Repository navigation
Weekly Permissions sync 2026-10-18 - #1663
msgraph-onboarding-access-app[bot] wants to merge 1 commit into
Conversation
|
@msgraph-onboarding-access-app[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.
Contributor License AgreementContribution License AgreementThis Contribution License Agreement (“Agreement”) is agreed to by the party signing below (“You”),
|
1 similar comment
|
@msgraph-onboarding-access-app[bot] please read the following Contributor License Agreement(CLA). If you agree with the CLA, please reply with the following information.
Contributor License AgreementContribution License AgreementThis Contribution License Agreement (“Agreement”) is agreed to by the party signing below (“You”),
|
There was a problem hiding this comment.
🟡 Changes recommended
Several GET mappings incorrectly advertise write permissions as least-privileged.
2 open issues
What changed in this PR
Updates the Microsoft Graph DevX permission catalogs for the weekly sync.
Changes:
- Adds permission definitions and expands API-path mappings.
- Updates provisioning identifiers, availability, visibility, and enabled status.
- Extends Teams, identity governance, reporting, and backup coverage.
| File | Description |
|---|---|
| permissions/new/provisioningInfo.json | Updates provisioning metadata and environment availability. |
| permissions/new/permissions.json | Adds permissions, consent descriptions, and endpoint mappings. |
Review effort: Balanced
| "/backupRestore/oneDriveForBusinessProtectionPolicies": "least=DelegatedWork,Application", | ||
| "/backupRestore/sharePointProtectionPolicies": "least=DelegatedWork,Application" | ||
| "/backupRestore/sharePointProtectionPolicies": "least=DelegatedWork,Application", | ||
| "/backupRestore/teamsProtectionPolicies": "least=DelegatedWork,Application" |
| "methods": [ | ||
| "GET", | ||
| "POST" | ||
| ], | ||
| "paths": { | ||
| "/identityGovernance/privilegedAccess/customExtensions": "least=DelegatedWork,Application" | ||
| } | ||
| }, | ||
| { | ||
| "schemeKeys": [ | ||
| "DelegatedWork", | ||
| "Application" | ||
| ], | ||
| "methods": [ | ||
| "GET", | ||
| "PATCH" | ||
| ], | ||
| "paths": { | ||
| "/identityGovernance/privilegedAccess/customExtensions/{id}": "least=DelegatedWork,Application" | ||
| } | ||
| } |

Weekly Permissions sync 2026-10-18