From db47b66f0b5bf2bf6f48ecdc452848b67f942478 Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Fri, 11 Jul 2025 03:33:17 +0300
Subject: [PATCH] Weekly Permissions sync 2025-07-11

---
 permissions/new/ProvisioningInfo.json | 14 ++---
 permissions/new/permissions.json      | 88 ++++++++++++++++++++++++++-
 2 files changed, 94 insertions(+), 8 deletions(-)

diff --git a/permissions/new/ProvisioningInfo.json b/permissions/new/ProvisioningInfo.json
index 3e82f6af..c50f04e8 100644
--- a/permissions/new/ProvisioningInfo.json
+++ b/permissions/new/ProvisioningInfo.json
@@ -5714,7 +5714,7 @@
         "id": "37e00479-5776-4659-aecf-4841ec5d590a",
         "scheme": "DelegatedWork",
         "environment": "PPE;public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "00000002-0000-0000-c000-000000000000"
       },
@@ -5722,7 +5722,7 @@
         "id": "2d9bd318-b883-40be-9df7-63ec4fcdc424",
         "scheme": "Application",
         "environment": "PPE;public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "00000002-0000-0000-c000-000000000000"
       }
@@ -5968,7 +5968,7 @@
         "id": "2eb2bc92-94ef-4c6b-b4ab-2a09bc975e0e",
         "scheme": "DelegatedWork",
         "environment": "public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "65d91a3d-ab74-42e6-8a2f-0add61688c74"
       },
@@ -5976,7 +5976,7 @@
         "id": "f3c4f514-c65a-43f5-bfce-1735872258dd",
         "scheme": "Application",
         "environment": "public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "65d91a3d-ab74-42e6-8a2f-0add61688c74"
       }
@@ -15474,7 +15474,7 @@
         "environment": "public",
         "isHidden": true,
         "isEnabled": true,
-        "resourceAppId": "93625bc8-bfe2-437a-97e0-3d0060024faa"
+        "resourceAppId": "ea890292-c8c8-4433-b5ea-b09d0668e1a6"
       },
       {
         "id": "db1ab09f-19aa-42fb-a75e-502bbe395625",
@@ -15482,7 +15482,7 @@
         "environment": "public",
         "isHidden": true,
         "isEnabled": true,
-        "resourceAppId": "93625bc8-bfe2-437a-97e0-3d0060024faa"
+        "resourceAppId": "ea890292-c8c8-4433-b5ea-b09d0668e1a6"
       }
     ],
     "VerifiedId-Profile.ReadWrite.All": [
@@ -15492,7 +15492,7 @@
         "environment": "public",
         "isHidden": true,
         "isEnabled": true,
-        "resourceAppId": "93625bc8-bfe2-437a-97e0-3d0060024faa"
+        "resourceAppId": "ea890292-c8c8-4433-b5ea-b09d0668e1a6"
       }
     ]
   }
diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json
index d03f5ccb..0d716d1d 100644
--- a/permissions/new/permissions.json
+++ b/permissions/new/permissions.json
@@ -24005,6 +24005,44 @@
         "ownerSecurityGroup": "GroupsIDCSG"
       }
     },
+    "Group-OnPremisesSyncBehavior.ReadWrite.All": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read and update the on-premises sync behavior of groups",
+          "adminDescription": "Allows the app to read and update the on-premises sync behavior of groups on behalf of the signed-in user.",
+          "userDisplayName": "Read and update the on-premises sync behavior of groups",
+          "userDescription": "Allows the app to update the on-premises sync behavior of groups on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 2
+        },
+        "Application": {
+          "adminDisplayName": "Read and update the on-premises sync behavior of groups",
+          "adminDescription": "Allows the app to update the on-premises sync behavior of all groups without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET",
+            "PATCH"
+          ],
+          "paths": {
+            "/groups/{id}/onPremisesSyncBehavior": "least=DelegatedWork,Application",
+            "/groups/onPremisesSyncBehavior": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "ddsappperm"
+      }
+    },
     "Group.Create": {
       "authorizationType": "oAuth2",
       "schemes": {
@@ -24915,6 +24953,51 @@
         "ownerSecurityGroup": "IdentityReq"
       }
     },
+    "GroupSettings.Read.All": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read all group settings that user can access",
+          "adminDescription": "Allows the app to read a list of tenant-level or group-specific group settings objects, on behalf of the signed-in user.",
+          "userDisplayName": "Read all group settings that user can access",
+          "userDescription": "Allows the app to read a list of tenant-level or group-specific group settings objects, on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        },
+        "Application": {
+          "adminDisplayName": "Read all group settings",
+          "adminDescription": "Allows the app to read a list of tenant-level or group-specific group settings objects, without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/directorysettingtemplates": "least=DelegatedWork,Application",
+            "/directorysettingtemplates/{id}": "least=DelegatedWork,Application",
+            "/groups/{id}/settings": "least=DelegatedWork,Application",
+            "/groups/{id}/settings/{id}": "least=DelegatedWork,Application",
+            "/groupsettings": "least=DelegatedWork,Application",
+            "/groupsettings/{id}": "least=DelegatedWork,Application",
+            "/groupsettingtemplates": "least=DelegatedWork,Application",
+            "/groupsettingtemplates/{id}": "least=DelegatedWork,Application",
+            "/settings": "least=DelegatedWork,Application",
+            "/settings/{id}": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "AADGroupsPreAuth"
+      }
+    },
     "HealthMonitoringAlert.Read.All": {
       "authorizationType": "oAuth2",
       "schemes": {
@@ -41232,7 +41315,8 @@
             "/sites/{id}/lists/{id}/permissions": "",
             "/sites/{id}/operations": "",
             "/sites/{id}/operations/{id}": "",
-            "/sites/{id}/permissions": "least=DelegatedWork,Application"
+            "/sites/{id}/permissions": "least=DelegatedWork,Application",
+            "/sites/{id}/searchCustomIndex(q={value})": ""
           }
         },
         {
@@ -41779,6 +41863,7 @@
             "/sites/{id}/pages/{id}/webparts/{id}/getpositionofwebpart": "least=DelegatedWork,Application",
             "/sites/{id}/pageTemplates": "least=DelegatedWork,Application",
             "/sites/{id}/pageTemplates/{id}": "least=DelegatedWork,Application",
+            "/sites/{id}/searchCustomIndex(q={value})": "least=DelegatedWork,Application",
             "/sites/{id}/settings": "least=DelegatedWork,Application",
             "/sites/{id}/sites": "least=DelegatedWork,Application",
             "/sites/root": "least=DelegatedWork,Application",
@@ -42199,6 +42284,7 @@
             "/sites/{id}/pages/{id}/webparts": "",
             "/sites/{id}/pages/{id}/webparts/{id}": "",
             "/sites/{id}/pages/{id}/webparts/{id}/getpositionofwebpart": "",
+            "/sites/{id}/searchCustomIndex(q={value})": "",
             "/sites/{id}/settings": "",
             "/sites/{id}/sites": "",
             "/sites/root": "",