I have a Nintex Workflow that uses a FlexiTask. It works great, but a question came up regarding permissions. The Workflow uses several Flexi Tasks, but the first individual who creates the list item also attaches several documents to the list item. When the item flows thru to other departments for approval it was noted that the downstream departments have the ability to delete the attachments from the list.
For a Nintex Workflow what are the permissions required to approve a Nintex Workflow, yet NOT allow a user to delete an attachment. Would I need to create 2 SharePoint groups - 1 with Edit and the other a customized permissions that does not allow deletes ?