Weekly Permissions sync 2026-03-17

Author: marabooy

permissions/new/permissions.json

@@ -13675,7 +13675,7 @@
           "adminDisplayName": "Manage all delegated permission grants",
           "adminDescription": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), without a signed-in user.",
           "requiresAdminConsent": true,
-          "privilegeLevel": 4
+          "privilegeLevel": 5
         }
       },
       "pathSets": [
@@ -13688,8 +13688,8 @@
             "GET"
           ],
           "paths": {
-            "/serviceprincipals(appid={value})/inheritedoauth2permissiongrants": "least=Application",
-            "/serviceprincipals(appid={value})/oauth2permissiongrants": "least=Application",
+            "/serviceprincipals(appid={value})/inheritedoauth2permissiongrants": "",
+            "/serviceprincipals(appid={value})/oauth2permissiongrants": "",
             "/serviceprincipals/{id}/inheritedoauth2permissiongrants": "",
             "/serviceprincipals/{id}/oauth2permissiongrants": "",
             "/users/{id}/oauth2permissiongrants": ""
@@ -13717,7 +13717,7 @@
             "POST"
           ],
           "paths": {
-            "/oauth2permissiongrants": "least=DelegatedWork,Application"
+            "/oauth2permissiongrants": ""
           }
         },
         {
@@ -13731,7 +13731,7 @@
             "PATCH"
           ],
           "paths": {
-            "/oauth2permissiongrants/{id}": "least=DelegatedWork,Application"
+            "/oauth2permissiongrants/{id}": ""
           }
         },
         {
@@ -26490,6 +26490,21 @@
             "/me/drive/items/{id}/permissions/{id}": ""
           }
         },
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "DELETE"
+          ],
+          "paths": {
+            "/drives/{id}/items/{id}/retentionLabel": "least=DelegatedWork,Application",
+            "/groups/{id}/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
+            "/me/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
+            "/users/{user-id}/drive/items/{item-id}/retentionLabel": "least=DelegatedWork,Application"
+          }
+        },
         {
           "schemeKeys": [
             "DelegatedWork",
@@ -46591,6 +46606,20 @@
           "paths": {
             "/sites/getOperationStatus(operationId='{id}')": ""
           }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "DELETE"
+          ],
+          "paths": {
+            "/drives/{id}/items/{id}/retentionLabel": "",
+            "/groups/{id}/drive/items/{id}/retentionLabel": "",
+            "/me/drive/items/{id}/retentionLabel": "",
+            "/users/{user-id}/drive/items/{item-id}/retentionLabel": ""
+          }
         }
       ],
       "ownerInfo": {
@@ -47902,6 +47931,21 @@
             "/users/{user-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal"
           }
         },
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "DELETE"
+          ],
+          "paths": {
+            "/drives/{id}/items/{id}/retentionLabel": "",
+            "/groups/{id}/drive/items/{id}/retentionLabel": "",
+            "/me/drive/items/{id}/retentionLabel": "",
+            "/users/{user-id}/drive/items/{item-id}/retentionLabel": ""
+          }
+        },
         {
           "schemeKeys": [
             "DelegatedWork"

permissions/new/provisioningInfo.json

@@ -503,17 +503,7 @@
         "isEnabled": false,
         "resourceAppId": "00000002-0000-0000-c000-000000000000"
       }
-    ],
-    "AgentIdentityBlueprintPrincipal.CreateAsManager": [
-      {
-        "id": "c50c596a-6889-4460-acb1-3ed7c5fc142a",
-        "scheme": "Application",
-        "environment": "PPE;public",
-        "isHidden": true,
-        "isEnabled": false,
-        "resourceAppId": "00000002-0000-0000-c000-000000000000"
-      }
-    ],
+    ],    
     "AgentIdentityBlueprintPrincipal.Read.All": [
       {
         "id": "",
@@ -4404,6 +4394,24 @@
         "resourceAppId": ""
       }
     ],
+    "DelegatedPermissionGrant.ReadWrite.ManagedBy": [
+      {
+        "id": "8b7aa0f1-33fa-4590-b40d-c4fc375948b5",
+        "scheme": "DelegatedWork",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      },
+      {
+        "id": "87e86d7b-d7db-424e-be87-d7be784cf70d",
+        "scheme": "Application",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      }
+    ],
     "CallAiInsights.Read.All": [
       {
         "id": "e24bdaf9-83f8-468b-a144-c681ccb6caf4",