Hello everyone,
I have a workflow running impersonation under my Domain account, and that account is part of the Site Collection Administrators group. I have created a service account to replace my Domain account to republish the workflow. I want to limit the security of the service account and only assign the permission required to publish the workflow. I've tried adding the service account into one of the Site Admin group for one of the site collection (manually created), and it works fine. However, when I use the same account to republish a workflow with impersonation steps, it does not work. It only works by adding the service account to the built-in Site Collection Administrators group.
My questions - what is the minimum permission requirement for a service account that will allow it to run workflow with impersonation?
Any help would be greatly appreciated.
Thanks in advance!
Jerry