Forum Discussion
Access denied creating document set
It is a fact that Edit permission on a library only is not enough to be able to add a document set. The user will get an access denied error. It is necessary to add Read permission to the site additionnaly to bypass the error.
However, it is possible to grant less or more specific access because we don't want the user to see the site?
I tried to give Edit access to:
- Site Assets Library
- Styles Library
- List Template Gallery _catalogs/lt
- Master Page Gallery _catalogs/masterpage
- Solution Gallery _catalogs/solutions
- Theme Gallery _catalogs/theme
- Design Catalog _catalogs/design
But the user still gets the error message. It seems that we should grant access to the _layouts/15 folder but I don't think it's possible.
Did somebody found some workarround to avoid granting Read access to the whole site?
https://answers.microsoft.com/en-us/msoffice/forum/all/user-can-editcreate-documents-in-a-document-set/4b701b5e-c65d-41a2-a4ed-3e55c84c6254
https://sharepoint.stackexchange.com/questions/249786/access-denied-when-try-to-create-document-set-with-full-control-over-library-and
2 Replies
There is a workaround for this - which also makes the forms more usable. When you modernize the Document Set NewDocSet form, it loads just fine in these situations. Check out the PnP Script Sample: Enable modern creation forms for Document sets | PnP Samples
kmktnnHi, in SharePoint, having Edit permissions on a document library is not enough to create a Document Set the user will receive an "Access Denied" error unless they also have at least Read permission at the site level.
This happens because the creation process requires access to site-level resources, such as the Document Set content type and welcome page. Granting permissions to specific libraries (Site Assets, Styles Library, Master Page Gallery, etc.) does not resolve the issue, as SharePoint makes internal calls to system folders like _layouts/15, which cannot be individually permissioned.The only supported workaround is to grant Read access to the site, but visibility can be restricted using custom navigation, audience targeting, and tailored permission levels. Currently, there is no way to allow Document Set creation without extending Read access to the entire site.
