Answered

My flow runs successfully, but permission not granted

(1) Share

Report

Posted on by XX-08010504-0

Hi Everyone,

I'm not sure if anyone has run into this issue before. I'm trying to grant unique permission of Sharepoint List items to different users (based on one of the columns in the List) by Power Automate Flows.

Here's what it looks like:

I tested it, it ran successfully. My user got the email notification sent by the Flow, but still unable to edit the item when clicking the 'Open' button in the email.

I double checked the inputs & outputs of the Flow. The parameter/recipient & the parameter/rolevalue both seemed to be correct,

Any one has any idea on what might be the issue? Any help will be highly appreciated!

Xiaofei

Categories:

Building flows

Using flows

I have the same question (0)

All responses (7)

Answers (1)

Sort by

mrcwojcik 68 on at

Like (0)

Report
Copy link

Link copied!

Could you share how Grant access action is configured?

Was this reply helpful? Yes No
Verified answer

Expiscornovus 33,876 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi @XX-08010504-0,

Normally you would break the inheritance first on the item before you create/grant unique permissions on that same item.

Below is an example of breaking this inheritance:

https://www.sharepointeurope.com/setting-sharepoint-permissions-with-power-automate/

Happy to help out 😁

I share more #PowerAutomate and #SharePointOnline content on my Blog, LinkedIn, Bluesky profile or Youtube Channel

1 people found this reply helpful.

Was this reply helpful? Yes No
XX-08010504-0 12 on at

Like (0)

Report
Copy link

Link copied!

Hi @Expiscornovus,

Thank you for your response! I realized this shortly after I posted the question, and I added an extra step 'Stop sharing an item or a file' before granting the permission. Everything looks good, but the issue is still unresolved.

After I added this step, the permission was successfully granted, but the user was still unable to edit the item in the list.

Then, I found out that other users were unable to view this item. It kind of caused a bigger issue. After reading the post you shared, I realized I need to grant View permission to other users first. I tried to follow the solution in the post you shared, but it tragically failed. The post indicates the 'principalid' of the Read permission group should be part of the MembershipGroupID URL. I also need to grant the Read permission to the site members so I used 5, same as the post. It came back with this error "HTTP Error 400. The request URL is invalid".

Now I literally don't know what to do...

Was this reply helpful? Yes No
XX-08010504-0 12 on at

Like (0)

Report
Copy link

Link copied!

I'm pretty sure the error was caused by the expression 'items(@{triggerOutputs()?’ID‘]})'.

I tried 'items(@{triggerOutputs()?['body/ID']})', still not working.

I thought I might as well just share the entire list, so I took off the items, and jump to the 'roleassignment' right after the list name, which looks like below.

Now the flow runs successfully, I can see the user in under the 'Manager permission', but the user is still unable to view other items, and still unable to edit this item...

I'm really, really lost.

Was this reply helpful? Yes No
PowerDeveloperTP 453 on at

Like (0)

Report
Copy link

Link copied!

Hello,

The error you are getting is access denied while doing role assignment. Could you please let us know if you got right access to grant permission.

To assign roles (permissions) in SharePoint, the user must have a permission level that includes the "Manage Permissions" right. The minimum built-in permission level that grants this capability is typically the "Full Control" permission level, which is assigned by default to the Site Owners group.

Like my answer? - Hit that Thumbs Up. Resolved the Issue? - Hit Accept as Solution.
This helps others find solutions to future issues!

Was this reply helpful? Yes No
XX-08010504-0 12 on at

Like (0)

Report
Copy link

Link copied!

Hi @PowerDeveloperTP,

Sorry I didn't make it clear. The Access Denied error was not while doing role assignment, but when the user attempting to edit the item in the list. I'm the Site Owner and have full control permission to the site.

I checked the 'Manager Access' page of the item, the user was assigned with the Edit permission successfully by the flow. But not sure why she still got that Access Denied error when making changes.

Was this reply helpful? Yes No
PowerDeveloperTP 453 on at

Like (0)

Report
Copy link

Link copied!

Hello @XX-08010504-0

Could you please confirm if the user got at least Read access to the SharePoint List.

Item-only permissions without list permissions will lead to access denied error. Thank you.

Like my answer? - Hit that Thumbs Up. Resolved the Issue? - Hit Accept as Solution.
This helps others find solutions to future issues!

Was this reply helpful? Yes No