SharePoint O365 Permissions - Deny - Add and Customise Pages issue

Associated errors:
“Web Part Error: A Web Part or Web Form Control on this Page cannot be displayed or imported. You don’t have Add and Customize Pages permissions required to perform this action.”
Access Denied to certain web pages that you should be able to see
Missing sections / headings in Site Settings such as Solutions Gallery – you should see in site settings
Problem:
I was working on one of our client’s sites on a brand new Office 365 configuration and after a while found that on my admin account I was being denied access to certain things and being told I didn’t have permission to do certain things. This was strange as I was logged on with the admin account and there were no other accounts yet created.
Diagnostics:
To check if this is your issue go to a library where the issue is occurring and check permissions for your account. Go to the Library tab and select Shared With on the ribbon then go straight to “advanced”. Select Check permissions on the ribbon at the top – enter your user account and do check now.
If you see this:
Or if any of your Galleries are missing as shown above from Site Settings then...
Resolutions:
Firstly to stop it happening again...
To enable or disable scripting from the SharePoint admin centre
Sign in to Office 365 with your work or school account.
Go to the SharePoint admin centre.
Select Settings.
Under Custom Script choose:
Any change to the scripting setting made through the SharePoint Online admin centre may take up to 24 hours to take effect.
To fix the current problem
To enable scripting on a particular site collection immediately, use the following PowerShell command.
In SharePoint online management shell (download if you don’t have it)
Enter:
Connect-SPOService
then
Enter URL of admin site https://
Then username and password
Set-SPOSite -Identity https://
Make sure the scripting setting in the admin portal matches what you set using PowerShell, or the site collection setting may be overridden again in the next 24 hours.
When you then run the command all should be well again and it should not happen again!
Did this article help you today?
- Log in to post comments
Comments
Property not found
Tried this on my SharePoint 2013 Online tenant and received a 'Property set method not found" error.
Thanks
Yep this advice worked for me. I can't believe a fresh O365 instance puts a blanket "Deny" across all users, even Site Collection admins!
THANK YOU!
Was looking for this answer forever thanks for posting worked perfectly!
Genius Thank you.
Genius Thank you.
Finally... That's sick
Finally... That's sick problem is gone. Big thanks.
Thanks! Saved me a lot of
Thanks! Saved me a lot of time !
Thanks!!! This article save
Thanks!!! This article save my day!
Permissions
This solved the issue on the Modern Sites part of Teams. I discovered this issue when i tried to publish a 2010 workflow. Suddenly I got permissions error. As the Global admin, Site Collection Admin and Owner of the site this was puzzling. Microsoft even cleared my caches in an afternoon. I also reset my laptop. Tried multiple PC's etc.
Fix
Thanks! I ran into the following error when enabling the responsive UI PNP:
Enable-PnPResponsiveUI : Access denied. You do not have permission to perform this action or access this resource.
I could run it on a new classic publishing site collection but not the original root site collection, even though I was admin. I saw the deny flag on my user for the permissions and found this article.
I didnt have to switch my custom script flag since I only need to run this code once, but did run into an issue with set-sposite:
Set-SPOSite : Value cannot be null.
I could do a get-sposite and return results, so I knew the issue was syntax related.
I got it working with this:
PS C:\users\ericschrader\desktop> get-sposite | where-object {$_.URL -eq "https://.sharepoint.com/"} | set-sposite -DenyAddAndCustomizePages $false
Great find! Any updates on why this was set by MS on this site but not on new Publishing classic sites would be appreciated.
editing list on Teams site
Hi Nick, Are you able to edit and save the .aspx files within an MS Teams team site in sharepoint designer 2013 after this change? I'm trying to edit a list view to change a column width but sharepoint designer wont save even after the change suggested in this post.
Much better than calling Microsoft support
I pulled trying to fix this issue. Called Microsoft Office 365 support and that was a complete waste of time.
Thank you for this fix.
Thank you!
Worked a treat after running the PS as admin but had to set for several site collections as didn't cascade down to other /sites/
thanks for the fix! It was
thanks for the fix! It was blocking me when using the SharePoint migration Tool and the HarePoint workflow and content Migrator.
Thank you so much for the
Thank you so much for the solution :)
thank you, but None of this
thank you, but None of this worked... I've tried everything.. I'm at my last strand of hair...
perfect , calling microsoft
perfect , calling microsoft and searching for 3 days your site gave me the solution ! thanks !!!
Thank you so much.I am trying
Thank you so much.I am trying to solve it for nearly more than half a day.I dont get any solution until find yours.Very good solution
Awesome tip. Thank you. I can
Awesome tip. Thank you. I can use SP Desginer now!
Thank you. This saved me a
Thank you. This saved me a lot of time:)
Did you try running it at the
Did you try running it at the site collection instead of the tenant level? That's what tripped me up. I had to run it on every site collection.
Hi guys, I'm trying to deploy
Hi guys, I'm trying to deploy a SharePoint 2010 workflow to a SharePoint online environment using SharePoint designer and get the Server Error: Access Denied message.
Do you have any tips or workarounds for this issue?
new fix? I am experiencing
new fix? I am experiencing the exact same symptoms, but sadly the same powershell commands do not fix it, I still see the Deny message to my admin account on all list permissions.
Thanks for this. Side note, I
Thanks for this. Side note, I had this problem with a team site. Your powershell solution works, but to fix team site under the main site you need to specific that. In my case, this is the modified command that fixed my problem:
Set-SPOSite -Identity https://.sharepoint.com/sites/ -DenyAddAndCustomizePages $false
Does this work with
Does this work with SharePoint 2019 On Prem?
Thanks you, thank you, thank
Thanks you, thank you, thank you
Main this was painful to figure out prior to this article.
Thanks again
Property not found
Tried this on my SharePoint 2013 Online tenant and received a 'Property set method not found" error.
Thanks
Yep this advice worked for me. I can't believe a fresh O365 instance puts a blanket "Deny" across all users, even Site Collection admins!
THANK YOU!
Was looking for this answer forever thanks for posting worked perfectly!
Genius Thank you.
Genius Thank you.
Thanks! Saved me a lot of
Thanks! Saved me a lot of time !
Thanks!!! This article save
Thanks!!! This article save my day!
Permissions
This solved the issue on the Modern Sites part of Teams. I discovered this issue when i tried to publish a 2010 workflow. Suddenly I got permissions error. As the Global admin, Site Collection Admin and Owner of the site this was puzzling. Microsoft even cleared my caches in an afternoon. I also reset my laptop. Tried multiple PC's etc.
Fix
Thanks! I ran into the following error when enabling the responsive UI PNP:
Enable-PnPResponsiveUI : Access denied. You do not have permission to perform this action or access this resource.
I could run it on a new classic publishing site collection but not the original root site collection, even though I was admin. I saw the deny flag on my user for the permissions and found this article.
I didnt have to switch my custom script flag since I only need to run this code once, but did run into an issue with set-sposite:
Set-SPOSite : Value cannot be null.
I could do a get-sposite and return results, so I knew the issue was syntax related.
I got it working with this:
PS C:\users\ericschrader\desktop> get-sposite | where-object {$_.URL -eq "https://.sharepoint.com/"} | set-sposite -DenyAddAndCustomizePages $false
Great find! Any updates on why this was set by MS on this site but not on new Publishing classic sites would be appreciated.
editing list on Teams site
Hi Nick, Are you able to edit and save the .aspx files within an MS Teams team site in sharepoint designer 2013 after this change? I'm trying to edit a list view to change a column width but sharepoint designer wont save even after the change suggested in this post.
Much better than calling Microsoft support
I pulled trying to fix this issue. Called Microsoft Office 365 support and that was a complete waste of time.
Thank you for this fix.
Thank you!
Worked a treat after running the PS as admin but had to set for several site collections as didn't cascade down to other /sites/
thanks for the fix! It was
thanks for the fix! It was blocking me when using the SharePoint migration Tool and the HarePoint workflow and content Migrator.
Thank you so much for the
Thank you so much for the solution :)
thank you, but None of this
thank you, but None of this worked... I've tried everything.. I'm at my last strand of hair...
perfect , calling microsoft
perfect , calling microsoft and searching for 3 days your site gave me the solution ! thanks !!!
Thank you so much.I am trying
Thank you so much.I am trying to solve it for nearly more than half a day.I dont get any solution until find yours.Very good solution
Awesome tip. Thank you. I can
Awesome tip. Thank you. I can use SP Desginer now!
Thank you. This saved me a
Thank you. This saved me a lot of time:)
Did you try running it at the
Did you try running it at the site collection instead of the tenant level? That's what tripped me up. I had to run it on every site collection.
Hi guys, I'm trying to deploy
Hi guys, I'm trying to deploy a SharePoint 2010 workflow to a SharePoint online environment using SharePoint designer and get the Server Error: Access Denied message.
Do you have any tips or workarounds for this issue?
new fix? I am experiencing
new fix? I am experiencing the exact same symptoms, but sadly the same powershell commands do not fix it, I still see the Deny message to my admin account on all list permissions.
Thanks for this. Side note, I
Thanks for this. Side note, I had this problem with a team site. Your powershell solution works, but to fix team site under the main site you need to specific that. In my case, this is the modified command that fixed my problem:
Set-SPOSite -Identity https://.sharepoint.com/sites/ -DenyAddAndCustomizePages $false
Does this work with
Does this work with SharePoint 2019 On Prem?
Thanks you, thank you, thank
Thanks you, thank you, thank you
Main this was painful to figure out prior to this article.
Thanks again
Property not found
Tried this on my SharePoint 2013 Online tenant and received a 'Property set method not found" error.