โ05-21-2025 11:53 AM
my goal is to give a user just enough permission to go into workato and manually run a recipe when they are ready to
how can i accomplish this without giving them access to edit the recipe?
PS we cannot schedule it because the data is not ready on a consistent timeframe and there's no specific condition that we can use to see when data is ready to move
โ05-21-2025 11:57 AM
I would create a recipe that triggers from a Workato webhook (GET request), and then give them the URL for the webhook. All they have to do is open the URL in a browser. It will trigger the recipe, and the recipe can call the recipe you want them to call. Now they don't even need direct access.
โ05-24-2025 10:03 AM
Hi @sidjayawardena ,
Use of RBAC:
Use Workatoโs RBAC to create a custom role or use a predefined role like:
Operator โ Can only start, stop, and retry recipe jobs. Cannot edit recipes.
Production Operator (in RLC projects) โ Same as above, scoped to Prod.
โ They can run recipes manually
โ They cannot see or modify recipe logic
Go to Admin Console โ Users
Assign the user to the project/environment
Give them โProduction Operatorโ or โOperatorโ access to the project
If your recipe is in Production and:
The user shouldnโt even log into Workato
But still needs to run it on-demand
You could expose the recipe via a Webhook Trigger and give the user
just a cURL/Postman endpoint
But since you said โgo into Workato and manually runโ, the RBAC + Operator Role is best.
Thanks and Regards,
Shivakumara K A