SharePoint O365 Permissions - Deny - Add and Customise Pages issue

Submitted by Andrew Reeves on Thu, 20/08/2015 - 09:30

Associated errors:

“Web Part Error: A Web Part or Web Form Control on this Page cannot be displayed or imported. You don’t have Add and Customize Pages permissions required to perform this action.”

Access Denied to certain web pages that you should be able to see

Missing sections / headings in Site Settings such as Solutions Gallery – you should see in site settings

Problem:

I was working on one of our client’s sites on a brand new Office 365 configuration and after a while found that on my admin account I was being denied access to certain things and being told I didn’t have permission to do certain things. This was strange as I was logged on with the admin account and there were no other accounts yet created.

Diagnostics:

To check if this is your issue go to a library where the issue is occurring and check permissions for your account. Go to the Library tab and select Shared With on the ribbon then go straight to “advanced”. Select Check permissions on the ribbon at the top – enter your user account and do check now.

If you see this:

Or if any of your Galleries are missing as shown above from Site Settings then...

Resolutions:

Firstly to stop it happening again...

To enable or disable scripting from the SharePoint admin centre

Sign in to Office 365 with your work or school account.

Go to the SharePoint admin centre.

Select Settings.

Under Custom Script choose:

 

Any change to the scripting setting made through the SharePoint Online admin centre may take up to 24 hours to take effect.

To fix the current problem

To enable scripting on a particular site collection immediately, use the following PowerShell command.

In SharePoint online management shell (download if you don’t have it)

Enter:

Connect-SPOService 

then

Enter URL of admin site https://<yourdomain>-admin.sharepoint.com

Then username and password

Set-SPOSite -Identity https://<yourdomain>.sharepoint.com -DenyAddAndCustomizePages $false

Make sure the scripting setting in the admin portal matches what you set using PowerShell, or the site collection setting may be overridden again in the next 24 hours.

When you then run the command all should be well again and it should not happen again!

 

Did this article help you today?

Yes, thank you :)No, sadly not :(

Comments

Submitted by John Vance on Thu, 21/04/2016 - 16:39
Tried this on my SharePoint 2013 Online tenant and received a 'Property set method not found" error.

Submitted by Marty on Thu, 14/07/2016 - 06:18
Yep this advice worked for me. I can't believe a fresh O365 instance puts a blanket "Deny" across all users, even Site Collection admins!

Submitted by Don on Wed, 27/07/2016 - 21:25
Was looking for this answer forever thanks for posting worked perfectly!

Submitted by Shaun on Tue, 08/11/2016 - 10:57
Genius Thank you.

Submitted by Akin on Sun, 08/01/2017 - 02:45
Finally... That's sick problem is gone. Big thanks.

Submitted by Charles on Tue, 24/01/2017 - 14:43
Thanks! Saved me a lot of time !

Submitted by Elisiane on Tue, 02/05/2017 - 14:18
Thanks!!! This article save my day!

Submitted by Nick Duxfield on Tue, 02/05/2017 - 23:31
This solved the issue on the Modern Sites part of Teams. I discovered this issue when i tried to publish a 2010 workflow. Suddenly I got permissions error. As the Global admin, Site Collection Admin and Owner of the site this was puzzling. Microsoft even cleared my caches in an afternoon. I also reset my laptop. Tried multiple PC's etc.

Submitted by Martin on Wed, 21/06/2017 - 17:25
Hi Nick, Are you able to edit and save the .aspx files within an MS Teams team site in sharepoint designer 2013 after this change? I'm trying to edit a list view to change a column width but sharepoint designer wont save even after the change suggested in this post.

Submitted by Eric Schrader on Thu, 25/05/2017 - 19:50
Thanks! I ran into the following error when enabling the responsive UI PNP: Enable-PnPResponsiveUI : Access denied. You do not have permission to perform this action or access this resource. I could run it on a new classic publishing site collection but not the original root site collection, even though I was admin. I saw the deny flag on my user for the permissions and found this article. I didnt have to switch my custom script flag since I only need to run this code once, but did run into an issue with set-sposite: Set-SPOSite : Value cannot be null. I could do a get-sposite and return results, so I knew the issue was syntax related. I got it working with this: PS C:\users\ericschrader\desktop> get-sposite | where-object {$_.URL -eq "https://<yourdomain>.sharepoint.com/"} | set-sposite -DenyAddAndCustomizePages $false Great find! Any updates on why this was set by MS on this site but not on new Publishing classic sites would be appreciated.

Submitted by Rodney on Fri, 30/06/2017 - 13:23
I pulled trying to fix this issue. Called Microsoft Office 365 support and that was a complete waste of time. Thank you for this fix.

Submitted by Ang on Thu, 12/10/2017 - 16:53
Worked a treat after running the PS as admin but had to set for several site collections as didn't cascade down to other /sites/<sitenames>

Submitted by amar on Fri, 24/11/2017 - 15:10
thanks for the fix! It was blocking me when using the SharePoint migration Tool and the HarePoint workflow and content Migrator.

Submitted by Vidura on Sun, 11/02/2018 - 23:02
Thank you so much for the solution :)

Submitted by Diego on Mon, 05/03/2018 - 19:17
thank you, but None of this worked... I've tried everything.. I'm at my last strand of hair...

Submitted by Nancy on Wed, 30/01/2019 - 16:24
Did you try running it at the site collection instead of the tenant level? That's what tripped me up. I had to run it on every site collection.

Submitted by gdg on Mon, 26/03/2018 - 01:38
perfect , calling microsoft and searching for 3 days your site gave me the solution ! thanks !!!

Submitted by Muthuprasanth on Mon, 16/04/2018 - 13:49
Thank you so much.I am trying to solve it for nearly more than half a day.I dont get any solution until find yours.Very good solution

Submitted by Jose Zaldivar on Mon, 24/09/2018 - 04:00
Awesome tip. Thank you. I can use SP Desginer now!

Submitted by David Hatfield on Wed, 14/11/2018 - 02:58
Thank you. This saved me a lot of time:)

Submitted by Doug Cameron on Thu, 31/01/2019 - 23:30
Hi guys, I'm trying to deploy a SharePoint 2010 workflow to a SharePoint online environment using SharePoint designer and get the Server Error: Access Denied message. Do you have any tips or workarounds for this issue?

Submitted by Willman on Tue, 25/06/2019 - 17:24
new fix? I am experiencing the exact same symptoms, but sadly the same powershell commands do not fix it, I still see the Deny message to my admin account on all list permissions.

Submitted by Tom on Sun, 18/08/2019 - 17:20
Thanks for this. Side note, I had this problem with a team site. Your powershell solution works, but to fix team site under the main site you need to specific that. In my case, this is the modified command that fixed my problem: Set-SPOSite -Identity https://<yourdomain>.sharepoint.com/sites/<your team site> -DenyAddAndCustomizePages $false

Add new comment