SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have following questions on Impersonation Step:

  1. How to use Impersonation Step in a workflow to grant/Revoke permissions based on conditions?
  2. What are the pitfalls of using impersonation step?
  3. How and when does it grant/revoke permission (if it makes changes to the current permission for the list item or creates a new group)?
share|improve this question
up vote 1 down vote accepted
  1. One can use conditions inside Impersonation steps, but you can't run whole impersonation step under a condition.
  2. The only pitfall is the it runs under the identity of the workflow publisher, so whichever account you are using to publish the workflow, it should have necessary rights to performs all the permissions related operations in Impersonation step
  3. It performs it's operations according to it's location in the workflow, and you can use it to change permissions on list items. You can add, remove, inherit from parent list or replace permissions on items.
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.