Share by using co-ownership

Completed

When you select the Share option on a selected cloud flow, you're directed to a page to manage the owners of the flow.

Screenshot showing the Share icon location next to the Edit icon.

By adding users or groups to the list of owners, you create co-ownership of the flow with those users.

Screenshot showing the owners list where you can add users or groups.

In the preceding example, Adele Vance is the original flow owner who shared it with Miriam Graham and Sales and Marketing. Sales and Marketing is a group, and anyone who is a group member becomes the flow co-owner automatically.

Co-owners of the flow have permission to perform the following actions:

  • Run the flow on demand for instant and scheduled flows.

  • Edit the flow definition (for example, add or remove an action or condition).

  • Perform test runs of the flow.

  • View the run history.

  • Manage the properties of the flow (for example, start or stop the flow, add owners, or update credentials for a connection).

  • Add or remove other owners (but not the flow's creator).

  • Delete the flow.

Considering that co-owners have full permissions, including delete access, you should only add users whom you trust and need to perform these activities. If the flow is an instant flow and users only need to run the flow, it's better that you add them as run-only users instead of co-owners. You'll learn about run-only users in the next unit.

Important

Sharing critical business flows with at least one other user can be crucial in case the flow creator is out of the office or has left the company and a change is required.

Connections

When you build a flow and add actions, some actions use connectors. The first time that a connector is used, a connection is established and used by the actions. To establish the connection, the user who is modifying the flow is required to authenticate. That connection is associated with that user, and actions that are performed are in the context of the user. For example, if Dave added a SharePoint action to add an item to a list, it would show that Dave added the list item when that action ran.

On the Share page, the Embedded connections section shows which connections are used in the flow.

Screenshot showing the connections that are used in the flow.

All flow owners have access to these connections, but only for this flow. That access allows them to add more steps to the flow by using these connections without the need to authenticate or create new connections. However, the access doesn't allow them to use the connection outside of the flow.

If Miriam edits the flow and adds another step to send an email by using the Office 365 connector, their connection is added to the list of connections with Miriam as the connection user. If the flow is run, one Send an email action is sent from Adele, and one is sent from Miriam. The connection list now resembles the following screenshot, which shows the connection that Miriam added.

Screenshot showing a connection created by another co-owner.

When collaborating with others on a flow, you might want to designate one user to manage the connections so that they're all in the same context.

Any flow owner can use any connection in this flow to perform actions on your behalf. So, you should watch out for inadvertent elevation of the permissions and only add owners whom you trust.

Determine the need to share by using co-ownership

The following table describes scenarios to help you determine whether you need to share by using co-ownership or not.

Scenario Options
I want to allow another user to edit my flow. Co-ownership is the best option.
I have a flow that triggers when someone adds a list item to SharePoint or creates a row in a Dataverse table. Do I need to add every user who adds items as a co-owner of my flow? No, this flow is an automated flow that's triggered by an event. As long as the flow connection user has access to the list or table, the flow runs properly without you needing to add all users as owners or run-only.
I have an instant flow and I want others to run the flow. Co-ownership isn't required; you should set up the users as run-only.
I have a scheduled flow and I want others to run it on demand in addition to the scheduled times. Co-ownership is the best option. However, the users have more permissions than only running the flow.