An end-user needs to trigger a process model and act on the user task assigned to them.

What is the minimum security permission needed?