Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I'm having a problem with a 2010 workflow causing SharePoint to create new permissions groups when I try to alter permissions on a document in a library. I want the permissions on a library item to change based on a user's selection in a choice field that contains the options All Users, Dept Users, and Branch Users. Once a choice is made, the workflow should remove all the existing permissions, then assign only the levels I specify for each, as shown next:

All Users should allow permissions for the following groups:

All Authenticated Users (domain group), View Only
Department Members (SharePoint group), Read
Branch Members (SharePoint group), Contribute
Site Owners (SharePoint group), Full Control
Branch Owners (SharePoint group), Full Control

Department Users:

Department Members (SharePoint group), Read
Branch Members (SharePoint group), Contribute
Site Owners (SharePoint group), Full Control
Branch Owners (SharePoint group), Full Control

Branch Users:

Branch Members (SharePoint group), Contribute
Site Owners (SharePoint group), Full Control
Branch Owners (SharePoint group), Full Control

Each group gets more restrictive about who has access, and for the most part this works exactly as I want.

The problem I'm running into is that using the All Authenticated Users domain group in the All Users section of the workflow causes SharePoint to create a brand new permissions group. I don't want this to happen, but don't know how to prevent it.

From what I've heard from my Help Desk this is a known issue with 2010 and requires me to pass a string into the Replace Item Permissions action instead of referencing the group name directly, but I'm not getting this to work. Has anyone dealt with this issue before?

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.