Skip to content

Weekly Permissions sync 2026-05-11#1525

Open
marabooy wants to merge 1 commit into
masterfrom
permissions-update/2026-05-11
Open

Weekly Permissions sync 2026-05-11#1525
marabooy wants to merge 1 commit into
masterfrom
permissions-update/2026-05-11

Conversation

@marabooy
Copy link
Copy Markdown
Contributor

Weekly Permissions sync 2026-05-11

Copilot AI review requested due to automatic review settings May 11, 2026 00:27
@marabooy marabooy requested a review from a team as a code owner May 11, 2026 00:27
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Weekly sync update to the Graph permissions metadata, aligning permissions.json (permission definitions + route mappings) and provisioningInfo.json (deployment/provisioning variants) with the latest upstream state.

Changes:

  • Added new permission entries and route mappings (notably Group-NestingSupport.ReadWrite.All and ServicePrincipal.AddRemoveCreds.All).
  • Updated/expanded several path mappings (e.g., AgentIdentity create least mapping, new device management getSyncStatus, Lifecycle Workflows least-privilege adjustments, Conditional Access “plans” endpoints).
  • Updated provisioning variants (new AgentIdentity/BlueprintPrincipal entries, visibility flips, and renames).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
permissions/new/provisioningInfo.json Adds/updates permission provisioning variants (including new agent identity-related entries) and adjusts some metadata fields (e.g., isHidden).
permissions/new/permissions.json Adds new permission definitions and updates route-to-permission least mappings for multiple API areas (groups, service principals, device management, lifecycle workflows, conditional access, report settings).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

"resourceAppId": "00000002-0000-0000-c000-000000000000"
}
],
"AgentRegistration.Read.All": [
}
],
"ServicePrincipal.MigrateToAgentIdentity.OwnedBy": [
"ServicePrincipal.ConvertToAgentIdentity.OwnedBy": [
Comment on lines +46691 to +46708
"pathSets": [
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"POST"
],
"paths": {
"/serviceprincipals(appid={value})/addkey": "least=DelegatedWork",
"/serviceprincipals(appid={value})/addpassword": "least=DelegatedWork",
"/serviceprincipals(appid={value})/removekey": "least=DelegatedWork",
"/serviceprincipals(appid={value})/removepassword": "least=DelegatedWork",
"/serviceprincipals/{id}/addkey": "least=DelegatedWork",
"/serviceprincipals/{id}/addpassword": "least=DelegatedWork",
"/serviceprincipals/{id}/removekey": "least=DelegatedWork",
"/serviceprincipals/{id}/removepassword": "least=DelegatedWork"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants