From 192f181d35e4dc8005e89bb5eddd96d11313c38f Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 9 Jun 2026 04:04:48 +0300 Subject: [PATCH 1/3] Weekly Permissions sync 2026-06-09 --- permissions/new/permissions.json | 216 +++++++------------------- permissions/new/provisioningInfo.json | 28 ++-- 2 files changed, 78 insertions(+), 166 deletions(-) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 1d82329e..8d85100a 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -3894,7 +3894,7 @@ ], "paths": { "/applications": "least=DelegatedWork,DelegatedPersonal,Application", - "/applications(appid={value})": "least=DelegatedWork,DelegatedPersonal", + "/applications(appid={value})": "least=DelegatedWork,DelegatedPersonal,Application", "/applications/{id}": "least=DelegatedWork,DelegatedPersonal,Application", "/applications/{id}/extensionproperties": "least=DelegatedWork,DelegatedPersonal,Application", "/applications/{id}/extensionproperties/{id}": "least=DelegatedWork,DelegatedPersonal,Application" @@ -9262,10 +9262,10 @@ "/app/calls": "", "/app/calls/{id}/addlargegalleryview": "", "/app/calls/{id}/answer": "least=Application", - "/app/calls/{id}/participants/{id}/admitFromLobby": "least=Application", + "/app/calls/{id}/participants/{id}/admitFromLobby": "", "/app/calls/{id}/participants/{id}/mute": "least=Application", - "/app/calls/{id}/participants/{id}/removeFromLobby": "least=Application", - "/app/calls/{id}/participants/admitAllFromLobby": "least=Application", + "/app/calls/{id}/participants/{id}/removeFromLobby": "", + "/app/calls/{id}/participants/admitAllFromLobby": "", "/app/calls/{id}/participants/configuremixer": "", "/app/calls/{id}/participants/muteall": "least=Application", "/app/calls/{id}/startRecording": "least=Application", @@ -9276,12 +9276,12 @@ "/communications/calls": "", "/communications/calls/{id}/addlargegalleryview": "", "/communications/calls/{id}/answer": "least=Application", - "/communications/calls/{id}/participants/{id}/admitFromLobby": "least=Application", + "/communications/calls/{id}/participants/{id}/admitFromLobby": "", "/communications/calls/{id}/participants/{id}/mute": "least=Application", - "/communications/calls/{id}/participants/{id}/removeFromLobby": "least=Application", + "/communications/calls/{id}/participants/{id}/removeFromLobby": "", "/communications/calls/{id}/participants/{id}/startholdmusic": "", "/communications/calls/{id}/participants/{id}/stopholdmusic": "", - "/communications/calls/{id}/participants/admitAllFromLobby": "least=Application", + "/communications/calls/{id}/participants/admitAllFromLobby": "", "/communications/calls/{id}/participants/configuremixer": "", "/communications/calls/{id}/participants/muteall": "least=Application", "/communications/calls/{id}/startRecording": "least=Application", @@ -9380,18 +9380,18 @@ "POST" ], "paths": { - "/app/calls/{id}/participants/{id}/admitFromLobby": "", + "/app/calls/{id}/participants/{id}/admitFromLobby": "least=Application", "/app/calls/{id}/participants/{id}/mute": "", - "/app/calls/{id}/participants/{id}/removeFromLobby": "", - "/app/calls/{id}/participants/admitAllFromLobby": "", + "/app/calls/{id}/participants/{id}/removeFromLobby": "least=Application", + "/app/calls/{id}/participants/admitAllFromLobby": "least=Application", "/app/calls/{id}/participants/configuremixer": "", "/app/calls/{id}/participants/muteall": "", - "/communications/calls/{id}/participants/{id}/admitFromLobby": "", + "/communications/calls/{id}/participants/{id}/admitFromLobby": "least=Application", "/communications/calls/{id}/participants/{id}/mute": "", - "/communications/calls/{id}/participants/{id}/removeFromLobby": "", + "/communications/calls/{id}/participants/{id}/removeFromLobby": "least=Application", "/communications/calls/{id}/participants/{id}/startholdmusic": "least=Application", "/communications/calls/{id}/participants/{id}/stopholdmusic": "least=Application", - "/communications/calls/{id}/participants/admitAllFromLobby": "", + "/communications/calls/{id}/participants/admitAllFromLobby": "least=Application", "/communications/calls/{id}/participants/configuremixer": "", "/communications/calls/{id}/participants/muteall": "" } @@ -19720,8 +19720,6 @@ "/auditlogs/directoryaudits": "", "/auditlogs/directoryaudits/{id}": "", "/auditlogs/provisioning": "", - "/auditlogs/signins": "", - "/auditlogs/signins/{id}": "", "/contacts": "", "/contacts/{id}": "", "/contacts/{id}/directreports": "", @@ -32190,11 +32188,16 @@ "/identitygovernance/lifecycleworkflows/insights/workflowsProcessedSummary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}": "least=DelegatedWork,Application", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults": "least=DelegatedWork,Application", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}": "least=DelegatedWork,Application", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}/taskprocessingresults": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}/taskprocessingresults": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/summary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application", + "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults": "least=DelegatedWork,Application", + "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults/{id}/taskprocessingresults": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/taskprocessingresults": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/summary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application", @@ -32237,7 +32240,8 @@ "POST" ], "paths": { - "/identitygovernance/lifecycleworkflows/workflows/{id}/activate": "least=DelegatedWork,Application" + "/identitygovernance/lifecycleworkflows/workflows/{id}/activate": "least=DelegatedWork,Application", + "/identitygovernance/lifecycleworkflows/workflows/{id}/activateandwait": "least=DelegatedWork,Application" } } ], @@ -32386,6 +32390,7 @@ "/identitygovernance/lifecycleworkflows/workflows": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows({id})/previewworkflow": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/activate": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/activateandwait": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/createnewversion": "least=DelegatedWork,Application" } }, @@ -32466,11 +32471,16 @@ "/identitygovernance/lifecycleworkflows/workflows/{id}/executionscope": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/summary(startdatetime={value},enddatetime={value})": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/summary(startdatetime={value},enddatetime={value})": "", @@ -32577,11 +32587,16 @@ "/identitygovernance/lifecycleworkflows/workflows/{id}/executionscope": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/summary(startdatetime={value},enddatetime={value})": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/summary(startdatetime={value},enddatetime={value})": "", @@ -32611,6 +32626,7 @@ "/identitygovernance/lifecycleworkflows/workflows": "", "/identitygovernance/lifecycleworkflows/workflows({id})/previewworkflow": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/activate": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/activateandwait": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/createnewversion": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}/taskprocessingresults/{id}/resume": "least=DelegatedWork,Application" } @@ -34508,6 +34524,8 @@ "/networkAccess/deployments": "least=DelegatedWork,Application", "/networkAccess/deployments/{id}": "least=DelegatedWork,Application", "/networkAccess/explicitForwardProxyConfig": "least=DelegatedWork,Application", + "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles": "least=DelegatedWork,Application", + "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "least=DelegatedWork,Application", "/networkAccess/fileDlpPolicies": "least=DelegatedWork,Application", "/networkAccess/filePolicies": "least=DelegatedWork,Application", "/networkAccess/filePolicies/{id}": "least=DelegatedWork,Application", @@ -34562,7 +34580,11 @@ "/networkAccess/tlsInspectionPolicies/{id}": "least=DelegatedWork,Application", "/networkAccess/tlsInspectionPolicies/{id}/policyRules": "least=DelegatedWork,Application", "/networkAccess/tlsInspectionPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application", - "/networkAccess/tlsPolicies": "least=DelegatedWork,Application" + "/networkAccess/tlsPolicies": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies/{id}": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies/{id}/policyRules": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application" } }, { @@ -34637,6 +34659,8 @@ "/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "", "/networkaccess/discovery/discoveredApplicationSegments": "", "/networkAccess/explicitForwardProxyConfig": "", + "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles": "", + "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "", "/networkAccess/fileDlpPolicies": "", "/networkAccess/filePolicies": "", "/networkAccess/filePolicies/{id}": "", @@ -34705,7 +34729,11 @@ "/networkAccess/tlsInspectionPolicies/{id}": "", "/networkAccess/tlsInspectionPolicies/{id}/policyRules": "", "/networkAccess/tlsInspectionPolicies/{id}/policyRules/{id}": "", - "/networkAccess/tlsPolicies": "" + "/networkAccess/tlsPolicies": "", + "/networkAccess/webFilteringPolicies": "", + "/networkAccess/webFilteringPolicies/{id}": "", + "/networkAccess/webFilteringPolicies/{id}/policyRules": "", + "/networkAccess/webFilteringPolicies/{id}/policyRules/{id}": "" } }, { @@ -34730,6 +34758,7 @@ "/networkAccess/contentTypePolicies": "least=DelegatedWork,Application", "/networkAccess/contentTypePolicies/{id}/policyRules": "least=DelegatedWork,Application", "/networkAccess/discoverMcpTools": "", + "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles": "least=DelegatedWork,Application", "/networkAccess/fileDlpPolicies": "least=DelegatedWork,Application", "/networkAccess/filePolicies": "least=DelegatedWork,Application", "/networkAccess/filePolicies/{id}/policyRules": "least=DelegatedWork,Application", @@ -34753,7 +34782,9 @@ "/networkaccess/tls/managedCertificateAuthorityCertificates/{id}/microsoft.graph.networkaccess.revoke": "least=DelegatedWork,Application", "/networkAccess/tlsInspectionPolicies": "least=DelegatedWork,Application", "/networkAccess/tlsInspectionPolicies/{id}/policyRules": "least=DelegatedWork,Application", - "/networkAccess/tlsPolicies": "least=DelegatedWork,Application" + "/networkAccess/tlsPolicies": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies/{id}/policyRules": "least=DelegatedWork,Application" } }, { @@ -34776,6 +34807,7 @@ "/networkAccess/contentTypePolicies/{id}": "least=DelegatedWork,Application", "/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application", "/networkAccess/explicitForwardProxyConfig": "least=DelegatedWork,Application", + "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "least=DelegatedWork,Application", "/networkAccess/fileDlpPolicies/{id}": "least=DelegatedWork,Application", "/networkAccess/filePolicies/{id}": "least=DelegatedWork,Application", "/networkAccess/filePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application", @@ -34800,7 +34832,9 @@ "/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application", "/networkAccess/tlsInspectionPolicies/{id}": "least=DelegatedWork,Application", "/networkAccess/tlsInspectionPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application", - "/networkAccess/tlsPolicies/{id}": "least=DelegatedWork,Application" + "/networkAccess/tlsPolicies/{id}": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies/{id}": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application" } }, { @@ -34821,6 +34855,7 @@ "/networkAccess/contentPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application", "/networkAccess/contentTypePolicies/{id}": "least=DelegatedWork,Application", "/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application", + "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "least=DelegatedWork,Application", "/networkAccess/fileDlpPolicies/{id}": "least=DelegatedWork,Application", "/networkAccess/filePolicies/{id}": "least=DelegatedWork,Application", "/networkAccess/filePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application", @@ -34840,7 +34875,9 @@ "/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application", "/networkaccess/tls/managedCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application", "/networkAccess/tlsInspectionPolicies/{id}": "least=DelegatedWork,Application", - "/networkAccess/tlsPolicies/{id}": "least=DelegatedWork,Application" + "/networkAccess/tlsPolicies/{id}": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies/{id}": "least=DelegatedWork,Application", + "/networkAccess/webFilteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application" } } ], @@ -38487,139 +38524,6 @@ "ownerSecurityGroup": "cpimmsgraphadmins" } }, - "Policy.Read.ApplicationConfiguration": { - "authorizationType": "oAuth2", - "schemes": { - "DelegatedWork": { - "adminDisplayName": "Read your organization's application configuration policies", - "adminDescription": "Allows the app to read your organization's application configuration policies on behalf of the signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, claimsPolicy, tokenIssuancePolicy and tokenLifetimePolicy.", - "userDisplayName": "Read your organization's application configuration policies", - "userDescription": "Allows the app to read your organization's application configuration policies on your behalf. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, claimsPolicy, tokenIssuancePolicy and tokenLifetimePolicy.", - "requiresAdminConsent": true, - "privilegeLevel": 4 - }, - "Application": { - "adminDisplayName": "Read your organization's application configuration policies", - "adminDescription": "Allows the app to read your organization's application configuration policies, without a signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, claimsPolicy, tokenIssuancePolicy and tokenLifetimePolicy.", - "requiresAdminConsent": true, - "privilegeLevel": 4 - } - }, - "pathSets": [ - { - "schemeKeys": [ - "DelegatedWork", - "Application" - ], - "methods": [ - "GET", - "POST" - ], - "paths": { - "/identity/events/onsignupstart": "least=DelegatedWork,Application", - "/policies/activitybasedtimeoutpolicies": "least=DelegatedWork,Application", - "/policies/appmanagementpolicies": "least=DelegatedWork,Application", - "/policies/claimsmappingpolicies": "least=DelegatedWork,Application", - "/policies/homerealmdiscoverypolicies": "least=DelegatedWork,Application", - "/policies/tokenissuancepolicies": "least=DelegatedWork,Application", - "/policies/tokenlifetimepolicies": "least=DelegatedWork,Application" - } - }, - { - "schemeKeys": [ - "DelegatedWork", - "Application" - ], - "methods": [ - "DELETE", - "POST" - ], - "paths": { - "/applications/{id}/appmanagementpolicies": "" - } - }, - { - "schemeKeys": [ - "DelegatedWork", - "Application" - ], - "methods": [ - "DELETE", - "GET", - "PATCH", - "PUT" - ], - "paths": { - "/identity/events/onsignupstart/{id}": "least=DelegatedWork,Application" - } - }, - { - "schemeKeys": [ - "DelegatedWork", - "Application" - ], - "methods": [ - "DELETE", - "GET", - "PATCH" - ], - "paths": { - "/policies/activitybasedtimeoutpolicies/{id}": "least=DelegatedWork,Application", - "/policies/appmanagementpolicies/{id}": "least=DelegatedWork,Application", - "/policies/claimsmappingpolicies/{id}": "least=DelegatedWork,Application", - "/policies/homerealmdiscoverypolicies/{id}": "least=DelegatedWork,Application", - "/policies/tokenissuancepolicies/{id}": "least=DelegatedWork,Application", - "/policies/tokenlifetimepolicies/{id}": "least=DelegatedWork,Application" - } - }, - { - "schemeKeys": [ - "DelegatedWork", - "Application" - ], - "methods": [ - "GET" - ], - "paths": { - "/policies/appmanagementpolicies/{id}/appliesto": "", - "/policies/claimsmappingpolicies/{id}/appliesto": "", - "/policies/homerealmdiscoverypolicies/{id}/appliesto": "", - "/policies/tokenissuancepolicies/{id}/appliesto": "", - "/policies/tokenlifetimepolicies/{id}/appliesto": "" - } - }, - { - "schemeKeys": [ - "DelegatedWork", - "Application" - ], - "methods": [ - "GET", - "PATCH" - ], - "paths": { - "/policies/defaultappmanagementpolicy": "least=DelegatedWork,Application" - } - }, - { - "schemeKeys": [ - "DelegatedWork", - "Application" - ], - "methods": [ - "GET", - "PATCH", - "PUT" - ], - "paths": { - "/serviceprincipals/{id}/claimsPolicy": "least=DelegatedWork,Application" - } - } - ], - "ownerInfo": { - "ownerSecurityGroup": "idappcore" - } - }, "Policy.Read.AuthenticationMethod": { "authorizationType": "oAuth2", "schemes": { @@ -39584,7 +39488,7 @@ "paths": { "/identity/conditionalaccess/authenticationcontextclassreferences/{id}": "", "/identity/continuousaccessevaluationpolicy": "", - "/policies/identitysecuritydefaultsenforcementpolicy": "" + "/policies/identitysecuritydefaultsenforcementpolicy": "AlsoRequires=Policy.Read.All" } }, { @@ -40463,7 +40367,7 @@ "PATCH" ], "paths": { - "/policies/identitysecuritydefaultsenforcementpolicy": "least=DelegatedWork,Application" + "/policies/identitysecuritydefaultsenforcementpolicy": "least=DelegatedWork,Application;AlsoRequires=Policy.Read.All" } } ], diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index eb118fae..4f7bd91d 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -174,16 +174,6 @@ "resourceAppId": "00000002-0000-0000-c000-000000000000" } ], - "AgentApplication.Create": [ - { - "id": "2f479c7e-27df-4053-826b-57d8ce55be3e", - "scheme": "Application", - "environment": "PPE;public", - "isHidden": true, - "isEnabled": true, - "resourceAppId": "00000002-0000-0000-c000-000000000000" - } - ], "AgentInstance.Read.All": [ { "id": "4c3c738a-2df0-4877-bf4a-f796950ff34c", @@ -11508,6 +11498,24 @@ "resourceAppId": "" } ], + "Policy.Read.ApplicationConfiguration": [ + { + "id": "", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], "Policy.ReadWrite.ApplicationConfiguration": [ { "id": "b27add92-efb2-4f16-84f5-8108ba77985c", From 90b91b70d04b6dec58cdd98a168b68955a55a6d5 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 9 Jun 2026 23:35:48 +0300 Subject: [PATCH 2/3] Weekly Permissions sync 2026-06-09 --- permissions/new/provisioningInfo.json | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index 4f7bd91d..4a71a5bb 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -174,6 +174,16 @@ "resourceAppId": "00000002-0000-0000-c000-000000000000" } ], + "AgentApplication.Create": [ + { + "id": "2f479c7e-27df-4053-826b-57d8ce55be3e", + "scheme": "Application", + "environment": "PPE;public", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], "AgentInstance.Read.All": [ { "id": "4c3c738a-2df0-4877-bf4a-f796950ff34c", From 351565fc8cad5d21a8beeb58b5d574e17aca244a Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 9 Jun 2026 23:36:38 +0300 Subject: [PATCH 3/3] Weekly Permissions sync 2026-06-09 --- permissions/new/permissions.json | 1 + permissions/new/provisioningInfo.json | 46 +++++++++++++++++++++------ 2 files changed, 37 insertions(+), 10 deletions(-) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 8d85100a..9cbc47f0 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -12268,6 +12268,7 @@ ], "paths": { "/admin/configurationManagement/configurationMonitors": "least=DelegatedWork,Application", + "/admin/configurationManagement/configurationMonitors/{id}/validate": "least=DelegatedWork,Application", "/admin/configurationManagement/configurationSnapshots/createSnapshot": "least=DelegatedWork,Application" } }, diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index 4a71a5bb..0d47ac8e 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -174,16 +174,6 @@ "resourceAppId": "00000002-0000-0000-c000-000000000000" } ], - "AgentApplication.Create": [ - { - "id": "2f479c7e-27df-4053-826b-57d8ce55be3e", - "scheme": "Application", - "environment": "PPE;public", - "isHidden": true, - "isEnabled": true, - "resourceAppId": "00000002-0000-0000-c000-000000000000" - } - ], "AgentInstance.Read.All": [ { "id": "4c3c738a-2df0-4877-bf4a-f796950ff34c", @@ -10478,6 +10468,42 @@ "resourceAppId": "" } ], + "PrivateAccess.Read.All": [ + { + "id": "4038e8cd-1b9d-4fe5-a60b-51fb82464ca9", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "479cd0c6-ffb3-4692-8f53-e41667b1448c" + }, + { + "id": "0ba6313f-867e-4fac-9475-107ffd2193da", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "479cd0c6-ffb3-4692-8f53-e41667b1448c" + } + ], + "PrivateAccess.ReadWrite.All": [ + { + "id": "b4024717-79e5-473c-a333-b254128794dc", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "479cd0c6-ffb3-4692-8f53-e41667b1448c" + }, + { + "id": "12943af1-6dc0-402a-bd11-71c28265ea88", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "479cd0c6-ffb3-4692-8f53-e41667b1448c" + } + ], "Organization.Read.All": [ { "id": "4908d5b9-3fb2-4b1e-9336-1888b7937185",