Not able to break permission using SharePoint 2013 Designer Workflow

Question

I'm unable to break permission using SharePoint 2013 Designer Workflow, it throws this error:

{"error":{"code":"-2147024891, System.UnauthorizedAccessException","message":{"lang":"en-US","value":"Access denied. You do not have permission to perform this action or access this resource."}}}

The Response code is: Unauthorized

I ran this workflow using a site collection administrator account as well but same result.

I have implemented the permission break in App step as well, but same result.

If we want to break the permission from SPD 2013 Workflow is it necessary to have the REST API call in App step even if the user who will trigger the workflow has full control?

Answer 1

In this case you need to give full permission to your workflow app on tenant so it will break permission on list item or you can add new permission. It will not give System.UnauthorizedAccessException.

<AppPermissionRequests>       
    <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" />
  </AppPermissionRequests>

Answer 2

Follow instruction at "Grant full control permissions to the worklow" section of this article. The official doc is here. And yes, you'll need to wrap the action inside an app step.