I have an odd issue. I have an integration that is doing lots of REST calls to SHarePoint all of which work fine, except for 2, setting permissions and creating libaries. The commands I'm using a literally textbook (cut and paste from, and they work OK from Power Automate, but not from my inegration platform (Workato) or PostMan. In both cases I get the error. { odata.error: { code: -2147024891, System.UnauthorizedAccessException, message: { lang: en-US, value: Attempted to perform an unauthorized operation. } } }

I get the same responce from both my production SharePoint online instance and my Dev one (the dev is completely vanilla). I get the issue even when using Global Admin who is the site owner and admin.

An example call:


All the scope variables are valid and work fine with other REST commands. I have broken inheritance as required of this command

Any ideas?

  • are any POSTs working from Workato or Postman? Have you added the request digest header in these requests? learn.microsoft.com/en-us/sharepoint/dev/spfx/web-parts/basics/… Feb 8 at 15:07
  • I wasn't setting the request digest header but it fails even when I do These are the only two REST commands that don't work. All the rest work fine. I call numorous in the same script such as new site creation and folder creation. Feb 8 at 21:43


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.