RE: Remove case resolution permissions for security role
Hi PippaH
If you want to keep the solution OOB you can look at using a Synchronous/real-time workflow.
Have the workflow trigger after status change and set your 1st check condition for any status = Canceled or resolved.
The 2nd check depends on the security hierarchy.
If your managers live in a higher business unit, then set the check for the modified by users BU to not equal the Manager BU.
However, if they are all in the same BU, you may have to look at creating a hidden boolean field on the users and set all the managers option to yes. Then use this field as your second check that if it equals no on the modified by user.
After, your WF will need to have a stop workflow step below the check condition with a status of canceled. Then within the properties of the stop, you can add a status message explaining why they can't resolve the case.
Finally, you add a conditional branch with a stop workflow step as succeeded.
What this workflow will do is if the check condition is not met, It will allow the case to be resolved, however, if the check condition is met then it will prevent the status change and provide an error message essentially preventing case resolution based on the second check condition. Here is a screenshot of a similar requirement I had a while back.
I hope the helps!
Please mark as an answer if this resolved your issue.