Break Inheritance And Set Item-Level Permission Using Power Automate

Introduction

In this article, we will learn how to set item-level unique permissions in SharePoint using HTTP request with Power Automate.

Use case: When a new item is created or modified in SharePoint list, break inheritance and assign item-level unique read permission to "AccessTo" column users for the current item.

Prerequisites

• Full control permission in SharePoint
• Power Automate

Below are the steps to break inheritance and set item-level unique permissions,

Step 1

Create a SharePoint list with "AccessTo" Person type column. I have created dummy records in the list by adding users to "AccessTo" column.

Step 2

Create an automated flow with a "When an item is created or modified" trigger condition.

Step 3

Select SharePoint site and list to configure the flow trigger action.

Step 4

Add "Send an HTTP request to SharePoint" action to break inheritance and clear existing permissions.

_api/lists/getByTitle('Demo List')/items(@{triggerOutputs()?['ID']})/breakroleinheritance(copyRoleAssignments=false,clearSubscopes=true)

For this use case, I wanted to break inheritance and clear existing permissions, so I added “copyRoleAssignments = false” in URL. If you want to break permissions by copying existing permissions, set this parameter to true.

Step 5

Add "Send an HTTP request to SharePoint" action to grant Read permission to "AccessTo" column users for current item.

In this step, we will use two "Send an HTTP request to SharePoint" actions to get the user id and grant read permission.

_api/web/SiteUsers/getByEmail('@{items('Apply_to_each')?['Email']}')

_api/lists/getByTitle('Demo List')/items(@{triggerOutputs()?['body/ID']})/roleassignments/addroleassignment(principalid = @{body('Send_an_HTTP_request_to_SharePoint_-_Get_user_id')['d']['id']}, roleDefId =1073741826)