b) Approver group should be able to read/edit their item.
This is great for the initiator of the item.
How do we enable a SharePoint Group say "List Item Approvers" Group to be able to View all and Edit all items?
New to Nintex Workflow but, I have obtained the desired result by using Impersonation Step in SharePoint Designer(2010) workflow with other lists.
Would like to know if there is a similar action/step in Nintex Workflow Designer. If not, what is the recommended method to setup this level of permission in list item using Nintex Workflow for Office 365.
Best answer by swethasan
So, I tried a couple of things and found one to accomplish the task at hand.
1) Tried to use the Office 365 update item permission action seen in picture below with the help from
Although this didn't seem to the have the required updated permission of the item.
2) Setup the permission of the sharepoint list as seen below:
Approvers SP Group with Approve permission.
Members, who have to add item to the list but not see others with Edit permission. But, setting the Read/Edit to only the authors of the item.
Approvers can now see all the items in the list immaterial of their status of approval, and initiators only their items.
Will update on any additional actions as and when I observe them or apply.
I always believe that here are many ways to solve a problem. If this solution can be made better, would be more than happy to improve upon it. Appreciate all the inputs!
If you were allowing all users to read "published" or approved content, then simply turning on "content required approval" on the list would provide that default behavior for an approvers group. The approvers would be the only other group who could see unapproved or unpublished content. But if no user can read anyone else's content even after approval, then you will most likely require the approval group to have Full Control on the list in order to read other's content.
For approvers to see items submitted by others, they only require the Manage Lists base permission that can and should be granted outside of Full Control, as a best practice. Full Control also invites unneeded potential SharePoint Designer customizations, permissions changes, etc. from users who might not know exactly what they're doing.
Moreover, Full Control on a security scope (such as Folder or List / Library) doesn't warrant for all content inside it being available, because there may be other scopes inside with unique permissions.
If the user who "stopped inheriting permissions" chose to remove the permissions of Approvers, they won't have access inside the narrower scope despite their Full Control.
Only the site collection administrators, super users and web application auditors will see everything there is inside.
Although this didn't seem to the have the required updated permission of the item.
2) Setup the permission of the sharepoint list as seen below:
Approvers SP Group with Approve permission.
Members, who have to add item to the list but not see others with Edit permission. But, setting the Read/Edit to only the authors of the item.
Approvers can now see all the items in the list immaterial of their status of approval, and initiators only their items.
Will update on any additional actions as and when I observe them or apply.
I always believe that here are many ways to solve a problem. If this solution can be made better, would be more than happy to improve upon it. Appreciate all the inputs!
Do I take it that the second of the options you describe solved your issue. In my case I want to assign item level permissions a document when it is first created. Ideally, I want the permissions lookup to be based on the Content Type used. so a set of editors and a set of approves . I was hoping the Office 365 Update Item Permissions could assist here.
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.
