Getting SharePoint Permissions

[rarroyo1]

I want to return all users and their associated SharePoint permission group membership to a site or library item.  I have the URL to the site or item.    

[yashag2255]

Hi @rarroyo1 

You can check this out : https://www.youtube.com/watch?v=dIzOAbMjN7g 

Hope this Helps!

If this reply has answered your question or solved your issue, please mark this question as answered. Answered questions helps users in the future who may have the same issue or question quickly find a resolution via search. If you liked my response, please consider giving it a thumbs up. THANKS!

[ChristianAbata]

hi @rarroyo1 

you can follow this post to see if this is what you need

https://powerusers.microsoft.com/t5/General-Power-Automate/using-Flow-to-grant-access-in-SharePoint/...

[rarroyo1]

The link you sent was for a powerapp.  I am using Flow.   I believe I need to use the Send HTTP request to SharePoint, but don't know how to form the API request.

[rarroyo1]

Nope.  Don't follow.  

[ChristianAbata]

hi @rarroyo1  by using a PA action is not currently available sorry, you have just HTTP request

[fchopo · Accepted solution]

Hello @rarroyo1 

You could use the "Send an Http request to Sharepoint", and use an Uri like this to get the permissions for the site: 

weburl+”/_api/Web/RoleAssignments?$expand=Member,RoleDefinitionBindings”

You will get some results with the groups and their permissions, and will have to parse the results. I attach the schema you should use:

{
    "type": "object",
    "properties": {
        "odata.metadata": {
            "type": "string"
        },
        "value": {
            "type": "array",
            "items": {
                "type": "object",
                "properties": {
                    "odata.type": {
                        "type": "string"
                    },
                    "odata.id": {
                        "type": "string"
                    },
                    "odata.editLink": {
                        "type": "string"
                    },
                    "Member@odata.navigationLinkUrl": {
                        "type": "string"
                    },
                    "Member": {
                        "type": "object",
                        "properties": {
                            "odata.type": {
                                "type": "string"
                            },
                            "odata.id": {
                                "type": "string"
                            },
                            "odata.editLink": {
                                "type": "string"
                            },
                            "Id": {
                                "type": "integer"
                            },
                            "IsHiddenInUI": {
                                "type": "boolean"
                            },
                            "LoginName": {
                                "type": "string"
                            },
                            "Title": {
                                "type": "string"
                            },
                            "PrincipalType": {
                                "type": "integer"
                            },
                            "AllowMembersEditMembership": {
                                "type": "boolean"
                            },
                            "AllowRequestToJoinLeave": {
                                "type": "boolean"
                            },
                            "AutoAcceptRequestToJoinLeave": {
                                "type": "boolean"
                            },
                            "Description": {},
                            "OnlyAllowMembersViewMembership": {
                                "type": "boolean"
                            },
                            "OwnerTitle": {
                                "type": "string"
                            },
                            "RequestToJoinLeaveEmailSetting": {
                                "type": "string"
                            }
                        }
                    },
                    "RoleDefinitionBindings@odata.navigationLinkUrl": {
                        "type": "string"
                    },
                    "RoleDefinitionBindings": {
                        "type": "array",
                        "items": {
                            "type": "object",
                            "properties": {
                                "odata.type": {
                                    "type": "string"
                                },
                                "odata.id": {
                                    "type": "string"
                                },
                                "odata.editLink": {
                                    "type": "string"
                                },
                                "BasePermissions": {
                                    "type": "object",
                                    "properties": {
                                        "High": {
                                            "type": "string"
                                        },
                                        "Low": {
                                            "type": "string"
                                        }
                                    }
                                },
                                "Description": {
                                    "type": "string"
                                },
                                "Hidden": {
                                    "type": "boolean"
                                },
                                "Id": {
                                    "type": "integer"
                                },
                                "Name": {
                                    "type": "string"
                                },
                                "Order": {
                                    "type": "integer"
                                },
                                "RoleTypeKind": {
                                    "type": "integer"
                                }
                            },
                            "required": [
                                "odata.type",
                                "odata.id",
                                "odata.editLink",
                                "BasePermissions",
                                "Description",
                                "Hidden",
                                "Id",
                                "Name",
                                "Order",
                                "RoleTypeKind"
                            ]
                        }
                    },
                    "PrincipalId": {
                        "type": "integer"
                    }
                },
                "required": [
                    "odata.type",
                    "odata.id",
                    "odata.editLink",
                    "Member@odata.navigationLinkUrl",
                    "Member",
                    "RoleDefinitionBindings@odata.navigationLinkUrl",
                    "RoleDefinitionBindings",
                    "PrincipalId"
                ]
            }
        }
    }
}

For each group, you can get the email and its members with the following uri: 

api/Web/SiteGroups/GetByName('Name_Of_Role_Or_Group')/users?$select=email,Id

Parse the JSON results again with the following schema:

{
    "type": "object",
    "properties": {
        "d": {
            "type": "object",
            "properties": {
                "results": {
                    "type": "array",
                    "items": {
                        "type": "object",
                        "properties": {
                            "__metadata": {
                                "type": "object",
                                "properties": {
                                    "id": {
                                        "type": "string"
                                    },
                                    "uri": {
                                        "type": "string"
                                    },
                                    "type": {
                                        "type": "string"
                                    }
                                }
                            },
                            "Id": {
                                "type": "integer"
                            },
                            "Email": {
                                "type": "string"
                            }
                        },
                        "required": [
                            "__metadata",
                            "Id",
                            "Email"
                        ]
                    }
                }
            }
        }
    }
}

And then save the email to a string array, for example.

I attach a sample in two screenshots.First Part

Second Part

Hope it helps!

Ferran