I have two SharePoint groups that use custom permission levels. The first user group gives access to read specific content and access to SharePoint's APIs. This group does not have access to see system pages. The second group is for power users and they have more edit permission and can see system pages. They also have everything the user group would have.

The search service account is in the user group which gives it read access to crawl the content. Power users are able to search and see the results. Regular user however are not getting any results when they run a search.

If the search service account had the same permission as the regular users and was able to crawl the content I would not expect security trimming to restrict access to the users. I am expecting results to come from a custom list that does not inherit permissions. Any idea how I can troubleshoot this problem?

  • Hi @Sam Nesbitt, welcome to SharePoint StackExchange :) , Could you please take a quick tour at sharepoint.stackexchange.com/tour to get informed badge! Thank you for your contribution :) Commented Jun 7, 2017 at 19:26
  • @M.Qassas thanks for the tip I read through the tutorial
    – Swazimodo
    Commented Jun 7, 2017 at 19:36
  • I went to library where the content is getting its permissions and did a check permission on a sample user and the crawl account. I expected them to be the same but the crawl account had additional permissions on top of what a user had.
    – Swazimodo
    Commented Jun 7, 2017 at 20:24

2 Answers 2


Generally, you give the crawl account read access to everything. This is usually done through web application policy at the time that the Crawl Account is set in the SSA. The crawl account reads the ACL on the content and security trims the results based on the user making the query.

I would first ensure that the crawl account has read permissions then run a full crawl. Then I would log in as the limited read user and ensure that that account has access to the desired content. Then test search as that limited read user.


I found that the missing permission was view application pages on the target list. Without this search will not return values.

  • This doesn't make sense to me as they did have View Items permission so I would not have expected security trimming to take effect.
    – Swazimodo
    Commented Jun 8, 2017 at 16:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.