Finding / openhands

2026-10-13-openhands-automation-members-can-create-work-and-cloud-profile-and-cookie-compatibility-improve

Automation members can create work and Cloud profile and cookie compatibility improve. Four creation routes now require view_automations rather than manage_automations. An ordinary org member can create an automation and manage it as creator; this does not grant management of everyone else’s work. Automation 1.17.0 exposes Cloud agent-profile selection/capabilities and fixes rejection of profile-bearing preflight templates; API selections check the org’s profiles, whereas callerless Git Sync selection remains constrained. Automation 1.19.2 accepts both openhands_auth and legacy keycloak_auth and preserves the original cookie name upstream, following enterprise’s new-login transition in 1.66.0.

Channel: tagged-release. Half: both. Date: 2026-09-22 (automation 1.14.0); 2026-10-02 (1.17.0); 2026-10-09 (1.19.2).

Operator consequence: Revise any permission guide that says view-only members cannot create work. Keep creator identity distinct from org-wide management. For separately operated services, align the enterprise login transition and automation cookie support; a tagged compatibility repair does not date a hosted deployment.

Receipt

Finding metadata

Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0

Finding ID: 2026-10-13-openhands-automation-members-can-create-work-and-cloud-profile-and-cookie-compatibility-improve

Profile citations

Source links

Primary links, including exact changelog lines when available.