How to Fix 'Deny: Add and Customize Pages' for SharePoint Site Owners
Question details
A SharePoint site administrator or owner is unable to edit pages due to a permission conflict.
- Product
- SharePoint Server
- Device & OS
- not provided
- Scenario
- Attempting to customize or edit pages within an on-premises SharePoint farm environment.
- Observed behavior
- The system displays a 'Deny' status for 'Add and Customize Pages', actively preventing the site owner from making changes.
Ensure you have Farm Administrator credentials, as modifying web application policies or farm-level permissions requires elevated administrative access.
Verify Farm Configuration and Web Application Policies
Check the on-premises SharePoint farm settings and web application policies to remove explicit deny rules blocking page customization.
Because this is an on-premises SharePoint Server farm, standard SharePoint Online guidance (such as enabling Custom Script at the tenant level) does not apply. Permissions must be validated at the farm and web application level.
Log in to the server hosting the SharePoint Central Administration site using an account with Farm Administrator privileges.
Navigate to Application Management > Manage web applications. Select the affected web application and click 'User Policy' in the ribbon. Ensure no explicit deny rules are blocking page customization for the affected user or group.
Go to Site Settings > Site permissions > Permission Levels. Verify that the permission level assigned to the Site Owners group includes the 'Add and Customize Pages' right.
If the issue persists despite correct configurations, post your farm-specific setup on Microsoft Q&A, as on-premises environments often require advanced administrative troubleshooting.
Boost Your Team's Productivity with WPS Office
While resolving complex SharePoint server permissions, equip your team with WPS Office. It provides a lightweight, free alternative to Microsoft Office that easily handles daily document tasks with zero learning curve.
- 1. Download the Application: Visit the official WPS Office website and download the free installation package.
- 2. Install WPS Office: Run the installer and follow the simple on-screen instructions for a quick, lightweight setup.
- 3. Open Your Documents: Launch WPS Office and seamlessly open your existing Word, Excel, or PowerPoint files without losing original formatting.
Frequently Asked Questions
Why does SharePoint Online custom script guidance not work for my on-premises farm?
SharePoint Online relies on tenant-level custom script settings controlled via the web admin center or PowerShell. On-premises farms manage customization rights through different Central Administration policies and site collection features.
How do I know if I have the right administrative access to fix this?
To modify farm-level policies or web application settings, your account must be a member of the Farm Administrators group in SharePoint Central Administration. Being a Site Collection Administrator is not sufficient.
Can a site owner remove the 'Deny' permission themselves?
No. If the 'Deny' status is enforced at the web application policy level, a farm administrator must resolve it. Site owners can only manage permissions within the specific scope of their site collection.
