An image-forming apparatus configured to be controlled based on access-control information and to perform a flow which includes performance a plurality of functions of the image forming apparatus based on flow setting information, where flow setting information designates an order of performance of the plurality of functions of the image forming apparatus. The image-forming apparatus includes an acquisition unit configured to acquire the access-control information based on a signature included in the flow setting information if the flow setting information includes the signature, and a flow-performing unit configured to perform the flow based on the access-control information acquired by the acquisition unit.