Question about RoleAssignment

[kimkingchai]

$roleAssignments = Get-PnPProperty -ClientObject $item -Property RoleAssignments
Get-PnPProperty: Attempted to perform an unauthorized operation.

Does anyone know which site permission need to get roleassignment info? I am trying to list all the permissions under the site folders.

Thank you.

[rakeshranderia]

RoleAssignments is SharePoint security metadata, so an Unauthorised error usually means the identity used for the PnP connection does not have enough rights to enumerate permissions on that object.

If $item is a list item, I would first try the PnP cmdlet for this rather than manually loading RoleAssignments:

Get-PnPListItemPermission -List "Documents" -Identity $item.Id

If that also returns Unauthorized, I'd test the same while connected as a Site Collection Administrator account. If it works there, the issue is the permission level of the current user/app rather than Get-PnPProperty.

Hope this helps