Weekly Permissions sync 2025-07-11 (#1194)

Co-authored-by: Michael Mainer (from Dev Box) <[email protected]>

Author: marabooy

permissions/new/ProvisioningInfo.json

@@ -5751,15 +5751,15 @@
         "id": "37e00479-5776-4659-aecf-4841ec5d590a",
         "scheme": "DelegatedWork",
         "environment": "PPE;public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "00000002-0000-0000-c000-000000000000"
       },
       {
         "id": "2d9bd318-b883-40be-9df7-63ec4fcdc424",
         "scheme": "Application",
         "environment": "PPE;public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "00000002-0000-0000-c000-000000000000"
       }

permissions/new/permissions.json

@@ -24271,6 +24271,44 @@
         "ownerSecurityGroup": "GroupsIDCSG"
       }
     },
+    "Group-OnPremisesSyncBehavior.ReadWrite.All": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read and update the on-premises sync behavior of groups",
+          "adminDescription": "Allows the app to read and update the on-premises sync behavior of groups on behalf of the signed-in user.",
+          "userDisplayName": "Read and update the on-premises sync behavior of groups",
+          "userDescription": "Allows the app to update the on-premises sync behavior of groups on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 2
+        },
+        "Application": {
+          "adminDisplayName": "Read and update the on-premises sync behavior of groups",
+          "adminDescription": "Allows the app to update the on-premises sync behavior of all groups without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET",
+            "PATCH"
+          ],
+          "paths": {
+            "/groups/{id}/onPremisesSyncBehavior": "least=DelegatedWork,Application",
+            "/groups/onPremisesSyncBehavior": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "ddsappperm"
+      }
+    },
     "Group.Create": {
       "authorizationType": "oAuth2",
       "schemes": {