SharePoint role permissions when shared links to an item have been used

[Jeff_Law]

Hi,

I have been working on a process where when an item in a SharePoint list is created I need to set item level permissions based on various information entered in the list. eg there is a Region column, then this Region is looked up in another list to get the people who need to have access to it.

I am proceeding slowly and have set up a test flow which I manually kick off which reads the item, and also gets the item role permissions using the _api/lists/getByTitle(LISTTITLE')/items(ID)/roleassignments http call.

I then go through the results, and for each entry get the user details based on the PrincipalID returned, using the _api/web/getUserById(USERID) http call.

This all works until the item is shared with someone using a sharing link. Once that happens, and I run my test flow, the flow never stops running. it gets stuck in the loop where it gets the user details. I presume something to do with the  _api/web/getUserById(USERID) as at the moment I dont do anything else. I have to manually cancel the run.

Is there some trick or step that I am missing when dealing with shares to an item? 

This is a problem for me as while I can always recalculate the specific users who can have access, I cant recreate any shares that people may have sent. So If I always use the stop sharing an item of file step before recalculating the access, I lose the share links.

Regards

Jeff

[Expiscornovus · Accepted solution]

Hi @Jeff_Law,

As far as I am aware there also exists a GetByPrincipalId method on the Roleassignment Collection. Can you try and use that method instead, https://docs.microsoft.com/en-us/previous-versions/office/sharepoint-visio/jj246770(v=office.15)

Below is an example of such an Uri for your Send an HTTP request to SharePoint. Btw, it is a POST request against the list and not the whole web.

_api/web/lists/getByTitle('@{variables('ListTitle')}')/items(@{variables('ItemId')})/roleassignments/GetByPrincipalId(@{variables('PrincipalId')})/Member

 

[Jeff_Law]

Thanks for your response. My flow now works and I can get the info I want.