I have a SharePoint Online environment as https:///domain.sharepoint.com.

Now I am trying to add custom JS codes to the site page in the above specified site. Whenever I try to add the code on top level root site it always throws error:

Access denied. You do not have permission to perform this action or access this resource.

FYI: I am the owner of the tenant.

Also when I tried opening top level root site using SPD, there also I got the same error.

So, I want to know whether its possible to add some custom codes on the top level root site collection?

If its possible then how we can achieve this?

  • 1
    Have you enabled custom scripts from tenant level settings ? Jul 24, 2017 at 11:56
  • 1
    I just tried by enabling it still same error Jul 24, 2017 at 12:08
  • Can you add your account explicitly as the site collection admin and then check ? Jul 24, 2017 at 12:14
  • 1
    I am already member in site collection administrator .... Jul 24, 2017 at 12:18
  • I have the same issue... any resolution to this?
    – michalh
    Jul 2, 2018 at 9:12

1 Answer 1


Go to SharePoint online admin center > Settings.

In the custom scripts section, ensure that you have turned on the scripting capabilities as below:

enter image description here

Once this is done, click on Save at the bottom.

Now, open SharePoint online PowerShell and run the below command(use the SharePoint admin account) :

Set-SPOSite "https://domain.sharepoint.com" -DenyAddAndCustomizePages 0

Now, you should be able to add custom scripts/user custom actions in your site collection.

By default, in a new tenant:

  1. For personal sites, custom scripting is disabled by default.
  2. For self-service created sites, custom scripting is disabled by default.
  3. For the Root Site Collection of the Tenant, custom scripting is disabled by default.

By changing the above setting and running the Powershell command, we will enable the scripts for the root site as well.

  • Get back to you on this as soon as I am done with trying.. Jul 24, 2017 at 12:59
  • Any luck ? Once you have changed the tenant level settings from admin center UI, it takes 24 hours to get reflected. But if you ran the powershell, it will be reflected immediately. Jul 25, 2017 at 6:30
  • I have the same acess denied problem with site collection admin trying to create user custom actions... your answer didn't help, but thanks for the effort anyway, any other ideas?
    – michalh
    Jul 2, 2018 at 9:11
  • @MichalHainc - can you try it as Set-SPOSite "https://domain.sharepoint.com" -DenyAddAndCustomizePages $false ? Jul 2, 2018 at 16:33
  • I did it via powershell, user has the permission but still access denied
    – michalh
    Jul 2, 2018 at 16:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.