What changed: Previously, a single Flow app permission let staff do everything in Flow. Now Flow access is governed by the Flow automations permissions ('View, create, and delete automations' and 'Manage connections and secrets') in Settings > Users > Roles, plus the admin permission required for each step of a workflow, such as Edit customers for an Add customer tags action.
Who is affected
The source does not single out a business type; it applies to all Shopify merchants who use Flow and assign staff roles/permissions in admin. Store owners always retain full access.
What it means for your business
For businesses using Shopify Flow, this means staff can no longer test or turn on a workflow unless they hold the admin permission matching each of its steps, such as Edit customers for a tagging action.
What to do
Review staff Flow automations permissions and the step-specific admin permissions under Settings > Users > Roles, check Manage connections and secrets for workflows that use a connection or secret, and grant any permissions staff are missing.
When it takes effect
The source dates the announcement October 28, 2026 and gives no separate effective date.
