Approvals: asking, deciding, and the queue — Who can do what
• Asking for an approval needs only view access to the record.
• Anyone in the record's workspace can be asked, including Viewers — deciding writes the field through the flow, not through their own edit rights.
• Deciding from an email needs no login: the signed link authorizes exactly one approver on exactly one ask.
• You can cancel an ask you raised while it is still pending; the approver's copy disappears from their queue.