Question

Workflow service service account permissions

Workflow Directory Server Administration

Updated April 24, 2023

asked on April 18, 2023

Hello,

I have worked with Laserfiche Support to develop a script to deactivate certain users in LFDS. The workflow functions when I run it with my user administrative access, but does not actually make the change when running as the service account that runs the Workflow service.

I have checked or added the following

1. That the account is in admin group of the workflow server

2. The account has a full license in LFDS

3. The account has admin privilege's in the Workflow admin console

Can anyone tell me what rights the Service Account needs for the Workflow to be able to deactivate or remove a license from an account in LFDS?

0 0

Answer

SELECTED ANSWER

replied on April 18, 2023

I do suspect this is an LFDS permissions issue.

Try adding it to the "Laserfiche Directory Service Administrators" local Windows group on the server where LFDS is installed.

2 0

Replies

replied on April 18, 2023

Have you assigned the workflow service account rights in LFDS under Settings / Security / Rights Assignment?

1 0

SELECTED ANSWER

replied on April 18, 2023

I do suspect this is an LFDS permissions issue.

Try adding it to the "Laserfiche Directory Service Administrators" local Windows group on the server where LFDS is installed.

2 0

replied on April 24, 2023

Hello all, @████████

I did end up needing to add the service account running workflow to "Laserfiche Directory Service Administrators" local Windows group on the server where LFDS is installed.

That resolved this issue. Thank you!

1 0

replied on April 18, 2023

Hi @████████ I had not, but I have now. I will test it again tomorrow and provide an update.

Thank you,

Mark

0 0

replied on April 18, 2023

Well, I assigned all available rights and it did not work still. Seemed like a good option.

0 0

You are not allowed to follow up in this post.

Question

Question

Workflow service service account permissions

Answer

Replies

Sign in to reply to this post.