Skip to content

Commit 3b690af

Browse files
marabooymarabooy
committed
Weekly Permissions sync 2025-06-20
1 parent d9ed695 commit 3b690af

2 files changed

Lines changed: 266 additions & 13 deletions

File tree

‎permissions/new/ProvisioningInfo.json‎

Lines changed: 18 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -5391,7 +5391,7 @@
53915391
"id": "8e6ec84c-5fcd-4cc7-ac8a-2296efc0ed9b",
53925392
"scheme": "DelegatedWork",
53935393
"environment": "public",
5394-
"isHidden": true,
5394+
"isHidden": false,
53955395
"isEnabled": true,
53965396
"resourceAppId": "00000003-0000-0ff1-ce00-000000000000"
53975397
}
@@ -5401,7 +5401,7 @@
54015401
"id": "c319a7df-930e-44c0-a43b-7e5e9c7f4f24",
54025402
"scheme": "DelegatedWork",
54035403
"environment": "public",
5404-
"isHidden": true,
5404+
"isHidden": false,
54055405
"isEnabled": true,
54065406
"resourceAppId": "00000003-0000-0ff1-ce00-000000000000"
54075407
}
@@ -5411,9 +5411,16 @@
54115411
"id": "2dcc6599-bd30-442b-8f11-90f88ad441dc",
54125412
"scheme": "Application",
54135413
"environment": "public",
5414-
"isHidden": true,
5414+
"isHidden": false,
54155415
"isEnabled": true,
54165416
"resourceAppId": "00000003-0000-0ff1-ce00-000000000000"
5417+
},
5418+
{
5419+
"scheme": "DelegatedWork",
5420+
"environment": "public",
5421+
"isHidden": true,
5422+
"isEnabled": false,
5423+
"resourceAppId": "00000003-0000-0ff1-ce00-000000000000"
54175424
}
54185425
],
54195426
"Financials.ReadWrite.All": [
@@ -11909,16 +11916,16 @@
1190911916
"id": "",
1191011917
"scheme": "DelegatedWork",
1191111918
"environment": "public",
11912-
"isHidden": true,
11913-
"isEnabled": false,
11919+
"isHidden": false,
11920+
"isEnabled": true,
1191411921
"resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4"
1191511922
},
1191611923
{
1191711924
"id": "",
1191811925
"scheme": "Application",
1191911926
"environment": "public",
11920-
"isHidden": true,
11921-
"isEnabled": false,
11927+
"isHidden": false,
11928+
"isEnabled": true,
1192211929
"resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4"
1192311930
}
1192411931
],
@@ -11927,16 +11934,16 @@
1192711934
"id": "",
1192811935
"scheme": "DelegatedWork",
1192911936
"environment": "public",
11930-
"isHidden": true,
11931-
"isEnabled": false,
11937+
"isHidden": false,
11938+
"isEnabled": true,
1193211939
"resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4"
1193311940
},
1193411941
{
1193511942
"id": "",
1193611943
"scheme": "Application",
1193711944
"environment": "public",
11938-
"isHidden": true,
11939-
"isEnabled": false,
11945+
"isHidden": false,
11946+
"isEnabled": true,
1194011947
"resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4"
1194111948
}
1194211949
],

‎permissions/new/permissions.json‎

Lines changed: 248 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23406,6 +23406,148 @@
2340623406
"ownerSecurityGroup": "GraphSPOApprovers"
2340723407
}
2340823408
},
23409+
"FileStorageContainerType.Manage.All": {
23410+
"authorizationType": "oAuth2",
23411+
"schemes": {
23412+
"DelegatedWork": {
23413+
"adminDisplayName": "Manage file storage container types on behalf of the signed in user",
23414+
"adminDescription": "Allows the application to manage file storage container types on behalf of the signed in user. The user must be a SharePoint Embedded Admin or Global Admin.",
23415+
"userDisplayName": "Manage file storage container types on your behalf",
23416+
"userDescription": "Allows the app to access a subset of storage container types on your behalf. You must be a SharePoint Embedded Admin or Global Admin.",
23417+
"requiresAdminConsent": false,
23418+
"privilegeLevel": 3
23419+
}
23420+
},
23421+
"pathSets": [
23422+
{
23423+
"schemeKeys": [
23424+
"DelegatedWork"
23425+
],
23426+
"methods": [
23427+
"POST"
23428+
],
23429+
"paths": {
23430+
"/storage/fileStorage/containerTypes": "least=DelegatedWork"
23431+
}
23432+
},
23433+
{
23434+
"schemeKeys": [
23435+
"DelegatedWork"
23436+
],
23437+
"methods": [
23438+
"GET"
23439+
],
23440+
"paths": {
23441+
"/storage/fileStorage/containerTypes": "least=DelegatedWork",
23442+
"/storage/fileStorage/containerTypes/{id}": "least=DelegatedWork"
23443+
}
23444+
},
23445+
{
23446+
"schemeKeys": [
23447+
"DelegatedWork"
23448+
],
23449+
"methods": [
23450+
"PATCH"
23451+
],
23452+
"paths": {
23453+
"/storage/fileStorage/containerTypes/{id}": "least=DelegatedWork"
23454+
}
23455+
},
23456+
{
23457+
"schemeKeys": [
23458+
"DelegatedWork"
23459+
],
23460+
"methods": [
23461+
"DELETE"
23462+
],
23463+
"paths": {
23464+
"/storage/fileStorage/containerTypes/{id}": "least=DelegatedWork"
23465+
}
23466+
}
23467+
],
23468+
"ownerInfo": {
23469+
"ownerSecurityGroup": "GraphSPOApprovers"
23470+
}
23471+
},
23472+
"FileStorageContainerTypeReg.Manage.All": {
23473+
"authorizationType": "oAuth2",
23474+
"schemes": {
23475+
"DelegatedWork": {
23476+
"adminDisplayName": "Manage file storage container type registrations on behalf of the signed in user",
23477+
"adminDescription": "Allows the application to manage file storage container type registrations on behalf of the signed in user. The user must be a SharePoint Embedded Admin or Global Admin.",
23478+
"userDisplayName": "Manage file storage container type registrations on your behalf",
23479+
"userDescription": "Allows the app to access a subset of storage container type registrations on your behalf. You must be a SharePoint Embedded Admin or Global Admin.",
23480+
"requiresAdminConsent": false,
23481+
"privilegeLevel": 3
23482+
}
23483+
},
23484+
"pathSets": [
23485+
{
23486+
"schemeKeys": [
23487+
"DelegatedWork"
23488+
],
23489+
"methods": [
23490+
"PUT"
23491+
],
23492+
"paths": {
23493+
"/storage/fileStorage/containerTypeRegistrations": "least=DelegatedWork",
23494+
"/storage/fileStorage/containerTypeRegistrations/{id}/applicationPermissionGrants": "least=DelegatedWork",
23495+
"/storage/fileStorage/containerTypeRegistrations/{id}/applicationPermissionGrants/{id}": "least=DelegatedWork"
23496+
}
23497+
},
23498+
{
23499+
"schemeKeys": [
23500+
"DelegatedWork"
23501+
],
23502+
"methods": [
23503+
"GET"
23504+
],
23505+
"paths": {
23506+
"/storage/fileStorage/containerTypeRegistrations/{id}": "least=DelegatedWork",
23507+
"/storage/fileStorage/containerTypeRegistrations/{id}/applicationPermissionGrants/{id}": "least=DelegatedWork"
23508+
}
23509+
},
23510+
{
23511+
"schemeKeys": [
23512+
"DelegatedWork"
23513+
],
23514+
"methods": [
23515+
"GET"
23516+
],
23517+
"paths": {
23518+
"/storage/fileStorage/containerTypeRegistrations": "least=DelegatedWork",
23519+
"/storage/fileStorage/containerTypeRegistrations/{id}/applicationPermissionGrants": "least=DelegatedWork"
23520+
}
23521+
},
23522+
{
23523+
"schemeKeys": [
23524+
"DelegatedWork"
23525+
],
23526+
"methods": [
23527+
"PATCH"
23528+
],
23529+
"paths": {
23530+
"/storage/fileStorage/containerTypeRegistrations/{id}": "least=DelegatedWork",
23531+
"/storage/fileStorage/containerTypeRegistrations/{id}/applicationPermissionGrants/{id}": "least=DelegatedWork"
23532+
}
23533+
},
23534+
{
23535+
"schemeKeys": [
23536+
"DelegatedWork"
23537+
],
23538+
"methods": [
23539+
"DELETE"
23540+
],
23541+
"paths": {
23542+
"/storage/fileStorage/containerTypeRegistrations/{id}": "least=DelegatedWork",
23543+
"/storage/fileStorage/containerTypeRegistrations/{id}/applicationPermissionGrants/{id}": "least=DelegatedWork"
23544+
}
23545+
}
23546+
],
23547+
"ownerInfo": {
23548+
"ownerSecurityGroup": "GraphSPOApprovers"
23549+
}
23550+
},
2340923551
"Financials.ReadWrite.All": {
2341023552
"authorizationType": "oAuth2",
2341123553
"schemes": {
@@ -25018,7 +25160,8 @@
2501825160
],
2501925161
"paths": {
2502025162
"/auditlogs/signins/confirmcompromised": "least=Application",
25021-
"/auditlogs/signins/confirmsafe": "least=Application"
25163+
"/auditlogs/signins/confirmsafe": "least=Application",
25164+
"/auditlogs/signins/dismiss": "least=Application"
2502225165
}
2502325166
}
2502425167
],
@@ -25187,7 +25330,8 @@
2518725330
],
2518825331
"paths": {
2518925332
"/auditlogs/signins/confirmcompromised": "least=DelegatedWork",
25190-
"/auditlogs/signins/confirmsafe": "least=DelegatedWork"
25333+
"/auditlogs/signins/confirmsafe": "least=DelegatedWork",
25334+
"/auditlogs/signins/dismiss": "least=DelegatedWork"
2519125335
}
2519225336
},
2519325337
{
@@ -29182,6 +29326,10 @@
2918229326
"/networkAccess/settings/crossTenantAccess": "least=DelegatedWork,Application",
2918329327
"/networkaccess/settings/enrichedAuditLogs": "least=DelegatedWork,Application",
2918429328
"/networkAccess/threatInspectionPolicies": "least=DelegatedWork,Application",
29329+
"/networkAccess/threatIntelligencePolicies": "least=DelegatedWork,Application",
29330+
"/networkAccess/threatIntelligencePolicies/{id}": "least=DelegatedWork,Application",
29331+
"/networkAccess/threatIntelligencePolicies/{id}/policyRules": "least=DelegatedWork,Application",
29332+
"/networkAccess/threatIntelligencePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
2918529333
"/networkaccess/tls/externalCertificateAuthorityCertificates": "least=DelegatedWork,Application",
2918629334
"/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application",
2918729335
"/networkAccess/tlsInspectionPolicies": "least=DelegatedWork,Application",
@@ -29276,6 +29424,10 @@
2927629424
"/networkAccess/settings/crossTenantAccess": "",
2927729425
"/networkaccess/settings/enrichedAuditLogs": "",
2927829426
"/networkAccess/threatInspectionPolicies": "",
29427+
"/networkAccess/threatIntelligencePolicies": "",
29428+
"/networkAccess/threatIntelligencePolicies/{id}": "",
29429+
"/networkAccess/threatIntelligencePolicies/{id}/policyRules": "",
29430+
"/networkAccess/threatIntelligencePolicies/{id}/policyRules/{id}": "",
2927929431
"/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "",
2928029432
"/networkAccess/tlsInspectionPolicies": "",
2928129433
"/networkAccess/tlsPolicies": ""
@@ -29304,6 +29456,8 @@
2930429456
"/networkAccess/securityProviderPolicies": "least=DelegatedWork,Application",
2930529457
"/networkAccess/securityProviders/{id}/registration": "least=DelegatedWork,Application",
2930629458
"/networkAccess/threatInspectionPolicies": "least=DelegatedWork,Application",
29459+
"/networkAccess/threatIntelligencePolicies": "least=DelegatedWork,Application",
29460+
"/networkAccess/threatIntelligencePolicies/{id}/policyRules": "least=DelegatedWork,Application",
2930729461
"/networkaccess/tls/externalCertificateAuthorityCertificates": "least=DelegatedWork,Application",
2930829462
"/networkAccess/tlsInspectionPolicies": "least=DelegatedWork,Application",
2930929463
"/networkAccess/tlsPolicies": "least=DelegatedWork,Application"
@@ -29334,6 +29488,8 @@
2933429488
"/networkAccess/settings/crossTenantAccess": "least=DelegatedWork,Application",
2933529489
"/networkaccess/settings/enrichedAuditLogs": "least=DelegatedWork,Application",
2933629490
"/networkAccess/threatInspectionPolicies/{id}": "least=DelegatedWork,Application",
29491+
"/networkAccess/threatIntelligencePolicies/{id}": "least=DelegatedWork,Application",
29492+
"/networkAccess/threatIntelligencePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
2933729493
"/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application",
2933829494
"/networkAccess/tlsInspectionPolicies/{id}": "least=DelegatedWork,Application",
2933929495
"/networkAccess/tlsPolicies/{id}": "least=DelegatedWork,Application"
@@ -29359,6 +29515,8 @@
2935929515
"/networkaccess/privateAccessConfigs/{id}": "least=DelegatedWork,Application",
2936029516
"/networkAccess/securityProviderPolicies/{id}": "least=DelegatedWork,Application",
2936129517
"/networkAccess/threatInspectionPolicies/{id}": "least=DelegatedWork,Application",
29518+
"/networkAccess/threatIntelligencePolicies/{id}": "least=DelegatedWork,Application",
29519+
"/networkAccess/threatIntelligencePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
2936229520
"/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application",
2936329521
"/networkAccess/tlsInspectionPolicies/{id}": "least=DelegatedWork,Application",
2936429522
"/networkAccess/tlsPolicies/{id}": "least=DelegatedWork,Application"
@@ -40728,6 +40886,94 @@
4072840886
"ownerSecurityGroup": "stickynotes"
4072940887
}
4073040888
},
40889+
"SignInIdentifier.Read.All": {
40890+
"authorizationType": "oAuth2",
40891+
"schemes": {
40892+
"DelegatedWork": {
40893+
"adminDisplayName": "Read SignInIdentifiers",
40894+
"adminDescription": "Allows the app to read your organization's sign-in identifiers, on behalf of the signed-in user.",
40895+
"userDisplayName": "Read all sign-in identifiers",
40896+
"userDescription": "Allows the app to read your organization's sign-in identifiers, on your behalf.",
40897+
"requiresAdminConsent": true,
40898+
"privilegeLevel": 3
40899+
},
40900+
"Application": {
40901+
"adminDisplayName": "Read all sign-in identifiers",
40902+
"adminDescription": "Allows the app to read your organization's sign-in identifiers, without a signed-in user.",
40903+
"requiresAdminConsent": true,
40904+
"privilegeLevel": 4
40905+
}
40906+
},
40907+
"pathSets": [
40908+
{
40909+
"schemeKeys": [
40910+
"DelegatedWork",
40911+
"Application"
40912+
],
40913+
"methods": [
40914+
"GET"
40915+
],
40916+
"paths": {
40917+
"/identity/signInIdentifiers": "least=DelegatedWork,Application",
40918+
"/identity/signInIdentifiers/{name}": "least=DelegatedWork,Application"
40919+
}
40920+
}
40921+
],
40922+
"ownerInfo": {
40923+
"ownerSecurityGroup": "cpimmsgraphadmins"
40924+
}
40925+
},
40926+
"SignInIdentifier.ReadWrite.All": {
40927+
"authorizationType": "oAuth2",
40928+
"schemes": {
40929+
"DelegatedWork": {
40930+
"adminDisplayName": "Read and write all sign-in identifiers",
40931+
"adminDescription": "Allows the app to read and write your organization's sign-in identifiers, on behalf of the signed-in user.",
40932+
"userDisplayName": "Read and write all sign-in identifiers",
40933+
"userDescription": "Allows the app to read and write your organization's sign-in identifiers, on your behalf.",
40934+
"requiresAdminConsent": true,
40935+
"privilegeLevel": 3
40936+
},
40937+
"Application": {
40938+
"adminDisplayName": "Read and write all sign-in identifiers",
40939+
"adminDescription": "Allows the app to read and write your organization's sign-in identifiers, without a signed-in user.",
40940+
"requiresAdminConsent": true,
40941+
"privilegeLevel": 4
40942+
}
40943+
},
40944+
"pathSets": [
40945+
{
40946+
"schemeKeys": [
40947+
"DelegatedWork",
40948+
"Application"
40949+
],
40950+
"methods": [
40951+
"GET",
40952+
"POST"
40953+
],
40954+
"paths": {
40955+
"/identity/signInIdentifiers": "least=DelegatedWork,Application"
40956+
}
40957+
},
40958+
{
40959+
"schemeKeys": [
40960+
"DelegatedWork",
40961+
"Application"
40962+
],
40963+
"methods": [
40964+
"DELETE",
40965+
"GET",
40966+
"PATCH"
40967+
],
40968+
"paths": {
40969+
"/identity/signInIdentifiers/{name}": "least=DelegatedWork,Application"
40970+
}
40971+
}
40972+
],
40973+
"ownerInfo": {
40974+
"ownerSecurityGroup": "cpimmsgraphadmins"
40975+
}
40976+
},
4073140977
"Sites.FullControl.All": {
4073240978
"authorizationType": "oAuth2",
4073340979
"schemes": {

0 commit comments

Comments
 (0)