Skip to content

Commit 8133ee2

Browse files
marabooymarabooy
authored
Weekly Permissions sync 2026-02-20 (#1447)
1 parent 32d64d6 commit 8133ee2

2 files changed

Lines changed: 219 additions & 16 deletions

File tree

‎permissions/new/permissions.json‎

Lines changed: 60 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -13783,15 +13783,15 @@
1378313783
"userDisplayName": "View your list of devices",
1378413784
"userDescription": "Allows the app to see your list of devices.",
1378513785
"requiresAdminConsent": false,
13786-
"privilegeLevel": 2
13786+
"privilegeLevel": 1
1378713787
},
1378813788
"DelegatedPersonal": {
1378913789
"adminDisplayName": "Read user devices",
1379013790
"adminDescription": "Allows the app to read a user's list of devices on behalf of the signed-in user.",
1379113791
"userDisplayName": "View your list of devices",
1379213792
"userDescription": "Allows the app to see your list of devices.",
1379313793
"requiresAdminConsent": false,
13794-
"privilegeLevel": 2
13794+
"privilegeLevel": 1
1379513795
}
1379613796
},
1379713797
"pathSets": [
@@ -13809,7 +13809,7 @@
1380913809
}
1381013810
],
1381113811
"ownerInfo": {
13812-
"ownerSecurityGroup": "afsadmins"
13812+
"ownerSecurityGroup": "adrsmsgraph"
1381313813
}
1381413814
},
1381513815
"Device.Read.All": {
@@ -13821,21 +13821,21 @@
1382113821
"userDisplayName": "Read all devices",
1382213822
"userDescription": "Allows the app to read devices' configuration information on your behalf.",
1382313823
"requiresAdminConsent": true,
13824-
"privilegeLevel": 3
13824+
"privilegeLevel": 2
1382513825
},
1382613826
"DelegatedPersonal": {
1382713827
"adminDisplayName": "Read all devices",
1382813828
"adminDescription": "Allows the app to read your organization's devices' configuration information on behalf of the signed-in user.",
1382913829
"userDisplayName": "Read all devices",
1383013830
"userDescription": "Allows the app to read devices' configuration information on your behalf.",
1383113831
"requiresAdminConsent": true,
13832-
"privilegeLevel": 3
13832+
"privilegeLevel": 2
1383313833
},
1383413834
"Application": {
1383513835
"adminDisplayName": "Read all devices",
1383613836
"adminDescription": "Allows the app to read your organization's devices' configuration information without a signed-in user.",
1383713837
"requiresAdminConsent": true,
13838-
"privilegeLevel": 4
13838+
"privilegeLevel": 3
1383913839
}
1384013840
},
1384113841
"pathSets": [
@@ -13915,7 +13915,7 @@
1391513915
}
1391613916
],
1391713917
"ownerInfo": {
13918-
"ownerSecurityGroup": "devicesapprovers"
13918+
"ownerSecurityGroup": "adrsmsgraph"
1391913919
}
1392013920
},
1392113921
"Device.ReadWrite.All": {
@@ -13925,7 +13925,7 @@
1392513925
"adminDisplayName": "Read and write devices",
1392613926
"adminDescription": "Allows the app to read and write all device properties without a signed in user. Does not allow device creation, device deletion or update of device alternative security identifiers.",
1392713927
"requiresAdminConsent": true,
13928-
"privilegeLevel": 4
13928+
"privilegeLevel": 3
1392913929
}
1393013930
},
1393113931
"pathSets": [
@@ -14047,7 +14047,7 @@
1404714047
}
1404814048
],
1404914049
"ownerInfo": {
14050-
"ownerSecurityGroup": "IdentityReq"
14050+
"ownerSecurityGroup": "adrsmsgraph"
1405114051
}
1405214052
},
1405314053
"DeviceLocalCredential.Read.All": {
@@ -27714,6 +27714,55 @@
2771427714
"ownerSecurityGroup": "AADGroupsPreAuth"
2771527715
}
2771627716
},
27717+
"Group.ManageProtection.All": {
27718+
"authorizationType": "oAuth2",
27719+
"schemes": {
27720+
"DelegatedWork": {
27721+
"adminDisplayName": "Manage the Microsoft Information Protection (MIP) label for M365 and security groups.",
27722+
"adminDescription": "Allows the app to list groups, and to read their basic properties and manage the MIP label for all label enabled groups on behalf of the signed-in user. ",
27723+
"userDisplayName": "Manage group label.",
27724+
"userDescription": "Allows the app to list groups, to read their properties, and manage the MIP label on your behalf.",
27725+
"requiresAdminConsent": true,
27726+
"privilegeLevel": 3
27727+
},
27728+
"Application": {
27729+
"adminDisplayName": "Manage the Microsoft Information Protection (MIP) label for M365 and security groups.",
27730+
"adminDescription": "Allows the app to list groups, and to read their basic properties and manage the MIP label for all label enabled groups without a signed-in user.",
27731+
"requiresAdminConsent": true,
27732+
"privilegeLevel": 4
27733+
}
27734+
},
27735+
"pathSets": [
27736+
{
27737+
"schemeKeys": [
27738+
"DelegatedWork",
27739+
"Application"
27740+
],
27741+
"methods": [
27742+
"GET"
27743+
],
27744+
"paths": {
27745+
"/groups": "",
27746+
"/groups/{id}": ""
27747+
}
27748+
},
27749+
{
27750+
"schemeKeys": [
27751+
"DelegatedWork",
27752+
"Application"
27753+
],
27754+
"methods": [
27755+
"PATCH"
27756+
],
27757+
"paths": {
27758+
"/groups/{id}": ""
27759+
}
27760+
}
27761+
],
27762+
"ownerInfo": {
27763+
"ownerSecurityGroup": "AADGroupsPreAuth"
27764+
}
27765+
},
2771727766
"Group.Read.All": {
2771827767
"authorizationType": "oAuth2",
2771927768
"schemes": {
@@ -53889,7 +53938,7 @@
5388953938
"DELETE"
5389053939
],
5389153940
"paths": {
53892-
"/users/{user-id | user-principal-name}/chats/{chat-id}/targetedMessages/{message-id}": "least=DelegatedWork"
53941+
"/users/{id}/chats/{id}/targetedMessages/{id}": "least=DelegatedWork"
5389353942
}
5389453943
},
5389553944
{
@@ -53900,7 +53949,7 @@
5390053949
"POST"
5390153950
],
5390253951
"paths": {
53903-
"/users/{user-id | user-principal-name}/teamwork/deleteTargetedMessage": "least=DelegatedWork"
53952+
"/users/{id}/teamwork/deleteTargetedMessage": "least=DelegatedWork"
5390453953
}
5390553954
}
5390653955
],

‎permissions/new/provisioningInfo.json‎

Lines changed: 159 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3814,6 +3814,42 @@
38143814
"resourceAppId": ""
38153815
}
38163816
],
3817+
"CrossTenantRoleAssignment.Create": [
3818+
{
3819+
"id": "",
3820+
"scheme": "Application",
3821+
"environment": "public",
3822+
"isHidden": true,
3823+
"isEnabled": true,
3824+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
3825+
},
3826+
{
3827+
"id": "",
3828+
"scheme": "DelegatedWork",
3829+
"environment": "public",
3830+
"isHidden": true,
3831+
"isEnabled": true,
3832+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
3833+
}
3834+
],
3835+
"CrossTenantRoleAssignment.Delete": [
3836+
{
3837+
"id": "",
3838+
"scheme": "Application",
3839+
"environment": "public",
3840+
"isHidden": true,
3841+
"isEnabled": true,
3842+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
3843+
},
3844+
{
3845+
"id": "",
3846+
"scheme": "DelegatedWork",
3847+
"environment": "public",
3848+
"isHidden": true,
3849+
"isEnabled": true,
3850+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
3851+
}
3852+
],
38173853
"CrossTenantUserProfileSharing.Read": [
38183854
{
38193855
"id": "cb1ba48f-d22b-4325-a07f-74135a62ee41",
@@ -4621,7 +4657,25 @@
46214657
"environment": "public",
46224658
"isHidden": true,
46234659
"isEnabled": true,
4624-
"resourceAppId": ""
4660+
"resourceAppId": "01cb2876-7ebd-4aa4-9cc9-d28bd4d359a9"
4661+
}
4662+
],
4663+
"Device.DisableAccount.All": [
4664+
{
4665+
"id": "321cb472-c68b-485c-bb46-3a817eaef927",
4666+
"scheme": "DelegatedWork",
4667+
"environment": "public",
4668+
"isHidden": true,
4669+
"isEnabled": true,
4670+
"resourceAppId": "01cb2876-7ebd-4aa4-9cc9-d28bd4d359a9"
4671+
},
4672+
{
4673+
"id": "f1ca1df2-90bb-4733-94c0-b96d094f918a",
4674+
"scheme": "Application",
4675+
"environment": "public",
4676+
"isHidden": true,
4677+
"isEnabled": true,
4678+
"resourceAppId": "01cb2876-7ebd-4aa4-9cc9-d28bd4d359a9"
46254679
}
46264680
],
46274681
"Device.EnableDisableAccount.All": [
@@ -4631,15 +4685,15 @@
46314685
"environment": "public",
46324686
"isHidden": true,
46334687
"isEnabled": true,
4634-
"resourceAppId": ""
4688+
"resourceAppId": "01cb2876-7ebd-4aa4-9cc9-d28bd4d359a9"
46354689
},
46364690
{
46374691
"id": "73b12cfb-f4a6-47f6-b7a0-10f514d668ad",
46384692
"scheme": "Application",
46394693
"environment": "public",
46404694
"isHidden": true,
46414695
"isEnabled": true,
4642-
"resourceAppId": ""
4696+
"resourceAppId": "01cb2876-7ebd-4aa4-9cc9-d28bd4d359a9"
46434697
}
46444698
],
46454699
"Device.ProvisionForVDI": [
@@ -6825,15 +6879,15 @@
68256879
"id": "36263ed6-285e-4f84-b25a-62ec2ba17d29",
68266880
"scheme": "DelegatedWork",
68276881
"environment": "public",
6828-
"isHidden": true,
6882+
"isHidden": false,
68296883
"isEnabled": true,
68306884
"resourceAppId": "00000002-0000-0000-c000-000000000000"
68316885
},
68326886
{
68336887
"id": "60f8cea0-2476-45c9-ab18-70e79e60ad14",
68346888
"scheme": "Application",
68356889
"environment": "public",
6836-
"isHidden": true,
6890+
"isHidden": false,
68376891
"isEnabled": true,
68386892
"resourceAppId": "00000002-0000-0000-c000-000000000000"
68396893
}
@@ -7146,6 +7200,78 @@
71467200
"resourceAppId": ""
71477201
}
71487202
],
7203+
"IdentityDiagnostic.Read": [
7204+
{
7205+
"id": "f5b84bd9-6ffb-41bf-a2d2-644bcb35a835",
7206+
"scheme": "DelegatedWork",
7207+
"environment": "PPE;public",
7208+
"isHidden": true,
7209+
"isEnabled": true,
7210+
"resourceAppId": "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978"
7211+
},
7212+
{
7213+
"id": "7d41d790-4257-4307-8643-9a6da6750b69",
7214+
"scheme": "DelegatedPersonal",
7215+
"environment": "PPE;public",
7216+
"isHidden": true,
7217+
"isEnabled": true,
7218+
"resourceAppId": "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978"
7219+
}
7220+
],
7221+
"IdentityDiagnostic.Read.All": [
7222+
{
7223+
"id": "ba48ac7b-52a2-40f3-9003-acc2ef9f76f7",
7224+
"scheme": "DelegatedWork",
7225+
"environment": "PPE;public",
7226+
"isHidden": true,
7227+
"isEnabled": true,
7228+
"resourceAppId": "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978"
7229+
},
7230+
{
7231+
"id": "50665eca-92bc-491e-ac38-6135593a721b",
7232+
"scheme": "Application",
7233+
"environment": "PPE;public",
7234+
"isHidden": true,
7235+
"isEnabled": true,
7236+
"resourceAppId": "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978"
7237+
}
7238+
],
7239+
"IdentityDiagnostic.StartDiagnosis": [
7240+
{
7241+
"id": "001f3e87-728f-4372-b285-000198ae3b91",
7242+
"scheme": "DelegatedWork",
7243+
"environment": "PPE;public",
7244+
"isHidden": true,
7245+
"isEnabled": true,
7246+
"resourceAppId": "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978"
7247+
},
7248+
{
7249+
"id": "cae54ae3-5d80-4001-940b-913bcf35c538",
7250+
"scheme": "DelegatedPersonal",
7251+
"environment": "PPE;public",
7252+
"isHidden": true,
7253+
"isEnabled": true,
7254+
"resourceAppId": "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978"
7255+
}
7256+
],
7257+
"IdentityDiagnostic.StartDiagnosis.All": [
7258+
{
7259+
"id": "0fa62088-c970-47a9-8863-f7f87b94eef6",
7260+
"scheme": "DelegatedWork",
7261+
"environment": "PPE;public",
7262+
"isHidden": true,
7263+
"isEnabled": true,
7264+
"resourceAppId": "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978"
7265+
},
7266+
{
7267+
"id": "3bc0526d-f5d7-435b-b12b-93f8d4495b77",
7268+
"scheme": "Application",
7269+
"environment": "PPE;public",
7270+
"isHidden": true,
7271+
"isEnabled": true,
7272+
"resourceAppId": "a57aca87-cbc0-4f3c-8b9e-dc095fdc8978"
7273+
}
7274+
],
71497275
"IdentityRiskEvent.Read.All": [
71507276
{
71517277
"id": "8f6a01e7-0391-4ee5-aa22-a3af122cef27",
@@ -8628,6 +8754,34 @@
86288754
"resourceAppId": ""
86298755
}
86308756
],
8757+
"MailTips.ReadBasic.All": [
8758+
{
8759+
"id": "",
8760+
"scheme": "Application",
8761+
"environment": "",
8762+
"isHidden": true,
8763+
"isEnabled": true,
8764+
"resourceAppId": "00000002-0000-0ff1-ce00-000000000000"
8765+
}
8766+
],
8767+
"MailTips.ReadBasic.Shared": [
8768+
{
8769+
"id": "",
8770+
"scheme": "DelegatedWork",
8771+
"environment": "",
8772+
"isHidden": true,
8773+
"isEnabled": true,
8774+
"resourceAppId": "00000002-0000-0ff1-ce00-000000000000"
8775+
},
8776+
{
8777+
"id": "",
8778+
"scheme": "DelegatedPersonal",
8779+
"environment": "public",
8780+
"isHidden": true,
8781+
"isEnabled": true,
8782+
"resourceAppId": "00000002-0000-0ff1-ce00-000000000000"
8783+
}
8784+
],
86318785
"ManagedIdentity.Create": [
86328786
{
86338787
"id": "d419de8c-f1db-4863-8142-8092157a73ab",

0 commit comments

Comments
 (0)