1. Create a new task and assign it to a user during the creation
2. Then the user is granted with READ and UPDATE/TASK_WORK permission for this specific task
The user is granted with READ_VARIABLE permission as well in case the enforceSpecificVariablePermission config is enabled.
- on a new assignment
- on setting an owner
- on adding a user identity link
- on adding a group identity link