I am a complete Sharepoint and Nintex Newbie. I am on Sharepoint 2013. I am trying to design a workflow that grants item level permission to the user and all users in their group. For example if someone from California entered the form, I would like all California members to have access to that entry, and not anyone else. I somehow need to design a workflow to lookup the group that user belongs to (maybe on a separate list) then enter that group in the permissions workflow automatically... Or maybe use a drop down box that says the user is from California and grant permissions to the California group automatically...
Sorry if this is a repost, I searched and searched. Thank you for your help!
Solved! Go to Solution.
this could be done in a workflow. Depending on if you are workfing with SharePoint Groups or Active Directory Groups you will need to use a different approach.
If using SharePoint groups you will have to lookup the user's Groups by using the SharePoint UserGroup Web Service. You would then need to iterate the user's groups and find the group you want. It helps when your regional groups follow a specific name scheme like "myworkflow-California". Depending on the found group you can give that group permission to the list item.
If using Active Directory groups you will have to find the groups by using an LDAP query action, for example
When querying the memberOf Property the query will return all Groups the user is a member of. Again you will have to iterate them and search for one of your regional groups, ideally by a common name schema.
Hope this makes sense.
you can use the `GetRoleCollectinoFromUser` method of the UserGroup webservice to query the groups of a user. You can call this webservice using the "call web service" action.
You will get a chunck of XML, which can be processed using the "quey xml" action.
Hi Everyone I really appreciate your quick replies. The users are broken down by sharepoint groups I created across 7 areas in the country. I don't really understand how to use the webservice logic so I came up with a very crude solution. I created a workflow with parallel tasks and a run if column = certain area in the country. Each parallel task = another area, and I input an area column in the Form.
I hope this method doesn't slow down my sharepoint too much...
Well basically you add the action to you workflow and configure it like this: