From 5311c9b71c3f394e33b586ee86ca039b2f5312eb Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Tue, 30 Jun 2026 03:55:56 +0300
Subject: [PATCH] Weekly Permissions sync 2026-06-30

---
 permissions/new/permissions.json      | 36 +++++++++++++++++++++++++++
 permissions/new/provisioningInfo.json |  4 +--
 2 files changed, 38 insertions(+), 2 deletions(-)

diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json
index 51151d2c..190b375d 100644
--- a/permissions/new/permissions.json
+++ b/permissions/new/permissions.json
@@ -45675,6 +45675,42 @@
         "ownerSecurityGroup": "secgraphschema"
       }
     },
+    "SecurityAlert.Create.All": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Create security alerts",
+          "adminDescription": "Allows the app to create security alerts in Microsoft 365 Defender, on behalf of the signed-in user.",
+          "userDisplayName": "Create security alerts",
+          "userDescription": "Allows the app to create security alerts on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        },
+        "Application": {
+          "adminDisplayName": "Create security alerts without a signed-in user",
+          "adminDescription": "Allows the app to create security alerts in Microsoft 365 Defender, without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "POST"
+          ],
+          "paths": {
+            "/security/alerts_v2": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "ThreatAPIApprovers"
+      }
+    },
     "SecurityAlert.Read.All": {
       "authorizationType": "oAuth2",
       "schemes": {
diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json
index c20f4fb2..7adf8e34 100644
--- a/permissions/new/provisioningInfo.json
+++ b/permissions/new/provisioningInfo.json
@@ -14288,7 +14288,7 @@
         "id": "",
         "scheme": "DelegatedWork",
         "environment": "public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "fc780465-2017-40d4-a0c5-307022471b92"
       },
@@ -14296,7 +14296,7 @@
         "id": "",
         "scheme": "Application",
         "environment": "public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "fc780465-2017-40d4-a0c5-307022471b92"
       }