End user needs to redirect the worklists to a different user - what rights are required to be given

  • 6 November 2019
  • 6 replies
  • 144 views

End user needs to redirect the worklists to a different user - what rights are required to be given to the end user?

The end user is a workflow admin , but what I observered is that if the end user is not given workflow server admin rights , he/she cannot redirect the worklistss. 

Is this true? what is the best way to have a end user redirect tasks in terms of providing minimum permissions? Obviously , it is not a  good idea to provide end users access to workflow server adin.

 

Workflow server admin has 3 permissions  - Admin , Export and Impesonate. To be able to "Redirect" does a user need "Admin" permission? 

 

Any help is highly appreciated.

 

Thanks

Nag


6 replies

Hello nag,

 

Idk if this might help you but i'll try to answer

Just to ask though do you redirect the task via management site? if so i think its necessary to give admin access since to access the management site and access workflow you need admin rights.

if the redirect is actioned from workspace site, you don't have to set any permissions.

 

if you want to limit permission without giving admin access, its best to use impersonate rights and only do certain actions by impersonating admin. 

 

if you want to limit permission in individual workflow i think its best to do it from management site in deployed workflow.

Management Site > Workflow Server > [Workflow Folder] > [Your Workflow Name] > Rights Tab

 

This Documentation may help you with this problem:

https://help.k2.com/onlinehelp/k2five/userguide/5.1/default.htm#K2-Management-Site/Workflow_Server/TaskList.htm%3FTocPath%3DAdminister%7CK2%2520Management%7CWorkflow%2520Server%7CWorkflows%7CProcess%2520Details%7C_____5

 

Cheers

Good day @nagrotteGA 

 

FIRST OPTION

  • Users do not require any particular permission to complete worklist items assigned to them. The user can Redirect, Share, Sleep, or Release a worklist item using their Worklist. Please see attachments named “Worklist01”, “RedirectTask01”, and “ShareTask01”. By default, all users will see their Workspace.

 

SECOND OPTION

  • But for Workflow Server Admin rights you are talking about is for when it is mandatory for a user to use K2 Management Task List to redirect, release, or share a task. Please see the attached screenshots (named “ProcessRights01,02, ---, 04) for steps when you must give the user access to K2 Management.

Task List: https://help.k2.com/onlinehelp/k2five/userguide/5.2/default.htm#K2-Management-Site/Workflow_Server/TaskList.htm%3FTocPath%3DAdminister%7CK2%2520Management%7CWorkflow%2520Server%7CWorkflows%7CProcess%2520Details%7C_____5,

Rights: https://help.k2.com/onlinehelp/k2five/userguide/5.3/default.htm#K2-Management-Site/Workflow_Server/Rights.htm%3FTocPath%3DAdminister%7CK2%2520Management%7CWorkflow%2520Server%7CWorkflows%7CProcess%2520Details%7C_____2.

 

Best,

Sunrise

 








Userlevel 3
Badge +9

If you are on k2 five, just give admin rights to workflow in k2 management site and user can redirect task. We give admin rights to workflow to application coordinators so that they do not bother IT.

 

If you are on older version than k2 five then you will need to give server admin right to get to workspace.

 

I do not remember if 4.7 has management site. If it is there, you can do same in 4.7 too but for earlier than 4.7 there is not way but to give server admin rights in workfspace.

Badge +7

Hello  @nagrotteGA 

 

The answer to your question is yes. Please have a look at the assistive quality content below:

 

Assign rights: https://youtu.be/0EdLRKU_a5s

Administering K2 - Managing Permissions: 

https://www.youtube.com/watch?v=7-rQFx9bs5Q

 

Assign Workflow Permissions:

https://help.k2.com/onlinehelp/k2five/userguide/5.3/default.htm#Tutorials/Build/HelloWorld-Workflow/05AssignRights.htm

 

Rights: adding/removing/editing and saving rights/REfresh:

https://help.k2.com/onlinehelp/k2five/userguide/5.3/default.htm#K2-Management-Site/Workflow_Server/Rights.htm

 

Permissions needed for common tasks:

https://help.k2.com/onlinehelp/k2five/userguide/5.3/default.htm#Permissions/Permissions-Common-Tasks.htm

 

All the best.

 

 


I tried setting up a user as the workflow admin (not workflow server admin) - the user still cannot redirect
I tried setting up a user with a "Impersonate" permission under workflow server rights . the user still cannot redirect
I tried setting up a user with a "Admin" permission under the workflow server rights . the user can redirect now (workflow server admin - NOT WORKFLOW Admin)

Good day @nagrotteGA 

 

I have not found a reason in the documentations that end users should not have Workflow Server Admin rights so far. There seems to be different options to redirect tasks, one of them is through Worklist which does not require permissions for users to open, as I have indicated on my previous post, but it seem this one is not working for you. If you can look on SECOND OPTION, on my previous post, K2 Management was used to redirect task. If this is the option working for you, I think you can go ahead with it. Can you also see the following:

Also take note that the K2 Management Task List is used here, and K2 Management requires Workflow Server Admin rights to be used. Even if you can look into the other links on my previous post, you can see that Workflow Server Admin rights were granted. So, I think this is one of the workarounds.

 

Also take note that in the Notes section on attachment named “ProcessRights2” on my last post, it is stated that “Admin Permission is normally assigned to the K2 administrator, and sometimes to helpdesk staff and the process owner”.

You can notice that in this link: https://help.k2.com/onlinehelp/K2Five/UserGuide/5.3/default.htm#K2-Workflow-Designer/Use/Toolbox/Basic/Task/UsingTaskRecRes/Scenarios/Scenario11/3Rec-2Res-1Redirect.htm?Highlight=share,%20release,%20redirect. A - Under “Task list behavior for Administrators” they are talking about “K2 management” and, B – They are talking about “K2 Workspace”.

 

Best,

Sunrise

 

Reply