Sp 2013 On Prem: Full Control User can't create lists

Question

I have created a host named site collection and given a user Site Collection Administrator and Full Control on the site collection level. He is unable to create lists in Site Contents --> Add an App.

THis is a host named site collection on SP 2013 Enterprise with Publishing enabled. The site was created in Powershell and the groups added afterwards. Next to the groups are is the addition of the Limited Access permission level, "Full Control, Limited Access". I have deactivated the "Limited-access user permission lockdown mode" feature on the site colection

I've not come across this before. Any ideas?

Answer 1

The user had Full Control on the site collection however, it was also in an AD group that was set to read only on the web applicatoin via the User Policy setting. I had the user removed from that AD group and they were able to do what Full Control accounts do.

Answer 2

Can you check whether the user has permission in Master Pages and page layouts library. Check the permission in this library at the root site collection and grant them the specified permission level accordingly - at least read permission.

If user has Full Control permission but doesn't have access to the this library, sometimes user faces issue to create list library or page etc.

Similar issue was discussed in the below thread also,

Provide "All Authenticated Users" to Read Only access to the master pages and page layouts library.

Reference :

User with Full Control Permission is getting Access Denied Message