Weekly Permissions sync 2025-01-16 (#965)

Author: marabooy

permissions/new/ProvisioningInfo.json

@@ -3414,6 +3414,17 @@
                 "resourceAppId": "00000000-0000-0000-0000-000000000000"
             }
         ],
+        "Device-AppProtectionCAProperties.ReadWrite.All": [
+            {
+                "id": "2ffea8af-4766-4a4f-ad87-e91dacb3046d",
+                "scheme": "Application",
+                "environment": "public",
+                "isHidden": true,
+                "isEnabled": true,
+                "isPreauthorizationOnly": true,
+                "resourceAppId": "00000000-0000-0000-0000-000000000000"
+            }
+        ],
         "Device-MdmManagedProperties.ReadWrite.All": [
             {
                 "id": "9f65ca3f-9c7c-4be7-b52f-fe5753e364b2",
@@ -9893,15 +9904,15 @@
                 "id": "e197c06f-ae7b-4398-b0a2-89f76ebca159",
                 "scheme": "DelegatedWork",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4"
             },
             {
                 "id": "2a6baefd-edea-4ff6-b24e-bebcaa27a50d",
                 "scheme": "Application",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4"
             }
@@ -9910,15 +9921,15 @@
             {
                 "scheme": "DelegatedWork",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4",
                 "id": "2a7babba-9623-4109-bc9c-79728cf3bb4f"
             },
             {
                 "scheme": "Application",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4",
                 "id": "7fc7225d-eb37-4c39-90f3-a33a57cf1081"
@@ -13855,6 +13866,16 @@
                 "resourceAppId": ""
             }
         ],
+        "User.ReadWrite.CrossCloud": [
+            {
+                "id": "59f9fad5-5ada-41d8-95dd-2176756f087d",
+                "scheme": "Application",
+                "environment": "public",
+                "isHidden": true,
+                "isEnabled": false,
+                "resourceAppId": "2313b47f-a76d-4513-be58-500e42ce8d11"
+            }
+        ],
         "User.RevokeSessions.All": [
             {
                 "id": "ffbe7342-fd34-43bf-afae-596c7e222428",

permissions/new/permissions.json

@@ -36054,6 +36054,92 @@
         "ownerSecurityGroup": "TeamsPermissions"
       }
     },
+    "RiskPreventionProviders.Read.All": {
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read all identity risk prevention providers",
+          "adminDescription": "Allows the app to read your organization's risk prevention providers, on behalf of the signed-in user.",
+          "userDisplayName": "Read all identity risk prevention providers",
+          "userDescription": "Allows the app to read your organization's risk prevention providers, on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        },
+        "Application": {
+          "adminDisplayName": "Read all identity risk prevention providers",
+          "adminDescription": "Allows the app to read your organization's risk prevention providers, without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/identity/riskPreventionProviders": "least=DelegatedWork,Application",
+            "/identity/riskPreventionProviders/{id}": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "cpimmsgraphadmins"
+      }
+    },
+    "RiskPreventionProviders.ReadWrite.All": {
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read and write all identity risk prevention providers",
+          "adminDescription": "Allows the app to read and write your organization's risk prevention providers, on behalf of the signed-in user.",
+          "userDisplayName": "Read and write all identity risk prevention providers",
+          "userDescription": "Allows the app to read and write your organization's risk prevention providers, on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        },
+        "Application": {
+          "adminDisplayName": "Read and write all identity risk prevention providers",
+          "adminDescription": "Allows the app to read and write your organization's risk prevention providers, without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET",
+            "POST"
+          ],
+          "paths": {
+            "/identity/riskPreventionProviders": "least=DelegatedWork,Application"
+          }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "DELETE",
+            "GET",
+            "PATCH"
+          ],
+          "paths": {
+            "/identity/riskPreventionProviders/{id}": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "cpimmsgraphadmins"
+      }
+    },
     "RoleAssignmentSchedule.Read.Directory": {
       "schemes": {
         "DelegatedWork": {