Skip to content

Weekly Permissions sync 2026-03-19#1472

Open
marabooy wants to merge 1 commit intomasterfrom
permissions-update/2026-03-19
Open

Weekly Permissions sync 2026-03-19#1472
marabooy wants to merge 1 commit intomasterfrom
permissions-update/2026-03-19

Conversation

@marabooy
Copy link
Contributor

Weekly Permissions sync 2026-03-19

@marabooy marabooy requested a review from a team as a code owner March 19, 2026 00:29
Copilot AI review requested due to automatic review settings March 19, 2026 00:29
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Weekly permissions metadata sync updating permission provisioning data and the Graph permission-to-path mappings.

Changes:

  • Removed a hidden provisioning entry for AgentIdentityBlueprintPrincipal.CreateAsManager and added new hidden provisioning entries (DelegatedPermissionGrant.ReadWrite.ManagedBy, User.Create, User.ReadUpdate.All).
  • Updated DelegatedPermissionGrant.ReadWrite.All metadata (privilege level + some path annotations).
  • Added new API path mappings (e.g., retention label DELETE routes, generative AI insights logs, Azure AD premium license insight report).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
permissions/new/provisioningInfo.json Removes one hidden permission entry; adds several hidden provisioning entries; minor formatting change.
permissions/new/permissions.json Adjusts permission metadata and expands path coverage for several APIs (notably retention label DELETE).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

"resourceAppId": "00000002-0000-0000-c000-000000000000"
}
],
],
Comment on lines +26493 to +26506
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"DELETE"
],
"paths": {
"/drives/{id}/items/{id}/retentionLabel": "least=DelegatedWork,Application",
"/groups/{id}/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
"/me/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
"/users/{user-id}/drive/items/{item-id}/retentionLabel": "least=DelegatedWork,Application"
}
Comment on lines +47937 to +47950
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"DELETE"
],
"paths": {
"/drives/{id}/items/{id}/retentionLabel": "",
"/groups/{id}/drive/items/{id}/retentionLabel": "",
"/me/drive/items/{id}/retentionLabel": "",
"/users/{user-id}/drive/items/{item-id}/retentionLabel": ""
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants