# Create user for running flows only

**URL:** <https://discourse.nodered.org/t/create-user-for-running-flows-only/14270>\
**Category:** General\
**Created:** [13 August 2019 08:55 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270 "2019-08-13T08:55:28Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![amitn](https://avatars.discourse-cdn.com/v4/letter/a/fbc32d/32.png) [@amitn](https://discourse.nodered.org/u/amitn)\
**Post date:** [13 August 2019 08:55 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/1 "2019-08-13T08:55:28Z")

</div>

I want to create 2 kinds of user for my system - Workflow creator and workflow Runner.  
The runner will be able only to run the flows and change the input if needed.  
I'm trying to do so with these changes in settings.js file:

```auto
  adminAuth: {
       type: "credentials",
       users: [{
           username: "admin",
           password: "$2a$08$zZWtXTja0fB1pzD4sHCMyOCMYz2Z6dNbM6tl8sJogENOMcxWV9DN.",
           permissions: "*"
       },
           {
            username: "runner",
            password: "$2a$08$zZWtXTja0fB1pzD4sHCMyOCMYz2Z6dNbM6tl8sJogENOMcxWV9DN.",
            permissions: ["flows.read"]
        }
       ]
    },

```

The admin user work properly, but the 'runner' user can't even login.  
If i change the permissions of 'runner' to 'read' only, I cant run any flow

Is what I want to implement is possible? If so, what I need to change in order to implement it?  
I'm using node-red 0.20.7 version

---

<div class="post-metadata">

**Author:** ![knolleary](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knolleary/32/3_2.png) [@knolleary](https://discourse.nodered.org/u/knolleary)\
**Post date:** [13 August 2019 08:58 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/2 "2019-08-13T08:58:48Z")

</div>

What do you mean by 'run a flow'? The runtime is always running all flows that have been deployed to it.

---

<div class="post-metadata">

**Author:** ![amitn](https://avatars.discourse-cdn.com/v4/letter/a/fbc32d/32.png) [@amitn](https://discourse.nodered.org/u/amitn)\
**Post date:** [13 August 2019 09:05 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/3 "2019-08-13T09:05:20Z")

</div>

I want that user runner will be able to run flows from the editor when it is needed.

---

<div class="post-metadata">

**Author:** ![cymplecy](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/cymplecy/32/2773_2.png) [@cymplecy](https://discourse.nodered.org/u/cymplecy)\
**Post date:** [13 August 2019 09:11 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/4 "2019-08-13T09:11:42Z")

</div>

Are you wanting to just allow user to click on inject nodes?

Or do you just want user to be able to view the flows without ability to change them?

---

<div class="post-metadata">

**Author:** ![amitn](https://avatars.discourse-cdn.com/v4/letter/a/fbc32d/32.png) [@amitn](https://discourse.nodered.org/u/amitn)\
**Post date:** [13 August 2019 09:19 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/5 "2019-08-13T09:19:05Z")

</div>

I want user will be able to enter new input and then inject the input node

---

<div class="post-metadata">

**Author:** ![ukmoose](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/ukmoose/32/13_2.png) [@ukmoose](https://discourse.nodered.org/u/ukmoose)\
**Post date:** [13 August 2019 09:25 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/6 "2019-08-13T09:25:06Z")

</div>

Then they would have to be able to deploy the flow as well, so what is the difference between them and your "Workflow creator"?

---

<div class="post-metadata">

**Author:** ![Steve-Mcl](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/steve-mcl/32/4826_2.png) [@Steve-Mcl](https://discourse.nodered.org/u/Steve-Mcl)\
**Post date:** [13 August 2019 09:34 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/7 "2019-08-13T09:34:02Z")

</div>

> [@amitn](#):
>
> new input and then inject

The flow editor is not really meant for users to add input & inject.

You would be better off creating a dashboard that permits the user to enter a value then press a submit button to "allow input"

---

<div class="post-metadata">

**Author:** ![cymplecy](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/cymplecy/32/2773_2.png) [@cymplecy](https://discourse.nodered.org/u/cymplecy)\
**Post date:** [13 August 2019 09:45 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/8 "2019-08-13T09:45:20Z")

</div>

> [@amitn](#):
>
> want user will be able to enter new input and then inject the input node

AFAIK that isn't possible with Node-RED editor without giving user full access rights

---

<div class="post-metadata">

**Author:** ![amitn](https://avatars.discourse-cdn.com/v4/letter/a/fbc32d/32.png) [@amitn](https://discourse.nodered.org/u/amitn)\
**Post date:** [13 August 2019 10:07 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/9 "2019-08-13T10:07:17Z")

</div>

Thanks, I will look into dashboards idea

---

<div class="post-metadata">

**Author:** ![T0T4R4](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/t0t4r4/32/10850_2.png) [@T0T4R4](https://discourse.nodered.org/u/T0T4R4)\
**Post date:** [13 August 2019 12:12 UTC](https://discourse.nodered.org/t/create-user-for-running-flows-only/14270/10 "2019-08-13T12:12:20Z")

</div>

Why don't you simply put up a little dashboard ?