Flow Designer: "The requested flow operation was prohibited by security rules." even with system use

[Joatan Fontoura]

Hi there!

I have a flow where I'm having the error "The requested flow operation was prohibited by security rules." in an Update Record action when I try to execute it with a user that doesn't have write permission in the table. As I wrote in the subject, the flow is running as System User. I have a similar issue in a Send Email action: Access denied to create new email.

It looks my flow isn't running with System User even it should. Any ideas?

P.S.: I've already checked this KB: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0861124

Thank you!

[Joatan Fontoura · Accepted solution]

Hi there!

Thank you for all your answer. I just solved it creating a copy of the flow (already with flag run as "System User"). I deactivate the original and used the copy. Everything worked fine.

[Bhuvan]

@Joatan Fontoura 

If you have changed the Flow to run as system user but still getting error, check below knowledge articles

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0821099

https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0861909

Check if any ACL prohibits update action on the record and create new ACL(s) to provide permissions for update action and check again.

Also below article could guide you in the right direction for send email action

https://www.servicenow.com/community/servicenow-ai-platform-forum/why-can-t-i-change-flow-designer-t...

If this helped to answer your query, please mark it helpful & accept the solution.

Thanks,

Bhuvan

[Bhuvan · Accepted solution]

@Joatan Fontoura 

Can you check the link I shared as it explains the same resolution of creating a copy of the flow and disable original flow to fix the issue.

https://www.servicenow.com/community/servicenow-ai-platform-forum/why-can-t-i-change-flow-designer-t...

As per community guidelines, you can accept more than one answer as accepted solution. If my response helped to answer your query, please mark it helpful & accept the solution.

Thanks,

Bhuvan

[kaushal_snow]

@Joatan Fontoura,

It sounds like the flow you're working with isn't fully executing in the context of the System User, even though it’s configured to do so. One thing to double check is that the Run As option for each action in the flow, especially the Update Record and Send Email actions, is correctly set to use the System User context, as it might still be running in the context of the initiating user, which could lack sufficient permissions....... Even though the flow is set to run as System User, certain ACL tied to the table or actions might still be blocking those operations due to restrictive permissions. Specifically, check if there are any ACL restricting write or create permissions for System User on the relevant records or tables, and ensure that the email action doesn’t have restrictions preventing it from being sent.....

Also, it's a good idea to examine the logs for any detailed error messages pointing to ACL violations or permission issues related to the flow’s execution. I’d suggest testing the flow with an admin level user temporarily to see if the issue is related to a configuration problem with how permissions are being applied to the System User. .....If the error goes away, it would confirm that the problem lies within how the flow is inheriting user permissions, and then you could focus on adjusting those permissions accordingly.....

If you found my response helpful, please mark it as ‘Accept as Solution’ and ‘Helpful’. This helps other community members find the right answer more easily and supports the community.

[Ankur Bawiskar]

@Joatan Fontoura 

this is happening all the time or some time?

which record you are trying to update?

share screenshots