Symptoms

Currently, our users cannot start workflow.
The error looks like this :
1 24408 K2:DENALLIXU054419 from 192.168.10.103:323412 does not have rights to Start Process ProcessProcess

The issue started when it was time for identity service to refresh table k2.Identity.Identity.

It took a lot of time to resolve all users in group Domain users so most of our users cannot start the workflow.

A similar issue has occurred before and a coldfix for TFS 442431 was applied.
 

Diagnoses

The coldfix provided previously for this issue should have a delete statement being commented out in each of the following stored procedure:

1. Identity.UpdateIdentity
2. Identity.BulkIdentityContainerUpdate
3. Identity.BulkIdentityMemberUpdate

However, after checking the 3 stored procedures, it was noticed that the delete statement in Identity.BulkIdentityMemberUpdate is not commented out.
 

Resolution

Provided client with the updated Identity.BulkIdentityMemberUpdate stored procedure fixes the issue. Client reported the issue did not appear again.