Delete Permissions on a sharepoint list

[Anonymous]

I'd like to create items in a list with different permissions.

One item should be readable by all (thats the current default), but others should be only visible to few people.

I thought i could remove those permissions (read-permissions) with "end share of element or file" (in german its "Freigabe eines Elements oder einer Datei beenden"), but that did nothing. I would expect, that when i execute that on a list item, that no one can read that item anymore except the owner. Anyone an idea how to achieve that in a simple way?

[annajhaveri · Accepted solution]

@Anonymous  so looks like you want to set unique permissions on specific items in the list. This can be done using REST API from Send HTTP Request to SharePoint action, i have a blog post written regarding it https://www.annajhaveri.com/power-automate/set-unique-permissions-for-item-in-sharepoint-using-power-automate you can follow the instructions, if you feel stuck anywhere, let me know.

[Anonymous]

Thanks annajhaveri!

So by breaking the permissions with copyRoleAssignments=false,clearSubscopes=true i also clear the existing permissions?

edit: just tested it with 2 users. one created a list entry, the other user edited it. after editing, the power automate job started and called the breakroleinheritance but still both users can access the listitem

edit 2: what i also noticed, there seems to be no role thats like "not allowed to read/write", all permission roles have some kind of read-ability.

[annajhaveri]

@Anonymous  can you please share the screenshot of your flow to see if your flow is configured correctly. There is not permission level for not allowing to read, if user is not given any permissions on item after breaking permissions then user will not be able to see the item.

[Anonymous]

 Thats the complete flow, for testing. I have 2 users. When i create an item, both can see it (thats the problem). When i execute the breakroleinheritance, still both can see it.

[annajhaveri]

@Anonymous  flow looks correct. Can you to go advanced permissions of the item and share screenshot of it. Also can you check flow run, did it run successfully?

[Anonymous]

the users in the list (currently 4) have all permissions (in german its "vollzugriff"). sharepoint shows that there are exceptions, some items in the list have permissions that are not managed in the sharepoint permissions page. when i click on those, it shows me again the 4 persons, all have all permissions. 

So you assume that the list is created not correct?

The flow runs fine.

 

[annajhaveri]

@Anonymous  did that item already had unique permissions before running the flow? Can you try the flow with a new item? I did a test on my end, breaking permissions with this API via flow did break the permissions on list and also removed permissions of others users except the permission of user who was sent a connection in the Send HTTP action of the flow.

[Anonymous]

thanks, you are correct, it works now. The list was fine but the users i tested with had too wide permissions, so they were able to always see the items 😉

[n8-01]

@annajhaveri I'm finding that your BreakPermissions Post method works for any items that didn't have unique permissions assigned. It works so well in fact that it only leaves owners assigned. I'm needing a slightly different solution where I want to reset every item in the list back to its parent list permissions. Permissions are set by way of the Owner/Member/Visitor roles and I don't know how to add those in. Can you help with this scenario?