Skip to content

Commit 7f892e5

Browse files
marabooymarabooy
authored
Weekly Permissions sync 2026-01-20 (#1412)
1 parent 28ef2b6 commit 7f892e5

2 files changed

Lines changed: 141 additions & 15 deletions

File tree

‎permissions/new/permissions.json‎

Lines changed: 80 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -11463,6 +11463,7 @@
1146311463
"/devicemanagement/virtualendpoint/cloudpcs/{id}/start": "least=DelegatedWork,Application",
1146411464
"/devicemanagement/virtualendpoint/cloudpcs/{id}/stop": "least=DelegatedWork,Application",
1146511465
"/devicemanagement/virtualendpoint/cloudpcs/{id}/troubleshoot": "least=DelegatedWork,Application",
11466+
"/devicemanagement/virtualendpoint/deviceimages/{id}/retryUpload": "least=DelegatedWork,Application",
1146611467
"/devicemanagement/virtualendpoint/deviceimages/{id}/reupload": "least=DelegatedWork,Application",
1146711468
"/devicemanagement/virtualendpoint/onpremisesconnections/{id}/updateaddomainpassword": "least=DelegatedWork,Application",
1146811469
"/devicemanagement/virtualendpoint/provisioningpolicies/{id}/assign": "least=DelegatedWork,Application",
@@ -32212,7 +32213,7 @@
3221232213
"adminDescription": "Allows the app to read the user's mailbox folders, on behalf of the the signed-in user.",
3221332214
"userDisplayName": "Read your mailbox folders",
3221432215
"userDescription": "Allows the app to read your mailbox folders, on your behalf",
32215-
"requiresAdminConsent": false,
32216+
"requiresAdminConsent": true,
3221632217
"privilegeLevel": 2
3221732218
}
3221832219
},
@@ -32270,7 +32271,7 @@
3227032271
"adminDescription": "Allows the app to read and write the user's mailbox folders, on behalf of the the signed-in user.",
3227132272
"userDisplayName": "Read and write your mailbox folders",
3227232273
"userDescription": "Allows the app to read and write your mailbox folders, on your behalf",
32273-
"requiresAdminConsent": false,
32274+
"requiresAdminConsent": true,
3227432275
"privilegeLevel": 2
3227532276
}
3227632277
},
@@ -32346,6 +32347,62 @@
3234632347
"ownerSecurityGroup": "stisaprvc"
3234732348
}
3234832349
},
32350+
"MailboxItem.Export": {
32351+
"authorizationType": "oAuth2",
32352+
"schemes": {
32353+
"DelegatedWork": {
32354+
"adminDisplayName": "Export a user's mailbox items",
32355+
"adminDescription": "Allows the app to export the user's mailbox items, on behalf of the the signed-in user.",
32356+
"userDisplayName": "Export your mailbox items",
32357+
"userDescription": "Allows the app to export your mailbox items, on your behalf",
32358+
"requiresAdminConsent": true,
32359+
"privilegeLevel": 2
32360+
}
32361+
},
32362+
"pathSets": [
32363+
{
32364+
"schemeKeys": [
32365+
"DelegatedWork"
32366+
],
32367+
"methods": [
32368+
"POST"
32369+
],
32370+
"paths": {
32371+
"/admin/exchange/mailboxes/{id}/exportItems": "least=DelegatedWork"
32372+
}
32373+
}
32374+
],
32375+
"ownerInfo": {
32376+
"ownerSecurityGroup": "stisaprvc"
32377+
}
32378+
},
32379+
"MailboxItem.Export.All": {
32380+
"authorizationType": "oAuth2",
32381+
"schemes": {
32382+
"Application": {
32383+
"adminDisplayName": "Export all the users' mailbox items",
32384+
"adminDescription": "Allows the app to export all the users' mailbox items, without signed-in user.",
32385+
"requiresAdminConsent": true,
32386+
"privilegeLevel": 4
32387+
}
32388+
},
32389+
"pathSets": [
32390+
{
32391+
"schemeKeys": [
32392+
"Application"
32393+
],
32394+
"methods": [
32395+
"POST"
32396+
],
32397+
"paths": {
32398+
"/admin/exchange/mailboxes/{id}/exportItems": "least=Application"
32399+
}
32400+
}
32401+
],
32402+
"ownerInfo": {
32403+
"ownerSecurityGroup": "stisaprvc"
32404+
}
32405+
},
3234932406
"MailboxItem.ImportExport": {
3235032407
"authorizationType": "oAuth2",
3235132408
"schemes": {
@@ -32354,7 +32411,7 @@
3235432411
"adminDescription": "Allows the app to export and import the user's mailbox items, on behalf of the the signed-in user.",
3235532412
"userDisplayName": "Export and import your mailbox items",
3235632413
"userDescription": "Allows the app to export and import your mailbox items, on your behalf",
32357-
"requiresAdminConsent": false,
32414+
"requiresAdminConsent": true,
3235832415
"privilegeLevel": 2
3235932416
}
3236032417
},
@@ -32412,7 +32469,7 @@
3241232469
"adminDescription": "Allows the app to read the user's mailbox items, on behalf of the the signed-in user.",
3241332470
"userDisplayName": "Read your mailbox items",
3241432471
"userDescription": "Allows the app to read your mailbox items, on your behalf",
32415-
"requiresAdminConsent": false,
32472+
"requiresAdminConsent": true,
3241632473
"privilegeLevel": 2
3241732474
}
3241832475
},
@@ -36904,8 +36961,11 @@
3690436961
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
3690536962
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
3690636963
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
36907-
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTips": "least=DelegatedWork,Application",
36964+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application",
36965+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application",
3690836966
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
36967+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application",
36968+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application",
3690936969
"/policies/crosstenantaccesspolicy/partners": "least=DelegatedWork,Application",
3691036970
"/policies/crosstenantaccesspolicy/partners/{id}": "least=DelegatedWork,Application",
3691136971
"/policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization": "least=DelegatedWork,Application",
@@ -36915,9 +36975,12 @@
3691536975
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
3691636976
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
3691736977
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
36918-
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTips": "least=DelegatedWork,Application",
36978+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application",
36979+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application",
3691936980
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMigration": "least=DelegatedWork,Application",
3692036981
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
36982+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application",
36983+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application",
3692136984
"/policies/defaultappmanagementpolicy": "least=DelegatedWork,Application",
3692236985
"/policies/externalidentitiespolicy": "least=DelegatedWork,Application",
3692336986
"/policies/homerealmdiscoverypolicies": "least=DelegatedWork,Application",
@@ -38539,8 +38602,11 @@
3853938602
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
3854038603
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
3854138604
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
38542-
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTips": "least=DelegatedWork,Application",
38543-
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application"
38605+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application",
38606+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application",
38607+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
38608+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application",
38609+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application"
3854438610
}
3854538611
},
3854638612
{
@@ -38559,9 +38625,12 @@
3855938625
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
3856038626
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
3856138627
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
38562-
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTips": "least=DelegatedWork,Application",
38628+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application",
38629+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application",
3856338630
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMigration": "least=DelegatedWork,Application",
38564-
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application"
38631+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
38632+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application",
38633+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application"
3856538634
}
3856638635
}
3856738636
],
@@ -60640,6 +60709,7 @@
6064060709
"/admin/windows/updates/knownIssues/{id}": "least=DelegatedWork,Application",
6064160710
"/admin/windows/updates/knownIssues/Default.findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
6064260711
"/admin/windows/updates/knownIssues/findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
60712+
"/admin/windows/updates/policies/{id}/applicableContent": "least=DelegatedWork,Application",
6064360713
"/admin/windows/updates/products": "least=DelegatedWork,Application",
6064460714
"/admin/windows/updates/products/{id}": "least=DelegatedWork,Application",
6064560715
"/admin/windows/updates/products/{id}/Default.getKnownIssuesByTimeRange(daysInPast={daysInPast},includeAllActive={includeAllActive})": "least=DelegatedWork,Application",

‎permissions/new/provisioningInfo.json‎

Lines changed: 61 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -586,6 +586,24 @@
586586
"resourceAppId": "00000002-0000-0000-c000-000000000000"
587587
}
588588
],
589+
"AgentIdentityBlueprintPrincipal.ReadWrite.ManagedBy": [
590+
{
591+
"id": "",
592+
"scheme": "Application",
593+
"environment": "PPE;public",
594+
"isHidden": true,
595+
"isEnabled": true,
596+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
597+
},
598+
{
599+
"id": "",
600+
"scheme": "DelegatedWork",
601+
"environment": "PPE;public",
602+
"isHidden": true,
603+
"isEnabled": true,
604+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
605+
}
606+
],
589607
"Agreement.Read.All": [
590608
{
591609
"id": "af2819c9-df71-4dd3-ade7-4d7c9dc653b7",
@@ -5816,7 +5834,7 @@
58165834
"resourceAppId": ""
58175835
}
58185836
],
5819-
"EntraBackup.Read.Preview": [
5837+
"EntraBackup.Read.All": [
58205838
{
58215839
"id": "c16f30f0-3121-4976-bafe-66cb042f4f80",
58225840
"scheme": "Application",
@@ -8468,10 +8486,11 @@
84688486
],
84698487
"MailboxItem.Export": [
84708488
{
8489+
"id": "58d3e7fa-3ce9-4a0c-9baa-0971f64709d9",
84718490
"scheme": "DelegatedWork",
84728491
"environment": "PPE;public",
8473-
"isHidden": true,
8474-
"isEnabled": false,
8492+
"isHidden": false,
8493+
"isEnabled": true,
84758494
"resourceAppId": "c999ed3e-27ae-4cb3-b3a2-46b056af63d3"
84768495
}
84778496
],
@@ -8487,10 +8506,11 @@
84878506
],
84888507
"MailboxItem.Export.All": [
84898508
{
8509+
"id": "937550e9-33a3-494b-88ae-d9cd394b1fbb",
84908510
"scheme": "Application",
84918511
"environment": "PPE;public",
8492-
"isHidden": true,
8493-
"isEnabled": false,
8512+
"isHidden": false,
8513+
"isEnabled": true,
84948514
"resourceAppId": "c999ed3e-27ae-4cb3-b3a2-46b056af63d3"
84958515
}
84968516
],
@@ -13623,6 +13643,24 @@
1362313643
"resourceAppId": "00000002-0000-0000-c000-000000000000"
1362413644
}
1362513645
],
13646+
"AgentIdentity.ReadWrite.ManagedBy": [
13647+
{
13648+
"id": "",
13649+
"scheme": "Application",
13650+
"environment": "PPE;public",
13651+
"isHidden": true,
13652+
"isEnabled": true,
13653+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
13654+
},
13655+
{
13656+
"id": "",
13657+
"scheme": "DelegatedWork",
13658+
"environment": "PPE;public",
13659+
"isHidden": true,
13660+
"isEnabled": true,
13661+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
13662+
}
13663+
],
1362613664
"ServicePrincipal.Manage.OwnedBy": [
1362713665
{
1362813666
"id": "6930b171-5cf8-4865-ba0f-cfce959d1bca",
@@ -16607,6 +16645,24 @@
1660716645
"resourceAppId": "00000002-0000-0000-c000-000000000000"
1660816646
}
1660916647
],
16648+
"AgentIdUser.ReadWrite.ManagedBy": [
16649+
{
16650+
"id": "",
16651+
"scheme": "Application",
16652+
"environment": "PPE;public",
16653+
"isHidden": true,
16654+
"isEnabled": true,
16655+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
16656+
},
16657+
{
16658+
"id": "",
16659+
"scheme": "DelegatedWork",
16660+
"environment": "PPE;public",
16661+
"isHidden": true,
16662+
"isEnabled": true,
16663+
"resourceAppId": "00000002-0000-0000-c000-000000000000"
16664+
}
16665+
],
1661016666
"User.RevokeSessions.All": [
1661116667
{
1661216668
"id": "fc30e98b-8810-4501-81f5-c20a3196387b",

0 commit comments

Comments
 (0)