Good evening, technet community
I hope you are doing well.
When configuring my SharePoint workflow, I encounter the problem below:
Problem Description:
Let's say my domain is: test.com, my group user is: test\group , my user is: test\user1
Except an admin account with full control at both "Web Application" and "Site Collection", all others account all have problem when creating a list item. After creating a list item, the workflow status is "cancelled" immediately
with the following message:
***
RequestorId: 262a35e4-99f4-40f0-929b-5d04b415f147. Details: System.ApplicationException: HTTP 401 {"Transfer-Encoding":["chunked"],"X-SharePointHealthScore":["0"],"SPClientServiceRequestDuration":["10"],"SPRequestGuid":["262a35e4-99f4-40f0-929b-5d04b415f147"],"request-id":["262a35e4-99f4-40f0-929b-5d04b415f147"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"MicrosoftSharePointTeamServices":["15.0.0.4420"],"X-Content-Type-Options":["nosniff"],"X-MS-InvokeApp":["1;
RequireReadOnly"],"Cache-Control":["max-age=0, private"],"Date":["Thu, 06 Nov 2014 12:14:28 GMT"],"Server":["Microsoft-IIS\/7.5"],"WWW-Authenticate":["NTLM"],"X-AspNet-Version":["4.0.30319"],"X-Powered-By":["ASP.NET"]}
{"error":{"code":"-2147024891, System.UnauthorizedAccessException","message":{"lang":"en-US","value":"Access denied. You do not have permission to perform
this action or access this resource."}}} at Microsoft.Activities.Hosting.Runtime.Subroutine.SubroutineChild.Execute(CodeActivityContext context) at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor,
BookmarkManager bookmarkManager) at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor executor, BookmarkManager bookmarkManager, Location resultLocation)
***
- The workflow is still fail even I assign "full control" to my users group "test\group" – at Site Collection level.
Surprisingly, I have successfully found a solution for this error message. However, I still have some points that I do not clearly understand. Let's start with my solution first.
Solution:
*** i. Assign permission policy at Web Application level – Central Admin site ***
1. Central Administration è Application managementè Manage Web application è
2. Go to "permission policy", then create a new permission level. This permission level contains all "edit item" permission.
3. Select "user policy", then I assign it directly to my user account: test\user1.
*** ii. Assign "edit item" permission at Site Collection level ***
1. Site Setting è Site permission
2. Assign "Edit" permission to my test\group.
(Actually I removed all permissions of my user group at Site Collection level. It seem my group has inherited permission from Web Application level, is that correct? )
*** iii. Create a new list item and workflow runs ……. ***
è My question is:
1. Why I cannot assign permission to my users group - "test\group" - at "Web Application" level? Instead I have to assign permission policy for each users, one by one?
2. Could you please let me know how to collect full detail error message of workflow status?
![]()
Thank you very much! Have a nice weekend.