Advanced: Start Workflow Operation

The start workflow operation is a potentially unsecured way users could start a workflow. The only way to secure this operation is to require the connected user to be part of a Windows group.

To secure the start workflow operation

  1. From your database management program (such as SQL Server Management Studio) locate the workflow_server_options table in the Workflow Server database.
  2. Add two new rows to the workflow_server_options table.

    3. Note: These rows can also be placed in the workflow_options table.

  3. For the first row, in the option_name column, type: StartWorkflowDirectlyDemands.
  4. In the option_value column, enter a pipe-delimited (|) list of the Windows roles containing the Windows groups that contain the Windows users that should be able to use this operation.

    5. Example: You could enter the value, "myDomain\admins|myDomain\integrators" to only include users who are both administrators and integrators.

  5. In the second new row, in the option_name column, type StartWorkflowDirectlyDemandsAuthenticated. This column value requires that the user be authenticated.
  6. Set the option_value column to True.