We are working on a workflow which needs to assign individual user permissions on list items. What we're finding is that each user is being added to the main list of "Site Permissions", which over time will become difficult to manage. Potentially, several thousand users could end up on this list, and it will be difficult then to keep track of the few users and groups whose permissions we do need to manage.
I have tried using "Call web service" to add the user to a Sharepoint group at the beginning of the workflow, in the hope that they would not then also be added to the main permissions list, but this has not worked (user just appear in both places). Can anyone think of a way around this?