Skip to content

Weekly Permissions sync 2026-03-26 #1481

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
marabooy wants to merge 2 commits into from
Closed

Weekly Permissions sync 2026-03-26 #1481

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
a76deaf
Weekly Permissions sync 2026-03-26
marabooy Mar 26, 2026
f67078f
Merge branch 'master' into permissions-update/2026-03-26
jasonjoh Mar 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
81 changes: 81 additions & 0 deletions permissions/new/permissions.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22767,6 +22767,21 @@
"/rolemanagement/entitlementmanagement/roledefinitions/{id}": "least=DelegatedWork,Application"
}
},
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"GET"
],
"paths": {
"/identitygovernance/accessevaluationdetections": "least=DelegatedWork,Application",
"/identitygovernance/accessevaluationdetections/{id}": "least=DelegatedWork,Application",
"/identitygovernance/accessevaluationpolicies": "least=DelegatedWork,Application",
"/identitygovernance/accessevaluationpolicies/{id}": "least=DelegatedWork,Application"
}
Comment on lines +22782 to +22795
Copy link

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This adds a second pathSet with the same schemeKeys and methods (DelegatedWork+Application, GET) as an existing pathSet just above. Consider merging these new paths into the existing GET pathSet to avoid redundant blocks and keep the permission mapping easier to maintain.

Copilot uses AI. Check for mistakes.
},
{
"schemeKeys": [
"Application"
Expand Down Expand Up @@ -23010,6 +23025,58 @@
"paths": {
"/identitygovernance/entitlementmanagement/settings": "least=DelegatedWork,Application"
}
},
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"GET"
],
"paths": {
"/identitygovernance/accessevaluationdetections": "",
"/identitygovernance/accessevaluationdetections/{id}": "",
"/identitygovernance/accessevaluationpolicies": "",
"/identitygovernance/accessevaluationpolicies/{id}": ""
}
Comment on lines +23041 to +23054
Copy link

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is already a GET pathSet for the same schemeKeys (DelegatedWork+Application) earlier in this permission that lists many GET paths with empty values. Consider adding these new access evaluation GET paths to that existing GET pathSet instead of introducing a separate, identical GET block.

Copilot uses AI. Check for mistakes.
},
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"POST"
],
"paths": {
"/identitygovernance/catalogs/{id}/accessevaluationpolicies": "least=DelegatedWork,Application"
}
},
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"PATCH"
],
"paths": {
"/identitygovernance/accessevaluationdetections/{id}": "least=DelegatedWork,Application",
"/identitygovernance/catalogs/{id}/accessevaluationpolicies/{id}": "least=DelegatedWork,Application"
}
},
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"DELETE"
],
"paths": {
"/identitygovernance/catalogs/{id}/accessevaluationpolicies/{id}": "least=DelegatedWork,Application"
}
}
],
"ownerInfo": {
Expand Down Expand Up @@ -33690,6 +33757,10 @@
"/networkAccess/forwardingProfiles": "least=DelegatedWork,Application",
"/networkAccess/forwardingProfiles/{id}": "least=DelegatedWork,Application",
"/networkAccess/forwardingProfiles/{id}/policies/{id}": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies/{id}": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies/{id}/policyRules": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
"/networkaccess/privateAccessConfigs/{id}": "least=DelegatedWork,Application",
"/networkAccess/privateNetworks": "least=DelegatedWork,Application",
"/networkAccess/privateNetworks/{id}": "least=DelegatedWork,Application",
Expand Down Expand Up @@ -33795,6 +33866,10 @@
"/networkaccess/logs/remoteNetworks": "",
"/networkaccess/logs/traffic": "",
"/networkaccess/logs/traffic/{id}": "",
"/networkAccess/mcpPolicies": "",
"/networkAccess/mcpPolicies/{id}": "",
"/networkAccess/mcpPolicies/{id}/policyRules": "",
"/networkAccess/mcpPolicies/{id}/policyRules/{id}": "",
"/networkaccess/privateAccessConfigs/{id}": "",
"/networkAccess/privateNetworks": "",
"/networkAccess/privateNetworks/{id}": "",
Expand Down Expand Up @@ -33857,6 +33932,8 @@
"/networkAccess/filteringProfiles/{id}/policies": "least=DelegatedWork,Application",
"/networkAccess/forwardingPolicies/{id}/policyRules": "least=DelegatedWork,Application",
"/networkAccess/forwardingProfiles/{id}/policies": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies/{id}/policyRules": "least=DelegatedWork,Application",
"/networkaccess/privateAccessConfigs/{id}": "least=DelegatedWork,Application",
"/networkAccess/privateNetworks": "least=DelegatedWork,Application",
"/networkAccess/securityProviderPolicies": "least=DelegatedWork,Application",
Expand Down Expand Up @@ -33893,6 +33970,8 @@
"/networkAccess/forwardingPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
"/networkAccess/forwardingProfiles/{id}": "least=DelegatedWork,Application",
"/networkAccess/forwardingProfiles/{id}/policies/{id}": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies/{id}": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
"/networkaccess/privateAccessConfigs/{id}": "least=DelegatedWork,Application",
"/networkAccess/privateNetworks/{id}": "least=DelegatedWork,Application",
"/networkAccess/securityProviderPolicies/{id}": "least=DelegatedWork,Application",
Expand Down Expand Up @@ -33929,6 +34008,8 @@
"/networkAccess/filteringProfiles/{id}/policies/{id}": "least=DelegatedWork,Application",
"/networkAccess/forwardingPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
"/networkAccess/forwardingProfiles/{id}/policies/{id}": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies/{id}": "least=DelegatedWork,Application",
"/networkAccess/mcpPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
"/networkaccess/privateAccessConfigs/{id}": "least=DelegatedWork,Application",
"/networkAccess/privateNetworks/{id}": "least=DelegatedWork,Application",
"/networkAccess/securityProviderPolicies/{id}": "least=DelegatedWork,Application",
Expand Down
66 changes: 65 additions & 1 deletion permissions/new/provisioningInfo.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -533,7 +533,25 @@
"isEnabled": false,
"resourceAppId": "00000002-0000-0000-c000-000000000000"
}
],
],
"AgentIdentityBlueprint.UpdateManagerApps.All": [
{
"id": "",
"scheme": "Application",
"environment": "PPE;public",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "00000002-0000-0000-c000-000000000000"
},
{
"id": "",
"scheme": "DelegatedWork",
"environment": "PPE;public",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "00000002-0000-0000-c000-000000000000"
}
],
"AgentIdentityBlueprintPrincipal.Read.All": [
{
"id": "",
Expand Down Expand Up @@ -641,6 +659,42 @@
"isEnabled": true,
"resourceAppId": "00000002-0000-0000-c000-000000000000"
}
],
"AgentRegistration.Read.All": [
Copy link

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The permission key at this indentation level is misaligned (one extra leading space before the opening quote). Please align it with the surrounding keys to keep JSON indentation consistent (2 spaces per level / consistent column alignment).

Suggested change
"AgentRegistration.Read.All": [
"AgentRegistration.Read.All": [

Copilot uses AI. Check for mistakes.
{
"id": "",
"scheme": "DelegatedWork",
"environment": "public",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "59eca866-2f46-40b8-96ff-63f663121ef9"
},
{
"id": "",
"scheme": "Application",
"environment": "public",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "59eca866-2f46-40b8-96ff-63f663121ef9"
}
],
"AgentRegistration.ReadWrite.All": [
{
"id": "",
"scheme": "DelegatedWork",
"environment": "public",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "59eca866-2f46-40b8-96ff-63f663121ef9"
},
{
"id": "",
"scheme": "Application",
"environment": "public",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "59eca866-2f46-40b8-96ff-63f663121ef9"
}
],
"Agreement.Read.All": [
{
Expand Down Expand Up @@ -12327,6 +12381,16 @@
"resourceAppId": "26a18ebc-cdf7-4a6a-91cb-beb352805e81"
}
],
"Calls.ReportSyntheticMedia.All": [
{
"id": "e4d4cb9c-a3d1-425d-90a2-8504eb334d6b",
"scheme": "Application",
"environment": "public",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "26a18ebc-cdf7-4a6a-91cb-beb352805e81"
}
],
"RecordsManagement.Read.All": [
{
"id": "07f995eb-fc67-4522-ad66-2b8ca8ea3efd",
Expand Down
Loading