Back to the changelog

• Feature

  Custom per-tenant roles

  Beyond the four system roles (Admin, Flow Designer, Operator, Read-only), each tenant can now create its **own roles** (e.g. *"Holiday Manager"*) from a new **Roles** tab in Settings — with name, description and colour. These are additive *process roles*: they don't touch system permissions, they sit alongside them. Assign one or more to any user from the **Users** page; changing a user's roles invalidates their session so the new roles take effect immediately. *(Commercial edition.)*

• Feature

  Per-role flow gating (honoured by the agent)

  In the designer, under **Activation → Manual start**, "who can start" now shows two groups — system roles and custom roles — with an explicit **"Anyone can start" / "Only selected roles"** toggle so the access mode is unambiguous. A flow restricted to a custom role can be started (manually, via connector and **via the Flow Agent**) only by users who hold that role: those who don't won't even see it. This closes a possible visibility bypass through the agent. Flows reference custom roles **by ID**, so renaming a role never breaks anything, and deleting one leaves references inert (no crash; the UI shows *"(role removed)"*).