   Don't miss out on this exclusive opportunity to be one of the first in the Community to share your app creation journey with Copilot. We'll be announcing a Cookbook Challenge very soon and want to make sure you one of the first "cooks" in the kitchen.   Don't miss your moment--start submitting in the Copilot Cookbook Gallery today!     Thank you,  Engagement Team

Announcing Power Apps Copilot Cookbook Gallery

We are excited to share that the all-new Copilot Cookbook Gallery for Power Apps is now available in the Power Apps Community, full of tips and tricks on how to best use Microsoft Copilot as you develop and create in Power Apps. The new Copilot Cookbook is your go-to resource when you need inspiration--or when you're stuck--and aren't sure how to best partner with Copilot while creating apps.   Whether you're looking for the best prompts or just want to know about responsible AI use, visit Copilot Cookbook for regular updates you can rely on--while also serving up some of your greatest tips and tricks for the Community. Check Out the new Copilot Cookbook for Power Apps today: Copilot Cookbook - Power Platform Community.  We can't wait to see what you "cook" up!    

Welcome to the Power Automate Community

You are now a part of a fast-growing vibrant group of peers and industry experts who are here to network, share knowledge, and even have a little fun.   Now that you are a member, you can enjoy the following resources:   Welcome to the Community   News & Announcements: The is your place to get all the latest news around community events and announcements. This is where we share with the community what is going on and how to participate.  Be sure to subscribe to this board and not miss an announcement.   Get Help with Power Automate Forums: If you're looking for support with any part of Power Automate, our forums are the place to go. From General Power Automate forums to Using Connectors, Building Flows and Using Flows.  You will find thousands of technical professionals, and Super Users with years of experience who are ready and eager to answer your questions. You now have the ability to post, reply and give "kudos" on the Power Automate community forums. Make sure you conduct a quick search before creating a new post because your question may have already been asked and answered. Galleries: The galleries are full of content and can assist you with information on creating a flow in our Webinars and Video Gallery, and the ability to share the flows you have created in the Power Automate Cookbook.  Stay connected with the Community Connections & How-To Videos from the Microsoft Community Team. Check out the awesome content being shared there today.   Power Automate Community Blog: Over the years, more than 700 Power Automate Community Blog articles have been written and published by our thriving community. Our community members have learned some excellent tips and have keen insights on the future of process automation. In the Power Automate Community Blog, you can read the latest Power Automate-related posts from our community blog authors around the world. Let us know if you'd like to become an author and contribute your own writing — everything Power Automate-related is welcome.   Community Support: Check out and learn more about Using the Community for tips & tricks. Let us know in the Community Feedback  board if you have any questions or comments about your community experience. Again, we are so excited to welcome you to the Microsoft Power Automate community family. Whether you are brand new to the world of process automation or you are a seasoned Power Automate veteran - our goal is to shape the community to be your 'go to' for support, networking, education, inspiration and encouragement as we enjoy this adventure together.     Power Automate Community Team

Hear what's next for the Power Up Program

Hear from Principal Program Manager, Dimpi Gandhi, to discover the latest enhancements to the Microsoft #PowerUpProgram, including a new accelerated video-based curriculum crafted with the expertise of Microsoft MVPs, Rory Neary and Charlie Phipps-Bennett. If you’d like to hear what’s coming next, click the link below to sign up today! https://aka.ms/PowerUp  

Tuesday Tip | How to Report Spam in Our Community

It's time for another TUESDAY TIPS, your weekly connection with the most insightful tips and tricks that empower both newcomers and veterans in the Power Platform Community! Every Tuesday, we bring you a curated selection of the finest advice, distilled from the resources and tools in the Community. Whether you’re a seasoned member or just getting started, Tuesday Tips are the perfect compass guiding you across the dynamic landscape of the Power Platform Community.   As our community family expands each week, we revisit our essential tools, tips, and tricks to ensure you’re well-versed in the community’s pulse. Keep an eye on the News & Announcements for your weekly Tuesday Tips—you never know what you may learn!   Today's Tip: How to Report Spam in Our Community We strive to maintain a professional and helpful community, and part of that effort involves keeping our platform free of spam. If you encounter a post that you believe is spam, please follow these steps to report it: Locate the Post: Find the post in question within the community.Kebab Menu: Click on the "Kebab" menu | 3 Dots, on the top right of the post.Report Inappropriate Content: Select "Report Inappropriate Content" from the menu.Submit Report: Fill out any necessary details on the form and submit your report.   Our community team will review the report and take appropriate action to ensure our community remains a valuable resource for everyone.   Thank you for helping us keep the community clean and useful!

Users online (3,743)