- Yes you have to switch to normal StartLinks in order to use them in the CaseMap. For such a simple flow no signals should be required.
- An easy way to secure the link is by removing the link from the startlist ' (see checkbox in request tab). But you can make the start triggerable (trigger tab). And define a role that can start it. The role in the triggered tab while will be evaluated and must be owned in order to continue the case map execution. See https://developer.axonivy.com/doc/latest/DesignerGuideHtml/ivy.processmodeling.html#ivy-casemap-workflow-execution