cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Anonymous
Not applicable

All about "Manage Run-Only Users"

There is absolutely no documentation on this key function that is prerequisite to getting any value out of Flows at the enterprise level.  Really, Microsoft should provide this.  But Microsoft seems determined to force everyone to pay for premium support by providing no documentation at all on its products.

 

If anyone has a document explaining the options for this and how to set a flow up for each option, I would appreciate you sharing it with me.  I am specifically interested in understanding the whole notion of "inviting a sharepoint list or library", because I have no idea what that means.  Alternatively, I need to better understand how to make a Flow available run-only for my general user community.  I don't have access to create security groups so that really is not an option unless there is an OOTB security group that includes all users.

12 REPLIES 12
v-yuazh-msft
Community Support
Community Support

Hi @Anonymous,

 

Do you want to learn how to create a flow with the run-only users?

Do you want to create a flow with your general user community as run only user?

Could you please share more details about your general user community?

Microsoft flow support to add a security group or the user of your orgnization to be owner or run only user currently,

 

You could refer to link below to learn how to add a run only user to a flow:

https://regarding365.com/how-to-add-new-run-only-users-to-a-flow-bb0e2f6817c2

 

You could refer to link below to learn how to add a list as run only user :

https://flow.microsoft.com/en-us/blog/share-with-sharepoint-office-365/

 

Best regards,

Alice

Anonymous
Not applicable

As I said in a different post, communities are no substitute for proper documentation, and this is a perfect example.  The first link points to an overly simplistic, half-baked explanation of how to add named users as run-only users of a flow.  It neglects to explain any of the other options related to the screens that are used to do this.

 

The second link at least points to something that attempts to explain what Flows is supposed to allow when adding a SharePoint list as a run-only user.  But it does not help me understand why it does not seem to work for me when I have added a list.  It makes quick reference to the fact that the user needs to have read/write access to the SharePoint list.  However, in SharePoint, there is no such privilege as read or write.  There is only add, edit, view, and delete.  So which combination of these equate to "read/write"?

 

So while both of these offer some help, neither comes close to really answering the question.  And they are certainly not an adequate substitute for the documentation that Microsoft should provide itself, written by professional technical writers rather than amateur, good Samaritans with a blog.

@Anonymous, we're very much in the same situation as you. What I've learned is that the concept of "Run Only Users" only applies to "manually triggered" Flows. In particular, this means Flows initiated using a "Flow Button", and NOT those with a "for selected items" trigger (even thought those are "manually triggered"). This severely limits the usefulness of Flow in our environment. 

 

What has worked for us is adding SharePoint lists/libraries as owners. Doing this causes the Flow to "inherit" (for lack of a better term) the permissions of the list. Users with Edit permission or higher can edit the Flow; those with Contribute (the closest equivalent to read/write/execute permissions) can initiate or execute the Flow. However, even in this case, the Flow is using the author's Connections. So, actions taken are attributed to the author of the Flow. This is similar to how Impersonation Steps worked in SharePoint Designer 2010. In some situations, this is acceptable, and even advantageous, but obviously it's not always ideal. 

 

The biggest issue we've run into using this method is that when emails are sent (and we have a LOT of workflows that send emails), they are sent as the Flow Author. However, we've worked around this by setting the "Send As" property to an O365 Group address or Shared Mailbox to which the Author has "Send As" permissions. If nothing else, this disassociates the individual user from the email.

 

I've submitted a suggestion (I don't recall where at the moment) that Flow Authors should be able to set an action to run as the Author or the user executing the Flow. I think that would be provide the best overall flexibility for most purposes. 

 

 

@Anonymous, Actually, the suggestion I made is here if you want to add your vote and maybe follow-up with some of your requirements or use cases: https://powerusers.microsoft.com/t5/Flow-Ideas/Flow-Credentials/idi-p/124581

Anonymous
Not applicable

I understand your fustration really as I am in the same boat. I have created custom connector to call PowerBI APIs and used them with manual flow button with dropdown list to select the Workspace and Dataset to refresh dataset from that group and it's working fine if Owner(s) run it.

 

However, the main reason to create the workflow was to allow Run-Only Usersto run the flow but unfortunately they can't see the workflow at all!! And so far I haven't found a documentation that helps me troubleshoot the issue.

 

Am I missing anything here? Is this the limitation of the flow? or this is a bug! Honestly, I don't know.

 

 

AlexBunning1
Frequent Visitor

Completely agree aswell, I created a workflow "for a selected item".

 

  1. no one could see the workflow except for me.
  2. Then I added the invite SharePoint list.
  3. Everyone could see the button to start the flow but the start flow Pane errored out.
  4. Then I added the person to run-only permissions directly and they could start the flow.
  5. Now I have to tell the client that they have to add new users manually to the flow? Thats not going to fly

I will try adding SharePoint to the owners group but this needs documentation as you look like a muppet trying to work it out.

 

Cheers

Anonymous
Not applicable

Sorry, I completely forgot to get back on this but it did work after trying a couple of time.

 

One thing I observed is, sometime users see a message like "New button is available" before they click on it which later shows the actual button.

Hello,

 

I really don't understand why there is not a documentation on this... we can find example but it doesn't explain how it really works...

Btw, here is my issue ; i have 3 flows initiated with "manually triggered". Connections are Office 365 Outlook and SharePoint. I want my user to be able to use this flow without modifying it so i put it in run-user only.

My user only use the owner's flow connection and can't use any of these 3 flows. I thought he would be able to use them from the sharepoint list but it's not working.

 

flow.PNG

Hi, I'm facing this issue right now where I have the flow to send out the emails, but the emails are sent as the author of the flow instead of the user who triggers the flow. It's been 4 years, i wonder if there is a solution to this yet? I have a hard time finding related documents that are not a blog.

See https://docs.microsoft.com/en-us/sharepoint/dev/business-apps/power-automate/guidance/manage-list-fl.... Specifically, the last paragraph (starting "As an added bonus...". Basically, the way you've added those run only users, they are using the OWNER'S Outlook connection and therefore can only send as them. If you set the drop-down under Office 365 Outlook to "Provided by run-only user", then the flow will run using THEIR Outlook connection. Be aware that this will prompt users (the first time they use the flow) to "allow" it to use their Outlook connection. If you have security- or privacy-conscious users, they may question why this flow wants to access their Outlook account. Unfortunately, there isn't any way to insert any kind of explanation into that dialog.

Hi! thank you for your answer,

I read that document, and it doesn't say what triggers or connections are allowed users to run using their credentials. when I go to manage run-only users, I don't have the option to select "Provide by run-only user" showing. I can't find the solution and don't know why I don't have that option unless it doesn't support a Power BI connection. The document shows the example using the SharePoint List connection and no other support documents.
Even the one explaining how to use Power Automate in the Power BI report doesn't explain this option. https://docs.microsoft.com/en-us/power-automate/trigger-flow-powerbi-report

According to the connector documentation, the Power BI connection is "not shareable", so you won't see that drop down for that connection. However, assuming the flow also uses the "Office 365 Outlook" connector, you should see the drop down for that connector and be able to set it so that users running the flow will need to use their own connection. You can set that option separately for each "shareable" connector, but if you use multiple actions from the same connector, they will ALL run using the chosen connection. For example, if you want to use the Office 365 Outlook connector's "Send an email" action once as the flow owner and another time as the person running the flow, you can't do that. ALL Office 365 Outlook actions in that flow will use the SAME connection.

Helpful resources

Announcements

Exclusive LIVE Community Event: Power Apps Copilot Coffee Chat with Copilot Studio Product Team

It's time for the SECOND Power Apps Copilot Coffee Chat featuring the Copilot Studio product team, which will be held LIVE on April 3, 2024 at 9:30 AM Pacific Daylight Time (PDT).     This is an incredible opportunity to connect with members of the Copilot Studio product team and ask them anything about Copilot Studio. We'll share our special guests with you shortly--but we want to encourage to mark your calendars now because you will not want to miss the conversation.   This live event will give you the unique opportunity to learn more about Copilot Studio plans, where we’ll focus, and get insight into upcoming features. We’re looking forward to hearing from the community, so bring your questions!   TO GET ACCESS TO THIS EXCLUSIVE AMA: Kudo this post to reserve your spot! Reserve your spot now by kudoing this post.  Reservations will be prioritized on when your kudo for the post comes through, so don't wait! Click that "kudo button" today.   Invitations will be sent on April 2nd.Users posting Kudos after April 2nd at 9AM PDT may not receive an invitation but will be able to view the session online after conclusion of the event. Give your "kudo" today and mark your calendars for April 3, 2024 at 9:30 AM PDT and join us for an engaging and informative session!

Tuesday Tip: Unlocking Community Achievements and Earning Badges

TUESDAY TIPS are our way of communicating helpful things we've learned or shared that have helped members of the Community. Whether you're just getting started or you're a seasoned pro, Tuesday Tips will help you know where to go, what to look for, and navigate your way through the ever-growing--and ever-changing--world of the Power Platform Community! We cover basics about the Community, provide a few "insider tips" to make your experience even better, and share best practices gleaned from our most active community members and Super Users.   With so many new Community members joining us each week, we'll also review a few of our "best practices" so you know just "how" the Community works, so make sure to watch the News & Announcements each week for the latest and greatest Tuesday Tips!     THIS WEEK'S TIP: Unlocking Achievements and Earning BadgesAcross the Communities, you'll see badges on users profile that recognize and reward their engagement and contributions. These badges each signify a different achievement--and all of those achievements are available to any Community member! If you're a seasoned pro or just getting started, you too can earn badges for the great work you do. Check out some details on Community badges below--and find out more in the detailed link at the end of the article!       A Diverse Range of Badges to Collect The badges you can earn in the Community cover a wide array of activities, including: Kudos Received: Acknowledges the number of times a user’s post has been appreciated with a “Kudo.”Kudos Given: Highlights the user’s generosity in recognizing others’ contributions.Topics Created: Tracks the number of discussions initiated by a user.Solutions Provided: Celebrates the instances where a user’s response is marked as the correct solution.Reply: Counts the number of times a user has engaged with community discussions.Blog Contributor: Honors those who contribute valuable content and are invited to write for the community blog.       A Community Evolving Together Badges are not only a great way to recognize outstanding contributions of our amazing Community members--they are also a way to continue fostering a collaborative and supportive environment. As you continue to share your knowledge and assist each other these badges serve as a visual representation of your valuable contributions.   Find out more about badges in these Community Support pages in each Community: All About Community Badges - Power Apps CommunityAll About Community Badges - Power Automate CommunityAll About Community Badges - Copilot Studio CommunityAll About Community Badges - Power Pages Community

Tuesday Tips: Powering Up Your Community Profile

TUESDAY TIPS are our way of communicating helpful things we've learned or shared that have helped members of the Community. Whether you're just getting started or you're a seasoned pro, Tuesday Tips will help you know where to go, what to look for, and navigate your way through the ever-growing--and ever-changing--world of the Power Platform Community! We cover basics about the Community, provide a few "insider tips" to make your experience even better, and share best practices gleaned from our most active community members and Super Users.   With so many new Community members joining us each week, we'll also review a few of our "best practices" so you know just "how" the Community works, so make sure to watch the News & Announcements each week for the latest and greatest Tuesday Tips!   This Week's Tip: Power Up Your Profile!  🚀 It's where every Community member gets their start, and it's essential that you keep it updated! Your Community User Profile is how you're able to get messages, post solutions, ask questions--and as you rank up, it's where your badges will appear and how you'll be known when you start blogging in the Community Blog. Your Community User Profile is how the Community knows you--so it's essential that it works the way you need it to! From changing your username to updating contact information, this Knowledge Base Article is your best resource for powering up your profile.     Password Puzzles? No Problem! Find out how to sync your Azure AD password with your community account, ensuring a seamless sign-in. No separate passwords to remember! Job Jumps & Email Swaps Changed jobs? Got a new email? Fear not! You'll find out how to link your shiny new email to your existing community account, keeping your contributions and connections intact. Username Uncertainties Unraveled Picking the perfect username is crucial--and sometimes the original choice you signed up with doesn't fit as well as you may have thought. There's a quick way to request an update here--but remember, your username is your community identity, so choose wisely. "Need Admin Approval" Warning Window? If you see this error message while using the community, don't worry. A simple process will help you get where you need to go. If you still need assistance, find out how to contact your Community Support team. Whatever you're looking for, when it comes to your profile, the Community Account Support Knowledge Base article is your treasure trove of tips as you navigate the nuances of your Community Profile. It’s the ultimate resource for keeping your digital identity in tip-top shape while engaging with the Power Platform Community. So, dive in and power up your profile today!  💪🚀   Community Account Support | Power Apps Community Account Support | Power AutomateCommunity Account Support | Copilot Studio  Community Account Support | Power Pages

Super User of the Month | Chris Piasecki

In our 2nd installment of this new ongoing feature in the Community, we're thrilled to announce that Chris Piasecki is our Super User of the Month for March 2024. If you've been in the Community for a while, we're sure you've seen a comment or marked one of Chris' helpful tips as a solution--he's been a Super User for SEVEN consecutive seasons!   Since authoring his first reply in April 2020 to his most recent achievement organizing the Canadian Power Platform Summit this month, Chris has helped countless Community members with his insights and expertise. In addition to being a Super User, Chris is also a User Group leader, Microsoft MVP, and a featured speaker at the Microsoft Power Platform Conference. His contributions to the new SUIT program, along with his joyous personality and willingness to jump in and help so many members has made Chris a fixture in the Power Platform Community.   When Chris isn't authoring solutions or organizing events, he's actively leading Piasecki Consulting, specializing in solution architecture, integration, DevOps, and more--helping clients discover how to strategize and implement Microsoft's technology platforms. We are grateful for Chris' insightful help in the Community and look forward to even more amazing milestones as he continues to assist so many with his great tips, solutions--always with a smile and a great sense of humor.You can find Chris in the Community and on LinkedIn. Thanks for being such a SUPER user, Chris! 💪 🌠  

Tuesday Tips: Community Ranks and YOU

TUESDAY TIPS are our way of communicating helpful things we've learned or shared that have helped members of the Community. Whether you're just getting started or you're a seasoned pro, Tuesday Tips will help you know where to go, what to look for, and navigate your way through the ever-growing--and ever-changing--world of the Power Platform Community! We cover basics about the Community, provide a few "insider tips" to make your experience even better, and share best practices gleaned from our most active community members and Super Users.   With so many new Community members joining us each week, we'll also review a few of our "best practices" so you know just "how" the Community works, so make sure to watch the News & Announcements each week for the latest and greatest Tuesday Tips!This Week: Community Ranks--Moving from "Member" to "Community Champion"   Have you ever wondered how your fellow community members ascend the ranks within our community? What sets apart an Advocate from a Helper, or a Solution Sage from a Community Champion? In today’s #TuesdayTip, we’re unveiling the secrets and sharing tips to help YOU elevate your ranking—and why it matters to our vibrant communities. Community ranks serve as a window into a member’s role and activity. They celebrate your accomplishments and reveal whether someone has been actively contributing and assisting others. For instance, a Super User is someone who has been exceptionally helpful and engaged. Some ranks even come with special permissions, especially those related to community management. As you actively participate—whether by creating new topics, providing solutions, or earning kudos—your rank can climb. Each time you achieve a new rank, you’ll receive an email notification. Look out for the icon and rank name displayed next to your username—it’s a badge of honor! Fun fact: Your Community Engagement Team keeps an eye on these ranks, recognizing the most passionate and active community members. So shine brightly with valuable content, and you might just earn well-deserved recognition! Where can you see someone’s rank? When viewing a post, you’ll find a member’s rank to the left of their name.Click on a username to explore their profile, where their rank is prominently displayed. What about the ranks themselves? New members start as New Members, progressing to Regular Visitors, and then Frequent Visitors.Beyond that, we have a categorized system: Kudo Ranks: Earned through kudos (teal icons).Post Ranks: Based on your posts (purple icons).Solution Ranks: Reflecting your solutions (green icons).Combo Ranks: These orange icons combine kudos, solutions, and posts. The top ranks have unique names, making your journey even more exciting! So dive in, collect those kudos, share solutions, and let’s see how high you can rank!  🌟 🚀   Check out the Using the Community boards in each of the communities for more helpful information!  Power Apps, Power Automate, Copilot Studio & Power Pages

Find Out What Makes Super Users So Super

We know many of you visit the Power Platform Communities to ask questions and receive answers. But do you know that many of our best answers and solutions come from Community members who are super active, helping anyone who needs a little help getting unstuck with Business Applications products? We call these dedicated Community members Super Users because they are the real heroes in the Community, willing to jump in whenever they can to help! Maybe you've encountered them yourself and they've solved some of your biggest questions. Have you ever wondered, "Why?"We interviewed several of our Super Users to understand what drives them to help in the Community--and discover the difference it has made in their lives as well! Take a look in our gallery today: What Motivates a Super User? - Power Platform Community (microsoft.com)

Users online (4,814)