Change Item Permissions in SharePoint: A Power Automate Solution

Photo credit: Jason Blackeye

Article Updated: Feb 10, 2022

Warning

It is best practice to avoid item level permissions in SharePoint.

Built-in Action

There is a Power Automate action to change item permissions in SharePoint:

The problem is that it only shows “View” and “Edit” (actually I think it’s contribute) items.

Under the covers, it uses the ID of the Permission level (or Role Definition) in SharePoint.

Roles Definition IDs in SharePoint

To get the Role Definition IDs in SharePoint you can use this:

[Site URL]/_api/web/roledefinitions

Then parse the XML to get the Role IDs.

Or… You can use this table to get the common IDs:

Role Definition NameRole Definition Id
Full Control1073741829
Design1073741828
Edit1073741830
Contribute1073741827
Read1073741826
View Only1073741924

Use the Role Definition ID in the Action

Once you have the Role Definition ID, you can send the ID into the action using the format:

role:[Role Definition ID]

Note: You will need to use the “custom value” setting.

Example:

Sending the Design Level)

When you run the flow, the item gets the permission defined by the ID you used:

I thought this was a neat little workaround/hack.

Author: Mike Hatheway

I'm a husband, father of twins, and a consultant specializing in M365. Generally focused on Teams, SharePoint, and the Power Platform. I hold several Microsoft certifications and I work at Bulletproof Solutions.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.