I want users to be able to complete workflows by filling out forms and submitting them. However, it seems I have to give them read/write permissions to the entire site collection which means they can also edit multiple pages that I don't want them to be able to. Aside from going in to each and every page and giving granular permissions, is there a better way?

  • when the workflows are triggerd? done operations on list items or on site? Commented Aug 16, 2017 at 12:13
  • They are list workflows. Commented Aug 16, 2017 at 12:14
  • ok fine, you have so many lists or two or three lists? Commented Aug 16, 2017 at 12:15
  • There are two lists. Commented Aug 16, 2017 at 12:30

2 Answers 2


As users require to submit the forms so at least add only or contribute permission is required on the list/library. This should allow users to execute workflows on list item. If workflow has approval/task actions then give approve permission on workflow task list as well. If workflow still fails then there must be something in the workflow that requires higher previllages like querying list in other site.

  • First remove the permissions from site collection.
  • Give permissions(contribute) on two lists and approval form pages(read permissions) only.

By these two steps users can have permission on two lists only not on entire site collection.

Hope this helps to you :)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.