Automation Suite release notes
Release date: November 11, 2025
New versioning format for Automation Suite
[Major].[YYMM].[Patch], defined as follows:
Majorincreases when a major release is delivered.YYMMrepresents the year and month of the long-term support (LTS) release.Patchincrements with each cumulative update (CU) after the initial LTS release.
2.2510.0. This release is the baseline for future cumulative updates.
Introducing Test Cloud
We are excited to announce that Test Cloud is now available on-premises through Linux deployments. This release brings the full Test Cloud experience to self-managed environments, allowing you to design, execute, and manage automated tests securely and at scale within your organization’s infrastructure.
Test Cloud enables you to design, execute, and manage automated testing at scale, while maintaining full control of your data, infrastructure, and compliance requirements.
Key benefits of Test Cloud
Test Cloud offers the following advantages:
-
Comprehensive automation coverage: Supports varied automation types such as Citrix, Web, Desktop, SAP, Mainframe, API, and Mobile.
-
Test data management: Access to diverse data sources to power data-driven testing.
-
Detailed insights: Advanced analytics and reporting features for complete visibility into test performance.
-
Flexible testing methods: Enables both automated and manual testing, as well as data-driven testing through services such as Data Service and Orchestrator, or generated datasets via AutopilotTM.
Documentation and guidance
This means that Automation Suite and Test Cloud share content across the release notes, installation, admin, and API guides.
New products onboarded to Automation Suite
We are happy to announce the addition of Integration Service and Solutions to our Automation Suite product portfolio. This expansion aligns with our aim to maintain parity with the functionalities offered via Automation Cloud.
If you plan to enable these new products, make sure to check out the cross-product dependencies and that you meet all the prerequisites.
All the details about the installation and configuration of these newly onboarded products are available in the Automation Suite on Linux Installation Guide. For details on how make the most out of the functionality of these products, refer to the individual product guides:
Unified Pricing, an innovative licensing model
We are excited to announce Unified Pricing, our enhanced licensing model that brings new licensing plans, user licenses, and an innovative credit-based approach. These features make it a compelling alternative to the existing Flex licensing model.
Key benefits
Unified Pricing introduces the following new features:- Credit-based approach: Under Unified Pricing, all licensing consumption units - such as AI Units, App Units, Robot Units, API Calls, and Agent Units - are consolidated into a single unit, the Platform Unit. This simplification allows for easier understanding and tracking.
- Enhanced flexibility: With Unified Pricing, you can easily reallocate Platform Units based on your changing project needs. Now that multiple UiPath services consume Platform Units, you are no longer constrained to pre-defined uses for the acquired units. This allows you to shift your focus and resources where your projects need them the most, whenever you require.
Who can benefit
Currently, you can acquire Unified Pricing licensing plans for Automation Cloud products, Automation Suite products, and desktop products. This new licensing model caters to the needs of both existing and new customers.
If you want to continue with your existing Flex licensing model, you are free to make that choice. However, if you are currently operating under the Flex model and wish to switch to Unified Pricing, remember that this transition will require that you ensure user license management is enabled and you re-assign licenses. For more guidance, reach out to your Sales representative.
Additional resources
For comprehensive information on the user SKUs available in Unified pricing, refer to UiPath Licensing.
For guidance on how to select the optimal licensing model tailored to your needs, refer to the Overview guide.
For specifics related to the newly introduced Unified Pricing plans, user licenses, and Platform Units on the platform-level, refer to the Automation Suite admin guide.
For information on the consumption logic applicable to each UiPath product, detailed user guides for each product are available.
Support for single-node production deployment
Automation Suite now supports single-node deployment for production environments, in addition to evaluation and demonstration scenarios.
This enhancement enables organizations with limited infrastructure resources or specific deployment requirements to operate Automation Suite in a single-node configuration.
Single-node production deployment is supported only when all required conditions are met. These conditions are essential to maintain stability and reliability in production. For details, refer to Single-node production deployment.
While you can use a single-node deployment in production, a multi-node, HA-ready deployment remains the recommended long-term configuration because it provides high availability, scalability, and improved resilience.
Support for Layer 7 (L7) load balancers
We have added support for Layer 7 (application layer) load balancers, in addition to the existing support for Layer 4 (network layer) load balancers.
This enhancement gives you greater flexibility in deploying Automation Suite in production, enabling advanced traffic management, monitoring, and security features with L7 load balancers.
For details, refer to Configuring the L7 Load Balancer (Optional).
Support for IPv6 and dual-stack configuration
Automation Suite now supports deployments using IPv6 and dual-stack (IPv4 and IPv6) networking.
This enhancement allows Automation Suite services and ingress components to run in environments that use IPv6-only or mixed IPv4/IPv6 networks.
For configuration details, refer to the Network requirements section.
Support for external object storage and local disk backups
Automation Suite now supports additional backup options, providing more flexibility for backup and restore operations.
You can now configure an external objectstorage or a local disk as the location for storing and restoring backup data:
- External object storage - Supports S3-compatible and Azure objectstores.
- Local disk - Supported only for single-node clusters. It allows attaching a disk directly to the backup cluster to store backup data, which can later be detached and attached to the restore server for recovery.
cluster_config.json file to include the configuration details for your selected backup method.
For details, refer to Backing up and restoring the cluster.
PostgreSQL for Process Mining Airflow database
AutomationSuite_Airflow database. PostgreSQL runs with the latest versions of Apache Airflow. Latest versions of Apache Airflow have various functionality,
performance, and security fixes that older versions lack.
AutomationSuite_Airflow database is no longer supported.
AutomationSuite_Airflow metadatabase.
Admin
User and group profiles
Unified profiles for audit and troubleshooting
We are happy to announce that we have introduced a unified view where you can check and manage all the necessary information about your user accounts and local groups. We refer to this view as user and group profiles.
User and group profiles are the solution you need to easily audit and troubleshoot your user or group configurations. Unlike before, you can now perform a wide array of operations from one single location: customize group memberships, handle licenses, monitor access, and update user and group info.
Currently, user and group profiles are available for Organization Admins only.
How to use user and group profiles
To access user and group profiles, navigate to Admin > Accounts & local groups, choose either the User accounts or the Local groups tab, then select the user account or local group you want to manage. A new window opens, allowing you to view or update your user or group configurations.
The following image shows some of the options you have for managing user profiles:
For a comprehensive list of all the operations you can perform using the new user and group profiles, refer to Managing user group and profiles.
Introducing the tenant administrator role
First cross-service role
We are excited to announce the Tenant Administrator role in Automation Suite.
This new cross-service role enables you to delegate responsibilities more efficiently by designating users, groups, robot accounts, or external applications to manage all resources within a given tenant.
You can now delegate tasks such as role assignment, licensing management, service provisioning, and more, to a Tenant Administrator without worrying about them having access to any other resources within your organization.
Ideal for RPA CoE Directors and IT Administrators, the Tenant Administrator role allows reassigning some tasks from an Organization Administrator to a tenant-level role.
Benefits of the Tenant Administrator role
If you are curious about the benefits of the new Tenant Administrator role, here they are:
-
Enhanced operational efficiency: This new role reduces the time required to set up the admin for tenant-level operations;
-
Reduced workload for Organization Administrators: It eases the burden on the Organization Administrators;
-
Improved security: Since fewer users have maximum permissions, there is greater control on access rights.
You will be pleased to learn that the Tenant Administrator role is just the first tenant-level role we plan to introduce. Our goal is to allow you to manage cross-service roles from a central location.
Known limitations
The Tenant Administrator role is currently affected by the following known limitations, which we are actively working on overcoming:
-
Only the following services support the Tenant Administrator role: Orchestrator (includes Actions, Processes, Integration Service), Data Service, Document Understanding, Task Mining, Test Manager. The rest of the tenant-level services are currently not supported, and users with only the Tenant Administrator role cannot access these services.
-
The Tenant Administrator cannot access organization-level menus from the interface.
-
On the Admin > Tenants > Services screen, the Tenant Administrator can view enabled services, but cannot add or remove services.
-
On the Admin > Tenants > Manage access screen, the Tenant Administrator can view tenants they do not administer. However, if the Tenant Administrator accesses these tenants, they cannot perform any actions.
For more details on the new Tenant Administrator role and how to assign it, refer to Tenant-level roles.
Tenant picker enhancements
We are pleased to present a new design, and functionality for the platform tenant picker.
The enhancements include a search box for easy navigation when you have multiple tenants, and the region in which each tenant's data resides.
Centralized access management
We are excited to introduce the centralized access management initiative. Centralized access management provides you with streamlined access management processes and enhanced customization capabilities. These features allow you to easily manage roles and permissions across your organization, improving efficiency, compliance, and troubleshooting.
Explore the following key areas we updated and discover their new features:
Compliance and auditing
- Export role assignments
via API, or the UI
You can now export roles and role assignments for all products and services across the platform via API, or via the user interface (UI) by selecting the Download role assignments button in the Accounts & local groups menu.
This feature simplifies audits, compliance, and reporting by providing a centralized view of role assignments across your environment.
For more information, refer to Export user role assignments for API instructions, or Exporting role assignments for UI instructions.
- Check access folder
support
Check access enables Organization Administrators and Tenant Administrators to easily review the roles and permissions assigned to users, groups, accounts, and external applications across both tenant and service level. Folder-level support is also available. You can view which roles are associated with specific folders, providing a more complete and accurate representation of access permissions across the platform.
Additionally, all permission details can be exported to a CSV file for further review and reporting.
To use the feature, go to Admin > Manage access > Check access, then search for any account to review its roles and permissions.
For more information, refer to Checking access.
Centralization
- Custom roles
Custom roles are now available at organization, tenant, and service levels.
You can define new roles using a combination of permissions from one or multiple services within a tenant, ensuring tailored access control for their specific role needs.
For more information, refer to Custom roles.
- Tenant Admin
role
This new cross-service role enables greater efficiency in delegating responsibilities, as users, groups, robot accounts, or external applications can manage all resources within a designated tenant.
If you are an Organization Administrator, you can now delegate responsibilities such as role assignment, licensing management, and service provisioning to a Tenant Administrator, decreasing concerns over undesired access to other resources within your organization.
For more details on the new Tenant Administrator role and how to assign it, refer to Tenant-level roles.
- Insights dashboard viewer
role
The Insights dashboard viewer role is a new role at organization level that enables you to assign specific and more granular access to Insights dashboards at organization level, without having to grant users with full organization administrator privileges.
This role targets access to dashboards, providing you with more control and flexibility in sharing insights across the organization.
For more information, refer to Organization-level roles.
- Tenant types and
tagging
You can now choose the tenant type for your tenant when you create a new one by selecting Production, Staging or Development from the Environment type section in the Create a new tenant UI wizard.
This capability makes tenant management more intuitive, freeing you from the hassle of maintaining strict naming conventions for your tenants. Additionally, this feature allows you to tag tenants based on their purpose, and streamlines administrative tasks.
For more information, refer to Adding tenants.
Consistency
- The Manage access
menu
We have redesigned the Manage access menu to ensure a consistent look across all platform levels: organization, tenant, and service.
Regardless of the platform level you work at, you experience the same interface for managing roles and role assignments. This consistent approach reduces friction when navigating between different scopes and enhances overall usability.
For more information, refer to Manage access user interface based on scope.
Redesigned left rail for enhanced navigation
In our continuous efforts to enhance your user experience, we are excited to announce a redesigned left rail in Automation Cloud to ensure you can easily access key parts of the platform.
The new left rail is custom-tailored, displaying only your favorite services and modules, which you can effortlessly personalize. All accessible services that you have access to are still available, but in order to see them, you need to expand the left rail.
To add a service to favorites, hover over it and select the gray Favorites icon next to the service name. To remove a service from favorites, use the orange Favorites icon.
For a comprehensive description of the new navigation experience, refer to The left rail.
Enjoy navigating through the revised design!
Licensing
Improved tenant-level license tracking and assignment
You can now monitor the quantity of runtimes that are currently in use by a tenant, in addition to the number of licenses that are available for allocation. You can check this new value in the Edit license allocation panel for the selected tenant, by choosing the Licenses card in the Admin section.
This new feature helps you avoid the re-assignment of licenses already in use, by making it easier to count and assign the remaining licenses. For details, refer to License overallocation.
The following image shows the Edit license allocation panel, where you can view the number of both available and in-use licenses.
Introducing quotas per user group
We are excited to announce a new enhancement to our user licensing management system: quotas per user groups. This feature allows organization administrators to control the number of user licenses a group can acquire. In essence, users belonging to each group can now acquire licenses up to the set quota. This streamlines the allocation and overall management of licenses across multiple business units within your organization.
Key benefits
With quotas per user groups, you can enjoy the following benefits:
-
Elevated control: As an organization administrator, you can restrict the number of user licenses a group can acquire, which gives you better control of licenses across your organization.
-
Enhanced efficiency: As an administrator, you can control the number of licenses allocated to specific groups of users. This allows for more targeted license management compared to managing licenses via group allocation only. Administrators can use this mechanism, and combined with permissions, they can restrict the access of a group of users to specific tenants and a specific number of licenses.
Usage notes
When you are adding or editing a license allocation rule for a group, you, as an organization administrator, can now control the quotas per user group. For more information, refer to Managing license allocation rules.
As you navigate the new feature, there are some key points to keep in mind:
-
Minimum quota: The minimum quota value that can be set is 1. If a quota is set to 0, an error message will guide you towards a valid action.
-
Unlimited upper quota: We do not set an upper limit to quota. Setting the quota higher than the available licenses simply means users can acquire up to the maximum available licenses. However, note that this is not a recommended configuration.
-
Lowering quota: If you attempt to set a quota that is lower than the number of licenses already acquired by a group, an error message will appear suggesting the need to adjust existing allocations. For details, refer to Deallocating directly assigned licenses.
This enhancement is designed to simplify the task of managing licenses within your organization.
Identity
Manage UiPath's signing certificate for SAML authentication requests via API
If your identity provider (IdP) does not support automatically consuming updates from UiPath's SAML metadata URL, and you require signed authentication requests or responses, you will not be able to reliably update verification certificates in your IdP. In this case, you can now upload your own verification certificate via API endpoints, and ensure you meet your IT requirements for signed SAML requests or responses. For step-by-step information on uploading a verification certificate, visit Managing UiPath signing certificate for SAML authentication requests.
API support for managing OAuth external applications
You can now use APIs to automate client secret rotation for external applications. This helps meet security requirements by reducing the risks associated with secrets used on a long term, or with manually rotated secrets.
The new APIs allow you to:
- List and manage OAuth external client applications.
- Create, update, and delete secrets for OAuth external applications.
- Generate secrets using fine-grained scopes.
For more details, visit External client APIs.
User consent management
Administrators can create consent prompts for users logging into the organization. This feature ensures each user is acquainted and in compliance with your organization's policies before stepping into your UiPath ecosystem.
See how to configure consent prompts.
Support for restricting access to organizations
We are happy to announce that you can now easily manage the user access to your organizations. The new functionality gives you more control over which devices from your network can access specific organizations in Automation Cloud. You can now prevent unauthorized access to specific organizations, even from company-controlled devices.
This enhancement mitigates the risk of misused resources and unauthorized data access. Experience the extra layer of security that this feature ensures by providing consistent control over your UiPath environment.
For details on how to make the most of this feature, see Restricting access to organizations.
Deprecated API endpoint
/identity_/api/User/{userId}/loginAttempts endpoint has been deprecated. Switch to using the /{organization_name}/portal_/api/auditLog endpoint for audit logs.
Support for new RHEL version
We have expanded our OS support to include RHEL 9.6. For details on the supported RHEL versions, see Compatibility Matrix.
Istio HSTS enabled by default
To enhance security, Istio HSTS is now enabled by default.
uipathctl improvements
- You can now list all the available options for the included and excluded flags when running the prerequisite checks command.
For more details about
--list-options, refer to the uipathctl reference guide. - For better eficiency, the diagnostic checks are no longer executed during the bundle creation process. Previously, a health
check was performed by default during the support bundle creation, requiring the explicit use of the
--skip-diagnoseflag to bypass it. For more details on how to run the diagnostic checks, refer to the uipathctl reference guide.
Additional custom CA certificate support
additonal_ca_certs key with the external CA certificate path in the cluster_config.json file.
Optional monitoring configuration
You can now choose to enable or disable built-in monitoring in Automation Suite, giving your organization flexibility to use its own observability stack.
For details, refer to Optional: Configuring the monitoring solution and Monitoring Automation Suite.
Enhanced telemetry and configuration insights
We are now including high-level summarized telemetry in Automation Suite support bundle, providing insights into environment configuration, resource utilization, and command execution. We also include guidance on how to view the generated XML file and enabled telemetry sharing with UiPath Support via the Customer Portal.
New alert for Redis license expiration
We have added a new Prometheus alert for the expiration of internal Redis licenses. This alert has three notification levels, based on the timeframe the license is set to expire: 90, 30, or 7 days.
Security fix for CVE-2025-55315
This release brings security updates to address CVE-2025-55315.
Full migration option no longer available
The full migration option to move standalone product data to Automation Suite is no longer available. The single tenant migration method, powered by the Automation Cloud™ Migration Tool, is now the only supported way to transfer Orchestrator entities.
For details, refer to the Migration and upgrade section.
Task Mining no longer available in Automation Suite 2.2510
Unassisted Task Mining is a deprecated feature and will be removed on December 1, 2025. As Task Mining in Automation Suite only consists of Unassisted Task Mining, the implies that Task Mining is no longer available in Automation Suite 2.2510.
If Task Mining was installed in a previous version of Automation Suite, it will no longer be visible after upgrading to version 2.2510.
Removal of AWS, Azure, and GCP deployment template
We have removed the following deployment templates:
- AWS deployment template
- Azure deployment template
- GCP deployment template
Previously, these templates were used to provide predefined configurations for installing Automation Suite on the supported public cloud providers.
As an alternative, use Automation Suite on EKS/AKS, or contact UiPath Support for assistance.
-
An issue caused the
uipathctl cluster pre-upgradecommand to fail for offline runs with an in-cluster registry. This issue occured if any of the ArgoCD applications were out of sync before the pre-upgrade. We have fixed the issue. - An issue prevented the
uipathctl cluster pre-upgradecommand from completing successfully in environments configured with a proxy and external object store, due to an error during the Insights volume migration process. We have fixed the issue. - An issue caused autogenerated self-signed certificates to be created with a 10-year validity instead of 90 days. This behavior no longer occurs, and certificates are now correctly created with a 90-day validity.
- An issue caused Kubernetes nodes to crash when the
/var/lib/rancherpartition filled up. This issue occurred due to eviction thresholds not being applied to the file system that stores container images. The issue no longer occurs, and nodes now correctly detect disk pressure on the image file system and evict workloads before the partition reaches capacity. - An issue prevented the required pods from being created when enabling GPU after adding a GPU node. This issue occurred only when using external registries with project names ( such as Harbor). We have fixed the issue.
- An issue caused the Thanos compactor to stop metrics block compaction in the object store due to a race condition in Prometheus. This led to increased storage usage in the Ceph bucket. We have fixed the issue.
- We have fixed an issue that was causing Studio Web to throw a 404 error when using a proxy environment.
- We have fixed an issue that blocked the Automation Suite upgrade on a backup-restored cluster.
- An issue was causing the node-monitor component, which monitors the node for issues such as checking
kube-proxyhealth or ifip_forwardis enabled, and cordons the node if issues arise, to not work for specific nodes such as GPU oras-robot. We have fixed the issue. - Previously, the configuration of user authentication and SQL authentication for the Automation Suite cluster was interconnected.
To use either of them, you had to set both
kerberos_auth_config.enabledandkerberos_auth_config.enable_integrated_sql_authparameters totrue. Currently, we allow independent configuration of only user authentication by settingkerberos_auth_config.enabledtotrueandkerberos_auth_config.enable_integrated_sql_authtofalse. Independent SQL authentication is still not supported. - We have fixed an issue causing the update FQDN flow to fail due to a security configuration. The behavior no longer occurs.
- We have fixed an issue causing the custom changes made to the RKE2 configuration file (
/etc/rancher/rke2/config.yaml) to be overwritten during upgrades. Now, the custom configurations are preserved. - We have fixed an issue causing Automation Suite installations to fail due to Certificate Authority (CA) certificates not being
recognized. The issue occurred when the
CertificatePoliciessection included policy OID values exceeding 4 bytes. - We have fixed an issue caused by the
update_fqdnparameter not being properly set in theservice-cluster-configurationssecret. As part of this fix, theupdate_fqdnflag is now being removed after updating the FQDN. We have also corrected the display message for running theuipathctl rke update-fqdncommand.
SQL check failure with workload identity enabled
An issue may cause the prereq check and health diagnose commands to report a failure for the SQL check. This issue can occur in environments where workload identity is enabled for Apps, Automation Hub, and Integration Service.
We recommend that you regularly check the deprecation timeline for any updates regarding features that will be deprecated and removed.
Product versions
The following table outlines the release status, version, and release notes for all UiPath products deployed under Automation Suite 2.2510.0.
Legend:
- This Automation Suite version bundles a new version of the product. New release notes are available.
- This Automation Suite version bundles a previously released version of the product. No new release notes are available.
| Product | Product version | Release status | Release notes |
|---|---|---|---|
| Action Center | 2.2510.0 | Action Center release notes | |
| AI Center | 2.2510.0 | AI Center release notes | |
| AI Computer Vision | 2.2510.0 | AI Computer Vision release notes | |
| Apps | 2.2510.0 | Apps release notes | |
| Automation Hub | 2.2510.0 | Automation Hub release notes | |
| Automation Ops | 2.2510.0 | Automation Ops release notes | |
| Data Service | 2.2510.0 | Data Service release notes | |
| Document Understanding | 2.2510.0 | ||
| Insights | 2.2510.0 | Insights release notes | |
| Integration Service | 2.2510.0 | Integration Service release notes | |
| Solutions | 2.2510.0 | Solutions release notes | |
| Orchestrator | 2.2510.0 | Orchestrator release notes | |
| Process Mining | 2.2510.0 | Process Mining release notes | |
| Test Manager | 2.2510.0 | Test Manager release notes |
Internal third-party component versions
This Automation Suite release bundles the following internal components:
| Component | Version |
|---|---|
| RKE2 | 1.34.1+rke2r1 |
| ArgoCD | v3.1.5 |
| gatekeeper | 3.20.0 |
| rook | 1.17.6 |
| ceph | 19.2.3 |
| prometheus-pushgateway | v3.4.1 |
| cert-manager | v1.18.2 |
| kube-logging/logging-operator | 6.0.3 |
| kube-logging/config-reloader | 6.0.3 |
| istio | 1.26.3 |
| velero | 1.16.1 |
| reloader | v2.2.0 |
| Prometheus | v3.5.0 |
| Grafana | 12.0.2 |
| redis-operator | v7.22.2-21 |
| redis-cluster | v7.22.2-14.focal |
| oauth2-proxy | v7.11.0 |
- What's new
- New versioning format for Automation Suite
- Introducing Test Cloud
- New products onboarded to Automation Suite
- Unified Pricing, an innovative licensing model
- Support for single-node production deployment
- Support for Layer 7 (L7) load balancers
- Support for IPv6 and dual-stack configuration
- Support for external object storage and local disk backups
- PostgreSQL for Process Mining Airflow database
- Admin
- Licensing
- Identity
- Improvements
- Support for new RHEL version
- Istio HSTS enabled by default
- uipathctl improvements
- Additional custom CA certificate support
- Optional monitoring configuration
- Enhanced telemetry and configuration insights
- New alert for Redis license expiration
- Security fix for CVE-2025-55315
- Removals
- Full migration option no longer available
- Task Mining no longer available in Automation Suite 2.2510
- Removal of AWS, Azure, and GCP deployment template
- Bug fixes
- Known issues
- SQL check failure with workload identity enabled
- Deprecation timeline
- Bundling details
- Product versions
- Internal third-party component versions
