Weekly Permissions sync 2025-04-17

Author: marabooy

permissions/new/ProvisioningInfo.json

@@ -11130,17 +11130,35 @@
         "resourceAppId": "8ee8fdad-f234-4243-8f3b-15c294843740"
       }
     ],
-    "SecurityIdentitiesUsers.Read.All": [
+    "SecurityIdentitiesIdentityAccounts.Read.All": [
       {
-        "id": "8789d568-b415-4efa-9ad9-801f7b3cc387",
+        "id": "fa9000aa-b6a6-4c5d-b50b-cb1384df67f6",
         "scheme": "DelegatedWork",
         "environment": "public",
         "isHidden": true,
         "isEnabled": true,
         "resourceAppId": "8ee8fdad-f234-4243-8f3b-15c294843740"
       },
       {
-        "id": "4a966d3a-b63e-46f1-9c80-3325bf4f3cb6",
+        "id": "5e5f8556-25c7-4696-a714-6e7a515373e5",
+        "scheme": "Application",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "8ee8fdad-f234-4243-8f3b-15c294843740"
+      }
+    ],
+    "SecurityIdentitiesActions.ReadWrite.All": [
+      {
+        "id": "6762fe93-9ecf-4fc7-8590-cd56f4f07c7d",
+        "scheme": "DelegatedWork",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "8ee8fdad-f234-4243-8f3b-15c294843740"
+      },
+      {
+        "id": "0a21e90c-66fd-4970-9b97-398d64185763",
         "scheme": "Application",
         "environment": "public",
         "isHidden": true,

permissions/new/permissions.json

@@ -39152,6 +39152,42 @@
         "ownerSecurityGroup": "tri-msgraph"
       }
     },
+    "SecurityIdentitiesUsers.Read.All": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read identity security available users",
+          "adminDescription": "Allows the app to read all the identity security available users ",
+          "userDisplayName": "Read identity security available users",
+          "userDescription": "Allows the app to read all the identity security available users on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        },
+        "Application": {
+          "adminDisplayName": "Read all identity security available users",
+          "adminDescription": "Allows the app to read all the identity security available users without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/security/identities/users": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "tri-msgraph"
+      }
+    },
     "SecurityIncident.Read.All": {
       "authorizationType": "oAuth2",
       "schemes": {