Answered by:
SharePoint 2013 workflow elevated permissions

Question
-
I have made a SharePoint 2013 workflow for a list in which users have read permission only. I want to give the user rights to kick off the workflow through the Custom List Action. But i get this error everytime: "Unfortunately, this site has not been shared with you." How can i solve this? I have already created the workflow using the msdn article(creating a workflow with elevated permissions). But this does not seem to help in my case.Wednesday, May 6, 2015 9:13 AM
Answers
-
Hi,
Based on your description, my understanding is that you want to allow users with read-only access to execute workflows.
If you look at a workflow's properties you can see there's a checkbox for "Allow this workflow to be manually started by an authenticated user with Edit Item permissions". So obviously users with "edit item permissions" can start a workflow.
I recommend to use Impersonation Step in SharePoint 2010 workflow platform instead. Impersonation steps run with the permissions of the person who last saved the workflow– typically the workflow template author.
Refer to the following blog about SharePoint 2010 Impersonation Workflow:
http://blogs.sharepoint911.com/blogs/jennifer/Lists/Posts/Post.aspx?ID=91
http://www.learningsharepoint.com/2010/07/31/impersonation-in-sharepoint-designer-2010-workflow/
Best Regards,
Lisa Chen
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.Thursday, May 7, 2015 9:39 AM
All replies
-
Hi,
Based on your description, my understanding is that you want to allow users with read-only access to execute workflows.
If you look at a workflow's properties you can see there's a checkbox for "Allow this workflow to be manually started by an authenticated user with Edit Item permissions". So obviously users with "edit item permissions" can start a workflow.
I recommend to use Impersonation Step in SharePoint 2010 workflow platform instead. Impersonation steps run with the permissions of the person who last saved the workflow– typically the workflow template author.
Refer to the following blog about SharePoint 2010 Impersonation Workflow:
http://blogs.sharepoint911.com/blogs/jennifer/Lists/Posts/Post.aspx?ID=91
http://www.learningsharepoint.com/2010/07/31/impersonation-in-sharepoint-designer-2010-workflow/
Best Regards,
Lisa Chen
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.Thursday, May 7, 2015 9:39 AM -
In SharePoint Workflow 2013, you can use the APP step that will allow the workflow to be authorized with its identity as a Full Control and ignore the current user permissions.
This is will ensure that the workflow will be executed successfully in case the current user has no permissions.
Note: The APP Step will be disabled if you didn't elevate SharePoint workflow permission.
Check also
- Edited by Mohamed El-Qassas MVPMVP Saturday, August 8, 2020 9:32 PM update broken links
Tuesday, August 28, 2018 11:42 AM