How to check the correspondence between the front-end user name and sys.user_id?

[hy-yq]

Self Checks

• I have searched for existing issues search for existing issues, including closed ones.
• I confirm that I am using English to submit this report (我已阅读并同意 Language Policy).
• [FOR CHINESE USERS] 请务必使用英文提交 Issue，否则会被关闭。谢谢！:)
• Please do not modify this template :) and fill in all the required fields.

Content

How to check the correspondence between the front-end user name and sys.user_id? I need to set different workflow execution queries for different registered users, and also set different data viewing scopes for each user based on their permissions.

[dosubot[bot]]

sys.user_id is a built-in system variable that uniquely identifies the current user, but its value differs based on how the workflow is accessed:

• Via API calls: Set to the value you provide in the user field of your request
• Via IDE/Internal calls: Uses the Account's UUID
• Via "Run" page: Uses the EndUser's session_id (note: there's a known issue in v1.7.1 where this returns session_id instead of account ID)

Key limitation: Dify only exposes sys.user_id (an internal UUID) to workflows—not user email or username directly. To map sys.user_id to front-end usernames for user-specific queries and permissions, you'll need to:

1. Create a mapping table between sys.user_id and your external user identifiers (email/username)
2. Query the Account table using sys.user_id to retrieve the email, or
3. Build a custom API endpoint that translates sys.user_id to your user identifiers

Once you have the mapping, you can reference {{sys.user_id}} in your workflow nodes (HTTP requests, database queries, conditional logic) to filter data and scope permissions per user.

Note that sys.user_id is read-only and cannot be modified during workflow execution, preventing identity spoofing.

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}

   

[hy-yq]

Will the system store the relationship table between sys.user_id and the username? Can the corresponding relationship be directly queried in the management backend or the database? The system does not have an open link. Access and queries to the application can only be made after logging in within the "Explore" module.

[dosubot[bot]]

Yes, the system stores the relationship in the database, but there's no built-in UI to view this mapping in the management backend.

For users accessing via the Explore module (logged-in users), sys.user_id corresponds to the Account table's id field. You can query this directly in the database:

SELECT id, name, email FROM accounts WHERE id = '<sys.user_id>';

The Account table stores:

• id (UUID) → this is the sys.user_id for logged-in console users
• name → username/display name
• email → user's email address

There's also an EndUser table for external/API users, but since you're using the Explore module with login, your users are stored in the Account table.

To use this mapping in workflows, you would need to query your database (via an HTTP request to a custom API endpoint or direct database connection) to translate sys.user_id to the username/email, then use that for your permission-based filtering. Dify workflows only expose sys.user_id by default and don't provide direct access to email/username as built-in variables.

To reply, just mention @dosu.

---

^{How did I do? Good | Irrelevant | Incorrect | Verbose | Hallucination | Report 🐛 | Other}