Release: 29 September 2026
Stronger Sign-in and Faster User Management
This release focuses on users. Sign-in gets a verification step for accounts that use SMS codes, and you can now tag users and assign roles to many users at once. The Manual trigger has been refreshed, and AI is now part of the role permissions.
New features
Multi-factor sign-in verification
If your account uses an SMS code as a second step, signing in now takes you to a Verify your identity page after you enter your email and password. We send a code to your phone, you type it into Verification code, and press Verify. Pressing Enter submits.
Why it matters: a second step adds an extra layer of protection to your account. After a successful check you continue to where you were headed, or to Home.
Read more: Signing in
Improvements
Set tag for users
On the Users page there is a new Set tag for users button. Pick a tag, select the users, give them a value, and apply. Other tags the users already have are kept.
Read more: Users
Assign users to a role
Open a role and use Assign users to add the role to many users, remove it, or replace all their roles with this one. Replace asks for confirmation first, because those users lose every other role they hold.
Read more: Roles
AI Apps permissions in roles
You can now control access to AI features per role. In the role permission editor, pick the AI Apps app and set permissions for MCP server, Tenant prompt and MCP tool permission (this last one only shows up if your tenant has MCP servers). Read lets you view these pages, and Write lets you make changes.
Read more: Tenant prompt and Roles
Manual trigger, refreshed
The Manual trigger step now has an API Setting Details section with Template name, Description and Button label (the default is Execute), plus a Preview of what people will see when they run the workflow. Fields and filters are assigned to groups by drag and drop, and we tell you when everything available has been assigned.
Why it matters: the trigger is now the one place that defines what a person sees and fills in. Mandatory fields are protected from deletion, and if you delete a field in the trigger, it is also removed from the M3 API step that used it.
Read more: Manual trigger
Fixed
- Run workflow popover: a tidier layout, with title and description on top, the Run buttons on the right and a scrollable form in between.
- Enter to submit: pressing Enter now submits the sign-in and forgot-password forms.
- M3 Filter: the list of available transactions keeps one transaction expanded and scrolls on small screens.
- Template names: copied workflows and uploaded Excel templates are named after the template file.
- M3 Workflow Runner: each field shows its description as its label, mandatory fields are marked with
*, and empty mandatory fields are outlined in red.