Permissions required to integrate with SharePoint
Below is a list of permissions required to use the app. The table below describes what permissions are required based on what tasks you're performing.
Action | Required permissions | Notes |
---|---|---|
Install the app. | SharePoint: Site Owner for the app catalog site | This is the app you install in the app catalog. You need Site Owner rights on the SharePoint app catalog to add the app and enable it to all sites. |
Register and configure the application via Management, and trust the app. |
K2: Admin SharePoint: Global Admin |
You need K2 Admin rights to add a new instance of the feature in Management. You need Global Admin rights in SharePoint to grant Nintex Automation for SharePoint app consent in Management. |
Remove the app | SharePoint site: Full Control K2: Admin |
The default Owners group typically has Full Control permission |
Action | Required Permissions | Notes |
---|---|---|
Create and edit data, forms, workflows and reports |
|
|
Action | Required Permissions | Notes |
---|---|---|
Start a workflow, view a workflow or access application user pages (including Learn, Get Help, End User License) and running reports.
|
|
|
Sharing applications with external users – The ability to share applications with external users such as users outside an organization who can access SharePoint Online sites and documents but do not have a license for the SharePoint Online or Microsoft Office 365 subscription. |
Permissions based on Site Collection Group membership SharePoint: Full Control required to enable sharing on the app catalog
|
|
Action | Required Permissions | Notes |
---|---|---|
Manage the app in Management |
K2: Admin
|
You need K2 Admin rights to administer the app in Management. |
Action | Required permissions | Notes |
---|---|---|
Install the app. | SharePoint: Full Control for the app catalog site | This is the app you install in the app catalog. You must have full control permission to add apps. |
Register and configure the application via the Registration Wizard, and trust the app. |
SharePoint: Tenant Admin |
If you do not run the Registration Wizard for the first time under an identity that has Site Collection Administration rights, it fails when uploading the K2 App. |
Deploy the app | SharePoint: SharePoint Online Administrator/Site Collection Administrator on the app catalog site. | |
Activate the App | SharePoint: Site Collection Administrator for each site collection where the app will be deployed to. | |
Remove the app | SharePoint site: Full Control | The default Owners group typically has Full Control permission |
Run the Registration Wizard, uninstall, configure permissions and synchronize groups |
SharePoint site: Design |
The default Owners group typically has Full Control permissions which includes Design permissions. |
Action | Required permissions | Notes |
---|---|---|
Create and edit data, forms, workflows and reports |
|
|
Action | Required permissions | Notes |
---|---|---|
Start a workflow, view a workflow or access application user pages (including Learn, Get Help, End User License) and running reports.
|
|
|
Sharing applications with external users – The ability to share applications with external users such as users outside an organization who can access SharePoint Online sites and documents but do not have a license for the SharePoint Online or Microsoft Office 365 subscription. |
Permissions based on Site Collection Group membership SharePoint: Full Control required to enable sharing on the app catalog
|
|
Action | Required permissions | Notes |
---|---|---|
Manage app deployments, Registration wizard, Manage app activations, End User License | SharePoint: Global Admin
|
|
Access the Management Page and administer the environment | K2: Admin | Users require Admin permission in the environment to access the Management environment. |