SharePoint drop box using Power Automate

By -

Introduction

I was asked how we can create a SharePoint library which allows somebody to upload files to it, but not read any other files in the library.

It felt like a simple and pretty reasonable request.  My colleague Grant made me aware of the Enable File Requests feature in SharePoint or OneDrive which might achieve this requirement, but unfortunately as it is designed for more external usage, the pre-reqs require things like Anyone links to be enabled.

I looked into other out of the box options.

Permissions on SharePoint Lists and SharePoint Document Libraries are similar, but not exactly the same.  I say permissions, I guess it is more advanced settings for Lists have Item-Level Permissions which give the ability for the user to only read items that were created by them.

Lists Item-Level Permissions

Nothing exists like this in SharePoint document libraries unless you break permission propagation on every file which isn't scalable from a management or performance perspective.

If you give someone Add permission to a document library, they will get Read by default.

So how do we allow someone to drop files into a directory without see anything else there?

My solution was to create a document library which acts as the drop box and then have a Power Automate Flow which moves the files to a secure area and deletes and files/folders from the drop box area.

The only slight downside here is that there could be a small lag time whilst the Flow is running, but this was acceptable to the person who requested it.

How it works?

A Power Automate Flow is triggered when a file or folder is added to the source document library.

This will determine whether it is a file or folder.

    If file, it will check the target document library has the same folder structure and if not, it will create it. Then it will move the file and finally delete the file from the source directory.

    If folder, it will loop until the source folder is empty and then delete it.  This ensures that no folders are left behind and that the folder is not deleted whilst files are being moved too.

Flow snippet


How to use it?

Setup a SharePoint site with two document libraries.  Set the permissions on each to match this scenario (source being add/read to normal users, target being only accessible to admins).

Import the zip into make.powerautomate.com and update the connection.  Then edit it and change the trigger SharePoint site.  You then need to update the variables for SharePoint site name, URL and source and target folder names.  This will update the rest of the actions.

Video

This video shows how to use the Power Automate Flow.





bank drop box image from https://www.flickr.com/photos/chuckthewriter/4749587614

Download Flow


Comments

Post a Comment

Popular posts from this blog

Assigning Windows 10/11 Enterprise Subscription Activation Licences to Hybrid Azure AD Joined Devices

By -
Image
Introduction Starting with Windows 10, version 1703, Windows 10 Pro supports the Subscription Activation feature, enabling users to “step-up” from Windows 10 Pro to Windows 10 Enterprise automatically if they are subscribed to Windows 10 Enterprise E3 or E5. The Subscription Activation feature eliminates the need to manually deploy Windows 10 Enterprise or Education images on each target device, then later standing up on-prem key management services such as KMS or MAK based activation, entering GVLKs, and subsequently rebooting client devices. It’s important to note that the Windows 10 Enterprise subscription activation is designed to “step-up” a device from Windows 10 Pro to Windows 10 Enterprise. Therefore, your device is required to have a Windows 10 Pro license activated as a baseline. For Windows 10 Enterprise Subscription Activation to function, there a several prerequisites which need to be in place. This blog is aimed for organisations which have Active Directory on premises an...
Read more

Power Automate: Get first item in output

By -
Image
One of the most annoying things about Power Automate for me is when I am trying to use the output of a previous action and as soon as I click that dynamic content button, it pops my new action into a For Each loop. It does this because the previous action could have more than 1 item returned and this would clearly fail unless it was in a loop. But if you have used the Row Count or Top option in the proceeding action, or you know full well that only 1 item will return, it is nice to avoid bloating the flow with an unnecessary loop. There are a couple of way to do this: First function You can craft your filter expression so that the output is wrapped in the First function. This will tell Power Automate to only look at the first item. First(variables('Array')) Calling Index You can edit your filter expression to tell it which item from the source you want. Zero being the first item e.g. variables('Array')[0] Which one to use? I use the index and the main reason is due to...
Read more

De-selectable radio buttons - Power Apps

By -
Image
Introduction When creating a Canvas Power App you can choose from a large number of controls and specifically input controls designed to get information from the user. One of these controls is the humble radio button. This is a good control which provides possible options without requiring a user action. In comparison a dropdown would require the user to click to expand all of the possible options. Example radio button input One of problems with this control is the fact you cannot de-select it. Once an option has been chosen, you can change it but you cannot undo it. The post shows a way to make de-selecting possible in a Canvas Power App. One simple way to achieve this is to have a button or icon next to the radio button and its OnSelect property to be Reset(rdoButton). This is easy, but if there are many radio button controls, it could result in lots more controls on a screen or in an app. Power Apps recommends keeping under 500 for an app and 300 maximum per page. The followi...
Read more