I'm creating a custom workflow on SharePoint Online (Office 365) in SharePoint Designer. I am trying to achieve below tasks:

  • This workflow will execute on a SharePoint list, triggered when a new item is created or an existing item is modified.
  • The first action of the workflow will be to set unique permissions on the current list item: remove permissions inheritance, and add Contributor access for a specific SharePoint security group, and add Full Control for another SharePoint security group

How can this be done?

2 Answers 2


There is a workflow feature in SharePoint designer (you have to select the 2010 template) called impersonation step.

This is one of the many pages that explain it


If you google sharepoint workflow impersonation step you find more documentation.

Basically the workflow that starts automatically when a document is added will detach the single entity and attribute the permissions you want on it (certain people as editors or viewers or certain groups as sole editors etc).

  • is it Possible to use SharePoint 2013 workflow for Above requirement ? Jul 14, 2015 at 8:33
  • When you open up sharepoint designer 2013 and start a new workflow, you will be able to select with a drop down if you want the workflow to be based on the 2013 template or 2010. Impersonation step is only in 2010. Every Office 365 and Sharepoint 2013 have the 2010 template.
    – susan
    Jul 14, 2015 at 8:52

Unfortunately out of box the SharePoint doesn't allow you to do this. I would recommend you to use Plumsail Workflow Actions Pack this is set of more than 60 additional workflow actions for SharePoint Designer. Also it contains workflow actions for permission management.

Please check out the following links to know more: Grand permission on Item - documentation Create site by custom template and grant permissions using SharePoint 2013 or Office 365 workflow - Use case

I'm one of developers the product and I definitely recommend it.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.