Enhancement: Read-Only Custom User Levels - Workflows

Announcements Product News
, , ,
1

:sparkles: Description

Custom User Levels now include Workflows with read-only access split into two views: Workflows Viewer for configuration and Workflow Auditor for configuration plus execution history. Identity Security Cloud admins can assign either level so users can inspect workflows without create, edit, test, or execute rights.

:information_source: What You Need to Know

  • Read-only Workflows access is split into two views: Workflows Viewer and Workflows Auditor.

  • Both views are strictly read-only. Users can view and download, but cannot create, edit, save, duplicate, test, enable/disable, delete, change owner, upload scripts, or use Config Hub import/export.

  • Assignment is optional. Existing Org Admin and full Workflows access is unchanged.

  • Workflows Viewer can open Admin > Workflows, use search and filters in the manager page, view details, open View in Builder, and Download Script. They cannot see the Executions tab or Identity Security Cloud Search workflow history.

  • Workflow Auditor includes the Viewer view plus the Executions tab (playback and CSV, JSON, and script downloads) and Identity Security Cloud Search workflow history. They still cannot cancel executions or change workflows.

:exclamation: Problem

Today, anyone who needs to inspect a workflow requires admin access. This over-privileges operators, support, and audit teams who only need read-only access to configuration or executions.

:bulb: Solution

  1. Two read-only views: Workflows Viewer for configuration; Workflow Auditor adds execution history for audit.

  2. Strictly read-only: Both views grant visibility without write, test, or execute permissions.

  3. Assign in Custom User Levels: Pick the view that matches what each user needs.

Workflows Enhancement - Read-Only Custom User Levels
Workflows Enhancement - Read-Only Custom User Levels1238×499 31.3 KB

:people_hugging: Who is affected?

Identity Security Cloud admins who assign Custom User Levels, plus operators, support, and audit users who need read-only Workflows access.

Action required: None.

:calendar_spiral: Important dates

  • Sandbox (STG):

    • Aug 26, 2026
    • Aug 31, 2026

  • Production:

    • Sep 2, 2026
    • Sep 7, 2026
    • Sep 9, 2026
5 Likes
2

Thanks @Takato!

Super useful!

1 Like
3

How do rollouts work for sandbox? Do we all typically get these at the same time or is it phased? We don’t have this option yet, but not sure if we just haven’t been updated yet.

4

We have two roll out dates for sandbox and the next one is on 8/31. Would it be helpful to break them out and list the dates for our next release?

5

If it’s a planned phased roll out, I think it’d be helpful. That way, we know for sure it’s just a timing difference versus an actual bug.

1 Like
6

Thanks for the feedback. I’ve added dates for both prod and sandbox.

1 Like