grant access to a SharePoint group

[calvares]

I have a SPD2010 workflow which gave SharePoint groups access to a list item depending on a field in the form.

So if field1 = a, group A would get edit permissions. If field1 = b, then group B would get edit permissions etc.

How can I replicate this (easily) in PA?

[tom_riha · Accepted solution]

You can't replicate that easily in PA, there's no special action to assign permissions to SharePoint group. You'll have to use HTTP request for that:

_api/lists/getByTitle('<listName>')/items(<itemID>)/roleassignments/addroleassignment(PrincipalId=<SPgroupID>,roleDefId=<roleID>)

So it could look like this:

The <listName> and <itemID> placeholders are clear I suppose, so for the <SPgroupID>, that can be found in the URL on the group screen.

And for the <roleID>, here's a list of the default permission IDs:

Default permission level IDs
Full Control	1073741829
Design	1073741828
Edit	1073741830
Contribute	1073741827
Read	1073741826
Approve	1073741927
View	1073741832

[calvares]

That's worked nicely. Thanks very much @tom_riha. 

[nicoaca]

Hi, what about Document Libraries? This solution only apply to SharePoint lists, right?

[MichaelSL]

As in your website always very helpful tips! Thank You Tom 🙂

[OrcPeon]

I have a quick question regarding this HTTP-Request:

Is it possible to have 2 Groups in addroleassignment(PrincipalId= 'Group 1' & 'Group 2') with the same roleDefId?