The CoreBIS workflow is designed to work with users. Each user in the system has a group which is a one-to-one assignment to the user. This group is used as a proxy for the user. In the security setup a user will be defined under the GRP_User group and applied to the workflow as a user. Whatever group the "GRP_*User*" has access too will define what is applied in the workflow setup.