SharePoint O365 Permissions - Deny - Add and Customise Pages issue

Thursday, August 20, 2015 - 09:30

Associated errors:

“Web Part Error: A Web Part or Web Form Control on this Page cannot be displayed or imported. You don’t have Add and Customize Pages permissions required to perform this action.”

Access Denied to certain web pages that you should be able to see

Missing sections / headings in Site Settings such as Solutions Gallery – you should see in site settings

Problem:

I was working on one of our client’s sites on a brand new Office 365 configuration and after a while found that on my admin account I was being denied access to certain things and being told I didn’t have permission to do certain things. This was strange as I was logged on with the admin account and there were no other accounts yet created.

Diagnostics:

To check if this is your issue go to a library where the issue is occurring and check permissions for your account. Go to the Library tab and select Shared With on the ribbon then go straight to “advanced”. Select Check permissions on the ribbon at the top – enter your user account and do check now.

If you see this:

Or if any of your Galleries are missing as shown above from Site Settings then...

Resolutions:

Firstly to stop it happening again...

To enable or disable scripting from the SharePoint admin centre

Go to the SharePoint admin centre.

Select Settings.

Under Custom Script choose:

Any change to the scripting setting made through the SharePoint Online admin centre may take up to 24 hours to take effect.

To fix the current problem

To enable scripting on a particular site collection immediately, use the following PowerShell command.

In SharePoint online management shell (download if you don’t have it)

Enter:

Connect-SPOService

then

Enter URL of admin site https://-admin.sharepoint.com

Then username and password

Set-SPOSite -Identity https://.sharepoint.com -DenyAddAndCustomizePages $false

Make sure the scripting setting in the admin portal matches what you set using PowerShell, or the site collection setting may be overridden again in the next 24 hours.

When you then run the command all should be well again and it should not happen again!

Did this article help you today?

Yes, thank you :)No, sadly not :(

Comments

Property not found

Tried this on my SharePoint 2013 Online tenant and received a 'Property set method not found" error.

Thanks

Yep this advice worked for me. I can't believe a fresh O365 instance puts a blanket "Deny" across all users, even Site Collection admins!

THANK YOU!

Was looking for this answer forever thanks for posting worked perfectly!

Genius Thank you.

Finally... That's sick

Finally... That's sick problem is gone. Big thanks.

Thanks! Saved me a lot of

Thanks! Saved me a lot of time !

Thanks!!! This article save

Thanks!!! This article save my day!

Permissions

This solved the issue on the Modern Sites part of Teams. I discovered this issue when i tried to publish a 2010 workflow. Suddenly I got permissions error. As the Global admin, Site Collection Admin and Owner of the site this was puzzling. Microsoft even cleared my caches in an afternoon. I also reset my laptop. Tried multiple PC's etc.

Fix

Thanks! I ran into the following error when enabling the responsive UI PNP:
Enable-PnPResponsiveUI : Access denied. You do not have permission to perform this action or access this resource.

I could run it on a new classic publishing site collection but not the original root site collection, even though I was admin. I saw the deny flag on my user for the permissions and found this article.

I didnt have to switch my custom script flag since I only need to run this code once, but did run into an issue with set-sposite:
Set-SPOSite : Value cannot be null.

I could do a get-sposite and return results, so I knew the issue was syntax related.

I got it working with this:
PS C:\users\ericschrader\desktop> get-sposite | where-object {$_.URL -eq "https://.sharepoint.com/"} | set-sposite -DenyAddAndCustomizePages $false

Great find! Any updates on why this was set by MS on this site but not on new Publishing classic sites would be appreciated.

editing list on Teams site

Hi Nick, Are you able to edit and save the .aspx files within an MS Teams team site in sharepoint designer 2013 after this change? I'm trying to edit a list view to change a column width but sharepoint designer wont save even after the change suggested in this post.

Much better than calling Microsoft support

I pulled trying to fix this issue. Called Microsoft Office 365 support and that was a complete waste of time.
Thank you for this fix.

Thank you!

Worked a treat after running the PS as admin but had to set for several site collections as didn't cascade down to other /sites/

thanks for the fix! It was

thanks for the fix! It was blocking me when using the SharePoint migration Tool and the HarePoint workflow and content Migrator.

Thank you so much for the

Thank you so much for the solution :)

thank you, but None of this

thank you, but None of this worked... I've tried everything.. I'm at my last strand of hair...

perfect , calling microsoft

perfect , calling microsoft and searching for 3 days your site gave me the solution ! thanks !!!

Thank you so much.I am trying

Thank you so much.I am trying to solve it for nearly more than half a day.I dont get any solution until find yours.Very good solution

Awesome tip. Thank you. I can

Awesome tip. Thank you. I can use SP Desginer now!

Thank you. This saved me a

Thank you. This saved me a lot of time:)

Did you try running it at the

Did you try running it at the site collection instead of the tenant level? That's what tripped me up. I had to run it on every site collection.

Hi guys, I'm trying to deploy

Hi guys, I'm trying to deploy a SharePoint 2010 workflow to a SharePoint online environment using SharePoint designer and get the Server Error: Access Denied message.
Do you have any tips or workarounds for this issue?

new fix? I am experiencing

new fix? I am experiencing the exact same symptoms, but sadly the same powershell commands do not fix it, I still see the Deny message to my admin account on all list permissions.

Thanks for this. Side note, I

Thanks for this. Side note, I had this problem with a team site. Your powershell solution works, but to fix team site under the main site you need to specific that. In my case, this is the modified command that fixed my problem:

Set-SPOSite -Identity https://.sharepoint.com/sites/ -DenyAddAndCustomizePages $false

Does this work with

Does this work with SharePoint 2019 On Prem?

Thanks you, thank you, thank

Thanks you, thank you, thank you
Main this was painful to figure out prior to this article.

Thanks again