release: deploy to prod with updated pipeline

azure-pipelines/publishSamples.yml

@@ -1,15 +1,23 @@
-# Starter pipeline
-# Start with a minimal pipeline that you can customize to build and deploy your code.
-# Add steps that build, run tests, deploy, and more:
-# https://aka.ms/yaml
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License.
+
+# Microsoft Graph Explorer API - Sample Queries and Permissions
+# This pipeline publishes sample queries and permissions files to Azure Blob Storage.
 
 name: $(BuildDefinitionName)_$(SourceBranchName)_$(Date:yyyyMMdd)$(Rev:.r)
+
 trigger:
   branches:
     include:
     - master
     - dev
+  paths:
+    include:
+    - 'samples-queries/**'
+    - 'permissions/**'
+
 pr: none
+
 resources:
   repositories:
   - repository: 1ESPipelineTemplates
@@ -25,6 +33,7 @@ extends:
       os: windows
     customBuildTags:
     - ES365AIMigrationTooling
+
     stages:
     - stage: CopyArtifactFiles
       jobs:
@@ -42,29 +51,30 @@ extends:
             Contents: |
               **\permissions\** 
               **\sample-queries\**
-            TargetFolder: '$(build.artifactstagingdirectory)'
+            TargetFolder: '$(Build.ArtifactStagingDirectory)'
 
     - stage: DeployStaging
-      condition: and(contains(variables['build.sourceBranch'], 'refs/heads/dev'), succeeded())
+      condition: and(contains(variables['Build.SourceBranchName'], 'dev'), succeeded())
       dependsOn: CopyArtifactFiles
       jobs:
-      - deployment: staging  
+      - deployment: staging
+        displayName: 'Deploy to Staging'
+        environment: graphexplorerapi-staging
         templateContext:
           type: releaseJob
           isProduction: false
           inputs:
           - input: pipelineArtifact
             artifactName: drop
             targetPath: $(Build.ArtifactStagingDirectory)
-        environment: graphexplorerapi-staging
         strategy:
           runOnce:
             deploy:
               steps:
               - task: AzureFileCopy@6
                 displayName: 'Upload Sample Query files'
                 inputs:
-                  SourcePath: '$(build.artifactstagingdirectory)/sample-queries/*'
+                  SourcePath: '$(Build.ArtifactStagingDirectory)/sample-queries/*'
                   azureSubscription: 'DevX PPE Content Managed Identity Connection'
                   Destination: AzureBlob
                   storage: devxapistppeeastus
@@ -73,30 +83,35 @@ extends:
               - task: AzureFileCopy@6
                 displayName: 'Upload Permission Description Files '
                 inputs:
-                  SourcePath: '$(build.artifactstagingdirectory)/permissions/*'
+                  SourcePath: '$(Build.ArtifactStagingDirectory)/permissions/*'
                   azureSubscription: 'DevX PPE Content Managed Identity Connection'
                   Destination: AzureBlob
                   storage: devxapistppeeastus
                   ContainerName: 'staging-permissions'
 
 
     - stage: DeployProduction
-      condition: and(contains(variables['build.sourceBranch'], 'refs/heads/master'), succeeded())
+      condition: and(contains(variables['Build.SourceBranchName'], 'master'), succeeded())
       dependsOn: CopyArtifactFiles
       jobs:
       - deployment: production
+        displayName: 'Deploy to Production'
+        environment: graphexplorerapi-production
         templateContext:
           type: releaseJob
           isProduction: true
-        environment: graphexplorerapi-production
+          inputs:
+          - input: pipelineArtifact
+            artifactName: drop
+            targetPath: $(Build.ArtifactStagingDirectory)
         strategy:
           runOnce:
             deploy:
               steps:
               - task: AzureFileCopy@6
                 displayName: 'Upload Sample Query files'
                 inputs:
-                  SourcePath: '$(build.artifactstagingdirectory)/sample-queries/*'
+                  SourcePath: '$(Build.ArtifactStagingDirectory)/sample-queries/*'
                   azureSubscription: 'DevX Prod Content Managed Identity Connection'
                   Destination: AzureBlob
                   storage: devxapistprodeastus
@@ -105,7 +120,7 @@ extends:
               - task: AzureFileCopy@6
                 displayName: 'Upload Permission Description Files '
                 inputs:
-                  SourcePath: '$(build.artifactstagingdirectory)/permissions/*'
+                  SourcePath: '$(Build.ArtifactStagingDirectory)/permissions/*'
                   azureSubscription: 'DevX Prod Content Managed Identity Connection'
                   Destination: AzureBlob
                   storage: devxapistprodeastus

permissions/new/ProvisioningInfo.json

@@ -5751,15 +5751,15 @@
         "id": "37e00479-5776-4659-aecf-4841ec5d590a",
         "scheme": "DelegatedWork",
         "environment": "PPE;public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "00000002-0000-0000-c000-000000000000"
       },
       {
         "id": "2d9bd318-b883-40be-9df7-63ec4fcdc424",
         "scheme": "Application",
         "environment": "PPE;public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "00000002-0000-0000-c000-000000000000"
       }

permissions/new/permissions.json

@@ -24271,6 +24271,44 @@
         "ownerSecurityGroup": "GroupsIDCSG"
       }
     },
+    "Group-OnPremisesSyncBehavior.ReadWrite.All": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read and update the on-premises sync behavior of groups",
+          "adminDescription": "Allows the app to read and update the on-premises sync behavior of groups on behalf of the signed-in user.",
+          "userDisplayName": "Read and update the on-premises sync behavior of groups",
+          "userDescription": "Allows the app to update the on-premises sync behavior of groups on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 2
+        },
+        "Application": {
+          "adminDisplayName": "Read and update the on-premises sync behavior of groups",
+          "adminDescription": "Allows the app to update the on-premises sync behavior of all groups without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET",
+            "PATCH"
+          ],
+          "paths": {
+            "/groups/{id}/onPremisesSyncBehavior": "least=DelegatedWork,Application",
+            "/groups/onPremisesSyncBehavior": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "ddsappperm"
+      }
+    },
     "Group.Create": {
       "authorizationType": "oAuth2",
       "schemes": {