I have a reusable workflow created for all content types. It is a simple workflow making use of assign flexi task actions. The item has a metadata property of Item Approval Status. It is required that while in ‘Pending Approval’ or ‘Approved’ Status we would need to make the document/document set content type as read only for the users in the group who have access to the site except for the site Admins. We have tried ‘Set Item Permissions’, however, it does not give the capability to set the item as read only without defining the group name explicitly. As this workflow goes in the template, so we don’t know the group names before hand. Please let us know if you’re able to provide any guidance on this.