locked
I am the SharePoint Site Admin yet have a Deny access to Edit a Page RRS feed

  • Question

  • I am a full SharePoint Admin (have full access to Site Collection and Site Admin).  I have created multiple subsites that need to have unique permission levels set so they are not inheriting permissions.  I've created 4 subsites yet I cannot edit any of their pages.  I get "This control is currently disabled."  I went to one of the site's permissions and did a check on mine and get Full Control then a Deny.  

    Deny

    Add and Customize Pages

    Add, change, or delete HTML pages or Web Part Pages, and edit the Web site using a Microsoft SharePoint Foundation-compatible editor

    1.  How is a full SP Admin getting a Deny?  

    2.  I do not want to start creating security groups as we have yet sync'd AD Azure and want to keep it clean.  Is there a reason why a Site Admin would not be granted edit access on a page that they created ie me?

    UPDATE:

    My PM Team Site has 3 subsites (Policies, Templates and Projects) which I have full Edit capabilities on those pages, even though when I check my permissions on those I get the Deny but can still edit.  Any third level subsite, I cannot edit any pages.  Is there a level restriction for subsites? I've deleted all my third level subsites, created new ones (with the KB articles referencing enabling custom scripts) but still cannot edit those pages.   
    • Edited by meluvsql Wednesday, June 28, 2017 4:52 PM
    Wednesday, June 28, 2017 4:09 PM

All replies

  • Hi meluvsql,

    Per my research, to fix the problem, in SharePoint online management shell (download if you don’t have it).

    Enter:

    Connect-SPOService 

    then

    Enter URL of admin site https://<yourdomain>-admin.sharepoint.com

    Then username and password

    Set-SPOSite -Identity https://<yourdomain>.sharepoint.com -DenyAddAndCustomizePages $false

    For more detailed information, refer to the following articles:

    https://www.qdoscc.com/blog/sharepoint-o365-permissions-deny-add-and-customise-pages-issue

    http://anujabhojani.blogspot.sg/2015/09/permission-denied-for-add-and-customize.html

    Best Regards,

    Lisa Chen


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com


    Friday, June 30, 2017 6:28 AM
  • Usually it happens if some one explicitly set the unique permissions for that particular page.

    In that scenario even full control permissions on site would not work.Request some one else to create sub site for you and grant you full control explicitly on particular page and then try.

    -----------------------------------------------------------------------------------------------

    Please remember to mark the replies as answers if they help.

    Tuesday, July 4, 2017 8:12 AM
  • Changing the settings in the Sharepoint Admin Centre to allow custom scripting was supposed to fix this issue.  I had turned these both on and days later created new sites and still have the Deny on those new sites.  

    I ran the powershell anyway and after it completed, I logged back in and still have the Deny permissions.  The Custom Scripting DID allow me to edit pages, however, I still cannot go to any site settings > Navigation settings  and make changes and get "Sorry, you don't have access to this page." I  can do the access request and I get the email to allow.  

    I then open up my OWN request, click Approve, it wants me to set a permission (which in alone is absurd that I'm approving my own requests), I chose design, it says request approved.  Check permissions again:

    Deny 
    Add and Customize Pages 
    Add, change, or delete HTML pages or Web Part Pages, and edit the Web site using a Microsoft SharePoint Foundation-compatible editor.

    Thursday, July 6, 2017 5:44 PM
  • hello @meluvsql,

    Did you resolve the issue? If yes, can you share the solution please.

    Friday, October 19, 2018 7:12 PM
  • >> Set-SPOSite -Identity https://<yourdomain>.sharepoint.com -DenyAddAndCustomizePages $false

    Now it looks to be deprecated, Connect-PnPSite used instead and there is no such flag ("DenyAddAndCustomizePages"). Any ideas?..Resetted Off/On "Custom Script" in tenant settings, waiting..


    Independent SharePoint Developer, freelancer http://blog.sharepoint-develop.com/


    • Edited by Rockie_ Wednesday, March 25, 2020 12:51 PM
    Wednesday, March 25, 2020 12:51 PM