Skip to content

Commit db9a421

Browse files
committed
Weekly Permissions sync 2026-06-04
1 parent 9c585a8 commit db9a421

2 files changed

Lines changed: 40 additions & 150 deletions

File tree

permissions/new/permissions.json

Lines changed: 22 additions & 150 deletions
Original file line numberDiff line numberDiff line change
@@ -3894,7 +3894,7 @@
38943894
],
38953895
"paths": {
38963896
"/applications": "least=DelegatedWork,DelegatedPersonal,Application",
3897-
"/applications(appid={value})": "least=DelegatedWork,DelegatedPersonal",
3897+
"/applications(appid={value})": "least=DelegatedWork,DelegatedPersonal,Application",
38983898
"/applications/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
38993899
"/applications/{id}/extensionproperties": "least=DelegatedWork,DelegatedPersonal,Application",
39003900
"/applications/{id}/extensionproperties/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
@@ -9262,10 +9262,10 @@
92629262
"/app/calls": "",
92639263
"/app/calls/{id}/addlargegalleryview": "",
92649264
"/app/calls/{id}/answer": "least=Application",
9265-
"/app/calls/{id}/participants/{id}/admitFromLobby": "least=Application",
9265+
"/app/calls/{id}/participants/{id}/admitFromLobby": "",
92669266
"/app/calls/{id}/participants/{id}/mute": "least=Application",
9267-
"/app/calls/{id}/participants/{id}/removeFromLobby": "least=Application",
9268-
"/app/calls/{id}/participants/admitAllFromLobby": "least=Application",
9267+
"/app/calls/{id}/participants/{id}/removeFromLobby": "",
9268+
"/app/calls/{id}/participants/admitAllFromLobby": "",
92699269
"/app/calls/{id}/participants/configuremixer": "",
92709270
"/app/calls/{id}/participants/muteall": "least=Application",
92719271
"/app/calls/{id}/startRecording": "least=Application",
@@ -9276,12 +9276,12 @@
92769276
"/communications/calls": "",
92779277
"/communications/calls/{id}/addlargegalleryview": "",
92789278
"/communications/calls/{id}/answer": "least=Application",
9279-
"/communications/calls/{id}/participants/{id}/admitFromLobby": "least=Application",
9279+
"/communications/calls/{id}/participants/{id}/admitFromLobby": "",
92809280
"/communications/calls/{id}/participants/{id}/mute": "least=Application",
9281-
"/communications/calls/{id}/participants/{id}/removeFromLobby": "least=Application",
9281+
"/communications/calls/{id}/participants/{id}/removeFromLobby": "",
92829282
"/communications/calls/{id}/participants/{id}/startholdmusic": "",
92839283
"/communications/calls/{id}/participants/{id}/stopholdmusic": "",
9284-
"/communications/calls/{id}/participants/admitAllFromLobby": "least=Application",
9284+
"/communications/calls/{id}/participants/admitAllFromLobby": "",
92859285
"/communications/calls/{id}/participants/configuremixer": "",
92869286
"/communications/calls/{id}/participants/muteall": "least=Application",
92879287
"/communications/calls/{id}/startRecording": "least=Application",
@@ -9380,18 +9380,18 @@
93809380
"POST"
93819381
],
93829382
"paths": {
9383-
"/app/calls/{id}/participants/{id}/admitFromLobby": "",
9383+
"/app/calls/{id}/participants/{id}/admitFromLobby": "least=Application",
93849384
"/app/calls/{id}/participants/{id}/mute": "",
9385-
"/app/calls/{id}/participants/{id}/removeFromLobby": "",
9386-
"/app/calls/{id}/participants/admitAllFromLobby": "",
9385+
"/app/calls/{id}/participants/{id}/removeFromLobby": "least=Application",
9386+
"/app/calls/{id}/participants/admitAllFromLobby": "least=Application",
93879387
"/app/calls/{id}/participants/configuremixer": "",
93889388
"/app/calls/{id}/participants/muteall": "",
9389-
"/communications/calls/{id}/participants/{id}/admitFromLobby": "",
9389+
"/communications/calls/{id}/participants/{id}/admitFromLobby": "least=Application",
93909390
"/communications/calls/{id}/participants/{id}/mute": "",
9391-
"/communications/calls/{id}/participants/{id}/removeFromLobby": "",
9391+
"/communications/calls/{id}/participants/{id}/removeFromLobby": "least=Application",
93929392
"/communications/calls/{id}/participants/{id}/startholdmusic": "least=Application",
93939393
"/communications/calls/{id}/participants/{id}/stopholdmusic": "least=Application",
9394-
"/communications/calls/{id}/participants/admitAllFromLobby": "",
9394+
"/communications/calls/{id}/participants/admitAllFromLobby": "least=Application",
93959395
"/communications/calls/{id}/participants/configuremixer": "",
93969396
"/communications/calls/{id}/participants/muteall": ""
93979397
}
@@ -19720,8 +19720,6 @@
1972019720
"/auditlogs/directoryaudits": "",
1972119721
"/auditlogs/directoryaudits/{id}": "",
1972219722
"/auditlogs/provisioning": "",
19723-
"/auditlogs/signins": "",
19724-
"/auditlogs/signins/{id}": "",
1972519723
"/contacts": "",
1972619724
"/contacts/{id}": "",
1972719725
"/contacts/{id}/directreports": "",
@@ -34508,6 +34506,8 @@
3450834506
"/networkAccess/deployments": "least=DelegatedWork,Application",
3450934507
"/networkAccess/deployments/{id}": "least=DelegatedWork,Application",
3451034508
"/networkAccess/explicitForwardProxyConfig": "least=DelegatedWork,Application",
34509+
"/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles": "least=DelegatedWork,Application",
34510+
"/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "least=DelegatedWork,Application",
3451134511
"/networkAccess/fileDlpPolicies": "least=DelegatedWork,Application",
3451234512
"/networkAccess/filePolicies": "least=DelegatedWork,Application",
3451334513
"/networkAccess/filePolicies/{id}": "least=DelegatedWork,Application",
@@ -34637,6 +34637,8 @@
3463734637
"/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "",
3463834638
"/networkaccess/discovery/discoveredApplicationSegments": "",
3463934639
"/networkAccess/explicitForwardProxyConfig": "",
34640+
"/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles": "",
34641+
"/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "",
3464034642
"/networkAccess/fileDlpPolicies": "",
3464134643
"/networkAccess/filePolicies": "",
3464234644
"/networkAccess/filePolicies/{id}": "",
@@ -34730,6 +34732,7 @@
3473034732
"/networkAccess/contentTypePolicies": "least=DelegatedWork,Application",
3473134733
"/networkAccess/contentTypePolicies/{id}/policyRules": "least=DelegatedWork,Application",
3473234734
"/networkAccess/discoverMcpTools": "",
34735+
"/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles": "least=DelegatedWork,Application",
3473334736
"/networkAccess/fileDlpPolicies": "least=DelegatedWork,Application",
3473434737
"/networkAccess/filePolicies": "least=DelegatedWork,Application",
3473534738
"/networkAccess/filePolicies/{id}/policyRules": "least=DelegatedWork,Application",
@@ -34776,6 +34779,7 @@
3477634779
"/networkAccess/contentTypePolicies/{id}": "least=DelegatedWork,Application",
3477734780
"/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
3477834781
"/networkAccess/explicitForwardProxyConfig": "least=DelegatedWork,Application",
34782+
"/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "least=DelegatedWork,Application",
3477934783
"/networkAccess/fileDlpPolicies/{id}": "least=DelegatedWork,Application",
3478034784
"/networkAccess/filePolicies/{id}": "least=DelegatedWork,Application",
3478134785
"/networkAccess/filePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
@@ -34821,6 +34825,7 @@
3482134825
"/networkAccess/contentPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
3482234826
"/networkAccess/contentTypePolicies/{id}": "least=DelegatedWork,Application",
3482334827
"/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
34828+
"/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "least=DelegatedWork,Application",
3482434829
"/networkAccess/fileDlpPolicies/{id}": "least=DelegatedWork,Application",
3482534830
"/networkAccess/filePolicies/{id}": "least=DelegatedWork,Application",
3482634831
"/networkAccess/filePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
@@ -38487,139 +38492,6 @@
3848738492
"ownerSecurityGroup": "cpimmsgraphadmins"
3848838493
}
3848938494
},
38490-
"Policy.Read.ApplicationConfiguration": {
38491-
"authorizationType": "oAuth2",
38492-
"schemes": {
38493-
"DelegatedWork": {
38494-
"adminDisplayName": "Read your organization's application configuration policies",
38495-
"adminDescription": "Allows the app to read your organization's application configuration policies on behalf of the signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, claimsPolicy, tokenIssuancePolicy and tokenLifetimePolicy.",
38496-
"userDisplayName": "Read your organization's application configuration policies",
38497-
"userDescription": "Allows the app to read your organization's application configuration policies on your behalf. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, claimsPolicy, tokenIssuancePolicy and tokenLifetimePolicy.",
38498-
"requiresAdminConsent": true,
38499-
"privilegeLevel": 4
38500-
},
38501-
"Application": {
38502-
"adminDisplayName": "Read your organization's application configuration policies",
38503-
"adminDescription": "Allows the app to read your organization's application configuration policies, without a signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, claimsPolicy, tokenIssuancePolicy and tokenLifetimePolicy.",
38504-
"requiresAdminConsent": true,
38505-
"privilegeLevel": 4
38506-
}
38507-
},
38508-
"pathSets": [
38509-
{
38510-
"schemeKeys": [
38511-
"DelegatedWork",
38512-
"Application"
38513-
],
38514-
"methods": [
38515-
"GET",
38516-
"POST"
38517-
],
38518-
"paths": {
38519-
"/identity/events/onsignupstart": "least=DelegatedWork,Application",
38520-
"/policies/activitybasedtimeoutpolicies": "least=DelegatedWork,Application",
38521-
"/policies/appmanagementpolicies": "least=DelegatedWork,Application",
38522-
"/policies/claimsmappingpolicies": "least=DelegatedWork,Application",
38523-
"/policies/homerealmdiscoverypolicies": "least=DelegatedWork,Application",
38524-
"/policies/tokenissuancepolicies": "least=DelegatedWork,Application",
38525-
"/policies/tokenlifetimepolicies": "least=DelegatedWork,Application"
38526-
}
38527-
},
38528-
{
38529-
"schemeKeys": [
38530-
"DelegatedWork",
38531-
"Application"
38532-
],
38533-
"methods": [
38534-
"DELETE",
38535-
"POST"
38536-
],
38537-
"paths": {
38538-
"/applications/{id}/appmanagementpolicies": ""
38539-
}
38540-
},
38541-
{
38542-
"schemeKeys": [
38543-
"DelegatedWork",
38544-
"Application"
38545-
],
38546-
"methods": [
38547-
"DELETE",
38548-
"GET",
38549-
"PATCH",
38550-
"PUT"
38551-
],
38552-
"paths": {
38553-
"/identity/events/onsignupstart/{id}": "least=DelegatedWork,Application"
38554-
}
38555-
},
38556-
{
38557-
"schemeKeys": [
38558-
"DelegatedWork",
38559-
"Application"
38560-
],
38561-
"methods": [
38562-
"DELETE",
38563-
"GET",
38564-
"PATCH"
38565-
],
38566-
"paths": {
38567-
"/policies/activitybasedtimeoutpolicies/{id}": "least=DelegatedWork,Application",
38568-
"/policies/appmanagementpolicies/{id}": "least=DelegatedWork,Application",
38569-
"/policies/claimsmappingpolicies/{id}": "least=DelegatedWork,Application",
38570-
"/policies/homerealmdiscoverypolicies/{id}": "least=DelegatedWork,Application",
38571-
"/policies/tokenissuancepolicies/{id}": "least=DelegatedWork,Application",
38572-
"/policies/tokenlifetimepolicies/{id}": "least=DelegatedWork,Application"
38573-
}
38574-
},
38575-
{
38576-
"schemeKeys": [
38577-
"DelegatedWork",
38578-
"Application"
38579-
],
38580-
"methods": [
38581-
"GET"
38582-
],
38583-
"paths": {
38584-
"/policies/appmanagementpolicies/{id}/appliesto": "",
38585-
"/policies/claimsmappingpolicies/{id}/appliesto": "",
38586-
"/policies/homerealmdiscoverypolicies/{id}/appliesto": "",
38587-
"/policies/tokenissuancepolicies/{id}/appliesto": "",
38588-
"/policies/tokenlifetimepolicies/{id}/appliesto": ""
38589-
}
38590-
},
38591-
{
38592-
"schemeKeys": [
38593-
"DelegatedWork",
38594-
"Application"
38595-
],
38596-
"methods": [
38597-
"GET",
38598-
"PATCH"
38599-
],
38600-
"paths": {
38601-
"/policies/defaultappmanagementpolicy": "least=DelegatedWork,Application"
38602-
}
38603-
},
38604-
{
38605-
"schemeKeys": [
38606-
"DelegatedWork",
38607-
"Application"
38608-
],
38609-
"methods": [
38610-
"GET",
38611-
"PATCH",
38612-
"PUT"
38613-
],
38614-
"paths": {
38615-
"/serviceprincipals/{id}/claimsPolicy": "least=DelegatedWork,Application"
38616-
}
38617-
}
38618-
],
38619-
"ownerInfo": {
38620-
"ownerSecurityGroup": "idappcore"
38621-
}
38622-
},
3862338495
"Policy.Read.AuthenticationMethod": {
3862438496
"authorizationType": "oAuth2",
3862538497
"schemes": {
@@ -39584,7 +39456,7 @@
3958439456
"paths": {
3958539457
"/identity/conditionalaccess/authenticationcontextclassreferences/{id}": "",
3958639458
"/identity/continuousaccessevaluationpolicy": "",
39587-
"/policies/identitysecuritydefaultsenforcementpolicy": ""
39459+
"/policies/identitysecuritydefaultsenforcementpolicy": "AlsoRequires=Policy.Read.All"
3958839460
}
3958939461
},
3959039462
{
@@ -40463,7 +40335,7 @@
4046340335
"PATCH"
4046440336
],
4046540337
"paths": {
40466-
"/policies/identitysecuritydefaultsenforcementpolicy": "least=DelegatedWork,Application"
40338+
"/policies/identitysecuritydefaultsenforcementpolicy": "least=DelegatedWork,Application;AlsoRequires=Policy.Read.All"
4046740339
}
4046840340
}
4046940341
],

permissions/new/provisioningInfo.json

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11508,6 +11508,24 @@
1150811508
"resourceAppId": ""
1150911509
}
1151011510
],
11511+
"Policy.Read.ApplicationConfiguration": [
11512+
{
11513+
"id": "",
11514+
"scheme": "Application",
11515+
"environment": "public",
11516+
"isHidden": true,
11517+
"isEnabled": false,
11518+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
11519+
},
11520+
{
11521+
"id": "",
11522+
"scheme": "DelegatedWork",
11523+
"environment": "public",
11524+
"isHidden": true,
11525+
"isEnabled": false,
11526+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
11527+
}
11528+
],
1151111529
"Policy.ReadWrite.ApplicationConfiguration": [
1151211530
{
1151311531
"id": "b27add92-efb2-4f16-84f5-8108ba77985c",

0 commit comments

Comments
 (0)