From 5fb5902ba2584e69359997f6b4696780a2cc4277 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Fri, 10 Apr 2026 03:46:38 +0300 Subject: [PATCH 1/4] Weekly Permissions sync 2026-04-10 --- permissions/new/permissions.json | 4 + permissions/new/provisioningInfo.json | 136 ++++++++++++++++++++++++++ 2 files changed, 140 insertions(+) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 843330b2..b274710c 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -186,6 +186,8 @@ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/batchrecorddecisions": "least=DelegatedWork,Application", "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/resetdecisions": "least=DelegatedWork,Application", "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/sendreminder": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/acceptrecommendations": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/batchrecorddecisions": "least=DelegatedWork,Application", "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/stop": "least=DelegatedWork,Application", "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stop": "least=DelegatedWork,Application", "/identitygovernance/accessreviews/historydefinitions/{id}/instances/{id}/generatedownloaduri": "least=DelegatedWork,Application", @@ -12426,6 +12428,7 @@ "paths": { "/me/dataSecurityAndGovernance/contentUploadSession": "", "/me/dataSecurityAndGovernance/processContent": "", + "/security/dataSecurityAndGovernance/processContent": "least=Application,DelegatedWork", "/security/dataSecurityAndGovernance/processContentAsync": "least=Application,DelegatedWork", "/users/{userId}/dataSecurityAndGovernance/contentUploadSession": "", "/users/{userId}/dataSecurityAndGovernance/processContent": "" @@ -27230,6 +27233,7 @@ "/storage/fileStorage/containers/{id}/lock": "", "/storage/fileStorage/containers/{id}/permanentDelete": "", "/storage/fileStorage/containers/{id}/permissions": "", + "/storage/fileStorage/containers/{id}/transferPrincipalOwnership": "least=DelegatedWork", "/storage/fileStorage/containers/{id}/unarchive": "", "/storage/fileStorage/containers/{id}/unlock": "", "/storage/fileStorage/deletedContainers/{id}/restore": "" diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index e7a74f7c..0df721d7 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -659,6 +659,24 @@ "isEnabled": true, "resourceAppId": "00000002-0000-0000-c000-000000000000" } + ], + "AgentIdentityBlueprintPrincipal.UpdateSponsors.All": [ + { + "id": "", + "scheme": "Application", + "environment": "PPE;public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "", + "scheme": "DelegatedWork", + "environment": "PPE;public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } ], "AgentRegistration.Read.All": [ { @@ -9806,6 +9824,16 @@ "resourceAppId": "" } ], + "OneDrive.Provision.All": [ + { + "id": "00000000-0000-0000-0000-000000000000", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000003-0000-0ff1-ce00-000000000000" + } + ], "OnlineMeeting.ReadBasic.Chat": [ { "id": "eda8d262-4e6e-4ff6-a7ba-a2fb50535165", @@ -12495,6 +12523,42 @@ "resourceAppId": "" } ], + "RecoveryPolicy.Read.All": [ + { + "id": "", + "scheme": "Application", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "", + "scheme": "DelegatedWork", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], + "RecoveryPolicy.ReadWrite.All": [ + { + "id": "", + "scheme": "Application", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "", + "scheme": "DelegatedWork", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], "Reports.Read.All": [ { "id": "02e97553-ed7b-43d0-ab3c-f8bace0d040c", @@ -14631,6 +14695,42 @@ "resourceAppId": "00000002-0000-0000-c000-000000000000" } ], + "ServicePrincipal.EnableDisable.All": [ + { + "id": "3f7b1c56-8b26-4d69-9d7a-4c82f4c8a2e1", + "scheme": "DelegatedWork", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "9a21e4df-6c93-45b4-b1f0-2d5e8f0b7c44", + "scheme": "Application", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], + "ServicePrincipal.AddRemoveCreds.All": [ + { + "id": "c4d8f3a9-1e72-4b8d-8f6c-7a91d2e5b3f0", + "scheme": "DelegatedWork", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "6e2a9b14-f5c7-4381-a6d2-0c8f4e1b9a73", + "scheme": "Application", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], "SharePointCrossTenantMigration.Read.All": [ { "id": "00dcb678-f9af-4e73-acb1-4f1657364629", @@ -27431,6 +27531,42 @@ "scheme": "DelegatedWork" } ], + "_G.AU": [ + { + "id": "", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000", + "scheme": "Application" + }, + { + "id": "", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000", + "scheme": "DelegatedWork" + } + ], + "_G.AV": [ + { + "id": "", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000", + "scheme": "Application" + }, + { + "id": "", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000", + "scheme": "DelegatedWork" + } + ], "_H.AM": [ { "id": "", From 6a8536819837a92bf4d912989d6820edb57b62d3 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Fri, 10 Apr 2026 04:26:39 +0300 Subject: [PATCH 2/4] Weekly Permissions sync 2026-04-10 --- permissions/new/provisioningInfo.json | 36 --------------------------- 1 file changed, 36 deletions(-) diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index 0df721d7..13daed12 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -27531,42 +27531,6 @@ "scheme": "DelegatedWork" } ], - "_G.AU": [ - { - "id": "", - "environment": "", - "isHidden": true, - "isEnabled": true, - "resourceAppId": "00000002-0000-0000-c000-000000000000", - "scheme": "Application" - }, - { - "id": "", - "environment": "", - "isHidden": true, - "isEnabled": true, - "resourceAppId": "00000002-0000-0000-c000-000000000000", - "scheme": "DelegatedWork" - } - ], - "_G.AV": [ - { - "id": "", - "environment": "", - "isHidden": true, - "isEnabled": true, - "resourceAppId": "00000002-0000-0000-c000-000000000000", - "scheme": "Application" - }, - { - "id": "", - "environment": "", - "isHidden": true, - "isEnabled": true, - "resourceAppId": "00000002-0000-0000-c000-000000000000", - "scheme": "DelegatedWork" - } - ], "_H.AM": [ { "id": "", From aa33ee010116a121f74d7027d04c29797d8e8dda Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Fri, 10 Apr 2026 04:29:17 +0300 Subject: [PATCH 3/4] Weekly Permissions sync 2026-04-10 --- permissions/new/provisioningInfo.json | 36 +++++++++++++++++++++++++++ 1 file changed, 36 insertions(+) diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index 13daed12..0df721d7 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -27531,6 +27531,42 @@ "scheme": "DelegatedWork" } ], + "_G.AU": [ + { + "id": "", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000", + "scheme": "Application" + }, + { + "id": "", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000", + "scheme": "DelegatedWork" + } + ], + "_G.AV": [ + { + "id": "", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000", + "scheme": "Application" + }, + { + "id": "", + "environment": "", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "00000002-0000-0000-c000-000000000000", + "scheme": "DelegatedWork" + } + ], "_H.AM": [ { "id": "", From 3eae755a80325968eb004371add5d82fafd3f627 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Fri, 10 Apr 2026 17:29:59 +0300 Subject: [PATCH 4/4] Weekly Permissions sync 2026-04-10 --- permissions/new/permissions.json | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index b274710c..44d0324a 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -62000,6 +62000,9 @@ "/admin/windows/updates/resourceconnections": "least=DelegatedWork,Application", "/admin/windows/updates/resourceconnections/{id}": "least=DelegatedWork,Application", "/admin/windows/updates/resourceconnections/microsoft.graph.windowsupdates.operationalinsightsconnection": "least=DelegatedWork,Application", + "/admin/windows/updates/tenantSettings": "least=DelegatedWork,Application", + "/admin/windows/updates/tenantSettings/mdmAppSettings": "least=DelegatedWork,Application", + "/admin/windows/updates/tenantSettings/mdmAppSettings/{mdmAppId}": "least=DelegatedWork,Application", "/admin/windows/updates/updatableassets": "least=DelegatedWork,Application", "/admin/windows/updates/updatableassets/{id}": "least=DelegatedWork,Application", "/admin/windows/updates/updatableassets/{id}/microsoft.graph.windowsupdates.updatableassetgroup/members": "least=DelegatedWork,Application", @@ -62088,6 +62091,7 @@ "/admin/windows/updates/policies/{id}/approvals": "least=DelegatedWork,Application", "/admin/windows/updates/policies/{id}/rings": "least=DelegatedWork,Application", "/admin/windows/updates/resourceconnections": "least=DelegatedWork,Application", + "/admin/windows/updates/tenantSettings/mdmAppSettings": "least=DelegatedWork,Application", "/admin/windows/updates/updatableassets": "least=DelegatedWork,Application", "/admin/windows/updates/updatepolicies": "least=DelegatedWork,Application", "/admin/windows/updates/updatepolicies/{id}/compliancechanges": "least=DelegatedWork,Application" @@ -62127,6 +62131,20 @@ "/admin/windows/updates/updatepolicies/{id}/compliancechanges/{id}": "least=DelegatedWork,Application" } }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET", + "PATCH" + ], + "paths": { + "/admin/windows/updates/tenantSettings": "least=DelegatedWork,Application", + "/admin/windows/updates/tenantSettings/mdmAppSettings/{mdmAppId}": "least=DelegatedWork,Application" + } + }, { "schemeKeys": [ "DelegatedWork",