using Flow to grant access in SharePoint

(0) Share

Report

Posted on by JFF42

Hi,

I want to manage permissions automatically on SharePoint Online folders in a library.

I found the Flow action "Grant permission" but it is very limited:

- we can only add, not delete

- we can't use all SharePoint permissions levels, but only "role" Edit or View (and the role does not exist in SharePoint)

- we can only grant the right to an email address and not to a SharePoint group.

If anyone has an idea about these issues ...
Thank you

(traduction FR)

Bonjour,

Je souhaite gérer automatiquement les autorisations sur les dossiers SharePoint Online dans une bibliothèque. J'ai trouvé l'action Flow "Accorder l'autorisation" mais elle est très limitée :

- on ne peut qu'ajouter, pas supprimer

- il ne s'agit pas des niveaux complets d'autorisations SharePoint mais seulement de rôle (nouveau concept qui n'existe pas dans ShP) Edit ou View

- on ne peut accorder le droit qu'à une adresse e-mail et pas à un groupe SharePoint.

Si quelqu'un a une idée pour traiter ces questions …

Merci.

Categories:

General topics

I have the same question (0)

All responses (8)

Answers (2)

Verified answer

Pstork1 68,707 Most Valuable Professional on at

Like (0)

Report

You can use HTTP Rest calls in Flow to modify permissions to SharePoint lists, folders, and items. Take a look at this walkthrough

https://collab365.community/sharepoint-item-permissions-using-flow-part-1/

Was this reply helpful? Yes No
Verified answer

v-bacao-msft on at

Like (0)

Report

Hi @JFF42 ,

Have you had an opportunity to apply @Pstork1 's recommendations to adapt your Flow?

There are also links here for your needs, please check them:

managing-sharepoint-item-level-permissions-with-microsoft-flow

get-sharepoint-role-definition-ids-out

assign-unique-permissions-to-a-document-with-the-new-send-an-http-request-to-sharepoint-action-how-to-use-the-sharepoint-rest-api-in-flow/

Please take a try and feel free let us know if you have any questions.

Best Regards,

Was this reply helpful? Yes No
sandhiya 10 on at

Like (0)

Report

Is there any option to provide access to groups in flows and to remove access to flows or to delete a group or user? please suggest.

Was this reply helpful? Yes No
Pstork1 68,707 Most Valuable Professional on at

Like (0)

Report

Setting permissions via HTTP can be done for both users and groups. Other than that your question really doesn't pertain to the discussion.

Was this reply helpful? Yes No
BenFetters on at

Like (0)

Report

Just a quick comment here.

1. You can use custom role definitions with the "Grant Access" action by entering in "role:[roleID]" as a custom value. See here: https://powerusers.microsoft.com/t5/General-Power-Automate/Custom-value-for-Role-in-Grant-access-to-an-item-or-a-folder/td-p/527982

2. While HTTP requests are great to change security, they take a lot longer to do. The hardest thing I've had to deal with with setting security with the "Grant Access" action is that it only works with people fields or just email addresses and not SP groups. I think that would be a great feature to add so that the flow could handle a user ID as well as a group ID instead of just an email.

That is all, hope that was insightful/helpful!

Kind regards,
Ben Fetters

Was this reply helpful? Yes No
Pstork1 68,707 Most Valuable Professional on at

Like (0)

Report

The problem with Grant Access is that it just shares the item with new people. It doesn't break inheritance and setup true item level permissions for the item. Actually managing permissions is what this question was about.

Was this reply helpful? Yes No
DavidMorganBake 2 on at

Like (0)

Report

How would you do this for folders? Can only see answers for lists.

Was this reply helpful? Yes No
abc 123 784 Moderator on at

Like (0)

Report

Don't waste your time if you're looking to do this for Folders. It doesn't work, and her blog in no way addresses it.

Was this reply helpful? Yes No