What permission should a employee have on the site and list?
Employee should have
Site - contribute
list - contribute in advances option of the list everyone can read but only creator can edit
approver
Site - approval, read
List - read
Task list would have edit access
When the workflow run how does it update the list?
