Help Center>Foundation Help

Applies to:

Installing Winshuttle Workflow: Configuring the Workflow Admin account

Before installing Winshuttle Workflow, you will need to create a Web Application and Site Collection in SharePoint.

On this page

  1. Giving Site Collection Permissions to the Workflow Admin user
  2. Giving required SQL Server permissions to the Workflow Admin user

Giving Site Collection Permissions to the Workflow Admin account

Back to top

The Workflow Admin account is the SharePoint impersonation account that runs the Workflow Central Administration site application pool. It also:

  • Runs all administrative operations in workflows or forms that require higher permissions than the user has, this is the account that is used.
  • Reads from SharePoint databases.
  • Runs the SVService Scheduled Task.

Configuring the Workflow Admin account

Go to workflow central administration and click Farm Configuration to view the Workflow Admin Account and Database impersonation accounts.

  1. Open the Site Collection.
  2. Click the Setting icon.
  3. Click Site Settings.
  4. Click Site Collection Administrators.
  5. Enter the user name for the Workflow Admin account.

Add the Workflow Admin User to all required local groups on all Web Front Ends

  1. Click Start, and then click Computer Management Groups
  2. Make sure the Workflow Admin account is added to the following 3 groups on all Web front ends:
  • Administrators
  • WSS_ADMIN_WPG
  • WSS_WPG

If the Workflow Admin account is not present in a group, you can right click the group name, and then click Add to add a new user (in this case, the Workflow Admin Account) to the group.

Giving required SQL Server permissions to the Workflow admin user

Back to top

Make sure the Workflow Admin account has the required database permissions.

SharePoint 2013

  • Add the Workflow Admin Account to the SPDataAccess role on the configuration and every content database hosting Winshuttle applications.

SharePoint 2010

  1. Open SQL Server Management Studio.
  2. Go to SecurityLogins.
  3. Right-click the user, click Properties, and then click User Mapping.
  4. Select the following:
  • SharePoint_Config : ‘Public’ and ‘WSS_Content_Application_Pools’
  • WSS_Content: ‘Public’ and ‘db_datareader’
  • Provide Execute and Update permission to WSS_Content database
  • Provide Execute permission to SharePoint_Config database

SQL Login Properties screen example