Winter '27 (API Version 68.0)

Enforce User Permissions No Matter How a Flow Runs

A new run context option in Flow Builder guarantees that your flow always runs with the running user's access level, regardless of what runs it. The User Context–Enforces User Permissions option is available for screen flows and autolaunched flows.

Previously, flows configured to run in user context inherited elevated system-level permissions from their caller, whether another flow, Apex, or another automation. When a caller running in system context runs a flow configured for user context, the flow configured for user context inherits the caller's elevated permissions and also runs in system context.

With the User Context–Enforces User Permissions option, a flow configured with this option always runs with user-level access, giving you predictable security boundaries and full control over your flow's access level.