Content filtering for Workflow Studio flows
Summarize
Summary of Content Filtering for Workflow Studio Flows
Content filtering in Workflow Studio allows you to control user access to specific flow content based on their roles. This functionality ensures that users only see relevant actions and subflows, enhancing security and usability. For example, an HR manager can access only HR-related flow components when creating a flow.
Show less
Key Features
- Content Definitions: Specify types of flow resources (triggers, actions, subflows) that users can access. You can create broad definitions or refine them with specific conditions and tags.
- Content Filtering Rules: Associate user roles with content definitions to manage access. Each rule connects a single role to a specific content definition, determining what users can view or interact with.
- Feature Access Management: Control access to UI elements and sections using content definitions and filtering rules. Simplified UI options are also available for managing feature access.
- Read-only Flows: If a flow contains restricted content, it becomes read-only for users without the appropriate access. They can run but not modify or copy the flow.
Key Outcomes
By implementing content filtering, you can:
- Enhance user experience by showing only relevant content based on roles.
- Improve security by limiting access to sensitive information.
- Maintain the integrity of flows, ensuring users cannot alter content they should not access.
Overall, content filtering empowers ServiceNow customers to efficiently manage their Workflow Studio flows while adhering to best practices for access control and usability.
Specify which content a user can access based on the user's role.
Display only content that is relevant for a particular user, hiding content that is unnecessary or sensitive. Specify the Workflow Studio flow content that you want to control access to and the role that a user must have to access it. For example, if a user with the hr_manager role in human resources is creating a flow, show only the set of actions and subflows that are relevant to HR cases.
- Content definitions to specify types of content.
- Content filtering rules to determine who can access the content.
Content definitions
Content definitions specify a type of Workflow Studio flow resource. Resources are the key components of Workflow Studio flows, such as triggers, actions, and subflows. Create definitions to include an entire resource, or refine your definitions through conditions. For example, you can create a definition that includes all flow triggers, or you can use conditions to include only triggers with a category of date.
You can further refine content definitions through tagging. Add tags to items in a resource list, then design your content definition to only include resources with that tag.
Content filtering rules
Content filtering rules specify the role that a user must have to access the content in a particular definition. Each rule associates a single user role with a single content definition. When a user accesses Workflow Studio flows, content filtering rules determine what content the user may access based on the user's role.
Feature access
You can also filter access to Workflow Studio flow features. Features are UI elements and sections. Access to both elements and sections can be managed by configuring content definitions and filtering rules. However, access to UI elements can also be managed through a simplified UI. For more information, see Manage access to Workflow Studio flow features.
Read-only flows
Users may be able to view a flow, subflow, or action containing content that they can't normally access. For example, a flow that's visible to a user might include an action the user wouldn't usually be able to view. When a flow contains restricted content, the entire flow becomes read-only. Users can run the flow but can't modify or copy it.
The creation of read-only flows doesn't apply to feature filtering. If a user doesn't have access to a feature, the feature doesn't render for that user. It doesn't affect the ability to copy or modify a flow. If a user doesn't have access to transform functions and uses a flow that already has a transform function applied, the transform function is read-only. The rest of the flow can still be copied and modified.
Access summary
| Resource filtered | User has role | User does not have role |
|---|---|---|
| Flow |
|
|
| Flow execution details | The flow execution details are visible. | The flow execution details are hidden. |
| Trigger |
|
|
| Subflow |
|
|
| Subflow execution details | The subflow execution details are visible. | The subflow execution details are hidden. |
| Flow logic |
|
|
| Action |
|
|
| Action execution details | The action execution details are visible. | The action execution details are hidden. |
| Step |
|
|
| UI elements and sections, excluding transform functions |
|
|
| Transform functions |
|
|