Creating a SharePoint Impersonator User Account

The SharePoint impersonator is a domain-qualified user account that SharePoint uses to interact with AgilePoint Server with a running process. To create the SharePoint impersonator user account, do the following.

Prerequisites

These instructions apply only if you plan to install SharePoint Integration. This is an optional component that is not available for all versions of AgilePoint BPMS.
It is recommended to use the same account as the AgilePoint System User Account.

Instructions

Create a domain-qualified SharePoint Impersonator User Account in SharePoint.
Assign the SharePoint Impersonator User Account to the Site Collection Administrators group.

AgilePoint recognizes that adding this user to the SharePoint Site Collection Administrators group does not follow the least-privileged account best practice. If you want to ensure you are following this best practice, ensure this account has at least have Contribute rights on each SharePoint site where Lists, Document Libraries or Form Libraries are associated to an AgilePoint Process.

Usually, it's enough to add that this account to the [Site Collection Name] Members SharePoint Group. However, you must:

Ensure that group has Contribute rights on SharePoint.
Ensure inheritance is not broken on sub-sites as that might prevent that Impersonator account to access those sub-sites – it would have to be added to the Members role of each of those sub-sites that break inheritance with their parent site.