Back to the changelog

• Feature

  Custom per-tenant roles

  Beyond the four system roles (Admin, Flow Designer, Operator, Read-only), each tenant can now create its own roles (e.g. "Holiday Manager") from a new Roles tab in Settings — with name, description and colour. These are additive process roles: they don't touch system permissions, they sit alongside them. Assign one or more to any user from the Users page; changing a user's roles invalidates their session so the new roles take effect immediately. (Commercial edition.)

• Feature

  Per-role flow gating (honoured by the agent)

  In the designer, under Activation → Manual start, "who can start" now shows two groups — system roles and custom roles — with an explicit "Anyone can start" / "Only selected roles" toggle so the access mode is unambiguous. A flow restricted to a custom role can be started (manually, via connector and via the Flow Agent) only by users who hold that role: those who don't won't even see it. This closes a possible visibility bypass through the agent. Flows reference custom roles by ID, so renaming a role never breaks anything, and deleting one leaves references inert (no crash; the UI shows "(role removed)").