User in contributor group can not access directly file on SharePoint on-premises site

Mr.Hoang Nghiem Huy 20 Reputation points
2024-06-05T09:29:12.9933333+00:00

My user tried to access a powerpoint file directly on sharepoint document library and got this message

User's image When I checked his permission, I had found that he still stayed in the contributor group, that mean he can access and edit this file . I also checked the permission for this file, too

User's image

When I checked ULS log, these logs illustrate user didn't have permission:
"Claims Windows Sign-In: Sending 401 for request '<web url>' because the user is not authenticated and resource requires authentication".

So why user still exist in group but they can't act the permission of this group?

Thank for your help

SharePoint Server
SharePoint Server
A family of Microsoft on-premises document management and storage systems.
2,280 questions
SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,105 questions
SharePoint Development
SharePoint Development
SharePoint: A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.Development: The process of researching, productizing, and refining new or existing technologies.
2,773 questions
SharePoint Server Development
SharePoint Server Development
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Development: The process of researching, productizing, and refining new or existing technologies.
1,593 questions
SharePoint Server Management
SharePoint Server Management
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Management: The act or process of organizing, handling, directing or controlling something.
2,870 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Haoyan Xue_MSFT 21,816 Reputation points Microsoft Vendor
    2024-06-06T08:14:29.4266667+00:00

    Hi @Mr.Hoang Nghiem Huy ,

    Thank you for posting in this community.

    There are a few things that can cause this problem:

    1.See if you have configured IRM for this Document Library or file(information rights management).

    2.look at the error log in your application server it would be more specific why its throwing a 401 error that would help solve your issue.

    3.Make sure you have unselected the “Kernel Mode Authentication”

    Reference: https://www.sharepointdiary.com/2011/04/http-error-401-not-authorized-with-kerberos-auth.html#ixzz8cLqq8XD3

    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

    4.Ensure that permissions are assigned to the correct identity claim (SAML identity claim) rather than the user’s Windows-based account (domain\user).

    4.If the user still cannot access the file, try removing them from the site and then granting them permissions again.


    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.