State flow security
An assignee of a state can execute its transitions. You must be a superuser to configure the assignees on the State flows page to choose users or user groups per state.
A user or user group with the TransitionAllStateflows privilege can transition to the previous or next state regardless of the state flow configuration of the assigned user or user group.
You must be a superuser or have the Update permission to assign a state flow to an entity. A user who has the Update permission on the target entity but is not an assignee of the state cannot transition the state flow.
Can we improve this article ? Provide feedback