From 8122627415892d72f161060a833da1f0e49c2321 Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Fri, 18 Apr 2025 03:27:40 +0300
Subject: [PATCH] Weekly Permissions sync 2025-04-18

---
 permissions/new/ProvisioningInfo.json | 44 ++++++++++++++++++++++++---
 permissions/new/permissions.json      | 36 ++++++++++++++++++++++
 2 files changed, 76 insertions(+), 4 deletions(-)

diff --git a/permissions/new/ProvisioningInfo.json b/permissions/new/ProvisioningInfo.json
index dc42c2b3..711253a2 100644
--- a/permissions/new/ProvisioningInfo.json
+++ b/permissions/new/ProvisioningInfo.json
@@ -5594,6 +5594,24 @@
         "resourceAppId": "00000002-0000-0000-c000-000000000000"
       }
     ],
+    "Group.ManageProtection.All": [
+      {
+        "id": "4b57b79c-06bb-4bf3-9c73-fffbc9427acf",
+        "scheme": "DelegatedWork",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      },
+      {
+        "id": "12d3a3fb-195d-4c2b-bd5b-816321adc41a",
+        "scheme": "Application",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      }
+    ],
     "Group.Read.All": [
       {
         "id": "5f8c59db-677d-491f-a6b8-5f174b11ec1d",
@@ -11130,9 +11148,27 @@
         "resourceAppId": "8ee8fdad-f234-4243-8f3b-15c294843740"
       }
     ],
-    "SecurityIdentitiesUsers.Read.All": [
+    "SecurityIdentitiesIdentityAccounts.Read.All": [
+      {
+        "id": "fa9000aa-b6a6-4c5d-b50b-cb1384df67f6",
+        "scheme": "DelegatedWork",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "8ee8fdad-f234-4243-8f3b-15c294843740"
+      },
+      {
+        "id": "5e5f8556-25c7-4696-a714-6e7a515373e5",
+        "scheme": "Application",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "8ee8fdad-f234-4243-8f3b-15c294843740"
+      }
+    ],
+    "SecurityIdentitiesActions.ReadWrite.All": [
       {
-        "id": "8789d568-b415-4efa-9ad9-801f7b3cc387",
+        "id": "6762fe93-9ecf-4fc7-8590-cd56f4f07c7d",
         "scheme": "DelegatedWork",
         "environment": "public",
         "isHidden": true,
@@ -11140,7 +11176,7 @@
         "resourceAppId": "8ee8fdad-f234-4243-8f3b-15c294843740"
       },
       {
-        "id": "4a966d3a-b63e-46f1-9c80-3325bf4f3cb6",
+        "id": "0a21e90c-66fd-4970-9b97-398d64185763",
         "scheme": "Application",
         "environment": "public",
         "isHidden": true,
@@ -14838,4 +14874,4 @@
       }
     ]
   }
-}
\ No newline at end of file
+}
diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json
index ec03304e..e5c02aa9 100644
--- a/permissions/new/permissions.json
+++ b/permissions/new/permissions.json
@@ -39152,6 +39152,42 @@
         "ownerSecurityGroup": "tri-msgraph"
       }
     },
+    "SecurityIdentitiesUsers.Read.All": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read identity security available users",
+          "adminDescription": "Allows the app to read all the identity security available users ",
+          "userDisplayName": "Read identity security available users",
+          "userDescription": "Allows the app to read all the identity security available users on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        },
+        "Application": {
+          "adminDisplayName": "Read all identity security available users",
+          "adminDescription": "Allows the app to read all the identity security available users without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/security/identities/users": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "tri-msgraph"
+      }
+    },
     "SecurityIncident.Read.All": {
       "authorizationType": "oAuth2",
       "schemes": {