Skip to main content
owlie
Sign Up Free

April 2026

Who this is for​

Admins and developers tracking monthly changes.

Goal​

Understand what changed in April 2026 and how it affects setup.

Prereqs​

  • None

Success criteria​

You can identify relevant changes and update your workflows if needed.

Highlights​

Access requests​

  • Multi-stage approval flows — Resources can use versioned approval flows with named stages, multiple approvers, all/any/N-of-M rules, app-owner routing, and clear handling of superseded or canceled approval work so approvals reflect real business review patterns.
  • Resource-specific request forms — Admins can add custom forms to resources so access requests collect structured per-resource details, including pickers, dates, toggles, and file fields. Submitted data is snapshotted with the request, shown to approvers, and passed into approval and fulfillment automation.

Auth​

  • Self-service security settings — End users can view tenant-enabled login and MFA methods from their security settings and change their own password when supported, with current-password verification for existing password accounts.

Dashboard​

  • End-user ticket workspace — End users get a dedicated ticket detail view and improved ticket queue controls to search by beneficiary or request number, sort by age, filter and group work, view submitted request form data, and approve, reject, complete, or reassign from one focused screen.

Platform​

  • Governed file uploads and downloads — Owlie can accept tenant-scoped file attachments through validated, size- and type-restricted uploads, confirm that uploaded content matches declared metadata, bind files to the owning request or artifact, and serve downloads only through the same authorization rules as the owning record.

Provisioning​

  • Function-based provisioning fulfillment — Provisioning profiles can use published fulfillment Functions to complete approved access grants or revocations with requester form data, identity context, resource context, and desired account state, giving tenants a custom automation path when a built-in connector is not enough.
  • Provisioning operation cancellation — Admins can cancel in-flight or failed provisioning operations from the provisioning inspector. Cancellation records the reason, releases pending unapplied assignments when possible, notifies the originating workflow, and updates live provisioning status.

Security​

  • Granular role permissions — Owlie now has a tenant-wide permission catalog behind system and custom roles, with enforced read/modify permissions across admin surfaces and a dashboard matrix that shows which roles grant each permission. Role assignment is constrained so admins cannot grant permissions they do not hold.

Workflows​

  • Function packages, secrets, and build feedback — Admins authoring Functions can add external packages, save draft changes with revision checks and build feedback, manage version-scoped secrets, rotate published secrets, and inspect bounded runtime logs from execution history.

Example​

Review this month's changes before enabling a new workflow in production.

Troubleshooting​

  • If a feature is missing, check later release notes.

Next steps​

  • /release-notes
  • /implement