From e904b7a93d0e77ddbc1e2a182122d7cf52af52a6 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 11 Aug 2026 23:40:22 +0300 Subject: [PATCH] Weekly Permissions sync 2026-08-11 --- permissions/new/permissions.json | 119 ++++++++++++++++++++++++++ permissions/new/provisioningInfo.json | 32 +++++-- 2 files changed, 144 insertions(+), 7 deletions(-) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 7174a57d..efc3e53d 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -32990,6 +32990,7 @@ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}/taskprocessingresults": "least=DelegatedWork,Application", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/summary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults": "least=DelegatedWork,Application", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}": "least=DelegatedWork,Application", @@ -33273,6 +33274,7 @@ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}/taskprocessingresults": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/summary(startdatetime={value},enddatetime={value})": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}": "", @@ -33389,6 +33391,7 @@ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}/taskprocessingresults": "", + "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/summary(startdatetime={value},enddatetime={value})": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults": "", "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}": "", @@ -64537,6 +64540,122 @@ "ownerInfo": { "ownerSecurityGroup": "shifts-service-sg" } + }, + "Zone.Read.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read all Zones in Microsoft Defender for Cloud", + "adminDescription": "Allows the app to read all Zones and their environments in Microsoft Defender for Cloud for the signed-in user.", + "userDisplayName": "Read all Zones in Microsoft Defender for Cloud", + "userDescription": "Allows the app to read all Zones and their environments in Microsoft Defender for Cloud on behalf of the signed-in user.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read all Zones in Microsoft Defender for Cloud", + "adminDescription": "Allows the app to read all Zones and their environments in Microsoft Defender for Cloud without a signed-in user.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/security/zones": "least=DelegatedWork,Application", + "/security/zones/{id}": "least=DelegatedWork,Application", + "/security/zones/{id}/environments": "least=DelegatedWork,Application", + "/security/zones/{id}/environments/{id}": "least=DelegatedWork,Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "mdcdefall" + } + }, + "Zone.ReadWrite.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read and manage all Zones in Microsoft Defender for Cloud", + "adminDescription": "Allows the app to read, create, update, and delete Zones and manage their environments in Microsoft Defender for Cloud for the signed-in user.", + "userDisplayName": "Read and manage all Zones in Microsoft Defender for Cloud", + "userDescription": "Allows the app to read, create, update, and delete Zones and manage their environments in Microsoft Defender for Cloud on behalf of the signed-in user..", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read and manage all Zones in Microsoft Defender for Cloud", + "adminDescription": "Allows the app to read, create, update, and delete Zones and manage their environments in Microsoft Defender for Cloud without a signed-in user.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/security/zones": "", + "/security/zones/{id}": "", + "/security/zones/{id}/environments": "", + "/security/zones/{id}/environments/{id}": "" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "POST" + ], + "paths": { + "/security/zones": "least=DelegatedWork,Application", + "/security/zones/{id}/environments": "least=DelegatedWork,Application" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "DELETE" + ], + "paths": { + "/security/zones/{id}": "least=DelegatedWork,Application", + "/security/zones/{id}/environments/{id}": "least=DelegatedWork,Application" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "PATCH" + ], + "paths": { + "/security/zones/{id}": "least=DelegatedWork,Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "mdcdefall" + } } } } \ No newline at end of file diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index b9207404..d9d03629 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -5,7 +5,7 @@ "id": "2cc656bc-586c-42d1-aea8-6b9fb0ee02b6", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "bceea168-88ac-4736-95dc-4ce488ffe324" }, @@ -13,7 +13,7 @@ "id": "5d8ae9e6-4e1a-43a5-bc0b-a3334155b145", "scheme": "Application", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "bceea168-88ac-4736-95dc-4ce488ffe324" } @@ -23,7 +23,7 @@ "id": "52a88ced-2cca-480d-a201-6bd4d5aee704", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "bceea168-88ac-4736-95dc-4ce488ffe324" }, @@ -31,7 +31,7 @@ "id": "f4722b65-56ab-4d07-95bb-c7cebe241e8a", "scheme": "Application", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "bceea168-88ac-4736-95dc-4ce488ffe324" } @@ -15166,7 +15166,7 @@ { "id": "404d76f0-e10e-460a-92be-ef19600c54d1", "scheme": "DelegatedWork", - "environment": "public", + "environment": "public;FairFax", "isHidden": false, "isEnabled": true, "resourceAppId": "" @@ -15174,7 +15174,7 @@ { "id": "4dfee10b-fa4a-41b5-b34d-ccf54cc0c394", "scheme": "Application", - "environment": "public", + "environment": "public;FairFax", "isHidden": false, "isEnabled": true, "resourceAppId": "" @@ -28717,6 +28717,24 @@ "resourceAppId": "da472373-a181-4ed0-94ec-bc7779f3b558" } ], + "CopilotCostManagement.Read.All": [ + { + "id": "377c9c09-ae8c-4ab0-90e7-9b8e293e35df", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" + }, + { + "id": "7caaab30-aafb-4983-8f2a-7ee696fc4142", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": true, + "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" + } + ], "_A.EA": [ { "id": "", @@ -29186,4 +29204,4 @@ } ] } -} \ No newline at end of file +}