From c0c791be045428f4507555d838ac64ee2be1f1a7 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 28 Jul 2026 23:50:36 +0300 Subject: [PATCH 1/2] Weekly Permissions sync 2026-07-28 --- permissions/new/permissions.json | 39 +-------------------------- permissions/new/provisioningInfo.json | 14 +++------- 2 files changed, 4 insertions(+), 49 deletions(-) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 45e626d6..a68b2f22 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -9352,7 +9352,6 @@ "/app/calls": "", "/app/calls/{id}/addlargegalleryview": "", "/app/calls/{id}/answer": "least=Application", - "/app/calls/{id}/lowerHand": "", "/app/calls/{id}/participants/{id}/admitFromLobby": "", "/app/calls/{id}/participants/{id}/lowerHand": "", "/app/calls/{id}/participants/{id}/mute": "least=Application", @@ -9362,7 +9361,6 @@ "/app/calls/{id}/participants/configuremixer": "", "/app/calls/{id}/participants/lowerAllHands": "", "/app/calls/{id}/participants/muteall": "least=Application", - "/app/calls/{id}/raiseHand": "", "/app/calls/{id}/startRecording": "least=Application", "/app/calls/{id}/startTranscription": "least=Application", "/app/calls/{id}/stopRecording": "least=Application", @@ -9371,7 +9369,6 @@ "/communications/calls": "", "/communications/calls/{id}/addlargegalleryview": "", "/communications/calls/{id}/answer": "least=Application", - "/communications/calls/{id}/lowerHand": "", "/communications/calls/{id}/participants/{id}/admitFromLobby": "", "/communications/calls/{id}/participants/{id}/lowerHand": "", "/communications/calls/{id}/participants/{id}/mute": "least=Application", @@ -9383,7 +9380,6 @@ "/communications/calls/{id}/participants/configuremixer": "", "/communications/calls/{id}/participants/lowerAllHands": "", "/communications/calls/{id}/participants/muteall": "least=Application", - "/communications/calls/{id}/raiseHand": "", "/communications/calls/{id}/startRecording": "least=Application", "/communications/calls/{id}/startTranscription": "least=Application", "/communications/calls/{id}/stopRecording": "least=Application", @@ -9480,7 +9476,6 @@ "POST" ], "paths": { - "/app/calls/{id}/lowerHand": "least=Application", "/app/calls/{id}/participants/{id}/admitFromLobby": "least=Application", "/app/calls/{id}/participants/{id}/lowerHand": "least=Application", "/app/calls/{id}/participants/{id}/mute": "", @@ -9490,8 +9485,6 @@ "/app/calls/{id}/participants/configuremixer": "", "/app/calls/{id}/participants/lowerAllHands": "least=Application", "/app/calls/{id}/participants/muteall": "", - "/app/calls/{id}/raiseHand": "least=Application", - "/communications/calls/{id}/lowerHand": "least=Application", "/communications/calls/{id}/participants/{id}/admitFromLobby": "least=Application", "/communications/calls/{id}/participants/{id}/lowerHand": "least=Application", "/communications/calls/{id}/participants/{id}/mute": "", @@ -9502,8 +9495,7 @@ "/communications/calls/{id}/participants/admitAllFromLobby": "least=Application", "/communications/calls/{id}/participants/configuremixer": "", "/communications/calls/{id}/participants/lowerAllHands": "least=Application", - "/communications/calls/{id}/participants/muteall": "", - "/communications/calls/{id}/raiseHand": "least=Application" + "/communications/calls/{id}/participants/muteall": "" } } ], @@ -9582,34 +9574,6 @@ "ownerSecurityGroup": "TeamsPermissions" } }, - "Calls.ReportSyntheticMedia.All": { - "authorizationType": "oAuth2", - "schemes": { - "Application": { - "adminDisplayName": "Report synthetic media detections in calls", - "adminDescription": "Allows the app to report synthetic media detections for participants in calls, without a signed-in user.", - "requiresAdminConsent": true, - "privilegeLevel": 3 - } - }, - "pathSets": [ - { - "schemeKeys": [ - "Application" - ], - "methods": [ - "POST" - ], - "paths": { - "/app/calls/{id}/participants/{id}/reportsyntheticmedia": "least=Application", - "/communications/calls/{id}/participants/{id}/reportsyntheticmedia": "least=Application" - } - } - ], - "ownerInfo": { - "ownerSecurityGroup": "RtsAvengersSG" - } - }, "CallTranscripts.Read.All": { "authorizationType": "oAuth2", "schemes": { @@ -43708,7 +43672,6 @@ "/reports/dailyprintusagebyprinter/{id}": "least=DelegatedWork", "/reports/dailyprintusagebyuser": "least=DelegatedWork", "/reports/dailyprintusagebyuser/{id}": "least=DelegatedWork", - "/reports/enforcementNotices": "least=DelegatedWork", "/reports/getapiquota(period={value},servicearea={value},appid={value})": "least=DelegatedWork", "/reports/getgrouparchivedprintjobs": "least=DelegatedWork", "/reports/getgrouparchivedprintjobs(groupid={value},startdatetime={value},enddatetime={value})": "least=DelegatedWork", diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index 4a915798..364f167d 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -13081,11 +13081,11 @@ ], "Calls.ReportSyntheticMedia.All": [ { - "id": "050b0d28-840a-4ff6-bdf9-cc6221acbc1f", + "id": "e4d4cb9c-a3d1-425d-90a2-8504eb334d6b", "scheme": "Application", "environment": "public", - "isHidden": false, - "isEnabled": true, + "isHidden": true, + "isEnabled": false, "resourceAppId": "26a18ebc-cdf7-4a6a-91cb-beb352805e81" } ], @@ -20331,14 +20331,6 @@ "isHidden": true, "isEnabled": true, "resourceAppId": "93625bc8-bfe2-437a-97e0-3d0060024faa" - }, - { - "id": "795fc94d-3deb-4632-b1eb-e6d1a5f44918", - "scheme": "Application", - "environment": "public", - "isHidden": true, - "isEnabled": true, - "resourceAppId": "93625bc8-bfe2-437a-97e0-3d0060024faa" } ], "PolicyFiles.Read.All": [ From cfe5d17572c7915c0c04a043a50786557f559d9f Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 28 Jul 2026 23:52:12 +0300 Subject: [PATCH 2/2] Weekly Permissions sync 2026-07-28 --- permissions/new/permissions.json | 204 +++++++++++++++++++++++++- permissions/new/provisioningInfo.json | 22 ++- 2 files changed, 218 insertions(+), 8 deletions(-) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index a68b2f22..cf026bc4 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -9352,6 +9352,7 @@ "/app/calls": "", "/app/calls/{id}/addlargegalleryview": "", "/app/calls/{id}/answer": "least=Application", + "/app/calls/{id}/lowerHand": "", "/app/calls/{id}/participants/{id}/admitFromLobby": "", "/app/calls/{id}/participants/{id}/lowerHand": "", "/app/calls/{id}/participants/{id}/mute": "least=Application", @@ -9361,6 +9362,7 @@ "/app/calls/{id}/participants/configuremixer": "", "/app/calls/{id}/participants/lowerAllHands": "", "/app/calls/{id}/participants/muteall": "least=Application", + "/app/calls/{id}/raiseHand": "", "/app/calls/{id}/startRecording": "least=Application", "/app/calls/{id}/startTranscription": "least=Application", "/app/calls/{id}/stopRecording": "least=Application", @@ -9369,6 +9371,7 @@ "/communications/calls": "", "/communications/calls/{id}/addlargegalleryview": "", "/communications/calls/{id}/answer": "least=Application", + "/communications/calls/{id}/lowerHand": "", "/communications/calls/{id}/participants/{id}/admitFromLobby": "", "/communications/calls/{id}/participants/{id}/lowerHand": "", "/communications/calls/{id}/participants/{id}/mute": "least=Application", @@ -9380,6 +9383,7 @@ "/communications/calls/{id}/participants/configuremixer": "", "/communications/calls/{id}/participants/lowerAllHands": "", "/communications/calls/{id}/participants/muteall": "least=Application", + "/communications/calls/{id}/raiseHand": "", "/communications/calls/{id}/startRecording": "least=Application", "/communications/calls/{id}/startTranscription": "least=Application", "/communications/calls/{id}/stopRecording": "least=Application", @@ -9476,6 +9480,7 @@ "POST" ], "paths": { + "/app/calls/{id}/lowerHand": "least=Application", "/app/calls/{id}/participants/{id}/admitFromLobby": "least=Application", "/app/calls/{id}/participants/{id}/lowerHand": "least=Application", "/app/calls/{id}/participants/{id}/mute": "", @@ -9485,6 +9490,8 @@ "/app/calls/{id}/participants/configuremixer": "", "/app/calls/{id}/participants/lowerAllHands": "least=Application", "/app/calls/{id}/participants/muteall": "", + "/app/calls/{id}/raiseHand": "least=Application", + "/communications/calls/{id}/lowerHand": "least=Application", "/communications/calls/{id}/participants/{id}/admitFromLobby": "least=Application", "/communications/calls/{id}/participants/{id}/lowerHand": "least=Application", "/communications/calls/{id}/participants/{id}/mute": "", @@ -9495,7 +9502,8 @@ "/communications/calls/{id}/participants/admitAllFromLobby": "least=Application", "/communications/calls/{id}/participants/configuremixer": "", "/communications/calls/{id}/participants/lowerAllHands": "least=Application", - "/communications/calls/{id}/participants/muteall": "" + "/communications/calls/{id}/participants/muteall": "", + "/communications/calls/{id}/raiseHand": "least=Application" } } ], @@ -9574,6 +9582,34 @@ "ownerSecurityGroup": "TeamsPermissions" } }, + "Calls.ReportSyntheticMedia.All": { + "authorizationType": "oAuth2", + "schemes": { + "Application": { + "adminDisplayName": "Report synthetic media detections in calls", + "adminDescription": "Allows the app to report synthetic media detections for participants in calls, without a signed-in user.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "Application" + ], + "methods": [ + "POST" + ], + "paths": { + "/app/calls/{id}/participants/{id}/reportsyntheticmedia": "least=Application", + "/communications/calls/{id}/participants/{id}/reportsyntheticmedia": "least=Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "RtsAvengersSG" + } + }, "CallTranscripts.Read.All": { "authorizationType": "oAuth2", "schemes": { @@ -9631,6 +9667,171 @@ "ownerSecurityGroup": "TeamsPermissions" } }, + "CaseManagement.Read.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read cases, relations, tasks, attachments and activities", + "adminDescription": "Allows the app to read all cases, relations, tasks, attachments and activities, on behalf of the signed-in user.", + "userDisplayName": "Read all cases, relations, tasks, attachments and activities", + "userDescription": "Allows the app to read all cases, relations, tasks, attachments and activities that you have access to.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read all cases, relations, tasks, attachments and activities", + "adminDescription": "Allows the app to read all cases, relations, tasks, attachments and activities, without a signed-in user.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/security/caseManagement/cases": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/activities": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/activities/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/activities/microsoft.graph.security.caseManagement.auditLog": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/activities/microsoft.graph.security.caseManagement.comment": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/attachments": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/attachments/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/attachments/{id}/content": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/relations": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/relations/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.incidentRelation": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.recommendationRelation": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.workspaceIndicatorRelation": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/tasks": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/tasks/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/cases/microsoft.graph.security.caseManagement.exposureCase": "least=DelegatedWork,Application", + "/security/caseManagement/cases/microsoft.graph.security.caseManagement.genericCase": "least=DelegatedWork,Application", + "/security/caseManagement/cases/microsoft.graph.security.caseManagement.incidentCase": "least=DelegatedWork,Application", + "/security/caseManagement/caseTypeConfigurations": "least=DelegatedWork,Application", + "/security/caseManagement/caseTypeConfigurations/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/caseTypeConfigurations/{id}/customFields": "least=DelegatedWork,Application", + "/security/caseManagement/caseTypeConfigurations/{id}/customFields/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/caseTypeConfigurations/{id}/statuses": "least=DelegatedWork,Application", + "/security/caseManagement/caseTypeConfigurations/{id}/statuses/{id}": "least=DelegatedWork,Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "CaseManagement-SG" + } + }, + "CaseManagement.ReadWrite.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read and write to cases, relations, tasks, attachments and activities", + "adminDescription": "Allows the app to read and write to all cases, relations, tasks, attachments and activities, on behalf of the signed-in user.", + "userDisplayName": "Read and write to all cases, relations, tasks, attachments and activities", + "userDescription": "Allows the app to read and write to all cases, relations, tasks, attachments and activities that you have access to.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read and write to all cases, relations, tasks, attachments and activities", + "adminDescription": "Allows the app to read and write to all cases, relations, tasks, attachments and activities, without a signed-in user.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/security/caseManagement/cases": "", + "/security/caseManagement/cases/{id}": "", + "/security/caseManagement/cases/{id}/activities": "", + "/security/caseManagement/cases/{id}/activities/{id}": "", + "/security/caseManagement/cases/{id}/activities/microsoft.graph.security.caseManagement.auditLog": "", + "/security/caseManagement/cases/{id}/activities/microsoft.graph.security.caseManagement.comment": "", + "/security/caseManagement/cases/{id}/attachments": "", + "/security/caseManagement/cases/{id}/attachments/{id}": "", + "/security/caseManagement/cases/{id}/attachments/{id}/content": "", + "/security/caseManagement/cases/{id}/relations": "", + "/security/caseManagement/cases/{id}/relations/{id}": "", + "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.incidentRelation": "", + "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.recommendationRelation": "", + "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.workspaceIndicatorRelation": "", + "/security/caseManagement/cases/{id}/tasks": "", + "/security/caseManagement/cases/{id}/tasks/{id}": "", + "/security/caseManagement/cases/microsoft.graph.security.caseManagement.exposureCase": "", + "/security/caseManagement/cases/microsoft.graph.security.caseManagement.genericCase": "", + "/security/caseManagement/cases/microsoft.graph.security.caseManagement.incidentCase": "", + "/security/caseManagement/caseTypeConfigurations": "", + "/security/caseManagement/caseTypeConfigurations/{id}": "", + "/security/caseManagement/caseTypeConfigurations/{id}/customFields": "", + "/security/caseManagement/caseTypeConfigurations/{id}/customFields/{id}": "", + "/security/caseManagement/caseTypeConfigurations/{id}/statuses": "", + "/security/caseManagement/caseTypeConfigurations/{id}/statuses/{id}": "" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "POST" + ], + "paths": { + "/security/caseManagement/cases": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/activities": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/attachments": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/relations": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/tasks": "least=DelegatedWork,Application" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "DELETE", + "PATCH" + ], + "paths": { + "/security/caseManagement/cases/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/activities/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/attachments/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/relations/{id}": "least=DelegatedWork,Application", + "/security/caseManagement/cases/{id}/tasks/{id}": "least=DelegatedWork,Application" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "PUT" + ], + "paths": { + "/security/caseManagement/cases/{id}/attachments/{id}/content": "least=DelegatedWork,Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "CaseManagement-SG" + } + }, "ChangeManagement.Read.All": { "authorizationType": "oAuth2", "schemes": { @@ -43672,6 +43873,7 @@ "/reports/dailyprintusagebyprinter/{id}": "least=DelegatedWork", "/reports/dailyprintusagebyuser": "least=DelegatedWork", "/reports/dailyprintusagebyuser/{id}": "least=DelegatedWork", + "/reports/enforcementNotices": "least=DelegatedWork", "/reports/getapiquota(period={value},servicearea={value},appid={value})": "least=DelegatedWork", "/reports/getgrouparchivedprintjobs": "least=DelegatedWork", "/reports/getgrouparchivedprintjobs(groupid={value},startdatetime={value},enddatetime={value})": "least=DelegatedWork", diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index 364f167d..50a75d7f 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -2455,7 +2455,7 @@ "id": "7bdc421c-99cd-4b67-a749-aa8e92775f7e", "scheme": "DelegatedWork", "environment": "PPE;public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "26ec3824-24e6-4a75-a3f1-d614f5121545" }, @@ -2463,7 +2463,7 @@ "id": "b328f35f-712c-40d6-b6b4-95449d77b352", "scheme": "Application", "environment": "PPE;public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "26ec3824-24e6-4a75-a3f1-d614f5121545" } @@ -2473,7 +2473,7 @@ "id": "363a0763-d7eb-40bc-9457-6be55acd81e2", "scheme": "DelegatedWork", "environment": "PPE;public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "26ec3824-24e6-4a75-a3f1-d614f5121545" }, @@ -2481,7 +2481,7 @@ "id": "57ac77a0-bb98-4ba8-bf9a-7af06dcdcc1f", "scheme": "Application", "environment": "PPE;public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "26ec3824-24e6-4a75-a3f1-d614f5121545" } @@ -13081,11 +13081,11 @@ ], "Calls.ReportSyntheticMedia.All": [ { - "id": "e4d4cb9c-a3d1-425d-90a2-8504eb334d6b", + "id": "050b0d28-840a-4ff6-bdf9-cc6221acbc1f", "scheme": "Application", "environment": "public", - "isHidden": true, - "isEnabled": false, + "isHidden": false, + "isEnabled": true, "resourceAppId": "26a18ebc-cdf7-4a6a-91cb-beb352805e81" } ], @@ -20331,6 +20331,14 @@ "isHidden": true, "isEnabled": true, "resourceAppId": "93625bc8-bfe2-437a-97e0-3d0060024faa" + }, + { + "id": "795fc94d-3deb-4632-b1eb-e6d1a5f44918", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "93625bc8-bfe2-437a-97e0-3d0060024faa" } ], "PolicyFiles.Read.All": [