{"id":1018,"date":"2010-05-08T20:58:16","date_gmt":"2010-05-09T01:58:16","guid":{"rendered":"http:\/\/blogs.devhorizon.com\/reza\/?p=1018"},"modified":"2010-05-13T07:43:16","modified_gmt":"2010-05-13T12:43:16","slug":"sharepoint-administration-toolkit-getbyprincipalid-method-call","status":"publish","type":"post","link":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/","title":{"rendered":"SharePoint Administration Toolkit & GetByPrincipalId() Method Call"},"content":{"rendered":"

<\/a><\/a>SharePoint Administration Toolkit<\/a> ships with a very handy tool that’s installed at web site level (SPWeb) named Check Effective Permissions. Essentially, this tool checks to see if a SPPrincipal <\/a>object has got permissions to any objects within the current web site and all the sub sites that inherit<\/u> <\/strong>from the current site. It also provides other permission related reports such as anonymous access level or other factors that effect the level of access for the given SPPrincipal object.<\/p>\n

<\/a><\/p>\n

<\/a><\/p>\n

\"checkeffectivepermissions.PNG\"<\/a>\u00a0<\/p>\n

Sometimes when you use the tool, it throws the “Value does not fall within the expected range<\/em>” exception on SPRoleAssignmentCollection.GetByPrincipalId(Int32 principalId) method call. See the stack trace below:<\/p>\n

[Xml]<\/p>\n

Value does not fall within the expected range; at Microsoft.SharePoint.SPRoleAssignmentCollection.GetByPrincipalId(Int32 principalId)
\nat Microsoft.SharePoint.SPRoleAssignmentCollection.GetAssignmentByPrincipal(SPPrincipal principalToFind)
\nat Microsoft.Office.Server.SecurityReport.SecurityReportAccountManager.CheckPermissions(Object contextObject, String username, AclUIMode aclType)
\nat Microsoft.Office.Server.SecurityReport.SecurityReportAccount.BtnCheck_Click(Object sender, EventArgs e)<\/p>\n

….<\/p>\n

[\/Xml]<\/p>\n

In our case, since the exception was only thrown for some SPPrincipal objects, I did a quick analysis and found out that if the SPPrincipal has no role assigned to it (see the figure below), it blows up the API call. I know this may sound kinda bizzare. Why do we need an SPPrincipal without having a role assgined to it? For a number of reasons. For example, you may need to create the groups in advance and assign the permissions later. Or, maybe the\u00a0groups are auto-generated by an import process, but something has gone wrong when assigning the roles. As a result, some groups do not have roles assigned to them.<\/p>\n

\"checkeffectivepermissions_norole.PNG\"<\/a><\/p>\n

<\/a><\/p>\n

<\/a><\/p>\n

By the way, people have reported other similar issues on the bottom of this page<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

SharePoint Administration Toolkit ships with a very handy tool that’s installed at web site level (SPWeb) named Check Effective Permissions. Essentially, this tool checks to see if a SPPrincipal object has got permissions to any objects within the current web site and all the sub sites that inherit from the current site. It also provides […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[43],"tags":[],"class_list":["post-1018","post","type-post","status-publish","format-standard","hentry","category-moss-2007"],"yoast_head":"\nSharePoint Administration Toolkit & GetByPrincipalId() Method Call - Reza Alirezaei's Blog %<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Reza Alirezaei\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/\"},\"author\":{\"name\":\"Reza Alirezaei\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#\\\/schema\\\/person\\\/cdbb24d283697a65951cb4a14e474938\"},\"headline\":\"SharePoint Administration Toolkit & GetByPrincipalId() Method Call\",\"datePublished\":\"2010-05-09T01:58:16+00:00\",\"dateModified\":\"2010-05-13T12:43:16+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/\"},\"wordCount\":292,\"commentCount\":1,\"image\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/wp-content\\\/uploads\\\/2010\\\/05\\\/checkeffectivepermissions.thumbnail.PNG\",\"articleSection\":[\"MOSS 2007\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/\",\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/\",\"name\":\"SharePoint Administration Toolkit & GetByPrincipalId() Method Call - Reza Alirezaei's Blog %\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/wp-content\\\/uploads\\\/2010\\\/05\\\/checkeffectivepermissions.thumbnail.PNG\",\"datePublished\":\"2010-05-09T01:58:16+00:00\",\"dateModified\":\"2010-05-13T12:43:16+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#\\\/schema\\\/person\\\/cdbb24d283697a65951cb4a14e474938\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/2010\\\/05\\\/08\\\/sharepoint-administration-toolkit-getbyprincipalid-method-call\\\/#primaryimage\",\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/wp-content\\\/uploads\\\/2010\\\/05\\\/checkeffectivepermissions.thumbnail.PNG\",\"contentUrl\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/wp-content\\\/uploads\\\/2010\\\/05\\\/checkeffectivepermissions.thumbnail.PNG\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#website\",\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/\",\"name\":\"Reza Alirezaei's Blog\",\"description\":\"Blogging from the field!\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/#\\\/schema\\\/person\\\/cdbb24d283697a65951cb4a14e474938\",\"name\":\"Reza Alirezaei\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g\",\"caption\":\"Reza Alirezaei\"},\"url\":\"https:\\\/\\\/blogs.devhorizon.com\\\/reza\\\/author\\\/rezaa\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SharePoint Administration Toolkit & GetByPrincipalId() Method Call - Reza Alirezaei's Blog %","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/","twitter_misc":{"Written by":"Reza Alirezaei","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/#article","isPartOf":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/"},"author":{"name":"Reza Alirezaei","@id":"https:\/\/blogs.devhorizon.com\/reza\/#\/schema\/person\/cdbb24d283697a65951cb4a14e474938"},"headline":"SharePoint Administration Toolkit & GetByPrincipalId() Method Call","datePublished":"2010-05-09T01:58:16+00:00","dateModified":"2010-05-13T12:43:16+00:00","mainEntityOfPage":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/"},"wordCount":292,"commentCount":1,"image":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/#primaryimage"},"thumbnailUrl":"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2010\/05\/checkeffectivepermissions.thumbnail.PNG","articleSection":["MOSS 2007"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/","url":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/","name":"SharePoint Administration Toolkit & GetByPrincipalId() Method Call - Reza Alirezaei's Blog %","isPartOf":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/#primaryimage"},"image":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/#primaryimage"},"thumbnailUrl":"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2010\/05\/checkeffectivepermissions.thumbnail.PNG","datePublished":"2010-05-09T01:58:16+00:00","dateModified":"2010-05-13T12:43:16+00:00","author":{"@id":"https:\/\/blogs.devhorizon.com\/reza\/#\/schema\/person\/cdbb24d283697a65951cb4a14e474938"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogs.devhorizon.com\/reza\/2010\/05\/08\/sharepoint-administration-toolkit-getbyprincipalid-method-call\/#primaryimage","url":"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2010\/05\/checkeffectivepermissions.thumbnail.PNG","contentUrl":"https:\/\/blogs.devhorizon.com\/reza\/wp-content\/uploads\/2010\/05\/checkeffectivepermissions.thumbnail.PNG"},{"@type":"WebSite","@id":"https:\/\/blogs.devhorizon.com\/reza\/#website","url":"https:\/\/blogs.devhorizon.com\/reza\/","name":"Reza Alirezaei's Blog","description":"Blogging from the field!","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blogs.devhorizon.com\/reza\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blogs.devhorizon.com\/reza\/#\/schema\/person\/cdbb24d283697a65951cb4a14e474938","name":"Reza Alirezaei","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3ba940d84e0ecb909e62e93df4c56daf0395c7e53c914467ab2ee73124a7d7b6?s=96&d=mm&r=g","caption":"Reza Alirezaei"},"url":"https:\/\/blogs.devhorizon.com\/reza\/author\/rezaa\/"}]}},"_links":{"self":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/comments?post=1018"}],"version-history":[{"count":0,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/posts\/1018\/revisions"}],"wp:attachment":[{"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/media?parent=1018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/categories?post=1018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.devhorizon.com\/reza\/wp-json\/wp\/v2\/tags?post=1018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}