Forum Discussion
Attempted to perform an unauthorized operation error while creating folder in library
Hi Team,
The user has been granted "Full Control" to a SharePoint Online library with Modern template. I have full control to the site and i am able to created Folders inside that library and i am able to view the library in Modern SharePoint template.
But the user whom i gave Full Control access, is unable to create folders inside the library and getting "Attempted to perform an unauthorized operation" and also the user always view the library in Classic experience. even though i have set the Moder experience as default mode for the library.
The user is not at all able to view the Modern experiece for a library in another site as well.
Please let me know how to resovle this.
Thanks,
Raj
2 Replies
- Was a solution to this problem ever found? I'm experiencing the same issue! If we give the impacted User Read-Only permission at the site level (by adding the user to the site Visitors group), then suddenly the Modern look-and-feel works and they can create a new folder within the document library. However, we don't want to grant read permission to the user at the site level as there are documents in other document libraries that the User should not be able to read.
- This answer came from our support staff and it seems to have resolved the issue for us!
The issue is that Limited-access permission lockdown is activated on the site.
Site Settings > Site Collection Features > Limited-access user permission lockdown mode
Note: Limited access permission is automatically assigned by SharePoint when you provide access to one specific item. You cannot assign Limited Access permissions directly to a user or group yourself. Instead, when you assign edit or open permissions to the single item (list/document library/subsite), SharePoint automatically assigns Limited Access to other required locations, such as the site or library in which the single item is located.
You can remove the user from the visitors group (i.e. remove read-only permission at the site level). Then deactivate the limited access feature. Then have the user retry.
