As pointed out, the issue does not seem to permissions related. To get resourceresolver object in the code, a user of type = "service-user", is needed. From the error posted in the original post, it seems that "workflow-user" is not of type "service-user".Could you try creating a user with that typ...