Possible to change file level permission on a document (in document library) with Visual studio 2012 workflow for SharePoint Online 2013?

1 Answer 1


Its possible to set permissions using REST API in Workflow.

You can use these methods:


BreakRoleInheritance is just not documented and can be used using POST request:

https://your_sp_site.sharepoint.com/_api/web/lists/getByTitle('Test')/breakroleinheritance(copyRoleAssignments=true, clearSubscopes=true)


  • copyRoleAssignments – if true, this method copies the role assignments of the parent securable object when breaking inheritance; otherwise, this method adds the current user to the permission level that is required to manage the list item.
  • clearSubscopes – Indicates whether subscopes should be cleared or not.


Instead of the Add there is AddRoleAssignment method that also can be called using POST request (NOTE: this method works incorrectly in RTM release of SharePoint 2013!!!! It checks user within current item and if user is not found (usually as we've just broken inheritance) throws an exception. In SharePoint Online and March CU it works as expected):



  • principalid - id of user or group within current site collection. You can get a list of users by executing using GET: https://your_sp_site.sharepoint.com/_api/web/siteusers
  • roleDefId - internal id of Role Definition (Read, Contribute, Full Control and so on). You can get a list of available role definitions using GET: https://your_sp_site.sharepoint.com/_api/web/roledefinitions​

Also you can find workflow activities to work with permissions on codeplex

  • Please avoid link only answers as shown in our help section: "Provide context for links Links to external resources are encouraged, but please add context around the link so your fellow users will have some idea what it is and why it’s there. Always quote the most relevant part of an important link, in case the target site is unreachable or goes permanently offline."
    – Benny Skogberg
    Nov 19, 2013 at 18:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.