I need to automate site creation. I'm doing this with Nintex Office 365 create site. There are two options either inherit permissions from the parent or specify the site owner who will have full control.
The use case is as follows. The workflow run's at the Parent Site level, and will create a sub site sitting one level below the parent. The requirement is that the sub site will have a sub-set of the permission groups that are associated with the Parent Site. One of the groups has different permissions at the sub site level. The process of setting up the unique permissions at the sub site level needs to be automated.
The manual process would be:
1. Create sub site (Use unique permissions) using desired template
2. Select/create a visitors (read), members (contribute) and owners (full control) group, it is possible to chose from the existing groups from the Parent Site.
3. Add any required groups and set the required permissions.
The automated process using Nintex workflow only allows to provide the Owners Group/s. Is there a way to automatically add the required groups and set the required permissions.
Looking forward to discussion.
The above issue was resolved using the following web service AddPermissionsCollection. Here is a good description of how to go about this: How to add permissions to a new SharePoint site using Nintex? | SharePoint Rider
In order to create user/group dynamically see post: AddPermissionsCollection dynamic creation of permissionsInfoXML string
Beware that setting custom permissions (mostly anything other than Full Control, Contribute and Read) could lead to the following issue where the mask you set is e.g. (1011030767), but when you query the mask you find that it is (101103783) - this seems to be an existing issue: Why do I get Auto-generated Permission Level 64b6593a-75eb-4031-ae23-0048de865fa3 instead of actual ...
A number of other posts confirm this issue:
So my initial post is resolved, but it seems like I have to create a custom web service to deal with the custom permission level - unless someone can tell me of another way to solve the setting of a custom permission?