From a303803a1aaa074e38b6cfcc9f3f6c692f1e92d0 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Fri, 19 Jun 2026 03:54:49 +0300 Subject: [PATCH] Weekly Permissions sync 2026-06-19 --- permissions/new/permissions.json | 186 ++++++++++++++++++++++++-- permissions/new/provisioningInfo.json | 26 +--- 2 files changed, 182 insertions(+), 30 deletions(-) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 9cbc47f0..656ee45e 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -48,7 +48,23 @@ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application", "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/filterbycurrentuser(on={value})": "least=DelegatedWork,Application", "/identitygovernance/accessreviews/definitions/{id}/instances/filterbycurrentuser(on={value})": "least=DelegatedWork,Application", - "/identitygovernance/accessreviews/definitions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application" + "/identitygovernance/accessreviews/definitions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/contactedreviewers": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/{id}": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/filterbycurrentuser(on={value})": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/filterbycurrentuser(on={value})": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application" } }, { @@ -191,6 +207,14 @@ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/stop": "least=DelegatedWork,Application", "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stop": "least=DelegatedWork,Application", "/identitygovernance/accessreviews/historydefinitions/{id}/instances/{id}/generatedownloaduri": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/applydecisions": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/batchrecorddecisions": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/resetdecisions": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/sendreminder": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/acceptrecommendations": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/batchrecorddecisions": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/stop": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stop": "least=DelegatedWork,Application", "/me/pendingaccessreviewinstances/{id}/batchrecorddecisions": "least=DelegatedWork,Application", "/users/{id}/pendingaccessreviewinstances/{id}/batchrecorddecisions": "least=DelegatedWork,Application" } @@ -206,7 +230,8 @@ ], "paths": { "/identitygovernance/accessreviews/definitions": "least=DelegatedWork,Application", - "/identitygovernance/accessreviews/historydefinitions": "least=DelegatedWork,Application" + "/identitygovernance/accessreviews/historydefinitions": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions": "least=DelegatedWork,Application" } }, { @@ -220,7 +245,8 @@ "PUT" ], "paths": { - "/identitygovernance/accessreviews/definitions/{id}": "least=DelegatedWork,Application" + "/identitygovernance/accessreviews/definitions/{id}": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}": "least=DelegatedWork,Application" } }, { @@ -245,7 +271,19 @@ "/identitygovernance/accessreviews/definitions/{id}/instances/filterbycurrentuser(on={value})": "", "/identitygovernance/accessreviews/definitions/filterbycurrentuser(on={value})": "", "/identitygovernance/accessreviews/historydefinitions/{id}": "least=DelegatedWork,Application", - "/identitygovernance/accessreviews/historydefinitions/{id}/instances": "least=DelegatedWork,Application" + "/identitygovernance/accessreviews/historydefinitions/{id}/instances": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/contactedreviewers": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/{id}": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/filterbycurrentuser(on={value})": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/filterbycurrentuser(on={value})": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/filterbycurrentuser(on={value})": "", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/filterbycurrentuser(on={value})": "", + "/identitygovernance/accessreviews/unified/definitions/filterbycurrentuser(on={value})": "" } }, { @@ -258,7 +296,8 @@ "PUT" ], "paths": { - "/identitygovernance/accessreviews/definitions/{id}/instances/{id}": "least=DelegatedWork,Application" + "/identitygovernance/accessreviews/definitions/{id}/instances/{id}": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}": "least=DelegatedWork,Application" } }, { @@ -270,7 +309,9 @@ ], "paths": { "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/{id}": "least=DelegatedWork", - "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "least=DelegatedWork" + "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "least=DelegatedWork", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/{id}": "least=DelegatedWork", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "least=DelegatedWork" } }, { @@ -283,7 +324,8 @@ "PATCH" ], "paths": { - "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}": "least=DelegatedWork,Application" + "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}": "least=DelegatedWork,Application", + "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}": "least=DelegatedWork,Application" } } ], @@ -21106,6 +21148,8 @@ "/security/cases/ediscoverycases/{id}/custodians/removehold": "least=DelegatedWork,Application", "/security/cases/ediscoverycases/{id}/custodians/updateindex": "least=DelegatedWork,Application", "/security/cases/ediscoverycases/{id}/exportDownload": "least=DelegatedWork,Application", + "/security/cases/ediscoverycases/{id}/legalholds/{id}/disablePolicy": "least=DelegatedWork,Application", + "/security/cases/ediscoverycases/{id}/legalholds/{id}/enablePolicy": "least=DelegatedWork,Application", "/security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources": "least=DelegatedWork,Application", "/security/cases/ediscoverycases/{id}/noncustodialdatasources": "least=DelegatedWork,Application", "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/applyhold": "least=DelegatedWork,Application", @@ -21331,6 +21375,8 @@ "/security/cases/ediscoverycases/{id}/custodians/removehold": "", "/security/cases/ediscoverycases/{id}/custodians/updateindex": "", "/security/cases/ediscoverycases/{id}/exportDownload": "", + "/security/cases/ediscoverycases/{id}/legalholds/{id}/disablePolicy": "", + "/security/cases/ediscoverycases/{id}/legalholds/{id}/enablePolicy": "", "/security/cases/ediscoverycases/{id}/legalholds/{id}/retryPolicy": "least=DelegatedWork,Application", "/security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources": "", "/security/cases/ediscoverycases/{id}/noncustodialdatasources": "", @@ -24746,6 +24792,7 @@ "POST" ], "paths": { + "/drives/{id}/cortexdrivebatch": "least=DelegatedWork", "/drives/{id}/items/{id}/follow": "least=DelegatedWork", "/drives/{id}/items/{id}/preview": "least=DelegatedWork", "/drives/{id}/querycortexitemsnippetsinbatch": "least=DelegatedWork", @@ -25067,6 +25114,7 @@ "POST" ], "paths": { + "/drives/{id}/cortexdrivebatch": "least=Application", "/drives/{id}/items/{id}/extractsensitivitylabels": "least=DelegatedWork,Application", "/drives/{id}/items/{id}/follow": "least=Application", "/drives/{id}/items/{id}/preview": "least=Application", @@ -25206,6 +25254,7 @@ "POST" ], "paths": { + "/drives/{id}/cortexdrivebatch": "", "/drives/{id}/querycortexitemsnippetsinbatch": "" } }, @@ -27119,6 +27168,7 @@ "POST" ], "paths": { + "/drives/{id}/cortexdrivebatch": "", "/drives/{id}/items/{id}/assignsensitivitylabel": "least=DelegatedWork,Application", "/drives/{id}/items/{id}/extractsensitivitylabels": "", "/drives/{id}/items/{id}/follow": "", @@ -38294,11 +38344,15 @@ "/policies/crosstenantaccesspolicy": "", "/policies/crosstenantaccesspolicy/default": "", "/policies/crosstenantaccesspolicy/default/m365Capabilities": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusySimple": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarAvailabilityBasic": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarAvailabilityLimitedDetails": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application", @@ -38313,6 +38367,7 @@ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMigration": "least=DelegatedWork,Application", @@ -39835,11 +39890,15 @@ "PATCH" ], "paths": { + "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusySimple": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarAvailabilityBasic": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarAvailabilityLimitedDetails": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application", @@ -39863,6 +39922,7 @@ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMigration": "least=DelegatedWork,Application", @@ -45651,7 +45711,7 @@ "POST" ], "paths": { - "/security/alerts_v2": "least=DelegatedWork,Application" + "/security/alerts_v2": "" } } ], @@ -48451,6 +48511,7 @@ "POST" ], "paths": { + "/drives/{id}/cortexdrivebatch": "", "/drives/{id}/items/{id}/extractsensitivitylabels": "", "/drives/{id}/items/{id}/follow": "", "/drives/{id}/items/{id}/preview": "", @@ -48859,6 +48920,7 @@ ], "paths": { "/drive/root:/{id}:/createuploadsession": "least=Application", + "/drives/{id}/cortexdrivebatch": "", "/drives/{id}/items/{id}/assignsensitivitylabel": "", "/drives/{id}/items/{id}/checkin": "", "/drives/{id}/items/{id}/checkout": "", @@ -55046,6 +55108,114 @@ "ownerSecurityGroup": "TeamsPermissions" } }, + "TeamworkCustomEmoji.Create": { + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Create custom emoji", + "adminDescription": "Create custom emoji on behalf of the signed-in user.", + "userDisplayName": "Create custom emoji", + "userDescription": "Create custom emoji on your behalf.", + "requiresAdminConsent": false, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "POST" + ], + "paths": { + "/teamwork/messaging/customemoji": "least=DelegatedWork" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "TeamsPermissions" + } + }, + "TeamworkCustomEmoji.Create.All": { + "schemes": { + "Application": { + "adminDisplayName": "Create custom emoji", + "adminDescription": "Create custom emoji without a signed-in user.", + "requiresAdminConsent": true, + "privilegeLevel": 4 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "Application" + ], + "methods": [ + "POST" + ], + "paths": { + "/teamwork/messaging/customemoji": "least=Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "TeamsPermissions" + } + }, + "TeamworkCustomEmoji.Read": { + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read custom emoji", + "adminDescription": "Read custom emoji on behalf of the signed-in user.", + "userDisplayName": "Read custom emoji", + "userDescription": "Read custom emoji on your behalf.", + "requiresAdminConsent": false, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/teamwork/messaging/customemoji": "least=DelegatedWork" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "TeamsPermissions" + } + }, + "TeamworkCustomEmoji.Read.All": { + "schemes": { + "Application": { + "adminDisplayName": "Read custom emoji", + "adminDescription": "Read custom emoji without a signed-in user.", + "requiresAdminConsent": true, + "privilegeLevel": 4 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/teamwork/messaging/customemoji": "least=Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "TeamsPermissions" + } + }, "TeamworkDevice.Read.All": { "authorizationType": "oAuth2", "schemes": { diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index b9f76b09..21ce40bd 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -4898,24 +4898,6 @@ "resourceAppId": "00000000-0000-0000-0000-000000000000" } ], - "Device-Tags.Read.All": [ - { - "id": "0192172f-135d-4475-beb9-08097b6afa14", - "scheme": "DelegatedWork", - "environment": "public", - "isHidden": true, - "isEnabled": false, - "resourceAppId": "01cb2876-7ebd-4aa4-9cc9-d28bd4d359a9" - }, - { - "id": "1f3d8769-ff25-4e88-8091-64655c3cdc22", - "scheme": "Application", - "environment": "public", - "isHidden": true, - "isEnabled": false, - "resourceAppId": "01cb2876-7ebd-4aa4-9cc9-d28bd4d359a9" - } - ], "MS-Device-Tags.ReadWrite.All": [ { "id": "b20128a5-988a-4a43-a30c-1597af1e759e", @@ -17300,7 +17282,7 @@ "id": "72464cd4-58fd-4116-8a9e-b74757574757", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "ab3be6b7-f5df-413d-ac2d-abf1e3fd9c0b" } @@ -17310,7 +17292,7 @@ "id": "89b231b1-414e-4dd4-bb87-d59906da4e05", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "ab3be6b7-f5df-413d-ac2d-abf1e3fd9c0b" } @@ -17320,7 +17302,7 @@ "id": "85643b08-0e25-4d99-9d68-04ba0fef9740", "scheme": "Application", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "ab3be6b7-f5df-413d-ac2d-abf1e3fd9c0b" } @@ -17330,7 +17312,7 @@ "id": "1efa3d37-1703-4685-9a59-baf6296fb956", "scheme": "Application", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "ab3be6b7-f5df-413d-ac2d-abf1e3fd9c0b" }