Skip to main content
Available starting with FlowX.AI 5.7.0

Overview

End-user access management lets organization admins control who can access published solutions at runtime. Unlike Designer users (who build processes and workflows), end users interact with the finished solutions through the container app. Manage end users from Organization SettingsAccess Management, where three sections handle runtime access:
  • End-Users: Invite and manage users who access solutions
  • End-Users Roles: Define roles that control what end users can access
  • End-Users Groups: Organize users into groups with role assignments and custom attributes

End-users

View and manage the list of end users in your organization. End users are separate from Designer users. They access published solutions but cannot modify processes or workflows. To invite an end user:
  1. Navigate to Organization SettingsAccess ManagementEnd-Users
  2. Click Add to invite a new user
  3. Enter the user’s details
End users authenticate through the same Keycloak realm as the organization. SMTP must be configured in Keycloak for invitation emails to be sent.

End-users roles

Roles define what end users can access at runtime. Each role has a name and description. Roles are assigned to users through groups.

Managing roles

1

Navigate to End-Users Roles

Go to Organization SettingsAccess ManagementEnd-Users Roles.
2

Create a role

Click Add new, enter a Name and optional Description, then click Save.
3

Assign roles to processes

In a project’s version settings, assign which roles can access specific processes via the Permissions tab.
Roles can be edited or deleted from the roles list. Deleting a role removes it from all groups and process permissions where it was assigned.

End-users groups

Groups organize end users and assign them roles and custom attributes. A group can have multiple roles and multiple key-value attributes.

Managing groups

1

Navigate to End-Users Groups

Go to Organization SettingsAccess ManagementEnd-Users Groups.
2

Create a group

Click Add new and configure:
FieldDescription
NameGroup name (alphanumeric, dashes, underscores, spaces)
RolesSelect one or more end-user roles to assign to all members of this group
AttributesOptional key-value pairs for custom metadata (e.g., department, region)
3

Add attributes (optional)

Click Add attribute to add custom key-value pairs. Each attribute has a Key and one or more comma-separated Values. Attributes can be used for business filters and data-driven access control.

Permissions

PermissionDescription
org_runtime_users_readView the end-users list
org_runtime_users_writeInvite and manage end users
org_runtime_roles_readView end-user roles
org_runtime_roles_writeCreate, edit, and delete end-user roles
org_runtime_groups_readView end-user groups
org_runtime_groups_writeCreate, edit, and delete end-user groups
These permissions are available to Organization Admin and Organization Owner roles.

Organization settings

Overview of all organization-level settings

Roles and permissions matrix

Complete reference for all platform roles and permissions

Swimlanes

Configure role-based task assignment in processes

Business filters

Filter data visibility based on user roles and attributes
Last modified on April 9, 2026