Unanswered

Create Flow to Determine a Users Access to Specific SharePoint Item

(0) Share

Report

Posted on by zoso2112

134

I know I need to use a Send an HTTP Request to SharePoint and I have used one to retrieve the SP List item's GUID. How do I determine a specific user's permissions for a specific SP item?

I have a Power App, part of a Solution that has a Flow that works for me but not for several other users and they get an error about the FlowName.Run failed, the user lacks the ReadAccess rights for the record. To determine a root cause, I need to know what a specific user's permissions are to an SP List item.

Categories:

Building flows

I have the same question (0)

All responses (4)

Answers (0)

Sort by

Michael E. Gernaey 53,968 Super User 2026 Season 2 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi,

Please try to avoid telling us what you need, cause if you know, then you should just do that. also please try to not dump loads of things into a single post. What do you need help with right now? Like the most important?

Was this reply helpful? Yes No
zoso2112 134 on at

Like
a
(0)

Report
Copy link

Link copied!

I need to determine what a specific user's permissions are for a specific SP list item. I have used "Send an HTTP Request to SharePoint" to successfully retrieve the SP list item's GUID. My flow is shown below.

In the first Parse JSON action, I use this code.

{
"type": "object",
"properties": {
"d": {
"type": "object",
"properties": {
"__metadata": {
"type": "object",
"properties": {
"uri": {
"type": "string"
},
"etag": {
"type": "string"
},
"type": {
"type": "string"
}
}
},
"GUID": {
"type": "string"
}
}
}
}
}

Followed by a Compose: body('Parse_JSON')?['d']?['GUID']

This successfully retrieves the SP list item's GUID and is working as expected.

Next I do a second "Send an HTTP Request to SharePoint":

_api/web/lists/getbytitle('PROD Winthrop Prod Jobs')/items(152)/getusereffectivepermissions(@v)?@v='i%3A0%23.f%7Cmembership%7Cuser%40domain.com'

Followed by a Parse JSON action:
{
"type": "object",
"properties": {
"d": {
"type": "object",
"properties": {
"GetUserEffectivePermissions": {
"type": "object",
"properties": {
"High": {
"type": "string"
},
"Low": {
"type": "string"
}
},
"required": [
"High",
"Low"
]
}
}
}
}
}

The output of this action produces a High (432) and a Low (1011030767) value that are supposed to indicate permissions.

{
"d": {
"GetUserEffectivePermissions": {
"__metadata": {
"type": "SP.BasePermissions"
},
"High": "432",
"Low": "1011030767"
}
}
}

What actions do I take next to extract the High and Low values and translate them to a permission level?

Was this reply helpful? Yes No
CU25101923-0 4 on at

Like
a
(2)

Report
Copy link

Link copied!

Most people are able to interperate the sentence; "To determine a root cause, I need to know what a specific user's permissions are to an SP List item" into a question by replacing "I need to know" with "How do I know...". I felt it was a well-formed question that helped the reader know what the writer already understands and eliminate unneccessary explanation (and I actually would like to know the same thing)! 'FLMike', If you are a 'Multi Super User', try also to be 'Super Helpful', and answer the question...instead of denigrating well-meaning participants.

Was this reply helpful? Yes No
zoso2112 134 on at

Like
a
(1)

Report
Copy link

Link copied!

Thank you @CU25101923-0 for your response. Sometimes these posts are made in the heat of the battle and they can be written more clearly. However, I am just looking for an answer. Hopefully someone else will recommend a solution.

Was this reply helpful? Yes No