Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I'm trying to get Azure Workflow Service running on SharePoint 2013.

When running the Register-SPWorkflowService powershell commandlet i get the following error:

Register-SPWorkflowService : The caller does not have the necessary
permissions required for this operation. Permissions granted: None. Required
permissions: ReadScope. HTTP headers received from the server - ActivityId:
221b6fef-bb5d-4455-a572-2c5a035e323a. NodeId: WIN-K19UNMVBQ40. Scope:
At line:1 char:1
+ Register-SPWorkflowService -SPSite "http://server" -WorkflowHostUri
"http://WIN- ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidData: (Microsoft.Share...WorkflowService:
   RegisterSPWorkflowService) [Register-SPWorkflowService], UnauthorizedAcces
    + FullyQualifiedErrorId : Microsoft.SharePoint.WorkflowServices.PowerShell

Any pointers? I'm running the workflow service as the SPSetup account and I'm logged in as the SPSetup account. This account is also sysadmin on the SQL Server, should therefore have all permissions?

share|improve this question

3 Answers 3

up vote 1 down vote accepted

I have heard rumors that configuring this also requires the User Profile service application to be configured so that the OAuth/claims augmentation/etc. stuff can all be in place. Unfortunately I haven't had the chance to confirm this yet.

share|improve this answer
Very interesting - will try to configure everything SharePoint related. –  Dennis G Aug 22 '12 at 21:19
I don't know whether that was it, but after starting all possible Services via CA (including User profile service), the Powershell command did not result in an error. –  Dennis G Aug 23 '12 at 11:30

My experience with this is I forgot to put the account I was logged in as on the SharePoint server in the Workflow Manager Admin group. Added the account, logged out and back in (so I would get a new token), and it worked fine. I guess there is an admin group for a reason, right? :)

share|improve this answer

In local installations, the account executing Register-SPWorkflowService must be able to write to the -SPSite site collection database (or even be owner - I used GrantAccessToProcessIdentity on the web app as I don't have management access to the SQL server) and member of the Workflow admin group (Get-WFFarm).AdminGroup.

share|improve this answer
You shouldn't do this. Registering the workflow service you would do in a PowerShell instance running under farm credentials. The Farm administrator registers the WorkflowService with a site collection. The account running the workflow service shall not have access to the site collection database - that would defeat the whole purpose of having a decentralized workflow engine talking only via REST web services to SharePoint. –  Dennis G Jan 29 '13 at 14:35

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.