Skip to content

Commit 16f7083

Browse files
marabooymarabooy
committed
Weekly Permissions sync 2025-01-09
1 parent 78ff45f commit 16f7083

File tree

2 files changed

+225
-12
lines changed

2 files changed

+225
-12
lines changed

‎permissions/new/ProvisioningInfo.json‎

Lines changed: 4 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -3547,7 +3547,7 @@
35473547
"id": "edc92e89-a987-48a9-911a-a7b1967dd7b1",
35483548
"scheme": "DelegatedWork",
35493549
"environment": "public",
3550-
"isHidden": true,
3550+
"isHidden": false,
35513551
"isEnabled": true,
35523552
"resourceAppId": "00000000-0000-0000-0000-000000000000"
35533553
}
@@ -3634,14 +3634,6 @@
36343634
"isHidden": false,
36353635
"isEnabled": true,
36363636
"resourceAppId": ""
3637-
} ,
3638-
{
3639-
"id": "2d372e98-f1ae-406c-a157-2ea83f6f5e4a",
3640-
"scheme": "DelegatedWork",
3641-
"environment": "public",
3642-
"isHidden": true,
3643-
"isEnabled": true,
3644-
"resourceAppId": "00000000-0000-0000-0000-000000000000"
36453637
}
36463638
],
36473639
"DeviceLocalCredential.Read.All": [
@@ -4049,15 +4041,15 @@
40494041
"id": "0b1717ff-3e42-4a73-8c29-e6b2e1093960",
40504042
"scheme": "DelegatedWork",
40514043
"environment": "public",
4052-
"isHidden": true,
4044+
"isHidden": false,
40534045
"isEnabled": true,
40544046
"resourceAppId": "00000000-0000-0000-0000-000000000000"
40554047
},
40564048
{
40574049
"id": "abf6441f-0772-4932-96e7-0191478dd73a",
40584050
"scheme": "Application",
40594051
"environment": "public",
4060-
"isHidden": true,
4052+
"isHidden": false,
40614053
"isEnabled": true,
40624054
"resourceAppId": "00000000-0000-0000-0000-000000000000"
40634055
}
@@ -4084,7 +4076,7 @@
40844076
"id": "dd9febb5-0c6d-419f-b256-3afe12c6adeb",
40854077
"scheme": "Application",
40864078
"environment": "public",
4087-
"isHidden": true,
4079+
"isHidden": false,
40884080
"isEnabled": true,
40894081
"resourceAppId": "00000000-0000-0000-0000-000000000000"
40904082
}

‎permissions/new/permissions.json‎

Lines changed: 221 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10182,6 +10182,34 @@
1018210182
"ownerSecurityGroup": "afsadmins"
1018310183
}
1018410184
},
10185+
"Device.CreateFromOwnedTemplate": {
10186+
"schemes": {
10187+
"DelegatedWork": {
10188+
"adminDisplayName": "Create a device from a device template owned by the signed-in user.",
10189+
"adminDescription": "Allows the app to create a device from a device template owned by the signed-in user.",
10190+
"userDisplayName": "Create a device from a device template you own.",
10191+
"userDescription": "Allows the app to create a device from a device template you own.",
10192+
"requiresAdminConsent": true,
10193+
"privilegeLevel": 4
10194+
}
10195+
},
10196+
"pathSets": [
10197+
{
10198+
"schemeKeys": [
10199+
"DelegatedWork"
10200+
],
10201+
"methods": [
10202+
"POST"
10203+
],
10204+
"paths": {
10205+
"/directory/templates/deviceTemplates/{id}/createDeviceFromTemplate": "least=DelegatedWork"
10206+
}
10207+
}
10208+
],
10209+
"ownerInfo": {
10210+
"ownerSecurityGroup": "adrsmsgraph"
10211+
}
10212+
},
1018510213
"Device.Read": {
1018610214
"schemes": {
1018710215
"DelegatedWork": {
@@ -10324,6 +10352,126 @@
1032410352
"ownerSecurityGroup": "devicesapprovers"
1032510353
}
1032610354
},
10355+
"Device.ReadWrite.All": {
10356+
"schemes": {
10357+
"Application": {
10358+
"adminDisplayName": "Read and write devices",
10359+
"adminDescription": "Allows the app to read and write all device properties without a signed in user. Does not allow device creation, device deletion or update of device alternative security identifiers.",
10360+
"requiresAdminConsent": true,
10361+
"privilegeLevel": 4
10362+
}
10363+
},
10364+
"pathSets": [
10365+
{
10366+
"schemeKeys": [
10367+
"Application"
10368+
],
10369+
"methods": [
10370+
"POST"
10371+
],
10372+
"paths": {
10373+
"/contacts/{id}/checkmembergroups": "",
10374+
"/contacts/{id}/checkmemberobjects": "",
10375+
"/contacts/{id}/getmembergroups": "",
10376+
"/contacts/{id}/getmemberobjects": "",
10377+
"/devices/{id}/checkmembergroups": "",
10378+
"/devices/{id}/checkmemberobjects": "",
10379+
"/devices/{id}/getmembergroups": "",
10380+
"/devices/{id}/getmemberobjects": "",
10381+
"/directoryobjects/{id}/checkmembergroups": "",
10382+
"/directoryobjects/{id}/checkmemberobjects": "",
10383+
"/directoryobjects/{id}/getmembergroups": "",
10384+
"/directoryobjects/{id}/getmemberobjects": "",
10385+
"/groups/{id}/checkmembergroups": "",
10386+
"/groups/{id}/checkmemberobjects": "",
10387+
"/groups/{id}/getmembergroups": "",
10388+
"/groups/{id}/getmemberobjects": "",
10389+
"/me/checkmembergroups": "",
10390+
"/me/checkmemberobjects": "",
10391+
"/me/getmembergroups": "",
10392+
"/me/getmemberobjects": "",
10393+
"/serviceprincipals/{id}/checkmembergroups": "",
10394+
"/serviceprincipals/{id}/checkmemberobjects": "",
10395+
"/serviceprincipals/{id}/getmembergroups": "",
10396+
"/serviceprincipals/{id}/getmemberobjects": "",
10397+
"/users/{id}/checkmembergroups": "",
10398+
"/users/{id}/checkmemberobjects": "",
10399+
"/users/{id}/getmembergroups": "",
10400+
"/users/{id}/getmemberobjects": ""
10401+
}
10402+
},
10403+
{
10404+
"schemeKeys": [
10405+
"Application"
10406+
],
10407+
"methods": [
10408+
"GET"
10409+
],
10410+
"paths": {
10411+
"/devices": "",
10412+
"/devices(deviceid={value})/memberof": "",
10413+
"/devices(deviceid={value})/registeredowners": "",
10414+
"/devices(deviceid={value})/registeredusers": "",
10415+
"/devices(deviceid={value})/transitivememberof": "",
10416+
"/devices(deviceid={value})/usagerights": "",
10417+
"/devices/{id}/cloudLicensing/assignments/{id}/allotment": "",
10418+
"/devices/{id}/cloudLicensing/usageRights": "",
10419+
"/devices/{id}/cloudLicensing/usageRights/{id}": "",
10420+
"/devices/{id}/cloudLicensing/usageRights/{id}/assignments": "",
10421+
"/devices/{id}/cloudLicensing/waitingMembers": "",
10422+
"/devices/{id}/cloudLicensing/waitingMembers/{id}": "",
10423+
"/devices/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
10424+
"/devices/{id}/memberof": "",
10425+
"/devices/{id}/registeredowners": "",
10426+
"/devices/{id}/registeredusers": "",
10427+
"/devices/{id}/transitivememberof": "",
10428+
"/devices/{id}/usagerights": ""
10429+
}
10430+
},
10431+
{
10432+
"schemeKeys": [
10433+
"Application"
10434+
],
10435+
"methods": [
10436+
"DELETE",
10437+
"GET",
10438+
"PATCH"
10439+
],
10440+
"paths": {
10441+
"/devices(deviceid={value})": "least=Application",
10442+
"/devices/{id}": "least=Application",
10443+
"/devices/{id}/cloudLicensing/assignments/{id}": ""
10444+
}
10445+
},
10446+
{
10447+
"schemeKeys": [
10448+
"Application"
10449+
],
10450+
"methods": [
10451+
"GET",
10452+
"POST"
10453+
],
10454+
"paths": {
10455+
"/devices/{id}/cloudLicensing/assignments": ""
10456+
}
10457+
},
10458+
{
10459+
"schemeKeys": [
10460+
"Application"
10461+
],
10462+
"methods": [
10463+
"PUT"
10464+
],
10465+
"paths": {
10466+
"/devices/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
10467+
"/devices/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": ""
10468+
}
10469+
}
10470+
],
10471+
"ownerInfo": {
10472+
"ownerSecurityGroup": "IdentityReq"
10473+
}
10474+
},
1032710475
"DeviceLocalCredential.Read.All": {
1032810476
"schemes": {
1032910477
"DelegatedWork": {
@@ -15159,6 +15307,41 @@
1515915307
"ownerSecurityGroup": "GraphIntuneApprovers"
1516015308
}
1516115309
},
15310+
"DeviceTemplate.Create": {
15311+
"schemes": {
15312+
"DelegatedWork": {
15313+
"adminDisplayName": "Create device templates.",
15314+
"adminDescription": "Allows the app to create device templates.",
15315+
"userDisplayName": "Create device templates.",
15316+
"userDescription": "Allows the app to create device templates on your behalf.",
15317+
"requiresAdminConsent": false,
15318+
"privilegeLevel": 3
15319+
},
15320+
"Application": {
15321+
"adminDisplayName": "Create device templates.",
15322+
"adminDescription": "Allows the app to create device templates, without a signed-in user.",
15323+
"requiresAdminConsent": true,
15324+
"privilegeLevel": 4
15325+
}
15326+
},
15327+
"pathSets": [
15328+
{
15329+
"schemeKeys": [
15330+
"DelegatedWork",
15331+
"Application"
15332+
],
15333+
"methods": [
15334+
"POST"
15335+
],
15336+
"paths": {
15337+
"/directory/templates/deviceTemplates": "least=DelegatedWork,Application"
15338+
}
15339+
}
15340+
],
15341+
"ownerInfo": {
15342+
"ownerSecurityGroup": "adrsmsgraph"
15343+
}
15344+
},
1516215345
"DeviceTemplate.Read": {
1516315346
"schemes": {
1516415347
"DelegatedWork": {
@@ -15189,6 +15372,44 @@
1518915372
"ownerSecurityGroup": "adrsmsgraph"
1519015373
}
1519115374
},
15375+
"DeviceTemplate.Read.All": {
15376+
"schemes": {
15377+
"DelegatedWork": {
15378+
"adminDisplayName": "Read all device templates, their owners, and devices created from those device templates.",
15379+
"adminDescription": "Allows the app to read device templates, their owners, and devices created from those device templates on behalf of the signed-in user.",
15380+
"userDisplayName": "Read all device templates, their owners, and devices created from those device templates.",
15381+
"userDescription": "Allows the app to read device templates, their owners, and devices created from those device templates, on your behalf.",
15382+
"requiresAdminConsent": true,
15383+
"privilegeLevel": 2
15384+
},
15385+
"Application": {
15386+
"adminDisplayName": "Read all device templates, their owners, and devices created from those device templates.",
15387+
"adminDescription": "Allows the app to read device templates, their owners, and devices created from those device templates, without a signed-in user.",
15388+
"requiresAdminConsent": true,
15389+
"privilegeLevel": 4
15390+
}
15391+
},
15392+
"pathSets": [
15393+
{
15394+
"schemeKeys": [
15395+
"DelegatedWork",
15396+
"Application"
15397+
],
15398+
"methods": [
15399+
"GET"
15400+
],
15401+
"paths": {
15402+
"/directory/templates/deviceTemplates": "least=DelegatedWork,Application",
15403+
"/directory/templates/deviceTemplates/{id}": "least=Application",
15404+
"/directory/templates/deviceTemplates/{id}/deviceinstances": "least=Application",
15405+
"/directory/templates/deviceTemplates/{id}/owners": "least=Application"
15406+
}
15407+
}
15408+
],
15409+
"ownerInfo": {
15410+
"ownerSecurityGroup": "adrsmsgraph"
15411+
}
15412+
},
1519215413
"DeviceTemplate.ReadWrite.All": {
1519315414
"schemes": {
1519415415
"DelegatedWork": {

0 commit comments

Comments
 (0)