Approval Rule - Scheduled Task

I do have enforced approval switched on which is what i would like but is there away to bypass this for the scheduled task? I assume the scheduled task is running under the ARS Service Account? 

1. In the Active Roles Console, as an Active Roles Admin, navigate to Configuration | Policies | Workflow
2. Select the Change Workflow that contains the Approval
3. Expand the Workflow options and start conditions and click on Configure
4. Click on the Run as options in the bottom left of the screen
5. Check the Enforce Approval check box
6. Click OK
7. Click OK again
8. Click on Save Changes

The checkbox you mentioned above pertains to controlling the behaviour of the workflow in the case where an Active Roles Admin triggers it.  Normally, Approval is bypassed in that case.

What you want to do in the Workflow start conditions is add a condition at the bottom that looks for the "Initiator" is not your service account.

Do you mean something like this? This is still asking for approval. Im sure i have it wrong 

Yes - that's what I had in mind.

Who does the Admin Service event log show as the Initiator in the case where the VA is changed by the Task?

I can see that my VA is changed from X to Y by my ARS Service account and i am not being asked for approval but the workflow should kick off a script and that script is not running from what i can see. If it goes via the approval then it does work. 

This is the work flow

Ah OK - I incorrectly assumed that you didn't want the workflow to run at all.

So what you can do is "move" this account check to an If/Then inside the workflow very similar to your OneDrive one.

You would have two branches - one that has the Approval activity under the condition "Initiator" does not equal <your service account> and nothing under the the condition "Initiator" does equals <your service account>.

Ah OK - I incorrectly assumed that you didn't want the workflow to run at all.

So what you can do is "move" this account check to an If/Then inside the workflow very similar to your OneDrive one.

You would have two branches - one that has the Approval activity under the condition "Initiator" does not equal <your service account> and nothing under the the condition "Initiator" does equals <your service account>.

Do you still want / need to control Approval based OneDrive size check as well?

Because if yes, then that makes the If / Then stuff a bit more complicated.

You would need to explain all the different possible combinations of conditions.

So i changed the workflow to this. The Scheduled Task Account has in the "Initiator" does equals <your service account>. 

I was thinking it would then just bypass straight to running the script. But its still asking for approval. 

Its working. Setting it to below has done the trick. The schedule task runs, sets the VA and the work flow runs the script. If i make the same change via WI then i am asked to provide a reason for the change. 

setting it to "Initiator" equals <your service account>.  

Sorry i think i read your reply to quickly and think you suggested the same thing. Apologies if read that to quick and assumed does not equal. 

Yep that makes sense.

I was going to suggest that you could change the Run As option on the workflow.

i.e. turn off the Enforce Approval and make sure the workflow is Run As "the account of the user who started the workflow"

But if it's working the way you want now, just "let sleeping dogs lie".

Seems to be fine but will give it a real world run tonight. Thanks Johnny as ever with your help. I really appreciate it. Always learn something new from you.