Behavior:
When a user is attempting to confirm a task that writes to a User of a Group global variable, the following error is shown;
DocuWare.Web.Model.ResourceForbiddenException; message: This user has no rights for the instance [Workflow Instance GUID]
Solution:
This behavior occurs because the user lacks the View All Users functional right, which is given by default through the Default Organization Profile.
By product design, this permission is required for DocuWare Workflows. If this permission needs to be restricted, it is best practice to create a new Function Profile within the Organization Settings plugin, only enable the View All Users permission, and assign it to the relevant users.
For more on the View All Users permission and Workflow, please refer to KBA-37728.
KBA is applicable for both Cloud and On-premise Organizations