Enable Granular Access Control for Salesforce Flow

Starting in Winter ’26, if the granular control permission setting is enabled for a flow, any user who resumes or runs the flow must have explicit permission to access that individual flow. Even users with the Run Flow or Manage Flow permissions in their profile or permission set must be assigned a profile or permission set that is specifically enabled to access the flow.

To enable granular control for a flow, go to Setup, enter "Flows", and then click Flows. From the Flows list view, click Edit Access for the flow, and select "Override default behavior and restrict access to enabled profiles or permission sets". When this option is enabled, a user who resumes or runs the flow must be assigned a profile or permission set that is enabled to access the flow.

For example:

An org contains Profile A and Profile B that can be assigned to a user.

• Profile A includes Run Flow or Manage Flow. Profile B doesn’t include either of them.
• A flow is created. It is configured to enable granular control for the flow. Override default behavior and restrict access to enabled profiles or permission sets is enabled. 
• Profile B is enabled to access or run the flow. 
• Profile A isn’t enabled to access or run the flow
• A quick action is created for the flow on an Account record layout

Prior to Winter ’26:

• A user assigned to Profile A can see and run the flow quick action on the Account record detail page.
• A user assigned to Profile B can’t see and run the flow quick action on the Account record detail page.

Starting in Winter ’26:

• A user assigned to Profile A can’t see and run the flow quick action on the Account record detail page.
• A user assigned to Profile B can see and run the flow quick action on the Account record detail page.