Creating SharePoint connection that will have acess to multiple sites

(0) Share

Report

Posted on by nemanjasovic011

240

Hello,

There is a request to be able to retrieve permission level for all users for a selected SP site on 0365 tenat. I know what API call I need to use for each site but confuses me is: how do I ensure that the account under which Power Automate action is created for that SP API call will have access to query Alluser list for a particular site.? What role should this account have in the tenant so that the above can work? ...or please suggest another approach.

Thanks.

Categories:

General topics

I have the same question (0)

All responses (3)

Answers (1)

SamLed 2,338 Moderator on at

Like (0)

Report
Copy link

Link copied!

Hi,
First of all, if you don't already have one, I recommend using a dedicated service account as the owner of the flow.
Then you can give it site collection administrator for each site or SharePoint administrator to allow it to manage any site.

I personally always use a service account with SharePoint administrator privileges for my flows. So I can do what ever I want over SharePoint, Teams and OneDrive with that account. This is not a security breach since this account is only used for that and credentials are only known by couple of administrators.
______________________________________________________________
If I have answered your question, please Accept the post as solution.
If you like my response, please Thumbs Up.

Was this reply helpful? Yes No
nemanjasovic011 240 on at

Like (0)

Report
Copy link

Link copied!

....the issue is that there might be thousands of sites. Could there be a role assigned to an account that will automatically be able.to query all sites?

Was this reply helpful? Yes No
Verified answer

SamLed 2,338 Moderator on at

Like (0)

Report
Copy link

Link copied!

Hi,
SharePoint Administrator may have access to all of them. If SharePoint Administrators don't have automatic access to all sites, they can give themselves access to any site.

In you flow or with another flow, you could check if you account has access to a site and if not, add it as site collection admin: https://ganeshsanapblogs.wordpress.com/2022/10/30/sharepoint-online-add-site-collection-administrator-sca-using-power-automate/
______________________________________________________________
If I have answered your question, please Accept the post as solution.
If you like my response, please Thumbs Up.

Was this reply helpful? Yes No