set user permission based on sharepoint group

when you select 'remove existing permissions' all the item permissions are deleted.

then there's an 'Add user permission' option. if you click on it, it creates one another block of user+persmission fields that allows you to define for different set of users and/or groups different level of permissions.

so you can set permissions to contribute in first block for creator and employee and full control in second block for IT staff.

don't mind, you can make a tick for 'lesson learned today' checkbox

1. you have chosen 'Remove existing permissions' along with 'Remove' for domain users.

that's moreless twice the same.

with 'Remove existing permissions' option all the permissions are removed from item. so to remove permissions for domain users once again is pointless.

if you haven't selected 'Remove existing permissions', then 'Remove' permissions for domain users anyway removes all the permission of users of the given domain. I assume all of "IT Staff', 'created by', employee (etc) are members of 'ADMHNdomain users' group. it would only preserved permissions for users of the other domain(s), if you ave any.

2. set permission action sets/processes the permissions in the order they are configured. so first it gives some permissions to IT staff, creator and employee, but then it removes permissions for all the domain users.so at the end no one is given any permission (or to be exact: no one from ADMHN domain)

if you don't need to manage permissions for several different domains in a different way, I would suggest to configure set permissions like:

- set 'remove existing permissions' on

- add permissions for IT staff, creator, employee

and I would suggest to check documentation, everything is explained in there

http://help.nintex.com/en-US/nintex2013/help/#Workflow/RootCategory/Actions/Nintex.Workflow.SetItemPermissions.htm%3FToc…