Notes
Update Summary: Salesforce will restrict flow access to users with specific profiles or permission sets. The FlowSites org permission will be deprecated with this update. This change improves flow security by ensuring only authorized users can run flows.
Applicability: This update affects Lightning Experience, Salesforce Classic, and all mobile app versions in Essentials, Professional, Enterprise, Performance, Unlimited, and Developer editions.
Timeline: Enforced in Winter ’25. Check Trust Status for your instance’s upgrade date.
Reason: Previously, any user could run all flows. This update limits access to those with the correct profiles or permission sets.
Implementation: Go to Setup, enter "Release Updates" in the Quick Find box, and select Release Updates. Follow the testing and activation steps for Restrict User Access to Run Flows.
After activation, ensure users have the Run Flows permission. For more control, use permission sets for specific flow access and profiles for creating, updating, and deleting flows.
