From 695b0afb027feda05c28d4d621bb56fa1ee26803 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Sat, 30 Aug 2025 03:27:18 +0300 Subject: [PATCH 1/5] Weekly Permissions sync 2025-08-30 --- permissions/new/ProvisioningInfo.json | 6 +- permissions/new/permissions.json | 102 +++++++++++--------------- 2 files changed, 44 insertions(+), 64 deletions(-) diff --git a/permissions/new/ProvisioningInfo.json b/permissions/new/ProvisioningInfo.json index b5a56c2a..7dfc5717 100644 --- a/permissions/new/ProvisioningInfo.json +++ b/permissions/new/ProvisioningInfo.json @@ -153,7 +153,7 @@ "isEnabled": true, "resourceAppId": "00000003-0000-0000-c000-000000000000" } - ], + ], "AgentIdentityBlueprint.CreateAsManager": [ { "id": "ecf9c9c0-b7d6-48c0-8ad6-7b00493a2efb", @@ -11514,7 +11514,7 @@ "scheme": "DelegatedWork", "environment": "public", "isHidden": true, - "isEnabled": true, + "isEnabled": true, "resourceAppId": "fc780465-2017-40d4-a0c5-307022471b92" }, { @@ -12235,7 +12235,7 @@ "isEnabled": true, "resourceAppId": "00000003-0000-0000-c000-00000000000" } - ], + ], "ServicePrincipal.Manage.OwnedBy": [ { "id": "6930b171-5cf8-4865-ba0f-cfce959d1bca", diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 659c6a2f..9bc06940 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -6775,15 +6775,14 @@ "GET" ], "paths": { - "/chats/{id}/members/{id}": "", "/teams/{id}/channels/{id}/allMembers": "least=DelegatedWork", "/teams/{id}/channels/{id}/allMembers/{id}": "least=DelegatedWork", - "/teams/{id}/channels/{id}/doesuserhaveaccess": "least=DelegatedWork,Application", - "/teams/{id}/channels/{id}/members": "", + "/teams/{id}/channels/{id}/doesuserhaveaccess": "least=DelegatedWork", + "/teams/{id}/channels/{id}/members": "least=DelegatedWork", "/teams/{id}/channels/{id}/members/{id}": "least=DelegatedWork", - "/teams/{id}/channels/{id}/sharedwithteams": "least=DelegatedWork,Application", - "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=DelegatedWork,Application", - "/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": "least=DelegatedWork,Application" + "/teams/{id}/channels/{id}/sharedwithteams": "least=DelegatedWork", + "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=DelegatedWork", + "/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": "least=DelegatedWork" } } ], @@ -6812,8 +6811,12 @@ "paths": { "/teams/{id}/channels/{id}/allMembers": "least=Application", "/teams/{id}/channels/{id}/allMembers/{id}": "least=Application", + "/teams/{id}/channels/{id}/doesuserhaveaccess": "least=Application", "/teams/{id}/channels/{id}/members": "least=Application", - "/teams/{id}/channels/{id}/members/{id}": "least=Application" + "/teams/{id}/channels/{id}/members/{id}": "least=Application", + "/teams/{id}/channels/{id}/sharedwithteams": "least=Application", + "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=Application", + "/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": "least=Application" } } ], @@ -6840,10 +6843,7 @@ "methods": [ "GET" ], - "paths": { - "/chats/{id}/members/{id}": "", - "/teams/{id}/channels/{id}/members/{id}": "" - } + "paths": {} } ], "ownerInfo": { @@ -6869,17 +6869,6 @@ } }, "pathSets": [ - { - "schemeKeys": [ - "Application" - ], - "methods": [ - "GET" - ], - "paths": { - "/chats/{id}/members/{id}": "" - } - }, { "schemeKeys": [ "DelegatedWork", @@ -6889,8 +6878,13 @@ "GET" ], "paths": { + "/teams/{id}/channels/{id}/allMembers": "", + "/teams/{id}/channels/{id}/allMembers/{id}": "", "/teams/{id}/channels/{id}/doesuserhaveaccess": "", + "/teams/{id}/channels/{id}/members": "", + "/teams/{id}/channels/{id}/members/{id}": "", "/teams/{id}/channels/{id}/sharedwithteams": "", + "/teams/{id}/channels/{id}/sharedwithteams/{id}": "", "/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": "" } }, @@ -6900,26 +6894,12 @@ "Application" ], "methods": [ - "GET", "POST" ], "paths": { "/teams/{id}/channels/{id}/members": "least=DelegatedWork" } }, - { - "schemeKeys": [ - "DelegatedWork", - "Application" - ], - "methods": [ - "GET" - ], - "paths": { - "/teams/{id}/channels/{id}/allMembers": "", - "/teams/{id}/channels/{id}/allMembers/{id}": "" - } - }, { "schemeKeys": [ "DelegatedWork", @@ -6927,7 +6907,6 @@ ], "methods": [ "DELETE", - "GET", "PATCH" ], "paths": { @@ -6940,11 +6919,10 @@ "Application" ], "methods": [ - "DELETE", - "GET" + "DELETE" ], "paths": { - "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=DelegatedWork,Application" + "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=DelegatedWork" } } ], @@ -6968,11 +6946,17 @@ "Application" ], "methods": [ - "GET", - "POST" + "GET" ], "paths": { - "/teams/{id}/channels/{id}/members": "least=Application" + "/teams/{id}/channels/{id}/allMembers": "", + "/teams/{id}/channels/{id}/allMembers/{id}": "", + "/teams/{id}/channels/{id}/doesuserhaveaccess": "", + "/teams/{id}/channels/{id}/members": "", + "/teams/{id}/channels/{id}/members/{id}": "", + "/teams/{id}/channels/{id}/sharedwithteams": "", + "/teams/{id}/channels/{id}/sharedwithteams/{id}": "", + "/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": "" } }, { @@ -6980,11 +6964,10 @@ "Application" ], "methods": [ - "GET" + "POST" ], "paths": { - "/teams/{id}/channels/{id}/allMembers": "", - "/teams/{id}/channels/{id}/allMembers/{id}": "" + "/teams/{id}/channels/{id}/members": "least=Application" } }, { @@ -6993,12 +6976,22 @@ ], "methods": [ "DELETE", - "GET", "PATCH" ], "paths": { "/teams/{id}/channels/{id}/members/{id}": "least=Application" } + }, + { + "schemeKeys": [ + "Application" + ], + "methods": [ + "DELETE" + ], + "paths": { + "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=Application" + } } ], "ownerInfo": { @@ -24698,7 +24691,7 @@ "/planner/tasks/{id}/details": "", "/planner/tasks/{id}/progresstaskboardformat": "", "/policies/ownerlessGroupPolicy": "least=DelegatedWork", - "/teams/{id}/channels/{id}/members": "least=DelegatedWork", + "/teams/{id}/channels/{id}/members": "", "/teams/{id}/schedule": "", "/teams/{id}/schedule/offershiftrequests/{id}": "", "/teams/{id}/schedule/openshiftchangerequests": "", @@ -45239,7 +45232,6 @@ ], "paths": { "/chats/{id}/members/{id}": "", - "/teams/{id}/channels/{id}/members/{id}": "", "/teams/{id}/members": "least=Application", "/teams/{id}/members/{id}": "least=Application" } @@ -45268,18 +45260,6 @@ } }, "pathSets": [ - { - "schemeKeys": [ - "DelegatedWork", - "Application" - ], - "methods": [ - "PATCH" - ], - "paths": { - "/teams/{id}/channels/{id}/members/{id}": "" - } - }, { "schemeKeys": [ "DelegatedWork", From 07dd00d531ffcd14f51d02178e9ed3714204f05e Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 2 Sep 2025 18:38:19 +0300 Subject: [PATCH 2/5] Weekly Permissions sync 2025-09-02 (#1253) --- permissions/new/permissions.json | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 9bc06940..29742a87 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -1763,6 +1763,17 @@ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}": "", "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}": "" } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/serviceTreeAttributionServices": "least=DelegatedWork" + } } ], "ownerInfo": { @@ -2013,6 +2024,17 @@ "/applications/{id}/synchronization/templates/{id}/schema": "least=Application", "/serviceprincipals/{id}/synchronization/jobs/{id}/schema": "least=Application" } + }, + { + "schemeKeys": [ + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/serviceTreeAttributionServices": "least=Application" + } } ], "ownerInfo": { From 0ec84b6c25b849240457160ceda3c2fc0dbabca7 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 2 Sep 2025 18:38:54 +0300 Subject: [PATCH 3/5] Weekly Permissions sync 2025-09-01 (#1252) From 58b48d28c6c7431b9f67b10e323ea6c4f7419f76 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 2 Sep 2025 18:39:48 +0300 Subject: [PATCH 4/5] Weekly Permissions sync 2025-08-31 (#1251) From 88a9b6cf932e42cf1287531a9ec1c89fe447e80f Mon Sep 17 00:00:00 2001 From: Jason Johnston Date: Tue, 2 Sep 2025 11:41:19 -0400 Subject: [PATCH 5/5] Apply suggestions from code review --- permissions/new/ProvisioningInfo.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/permissions/new/ProvisioningInfo.json b/permissions/new/ProvisioningInfo.json index 7dfc5717..b5a56c2a 100644 --- a/permissions/new/ProvisioningInfo.json +++ b/permissions/new/ProvisioningInfo.json @@ -153,7 +153,7 @@ "isEnabled": true, "resourceAppId": "00000003-0000-0000-c000-000000000000" } - ], + ], "AgentIdentityBlueprint.CreateAsManager": [ { "id": "ecf9c9c0-b7d6-48c0-8ad6-7b00493a2efb", @@ -11514,7 +11514,7 @@ "scheme": "DelegatedWork", "environment": "public", "isHidden": true, - "isEnabled": true, + "isEnabled": true, "resourceAppId": "fc780465-2017-40d4-a0c5-307022471b92" }, { @@ -12235,7 +12235,7 @@ "isEnabled": true, "resourceAppId": "00000003-0000-0000-c000-00000000000" } - ], + ], "ServicePrincipal.Manage.OwnedBy": [ { "id": "6930b171-5cf8-4865-ba0f-cfce959d1bca",