Skip to content

Commit 78ff45f

Browse files
andrueastmanandrueastman
authored
Merge pull request #946 from microsoftgraph/permissions-update/2025-01-07
Weekly Permissions sync 2025-01-07
2 parents 23a9bbf + 47dd097 commit 78ff45f

File tree

2 files changed

+131
-6
lines changed

2 files changed

+131
-6
lines changed

‎permissions/new/ProvisioningInfo.json‎

Lines changed: 28 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1868,6 +1868,16 @@
18681868
"resourceAppId": "ab3be6b7-f5df-413d-ac2d-abf1e3fd9c0b"
18691869
}
18701870
],
1871+
"ChannelMember.ReadWrite.Group": [
1872+
{
1873+
"id": "7b795957-4e3f-4fbe-a18b-6b8736adc00f",
1874+
"scheme": "Application",
1875+
"environment": "public",
1876+
"isHidden": true,
1877+
"isEnabled": false,
1878+
"resourceAppId": "ab3be6b7-f5df-413d-ac2d-abf1e3fd9c0b"
1879+
}
1880+
],
18711881
"ChannelMember.ReadWrite.All": [
18721882
{
18731883
"id": "0c3e411a-ce45-4cd1-8f30-f99a3efa7b11",
@@ -8762,6 +8772,22 @@
87628772
"resourceAppId": ""
87638773
}
87648774
],
8775+
"Policy.ReadWrite.CrossTenantCapability": [
8776+
{
8777+
"scheme": "DelegatedWork",
8778+
"environment": "public",
8779+
"isHidden": true,
8780+
"isEnabled": false,
8781+
"resourceAppId": "25254d2d-55ce-461a-b245-3258f0f6a24d"
8782+
},
8783+
{
8784+
"scheme": "Application",
8785+
"environment": "public",
8786+
"isHidden": true,
8787+
"isEnabled": false,
8788+
"resourceAppId": "25254d2d-55ce-461a-b245-3258f0f6a24d"
8789+
}
8790+
],
87658791
"Policy.ReadWrite.DeviceConfiguration": [
87668792
{
87678793
"id": "40b534c3-9552-4550-901b-23879c90bcf9",
@@ -14002,7 +14028,7 @@
1400214028
"id": "b7fb81ff-4a7a-4d54-b790-8f47aa4818cb",
1400314029
"scheme": "Application",
1400414030
"environment": "public",
14005-
"isHidden": true,
14031+
"isHidden": false,
1400614032
"isEnabled": true,
1400714033
"resourceAppId": "ea890292-c8c8-4433-b5ea-b09d0668e1a6"
1400814034
}
@@ -14020,7 +14046,7 @@
1402014046
"id": "5e20ac9f-f42c-4807-8c3c-9fe7904be5b6",
1402114047
"scheme": "Application",
1402214048
"environment": "public",
14023-
"isHidden": true,
14049+
"isHidden": false,
1402414050
"isEnabled": true,
1402514051
"resourceAppId": "ea890292-c8c8-4433-b5ea-b09d0668e1a6"
1402614052
}

‎permissions/new/permissions.json‎

Lines changed: 103 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5987,8 +5987,8 @@
59875987
"paths": {
59885988
"/chats/{id}/members/{id}": "",
59895989
"/teams/{id}/channels/{id}/doesuserhaveaccess": "least=DelegatedWork,Application",
5990-
"/teams/{id}/channels/{id}/members": "least=Application",
5991-
"/teams/{id}/channels/{id}/members/{id}": "least=DelegatedWork,Application",
5990+
"/teams/{id}/channels/{id}/members": "",
5991+
"/teams/{id}/channels/{id}/members/{id}": "least=DelegatedWork",
59925992
"/teams/{id}/channels/{id}/sharedwithteams": "least=DelegatedWork,Application",
59935993
"/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=DelegatedWork,Application",
59945994
"/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": "least=DelegatedWork,Application"
@@ -6104,7 +6104,7 @@
61046104
"POST"
61056105
],
61066106
"paths": {
6107-
"/teams/{id}/channels/{id}/members": "least=DelegatedWork,Application"
6107+
"/teams/{id}/channels/{id}/members": "least=DelegatedWork"
61086108
}
61096109
},
61106110
{
@@ -6118,7 +6118,7 @@
61186118
"PATCH"
61196119
],
61206120
"paths": {
6121-
"/teams/{id}/channels/{id}/members/{id}": "least=DelegatedWork,Application"
6121+
"/teams/{id}/channels/{id}/members/{id}": "least=DelegatedWork"
61226122
}
61236123
},
61246124
{
@@ -31432,9 +31432,14 @@
3143231432
"/policies/claimsmappingpolicies/{id}/appliesto": "least=DelegatedWork,Application",
3143331433
"/policies/crosstenantaccesspolicy": "least=DelegatedWork,Application",
3143431434
"/policies/crosstenantaccesspolicy/default": "least=DelegatedWork,Application",
31435+
"/policies/crosstenantaccesspolicy/default/m365Capabilities": "least=DelegatedWork,Application",
31436+
"/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
3143531437
"/policies/crosstenantaccesspolicy/partners": "least=DelegatedWork,Application",
3143631438
"/policies/crosstenantaccesspolicy/partners/{id}": "least=DelegatedWork,Application",
3143731439
"/policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization": "least=DelegatedWork,Application",
31440+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities": "least=DelegatedWork,Application",
31441+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailboxMigration": "least=DelegatedWork,Application",
31442+
"/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
3143831443
"/policies/defaultappmanagementpolicy": "least=DelegatedWork,Application",
3143931444
"/policies/externalidentitiespolicy": "least=DelegatedWork,Application",
3144031445
"/policies/homerealmdiscoverypolicies": "least=DelegatedWork,Application",
@@ -49538,6 +49543,100 @@
4953849543
"ownerSecurityGroup": "mfateam"
4953949544
}
4954049545
},
49546+
"UserAuthMethod-Passkey.Read.All": {
49547+
"schemes": {
49548+
"DelegatedWork": {
49549+
"adminDisplayName": "Read all users' passkey authentication methods",
49550+
"adminDescription": "Allows the app to read passkey authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
49551+
"userDisplayName": "Read all users' passkey authentication methods",
49552+
"userDescription": "Allows the app to read passkey authentication methods of all users you have access to in your organization.This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
49553+
"requiresAdminConsent": true,
49554+
"privilegeLevel": 3
49555+
},
49556+
"Application": {
49557+
"adminDisplayName": " Read all users' passkey authentication methods",
49558+
"adminDescription": " Allows the app to read passkey authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
49559+
"requiresAdminConsent": true,
49560+
"privilegeLevel": 4
49561+
}
49562+
},
49563+
"pathSets": [
49564+
{
49565+
"schemeKeys": [
49566+
"DelegatedWork",
49567+
"Application"
49568+
],
49569+
"methods": [
49570+
"GET"
49571+
],
49572+
"paths": {
49573+
"/me/authentication/fido2methods": "",
49574+
"/me/authentication/fido2methods/{id}": "",
49575+
"/me/authentication/fido2methods/creationOptions": "",
49576+
"/users/{id}/authentication/fido2methods": "",
49577+
"/users/{id}/authentication/fido2methods/{id}": "",
49578+
"/users/{id}/authentication/fido2methods/creationOptions": ""
49579+
}
49580+
}
49581+
],
49582+
"ownerInfo": {
49583+
"ownerSecurityGroup": "mfateam"
49584+
}
49585+
},
49586+
"UserAuthMethod-Passkey.ReadWrite.All": {
49587+
"schemes": {
49588+
"DelegatedWork": {
49589+
"adminDisplayName": "Read and write all users' passkey methods.",
49590+
"adminDescription": "Allows the app to read and write passkey authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
49591+
"userDisplayName": "Read and write all users' passkey authentication methods",
49592+
"userDescription": "Allows the app to read and write passkey authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
49593+
"requiresAdminConsent": true,
49594+
"privilegeLevel": 4
49595+
},
49596+
"Application": {
49597+
"adminDisplayName": "Read and write all users' passkey authentication methods",
49598+
"adminDescription": "Allows the application to read and write passkey authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods",
49599+
"requiresAdminConsent": true,
49600+
"privilegeLevel": 4
49601+
}
49602+
},
49603+
"pathSets": [
49604+
{
49605+
"schemeKeys": [
49606+
"DelegatedWork",
49607+
"Application"
49608+
],
49609+
"methods": [
49610+
"GET"
49611+
],
49612+
"paths": {
49613+
"/me/authentication/fido2methods": "",
49614+
"/me/authentication/fido2methods/{id}": "",
49615+
"/me/authentication/fido2methods/creationOptions": "",
49616+
"/users/{id}/authentication/fido2methods": "",
49617+
"/users/{id}/authentication/fido2methods/{id}": "",
49618+
"/users/{id}/authentication/fido2methods/creationOptions": ""
49619+
}
49620+
},
49621+
{
49622+
"schemeKeys": [
49623+
"DelegatedWork",
49624+
"Application"
49625+
],
49626+
"methods": [
49627+
"DELETE",
49628+
"PATCH"
49629+
],
49630+
"paths": {
49631+
"/me/authentication/fido2methods/{id}": "least=Application",
49632+
"/users/{id}/authentication/fido2methods/{id}": "least=Application"
49633+
}
49634+
}
49635+
],
49636+
"ownerInfo": {
49637+
"ownerSecurityGroup": "mfateam"
49638+
}
49639+
},
4954149640
"UserShiftPreferences.Read.All": {
4954249641
"schemes": {
4954349642
"Application": {

0 commit comments

Comments
 (0)