Skip to content

Commit 436f06f

Browse files
committed
Weekly Permissions sync 2026-05-12
1 parent eeb0dda commit 436f06f

2 files changed

Lines changed: 61 additions & 86 deletions

File tree

permissions/new/permissions.json

Lines changed: 56 additions & 81 deletions
Original file line numberDiff line numberDiff line change
@@ -33629,72 +33629,6 @@
3362933629
"ownerSecurityGroup": "stisaprvc"
3363033630
}
3363133631
},
33632-
"MailTips.ReadBasic.All": {
33633-
"authorizationType": "oAuth2",
33634-
"schemes": {
33635-
"Application": {
33636-
"adminDisplayName": "Read mail tips for all users",
33637-
"adminDescription": "Allows the app to read mail tips for all users in the organization without a signed-in user. Mail tips include automatic replies, mailbox status, custom tips, and delivery information.",
33638-
"requiresAdminConsent": true,
33639-
"privilegeLevel": 4
33640-
}
33641-
},
33642-
"pathSets": [
33643-
{
33644-
"schemeKeys": [
33645-
"Application"
33646-
],
33647-
"methods": [
33648-
"POST"
33649-
],
33650-
"paths": {
33651-
"/users/{id}/getmailtips": ""
33652-
}
33653-
}
33654-
],
33655-
"ownerInfo": {
33656-
"ownerSecurityGroup": "stisaprvc"
33657-
}
33658-
},
33659-
"MailTips.ReadBasic.Shared": {
33660-
"authorizationType": "oAuth2",
33661-
"schemes": {
33662-
"DelegatedWork": {
33663-
"adminDisplayName": "Read mail tips for accessible mailboxes",
33664-
"adminDescription": "Allows the app to read mail tips on behalf of the signed-in user for mailboxes they have access to, including their own mailbox and shared mailboxes. Mail tips include automatic replies, mailbox status, custom tips, and delivery information.",
33665-
"userDisplayName": "Read mail tips for mailboxes you can access",
33666-
"userDescription": "Allows the app to read mail tips on your behalf for mailboxes you have access to, including your own mailbox and shared mailboxes.",
33667-
"requiresAdminConsent": false,
33668-
"privilegeLevel": 3
33669-
},
33670-
"DelegatedPersonal": {
33671-
"adminDisplayName": "Read mail tips for accessible mailboxes",
33672-
"adminDescription": "Allows the app to read mail tips on behalf of the signed-in user for mailboxes they have access to. Mail tips include automatic replies, mailbox status, custom tips, and delivery information.",
33673-
"userDisplayName": "Read mail tips for mailboxes you can access",
33674-
"userDescription": "Allows the app to read mail tips on your behalf for mailboxes you have access to, including your own mailbox.",
33675-
"requiresAdminConsent": false,
33676-
"privilegeLevel": 2
33677-
}
33678-
},
33679-
"pathSets": [
33680-
{
33681-
"schemeKeys": [
33682-
"DelegatedWork",
33683-
"DelegatedPersonal"
33684-
],
33685-
"methods": [
33686-
"POST"
33687-
],
33688-
"paths": {
33689-
"/me/getmailtips": "",
33690-
"/users/{id}/getmailtips": ""
33691-
}
33692-
}
33693-
],
33694-
"ownerInfo": {
33695-
"ownerSecurityGroup": "stisaprvc"
33696-
}
33697-
},
3369833632
"ManagedTenants.Read.All": {
3369933633
"authorizationType": "oAuth2",
3370033634
"schemes": {
@@ -34363,19 +34297,6 @@
3436334297
"/networkAccess/tlsInspectionPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
3436434298
"/networkAccess/tlsPolicies": "least=DelegatedWork,Application"
3436534299
}
34366-
},
34367-
{
34368-
"schemeKeys": [
34369-
"DelegatedWork",
34370-
"Application"
34371-
],
34372-
"methods": [
34373-
"POST"
34374-
],
34375-
"paths": {
34376-
"/networkAccess/classifyMcpTools": "least=DelegatedWork,Application",
34377-
"/networkAccess/discoverMcpTools": "least=DelegatedWork,Application"
34378-
}
3437934300
}
3438034301
],
3438134302
"ownerInfo": {
@@ -34504,14 +34425,12 @@
3450434425
"POST"
3450534426
],
3450634427
"paths": {
34507-
"/networkAccess/classifyMcpTools": "",
3450834428
"/networkAccess/cloudFirewallPolicies": "least=DelegatedWork,Application",
3450934429
"/networkAccess/cloudFirewallPolicies/{id}/policyRules": "least=DelegatedWork,Application",
3451034430
"/networkAccess/connectivity/branches": "least=DelegatedWork,Application",
3451134431
"/networkAccess/connectivity/branches/{id}/deviceLinks": "least=DelegatedWork,Application",
3451234432
"/networkAccess/contentPolicies": "least=DelegatedWork,Application",
3451334433
"/networkAccess/contentPolicies/{id}/policyRules": "least=DelegatedWork,Application",
34514-
"/networkAccess/discoverMcpTools": "",
3451534434
"/networkAccess/fileDlpPolicies": "least=DelegatedWork,Application",
3451634435
"/networkAccess/filteringPolicies": "least=DelegatedWork,Application",
3451734436
"/networkAccess/filteringPolicies/{id}/policyRules": "least=DelegatedWork,Application",
@@ -46751,6 +46670,62 @@
4675146670
"ownerSecurityGroup": "ospred"
4675246671
}
4675346672
},
46673+
"ServicePrincipal.AddRemoveCreds.All": {
46674+
"authorizationType": "oAuth2",
46675+
"schemes": {
46676+
"DelegatedWork": {
46677+
"adminDisplayName": "Update credentials for service principals",
46678+
"adminDescription": "Allows the app to update credentials for service principals on behalf of the signed-in user.",
46679+
"userDisplayName": "Update credentials for service principals",
46680+
"userDescription": "Allows the app to update credentials for service principals on your behalf.",
46681+
"requiresAdminConsent": true,
46682+
"privilegeLevel": 4
46683+
},
46684+
"Application": {
46685+
"adminDisplayName": "Update credentials for service principals",
46686+
"adminDescription": "Allows the app to update credentials for service principals, without a signed-in user.",
46687+
"requiresAdminConsent": true,
46688+
"privilegeLevel": 4
46689+
}
46690+
},
46691+
"pathSets": [
46692+
{
46693+
"schemeKeys": [
46694+
"DelegatedWork",
46695+
"Application"
46696+
],
46697+
"methods": [
46698+
"POST"
46699+
],
46700+
"paths": {
46701+
"/serviceprincipals(appid={value})/addkey": "least=DelegatedWork",
46702+
"/serviceprincipals(appid={value})/addpassword": "least=DelegatedWork",
46703+
"/serviceprincipals(appid={value})/removekey": "least=DelegatedWork",
46704+
"/serviceprincipals(appid={value})/removepassword": "least=DelegatedWork",
46705+
"/serviceprincipals/{id}/addkey": "least=DelegatedWork",
46706+
"/serviceprincipals/{id}/addpassword": "least=DelegatedWork",
46707+
"/serviceprincipals/{id}/removekey": "least=DelegatedWork",
46708+
"/serviceprincipals/{id}/removepassword": "least=DelegatedWork"
46709+
}
46710+
},
46711+
{
46712+
"schemeKeys": [
46713+
"DelegatedWork",
46714+
"Application"
46715+
],
46716+
"methods": [
46717+
"PATCH"
46718+
],
46719+
"paths": {
46720+
"/serviceprincipals(appid={value})": "",
46721+
"/serviceprincipals/{id}": ""
46722+
}
46723+
}
46724+
],
46725+
"ownerInfo": {
46726+
"ownerSecurityGroup": "idappcore"
46727+
}
46728+
},
4675446729
"SharePointCrossTenantMigration.Manage.All": {
4675546730
"authorizationType": "oAuth2",
4675646731
"schemes": {

permissions/new/provisioningInfo.json

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -9399,7 +9399,7 @@
93999399
"id": "",
94009400
"scheme": "Application",
94019401
"environment": "",
9402-
"isHidden": false,
9402+
"isHidden": true,
94039403
"isEnabled": true,
94049404
"resourceAppId": "00000002-0000-0ff1-ce00-000000000000"
94059405
}
@@ -9409,15 +9409,15 @@
94099409
"id": "",
94109410
"scheme": "DelegatedWork",
94119411
"environment": "",
9412-
"isHidden": false,
9412+
"isHidden": true,
94139413
"isEnabled": true,
94149414
"resourceAppId": "00000002-0000-0ff1-ce00-000000000000"
94159415
},
94169416
{
94179417
"id": "",
94189418
"scheme": "DelegatedPersonal",
94199419
"environment": "public",
9420-
"isHidden": false,
9420+
"isHidden": true,
94219421
"isEnabled": true,
94229422
"resourceAppId": "00000002-0000-0ff1-ce00-000000000000"
94239423
}
@@ -15020,15 +15020,15 @@
1502015020
"id": "c4d8f3a9-1e72-4b8d-8f6c-7a91d2e5b3f0",
1502115021
"scheme": "DelegatedWork",
1502215022
"environment": "",
15023-
"isHidden": true,
15023+
"isHidden": false,
1502415024
"isEnabled": true,
1502515025
"resourceAppId": "00000002-0000-0000-c000-000000000000"
1502615026
},
1502715027
{
1502815028
"id": "6e2a9b14-f5c7-4381-a6d2-0c8f4e1b9a73",
1502915029
"scheme": "Application",
1503015030
"environment": "",
15031-
"isHidden": true,
15031+
"isHidden": false,
1503215032
"isEnabled": true,
1503315033
"resourceAppId": "00000002-0000-0000-c000-000000000000"
1503415034
}

0 commit comments

Comments
 (0)