Skip to content

Commit dade323

Browse files
marabooymarabooy
authored
Weekly Permissions sync 2026-04-02 (#1489)
1 parent 7250e13 commit dade323

File tree

2 files changed

+198
-106
lines changed

2 files changed

+198
-106
lines changed

‎permissions/new/permissions.json‎

Lines changed: 134 additions & 74 deletions
Original file line numberDiff line numberDiff line change
@@ -3491,8 +3491,8 @@
34913491
"privilegeLevel": 3
34923492
},
34933493
"Application": {
3494-
"adminDisplayName": "",
3495-
"adminDescription": "",
3494+
"adminDisplayName": "Read the trusted certificate authority configuration for applications",
3495+
"adminDescription": "Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, without a signed-in user.",
34963496
"requiresAdminConsent": true,
34973497
"privilegeLevel": 4
34983498
}
@@ -3504,50 +3504,12 @@
35043504
"Application"
35053505
],
35063506
"methods": [
3507-
"PATCH"
3508-
],
3509-
"paths": {
3510-
"/certificateauthoritypath/certificatebasedapplicationconfigurations/{id}": "least=DelegatedWork,Application"
3511-
}
3512-
},
3513-
{
3514-
"schemeKeys": [
3515-
"DelegatedWork",
3516-
"Application"
3517-
],
3518-
"methods": [
3519-
"GET",
3520-
"POST"
3521-
],
3522-
"paths": {
3523-
"/directory/certificateauthorities/certificatebasedapplicationconfigurations": "least=DelegatedWork,Application",
3524-
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities": "least=DelegatedWork,Application"
3525-
}
3526-
},
3527-
{
3528-
"schemeKeys": [
3529-
"DelegatedWork",
3530-
"Application"
3531-
],
3532-
"methods": [
3533-
"DELETE",
35343507
"GET"
35353508
],
35363509
"paths": {
3537-
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}": "least=DelegatedWork,Application"
3538-
}
3539-
},
3540-
{
3541-
"schemeKeys": [
3542-
"DelegatedWork",
3543-
"Application"
3544-
],
3545-
"methods": [
3546-
"DELETE",
3547-
"GET",
3548-
"PATCH"
3549-
],
3550-
"paths": {
3510+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations": "least=DelegatedWork,Application",
3511+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}": "least=DelegatedWork,Application",
3512+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities": "least=DelegatedWork,Application",
35513513
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}": "least=DelegatedWork,Application"
35523514
}
35533515
}
@@ -3568,8 +3530,8 @@
35683530
"privilegeLevel": 3
35693531
},
35703532
"Application": {
3571-
"adminDisplayName": "",
3572-
"adminDescription": "",
3533+
"adminDisplayName": "Read and write the trusted certificate authority configuration for applications",
3534+
"adminDescription": "Allows the app to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, without a signed-in user.",
35733535
"requiresAdminConsent": true,
35743536
"privilegeLevel": 4
35753537
}
@@ -3581,24 +3543,13 @@
35813543
"Application"
35823544
],
35833545
"methods": [
3584-
"PATCH"
3585-
],
3586-
"paths": {
3587-
"/certificateauthoritypath/certificatebasedapplicationconfigurations/{id}": ""
3588-
}
3589-
},
3590-
{
3591-
"schemeKeys": [
3592-
"DelegatedWork",
3593-
"Application"
3594-
],
3595-
"methods": [
3596-
"GET",
3597-
"POST"
3546+
"GET"
35983547
],
35993548
"paths": {
36003549
"/directory/certificateauthorities/certificatebasedapplicationconfigurations": "",
3601-
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities": ""
3550+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}": "",
3551+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities": "",
3552+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}": ""
36023553
}
36033554
},
36043555
{
@@ -3607,11 +3558,11 @@
36073558
"Application"
36083559
],
36093560
"methods": [
3610-
"DELETE",
3611-
"GET"
3561+
"POST"
36123562
],
36133563
"paths": {
3614-
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}": ""
3564+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations": "least=DelegatedWork,Application",
3565+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities": "least=DelegatedWork,Application"
36153566
}
36163567
},
36173568
{
@@ -3621,11 +3572,11 @@
36213572
],
36223573
"methods": [
36233574
"DELETE",
3624-
"GET",
36253575
"PATCH"
36263576
],
36273577
"paths": {
3628-
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}": ""
3578+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}": "least=DelegatedWork,Application",
3579+
"/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}": "least=DelegatedWork,Application"
36293580
}
36303581
}
36313582
],
@@ -5098,11 +5049,11 @@
50985049
"/reports/conditionalaccess/protectedapps": "least=DelegatedWork,Application",
50995050
"/reports/conditionalaccess/securityalerts": "least=DelegatedWork,Application",
51005051
"/reports/conditionalaccess/unprotectedapps": "least=DelegatedWork,Application",
5052+
"/reports/correlations": "",
5053+
"/reports/correlations/{id}": "",
5054+
"/reports/correlations/{id}/identities": "",
5055+
"/reports/correlations/{id}/identities/{id}": "",
51015056
"/reports/getAppManagementAuditSummary": "least=DelegatedWork,Application",
5102-
"/reports/identityCorrelation": "least=DelegatedWork,Application",
5103-
"/reports/identityCorrelation/{id}": "least=DelegatedWork,Application",
5104-
"/reports/identityCorrelation/{id}/identities": "least=DelegatedWork,Application",
5105-
"/reports/identityCorrelation/{id}/identities/{id}": "least=DelegatedWork,Application",
51065057
"/reports/reconciliations/provisioning": "least=DelegatedWork,Application",
51075058
"/reports/reconciliations/provisioning/{id}": "least=DelegatedWork,Application",
51085059
"/reports/reconciliations/provisioning/{id}/identities": "least=DelegatedWork,Application",
@@ -5942,7 +5893,9 @@
59425893
"PATCH"
59435894
],
59445895
"paths": {
5945-
"/backupRestore/protectionUnits/{protectionUnitId}": "least=DelegatedWork"
5896+
"/backupRestore/driveProtectionUnits/{driveProtectionUnitId}": "least=DelegatedWork",
5897+
"/backupRestore/mailboxProtectionUnits/{mailboxProtectionUnitId}": "least=DelegatedWork",
5898+
"/backupRestore/siteProtectionUnits/{siteProtectionUnitId}": "least=DelegatedWork"
59465899
}
59475900
},
59485901
{
@@ -12471,8 +12424,10 @@
1247112424
"POST"
1247212425
],
1247312426
"paths": {
12427+
"/me/dataSecurityAndGovernance/contentUploadSession": "",
1247412428
"/me/dataSecurityAndGovernance/processContent": "",
1247512429
"/security/dataSecurityAndGovernance/processContentAsync": "least=Application,DelegatedWork",
12430+
"/users/{userId}/dataSecurityAndGovernance/contentUploadSession": "",
1247612431
"/users/{userId}/dataSecurityAndGovernance/processContent": ""
1247712432
}
1247812433
}
@@ -12509,7 +12464,9 @@
1250912464
"POST"
1251012465
],
1251112466
"paths": {
12467+
"/me/dataSecurityAndGovernance/contentUploadSession": "",
1251212468
"/me/dataSecurityAndGovernance/processContent": "least=Application,DelegatedWork",
12469+
"/users/{userId}/dataSecurityAndGovernance/contentUploadSession": "",
1251312470
"/users/{userId}/dataSecurityAndGovernance/processContent": "least=Application,DelegatedWork"
1251412471
}
1251512472
}
@@ -23095,6 +23052,105 @@
2309523052
"ownerSecurityGroup": "igaelmlivesite"
2309623053
}
2309723054
},
23055+
"EntraBackup.Read.All": {
23056+
"authorizationType": "oAuth2",
23057+
"schemes": {
23058+
"DelegatedWork": {
23059+
"adminDisplayName": "Read Preview jobs and snapshots",
23060+
"adminDescription": "Allows the app to list the all the snapshots, jobs and enumerate the changes of a specific preview job, on behalf of the signed-in user.",
23061+
"userDisplayName": "Read Preview jobs and snapshots",
23062+
"userDescription": "Allows the app to list the all the snapshots, jobs and enumerate the changes of a specific preview job, on your behalf.",
23063+
"requiresAdminConsent": true,
23064+
"privilegeLevel": 4
23065+
},
23066+
"Application": {
23067+
"adminDisplayName": "Read Preview jobs and snapshots",
23068+
"adminDescription": "Allows the app to list the all the snapshots, jobs and enumerate the changes of a specific preview job, on behalf of the signed-in user.",
23069+
"userDisplayName": "Read Preview jobs and snapshots",
23070+
"userDescription": "Allows the app to list the all the snapshots, jobs and enumerate the changes of a specific preview job, on your behalf.",
23071+
"requiresAdminConsent": true,
23072+
"privilegeLevel": 4
23073+
}
23074+
},
23075+
"pathSets": [
23076+
{
23077+
"schemeKeys": [
23078+
"DelegatedWork",
23079+
"Application"
23080+
],
23081+
"methods": [
23082+
"GET"
23083+
],
23084+
"paths": {
23085+
"/directory/recovery/snapshots": "least=Application,DelegatedWork",
23086+
"/directory/recovery/snapshots/{id}": "least=Application,DelegatedWork",
23087+
"/directory/recovery/snapshots/{id}/recoveryJobs/{id}/getFailedChanges": "least=Application,DelegatedWork",
23088+
"/directory/recovery/snapshots/{id}/recoveryPreviewJobs/{id}/getChanges": "least=Application,DelegatedWork"
23089+
}
23090+
}
23091+
],
23092+
"ownerInfo": {
23093+
"ownerSecurityGroup": "xtenantex"
23094+
}
23095+
},
23096+
"EntraBackup.ReadWrite.Preview": {
23097+
"authorizationType": "oAuth2",
23098+
"schemes": {
23099+
"DelegatedWork": {
23100+
"adminDisplayName": "Create a preview job, read preview job and snapshots",
23101+
"adminDescription": "Allows the app to list the all the snapshots, create a preview job and enumerate the changes of a specific preview job, on behalf of the signed-in user.",
23102+
"userDisplayName": "Create a preview job, read preview job and snapshots",
23103+
"userDescription": "Allows the app to list the all the snapshots, create a preview job and enumerate the changes of a specific preview job, on your behalf.",
23104+
"requiresAdminConsent": true,
23105+
"privilegeLevel": 4
23106+
}
23107+
},
23108+
"pathSets": [
23109+
{
23110+
"schemeKeys": [
23111+
"DelegatedWork"
23112+
],
23113+
"methods": [
23114+
"POST"
23115+
],
23116+
"paths": {
23117+
"/directory/recovery/snapshots/{id}/recoveryPreviewJobs": "least=DelegatedWork"
23118+
}
23119+
}
23120+
],
23121+
"ownerInfo": {
23122+
"ownerSecurityGroup": "xtenantex"
23123+
}
23124+
},
23125+
"EntraBackup.ReadWrite.Recovery": {
23126+
"authorizationType": "oAuth2",
23127+
"schemes": {
23128+
"DelegatedWork": {
23129+
"adminDisplayName": "Create preview and recovery job, read recovery job and snapshots",
23130+
"adminDescription": "Allows the app to list the all the snapshots, create a recovery job and enumerate the changes of a specific recovery job, on behalf of the signed-in user.",
23131+
"userDisplayName": "Create preview and recovery job, read recovery job and snapshots",
23132+
"userDescription": "Allows the app to list the all the snapshots, create a recovery job and enumerate the changes of a specific recovery job, on your behalf.",
23133+
"requiresAdminConsent": true,
23134+
"privilegeLevel": 4
23135+
}
23136+
},
23137+
"pathSets": [
23138+
{
23139+
"schemeKeys": [
23140+
"DelegatedWork"
23141+
],
23142+
"methods": [
23143+
"POST"
23144+
],
23145+
"paths": {
23146+
"/directory/recovery/snapshots/{id}/recoveryJobs": "least=DelegatedWork"
23147+
}
23148+
}
23149+
],
23150+
"ownerInfo": {
23151+
"ownerSecurityGroup": "xtenantex"
23152+
}
23153+
},
2309823154
"EventListener.Read.All": {
2309923155
"authorizationType": "oAuth2",
2310023156
"schemes": {
@@ -33753,7 +33809,7 @@
3375333809
"/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
3375433810
"/networkAccess/deployments": "least=DelegatedWork,Application",
3375533811
"/networkAccess/deployments/{id}": "least=DelegatedWork,Application",
33756-
"/networkAccess/efpConfig": "least=DelegatedWork,Application",
33812+
"/networkAccess/explicitForwardProxyConfig": "least=DelegatedWork,Application",
3375733813
"/networkAccess/fileDlpPolicies": "least=DelegatedWork,Application",
3375833814
"/networkAccess/filteringPolicies": "least=DelegatedWork,Application",
3375933815
"/networkAccess/filteringPolicies/{id}/policyRules": "least=DelegatedWork,Application",
@@ -33856,7 +33912,7 @@
3385633912
"/networkAccess/contentPolicies/{id}/policyRules": "",
3385733913
"/networkAccess/contentPolicies/{id}/policyRules/{id}": "",
3385833914
"/networkaccess/discovery/discoveredApplicationSegments": "",
33859-
"/networkAccess/efpConfig": "",
33915+
"/networkAccess/explicitForwardProxyConfig": "",
3386033916
"/networkAccess/fileDlpPolicies": "",
3386133917
"/networkAccess/filteringPolicies": "",
3386233918
"/networkAccess/filteringPolicies/{id}/policyRules": "",
@@ -33974,7 +34030,7 @@
3397434030
"/networkAccess/connectivity/branches/{id}/deviceLinks/{id}": "least=DelegatedWork,Application",
3397534031
"/networkAccess/connectivity/branches/{id}/forwardingProfiles": "least=DelegatedWork,Application",
3397634032
"/networkAccess/contentPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
33977-
"/networkAccess/efpConfig": "least=DelegatedWork,Application",
34033+
"/networkAccess/explicitForwardProxyConfig": "least=DelegatedWork,Application",
3397834034
"/networkAccess/fileDlpPolicies/{id}": "least=DelegatedWork,Application",
3397934035
"/networkAccess/filteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
3398034036
"/networkAccess/filteringProfiles/{id}": "least=DelegatedWork,Application",
@@ -42070,7 +42126,11 @@
4207042126
"GET"
4207142127
],
4207242128
"paths": {
42073-
"/auditlogs/provisioning": "least=DelegatedWork"
42129+
"/auditlogs/provisioning": "least=DelegatedWork",
42130+
"/reports/correlations": "least=DelegatedWork",
42131+
"/reports/correlations/{id}": "least=DelegatedWork",
42132+
"/reports/correlations/{id}/identities": "least=DelegatedWork",
42133+
"/reports/correlations/{id}/identities/{id}": "least=DelegatedWork"
4207442134
}
4207542135
}
4207642136
],

0 commit comments

Comments
 (0)