The Workflow was Suspended with Unauthorized HTTP / Elevate Workflow permissions in SharePoint 2013

In this article, I am going to solve the below issue

The Workflow was Suspended with Unauthorized HTTP


Scenario

I have created a simple workflow to update a list item via SharePoint designer 2013.

When I tried to test the workflow, It is suspended with the below error:

Unauthorized HTTP to /_vti_bin/client.svc/web/lists

The SharePoint Workflow was Suspended with Unauthorized HTTP


Cause

By default, the SharePoint workflow doesn’t have sufficient permission to access the SharePoint lists, and this process requires a full control permission level.


SharePoint Workflow Important notes

Before we getting started, you should be aware of the following:

  • By default, the workflow runs at “Write” permission level.
  • To allow the workflow to use APP permissions, you must be a Site Owner or Site Collection Administrator.
  • The Workflow Manager platform must be configured properly to be able to activate “Workflows can use app permissions” feature.
  • The App Management Service must be configured to be able to grant a full control permission to a workflow.
  • App step provides the workflow authorization for its Identity as a Full Control and ignores the current user permission.
  • The SharePoint 2010 workflow is not supported in App Step,
  • The “Start List Workflow” action is used only to start a SharePoint 2010 workflow, So it’s not supported in App Step.
  • If you don’t elevate the permissions for the SharePoint Workflow, The App Step will be disabled in the SharePoint Designer.

Solution

Elevate SharePoint Workflow Permissions

Note: To elevate the SharePoint Workflow Permissions, The current user should be Site Owner or Site Collection Administrator.

Allow workflow to use app permissions

  • Open the SharePoint Site Collection > Site Settings.

The Workflow was Suspended with Unauthorized HTTP

  • Below Site Actions > Select Manage site features.

Elevate Workflow Permissions In SharePoint

  • Activate Workflows can use app permissions feature.

Workflows can use app permissions.png

Note: The Workflow Manager platform must be configured properly to be able to activate “Workflows can use app permissions” feature.

Grant full control permission to a workflow

  • Open the SharePoint Site Collection > Site Settings >Below Users and Permissions > Click on Site App Permissions.

Site app permissions.png

  • Copy the client section of the App Identifier.

The App Identifier is the identifier Guid between the last “|” and the “@” sign, as shown below.

Configure App Permissions for SharePoint Workflow /_layouts/15/appinv.aspx

/_layouts/15/appinv.aspx

  • Paste the client section of App Identifier to the App Id field.
  • Click Lookup to fetch the required info.

Configure Site App Permission for SharePoint Workflow

Note: The App Management Service must be configured to be able to lookup your identifier.

If the App Management Service is not installed you will get the below error when you clicked on Lookup button.

App Management Shared Service Proxy is not installed.png

Note: In case, The lookup button was unable to retrieve its related information, check Lookup an app id was unable to retrieve its related data during granting permission to an app in SharePoint 2013

  • Paste the below APP Permissions Request XML to grant full control permission.
 <apppermissionrequests allowapponlypolicy="true">
<apppermissionrequest scope="http://sharepoint/content/sitecollection/web" right="FullControl">
</apppermissionrequest></apppermissionrequests> 

The Workflow doesn't have sufficient permissions

  • You will then be asked to trust the Workflow app, Click Trust It.

The App step is disabled in SharePoint Designer

Develop the workflow actions inside an App Step using SharePoint Designer

Using App step will allow the workflow to be authorized with its identity as a Full Control and ignore the current user permissions. this is will ensure that the workflow will be executed successfully in case the current user has no permissions.

The App step is disabled in SharePoint Designer

Note: The App Step will be disabled in the SharePoint Designer., in case you are not followed all the above steps.

Below Workflow Settings >  Uncheck the “Automatic updates to workflow status to the current stage name“, then click Publish.

elevate permissions for the SharePoint Workflow

Note: If you didn’t check “Automatic updates to workflow status to the current stage name“, the current user will require Edit permission on the list to can edit the workflow status.

Try now to test your workflow and check it’s status that should be now worked properly.

The SharePoint Workflow was Suspended with Unauthorized HTTP

Note: The SharePoint 2010 workflow is not supported in App Step.


Applies To
  • SharePoint 2013.
  • SharePoint 2016.
Conclusion

In this article, I have explained

How to elevate permissions for the SharePoint Workflow?

See also
Advertisements

2 thoughts on “The Workflow was Suspended with Unauthorized HTTP / Elevate Workflow permissions in SharePoint 2013

  1. it’s worked form me but I have problem with Arabic screenshots should you use English screenshots in your next article please

    Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

w

Connecting to %s