How to Restrict SharePoint List Access by User and Column
Question details
The user needs to assign item-level permissions automatically in a SharePoint list based on the submitter or a specific column (such as Country or Assets Supervisor).

- Product
- SharePoint
- Device & OS
- not provided
- Scenario
- Managing large asset-tracking lists where manual permission sharing is difficult and time-consuming.
- Observed behavior
- SharePoint does not provide a simple out-of-the-box method to automate item-level permissions based on column values or specific staff members.
Ensure you have Site Owner or Full Control permissions in SharePoint, and verify that you have access to Microsoft Power Automate to create custom cloud workflows.
Automate Item-Level Permissions using Power Automate
Create a custom Power Automate flow to identify the supervisor or country for each item, stop inherited sharing, and grant specific access.
Since SharePoint Online lacks a built-in feature to assign permissions automatically based on a column, a Power Automate workflow is the most effective approach for large lists.
Open Microsoft Power Automate and create an 'Automated cloud flow' that triggers when an item is created or modified in your specific SharePoint list.
Add the 'Stop sharing an item or a file' SharePoint action to the flow. This action removes the default list-level permissions inherited by the new item.
Add the 'Grant access to an item or a folder' action. Configure it to assign permissions to the user specified in your 'Supervisor' or 'Country' column by using dynamic content from the trigger.

Use Separate Lists for Complex Security Requirements
If your security rules are too complex or your list exceeds threshold limits, splitting data into separate SharePoint lists is a reliable alternative.
Manage Exported List Data Efficiently with WPS Office
While SharePoint is required for complex list permissions and web-based asset tracking, you can easily manage, analyze, and report on your exported SharePoint lists using WPS Spreadsheet. WPS Office is a free, lightweight, and user-friendly alternative to Microsoft Office.

Frequently Asked Questions
Can I restrict users to only see their own SharePoint list items?
Yes. Go to 'List settings' > 'Advanced settings'. Under 'Item-level Permissions', set 'Read access' to 'Read items that were created by the user'. This ensures users can only view their own submissions without needing a Power Automate flow.
Is there a limit to item-level permissions in SharePoint?
Yes, SharePoint has a soft limit of 5,000 unique permissions per list. Exceeding this limit can cause list views to break and degrade performance. For large datasets, separating items into different folders or lists is recommended.
Can I use Power Apps to restrict column access instead?
Power Apps can hide or disable specific fields in the user interface based on the logged-in user's profile. However, this only secures the app's visual interface. Users might still access the hidden data if they navigate directly to the backend SharePoint list.




