Change permissions after a form is submitted

Hi @jpacheco,

This is the action you would use to accomplish this scenario,

To remove the inherited permissions for an item, you need to make sure in this work action that the “Inherit permissions from parent” setting is No and the “Remove existing permissions” setting is Yes. You will then have to set the Target to a user or group, select the user name or group (insert reference to item properties), and set the Permission level. If I remember it correctly, you might have to configure this same action multiple times, one for each user and group you need to set permissions for. 

Also, make sure the Filters section is configured with the “Update items only when the following is true:” option is selected. Then configure the rest of the Filters section under “Update the items when column” settings, in which you typically will use the ID of item the workflow is running on.

Here is a link to the help documentation for this action: Office 365 update item permissions (nintex.com)

Couple of questions.

Which workflow action does the workflow fail on: the add group or add user?

Is the group you are trying to add a SharePoint group or an AD group?

The error message in you first screen shot seems to suggest that the query cannot find a matching item in the list.

I know you can add permissions to SharePoint groups with this action, but I do not think you can add AD groups to site permissions. I am not 100% sure about that, so maybe someone else can verify.

If the update permissions action for the user does not work, I still think that the issue is with the filter query not finding a match based on the error message you displayed. Try adding a test action like a Run If action with the same conditions configured as the update permissions action and add a “Log in history list” action inside. This will help you see if the condition returns a true or false result.