Introduction:

To implement unique security for specific items within a SharePoint list, use a Power Automate flow that first employs the "Stop sharing an item or a file" action to break permission inheritance, and then uses the "Grant access to an item or a file" action to assign new permissions to specific SharePoint groups.

Break & Set Permissions Using Power Automate (Recommended for automation)

1

Common Role Definition IDs

PermissionRoleDefId
Read1073741826
Contribute1073741827
Edit1073741828
Full Control1073741829

(Optional) Grant Multiple Groups Different Permissions

Example:

2

What you can and cannot do (important first)

❌ Power Automate limitations (out of the box)

Power Automate cannot directly:

✅ What is possible

You can do this using one of these supported approaches:

  1. Send an HTTP request to SharePoint (most common)

  2. Azure Automation / Azure Function (overkill for most cases)

👉 Below is the recommended and widely used HTTP approach.

Required Actions

  1. Send an HTTP request to SharePoint

  2. Use REST API calls

1) Break Permission Inheritance

3
POST 
_api/web/lists/getbytitle('ListName')/items(ID)/breakroleinheritance(copyRoleAssignments=false, clearSubscopes=true)

2) Grant Permission to a SharePoint Group

4
POST 
_api/web/lists/getbytitle('ListName')/items(ID)/roleassignments/addroleassignment(
principalid=groupId,
roledefid=roleDefID)

Conclusion:

Breaking and setting SharePoint group permissions on list items using Power Automate helps streamline access management while ensuring security. By automating this process, you can:

Implementing this approach ensures efficient, accurate, and scalable permission management across your SharePoint lists.