0

I am trying to invoke the "GetUserCollectionFromGroup" method of the UserGroup.asmx web service. I am using the "Web Service" function in Nintex Workflow but I am pretty confident that Nintex is not related to the problem.

When I create a SOAP envelope like this:

 <?xml version="1.0" encoding="utf-8"?>
 <soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/" xmlns:m="http://schemas.microsoft.com/sharepoint/soap/directory/">
   <soap:Header>
   </soap:Header>
   <soap:Body>
     <m:GetUserCollectionFromGroup>
       <m:groupName>Admin</m:groupName>
     </m:GetUserCollectionFromGroup>
   </soap:Body>
 </soap:Envelope>

The appropriate response is returned. Group members and their properties are listed.

When I request the group "Security" however it returns 401 UNAUTHORIZED.

I am using a service account that has been added to the Site Owners group and I don't understand why some groups would return the list of users & their properties while others will not allow access.

I firmly believe that it is a permissions issue or a group ownership issue but I can't quite narrow down the problem.

2

For the sharepoint groups you getting 401, try below.

Navigate to the sharepoint group settings page and set the property " Who can view the membership of the group?" to "Everyone".

  • You my friend are a genius. Simple solution to something that seemed overly complex!! Thank you thank you! – Shrout1 Jul 22 '14 at 19:53
1

Site Owners don't necessarily have the permission to enumerate all SharePoint groups -- you should be able to enumerate all groups with a farm administrator account.

  • Why would this group be different than the others? I have relatively limited access to this farm and I definitely don't want to give a service account farm admin rights. – Shrout1 Jul 22 '14 at 19:37
  • Eh I'm fine with that -- sssreddy's answer tells you how to do what you're looking for, all I knew was that your account didn't have the access to do it when you were trying before! – John-M Jul 22 '14 at 19:57
  • You were headed down the same path :) I can't believe I gloss over simple things like this sometimes. Thanks again! – Shrout1 Jul 22 '14 at 20:02
0

Can we do this automatically - change " Who can view the membership of the group?" to "Everyone" in Call Web service when creating this group in nintext. By default it is set to group members.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.