diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 83f2d0d9..ab49ca5a 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -9851,6 +9851,68 @@ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers" } }, + "CaseManagement.ConfigManage.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Manage case management configuration", + "adminDescription": "Allows the app to create, read, update, and delete case management configuration, such as SLA policies, on behalf of the signed-in user.", + "userDisplayName": "Manage case management configuration", + "userDescription": "Allows the app to create, read, update, and delete case management configuration, such as SLA policies, that you have access to.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Manage case management configuration", + "adminDescription": "Allows the app to create, read, update, and delete case management configuration, such as SLA policies, without a signed-in user.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/security/caseManagement/caseTypeConfigurations/{id}/slaPolicies": "", + "/security/caseManagement/caseTypeConfigurations/{id}/slaPolicies/{id}": "" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "POST" + ], + "paths": { + "/security/caseManagement/caseTypeConfigurations/{id}/slaPolicies": "least=DelegatedWork,Application" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "DELETE", + "PATCH" + ], + "paths": { + "/security/caseManagement/caseTypeConfigurations/{id}/slaPolicies/{id}": "least=DelegatedWork,Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "CaseManagement-SG" + } + }, "CaseManagement.Read.All": { "authorizationType": "oAuth2", "schemes": { @@ -12244,9 +12306,14 @@ "/devicemanagement/virtualendpoint/reports/getremoteconnectionhistoricalreports": "least=DelegatedWork,Application", "/devicemanagement/virtualendpoint/reports/getshareduselicenseusagereport": "least=DelegatedWork,Application", "/devicemanagement/virtualendpoint/reports/gettotalaggregatedremoteconnectionreports": "least=DelegatedWork,Application", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcConfigurationMonitoringReports": "least=DelegatedWork,Application", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcLicenseUtilizationReports": "least=DelegatedWork,Application", "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcPerformanceMetricsReport": "least=DelegatedWork,Application", "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcSettingStatusReport": "least=DelegatedWork,Application", - "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcTroubleshootReports": "least=DelegatedWork,Application" + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcTabularReports": "least=DelegatedWork,Application", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcTenantMonitoringReports": "least=DelegatedWork,Application", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcTroubleshootReports": "least=DelegatedWork,Application", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcUserDeviceReports": "least=DelegatedWork,Application" } } ], @@ -12389,10 +12456,15 @@ "/devicemanagement/virtualendpoint/reports/getremoteconnectionhistoricalreports": "", "/devicemanagement/virtualendpoint/reports/getshareduselicenseusagereport": "", "/devicemanagement/virtualendpoint/reports/gettotalaggregatedremoteconnectionreports": "", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcConfigurationMonitoringReports": "", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcLicenseUtilizationReports": "", "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcPerformanceMetricsReport": "", "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcRecommendationReports": "least=DelegatedWork,Application", "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcSettingStatusReport": "", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcTabularReports": "", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcTenantMonitoringReports": "", "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcTroubleshootReports": "", + "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcUserDeviceReports": "", "/devicemanagement/virtualendpoint/settingprofiles/{id}/assign": "least=DelegatedWork,Application", "/devicemanagement/virtualendpoint/settingprofiles/reorder": "least=DelegatedWork,Application", "/devicemanagement/virtualendpoint/settingprofiles/uploadimage": "least=DelegatedWork,Application", @@ -13558,6 +13630,454 @@ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins" } }, + "CopilotCostManagement-Assignment.Read.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read Copilot spending policy assignments", + "adminDescription": "Allows the app to read which users and security groups each Copilot spending policy applies to, on behalf of the signed-in user. This exposes the identifiers of the security groups and the users that are targeted by each policy.", + "userDisplayName": "Read Copilot spending policy assignments", + "userDescription": "Allows the app to read which users and security groups each Copilot spending policy applies to, on your behalf. This includes the identifiers of the security groups and the users that each policy targets.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read Copilot spending policy assignments", + "adminDescription": "Allows the app to read which users and security groups each Copilot spending policy applies to, without a signed-in user. This exposes the identifiers of the security groups and the users that are targeted by each policy.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/spendingPolicies/{id}/microsoft.graph.selectedGroupsSpendingPolicy/assignedGroups": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/microsoft.graph.selectedGroupsSpendingPolicy/assignedGroups/$ref": "least=DelegatedWork,Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "capalmneptune" + } + }, + "CopilotCostManagement-Assignment.ReadWrite.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read and write Copilot spending policy assignments", + "adminDescription": "Allows the app to read and change which users and security groups each Copilot spending policy applies to, on behalf of the signed-in user. Adding or removing an assignment immediately changes which users are subject to that policy's spending limits, and may grant or remove their ability to consume Copilot credits. This also exposes the identifiers of the security groups targeted by each policy.", + "userDisplayName": "Read and write Copilot spending policy assignments", + "userDescription": "Allows the app to read and change which users and security groups each Copilot spending policy applies to, on your behalf. Adding or removing an assignment immediately changes which users are subject to that policy's spending limits, and may grant or remove their ability to consume Copilot credits.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read and write Copilot spending policy assignments", + "adminDescription": "Allows the app to read and change which users and security groups each Copilot spending policy applies to, without a signed-in user. Adding or removing an assignment immediately changes which users are subject to that policy's spending limits, and may grant or remove their ability to consume Copilot credits. This also exposes the identifiers of the security groups targeted by each policy.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/spendingPolicies/{id}/microsoft.graph.selectedGroupsSpendingPolicy/assignedGroups": "", + "/copilot/costManagement/spendingPolicies/{id}/microsoft.graph.selectedGroupsSpendingPolicy/assignedGroups/$ref": "" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "POST" + ], + "paths": { + "/copilot/costManagement/spendingPolicies/{id}/microsoft.graph.selectedGroupsSpendingPolicy/assignedGroups/$ref": "least=DelegatedWork,Application" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "DELETE" + ], + "paths": { + "/copilot/costManagement/spendingPolicies/{id}/microsoft.graph.selectedGroupsSpendingPolicy/assignedGroups/{groupId}/$ref": "least=DelegatedWork,Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "capalmneptune" + } + }, + "CopilotCostManagement-CreditReq.Read.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read Copilot credit requests", + "adminDescription": "Allows the app to read credit requests submitted in the organization, on behalf of the signed-in user. This exposes request details and the identities associated with each request.", + "userDisplayName": "Read Copilot credit requests", + "userDescription": "Allows the app to read credit requests submitted in your organization, on your behalf. This includes request details and the identities associated with each request.", + "requiresAdminConsent": true, + "privilegeLevel": 2 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/creditRequests": "least=DelegatedWork", + "/copilot/costManagement/creditRequests/{id}": "least=DelegatedWork" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "M365AdminSvcDevTeam" + } + }, + "CopilotCostManagement-CreditReq.ReadWrite.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read and decide Copilot credit requests", + "adminDescription": "Allows the app to read, approve, and reject credit requests in the organization, on behalf of the signed-in user. Approving a request records the decision but does not itself assign credits.", + "userDisplayName": "Read and decide Copilot credit requests", + "userDescription": "Allows the app to read, approve, and reject credit requests in your organization, on your behalf. Approving a request records the decision but does not itself assign credits.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/creditRequests": "", + "/copilot/costManagement/creditRequests/{id}": "" + } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "PATCH" + ], + "paths": { + "/copilot/costManagement/creditRequests/{id}": "least=DelegatedWork" + } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "POST" + ], + "paths": { + "/copilot/costManagement/creditRequests/batchRecordDecisions": "least=DelegatedWork" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "M365AdminSvcDevTeam" + } + }, + "CopilotCostManagement-Policy.Read.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read Copilot spending policies", + "adminDescription": "Allows the app to read Copilot spending policies and their configuration on behalf of the signed-in user, including budget limits and alert thresholds. This also exposes the identities of the users who created and last modified each policy and of the users who receive its alert notifications.", + "userDisplayName": "Read Copilot spending policies", + "userDescription": "Allows the app to read your organization's Copilot spending policies and their configuration on your behalf, including budget limits, alert thresholds, who created and last changed each policy, and who receives its alerts.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read Copilot spending policies", + "adminDescription": "Allows the app to read Copilot spending policies and their configuration without a signed-in user, including budget limits and alert thresholds. This also exposes the identities of the users who created and last modified each policy and of the users who receive its alert notifications.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/spendingPolicies": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings/recipients": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings/recipients/$ref": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/serviceSettings": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/serviceSettings/{serviceId}": "least=DelegatedWork,Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "capalmneptune" + } + }, + "CopilotCostManagement-Policy.ReadWrite.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read and write Copilot spending policies", + "adminDescription": "Allows the app to read, create, update, and delete Copilot spending policies on behalf of the signed-in user. It can set the initial audience, read and change alert recipients, and select a billing method. New or changed policies may take effect immediately and restrict user spending. The app can also see who created and last modified each policy.", + "userDisplayName": "Read and write Copilot spending policies", + "userDescription": "Allows the app to read, create, update, and delete your organization's Copilot spending policies on your behalf, including changing who receives a policy's spending alerts. Creating a policy also sets who it applies to, may take effect immediately and begin restricting how much users can spend, and may include selecting the billing method that funds it.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read and write Copilot spending policies", + "adminDescription": "Allows the app to read, create, and update Copilot spending policies without a signed-in user. It can manage alert settings and recipients, set the initial audience, and select a billing method. New or changed policies may take effect immediately and restrict user spending. The app can also see who created and last modified each policy. Deleting a spending policy requires a signed-in administrator.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/spendingPolicies": "", + "/copilot/costManagement/spendingPolicies/{id}": "", + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings": "", + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings/recipients": "", + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings/recipients/$ref": "", + "/copilot/costManagement/spendingPolicies/{id}/serviceSettings": "", + "/copilot/costManagement/spendingPolicies/{id}/serviceSettings/{serviceId}": "" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "POST" + ], + "paths": { + "/copilot/costManagement/spendingPolicies": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings/recipients/$ref": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/serviceSettings": "least=DelegatedWork,Application" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "PATCH" + ], + "paths": { + "/copilot/costManagement/spendingPolicies/{id}": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/serviceSettings/{serviceId}": "least=DelegatedWork,Application" + } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "DELETE" + ], + "paths": { + "/copilot/costManagement/spendingPolicies/{id}": "least=DelegatedWork" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "DELETE" + ], + "paths": { + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings": "least=DelegatedWork,Application", + "/copilot/costManagement/spendingPolicies/{id}/emailThresholdSettings/recipients/{userId}/$ref": "least=DelegatedWork,Application" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "capalmneptune" + } + }, + "CopilotCostManagement-UserData.Read.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read Copilot cost data for all users and groups", + "adminDescription": "Allows the app to read identity-attributed Copilot cost management data for the organization on behalf of the signed-in user, including any named user's Copilot credit balance, per-user consumption rankings, usage aggregated by security group, and raw per-user consumption grouped by service or activity session. This exposes users' consumption, group identifiers, native session identifiers when available, and first and last activity timestamps.", + "userDisplayName": "Read Copilot cost data for all users and groups", + "userDescription": "Allows the app to read Copilot cost data attributed to individual users and security groups in your organization, on your behalf. This includes any named user's credit balance, consumption rankings, usage totalled by security group, and raw usage grouped by service or activity session, including session identifiers when available and first and last activity timestamps.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read Copilot cost data for all users and groups", + "adminDescription": "Reserved for application access to identity-attributed Copilot cost management data. No API paths currently accept this application permission; it does not grant app-only access to user balances, user or group usage reports, or raw per-user service and session details. Those reads currently require delegated permissions.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/userBalances/{userId}": "least=DelegatedWork", + "/copilot/costManagement/userBalances/{userId}/serviceBalances": "least=DelegatedWork", + "/copilot/costManagement/userBalances/{userId}/serviceBalances/{serviceId}": "least=DelegatedWork" + } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/userBalances": "least=DelegatedWork" + } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/usageReports/groupUsageRecords": "least=DelegatedWork", + "/copilot/costManagement/usageReports/groupUsageRecords/{groupId}": "least=DelegatedWork", + "/copilot/costManagement/usageReports/userUsageDetails/{userId}": "least=DelegatedWork", + "/copilot/costManagement/usageReports/userUsageDetails/{userId}/services": "least=DelegatedWork", + "/copilot/costManagement/usageReports/userUsageDetails/{userId}/sessions": "least=DelegatedWork", + "/copilot/costManagement/usageReports/userUsageRecords": "least=DelegatedWork", + "/copilot/costManagement/usageReports/userUsageRecords/{userId}": "least=DelegatedWork" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "capalmneptune" + } + }, + "CopilotCostManagement.Read.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read all Copilot cost management data", + "adminDescription": "Allows the app to read all organizational Copilot cost management data on behalf of the signed-in user, including any user's credit balance, per-user rankings and raw usage grouped by service or activity session, native session identifiers when available, first and last activity timestamps, usage by security group, spending policies, their configuration and assignments, and the identities of policy creators, modifiers, and alert recipients. This is the broadest Copilot cost management read permission.", + "userDisplayName": "Read all Copilot cost management data", + "userDescription": "Allows the app to read all of your organization's Copilot cost management data on your behalf. This includes any named user's credit balance, consumption rankings, raw usage grouped by service or activity session, session identifiers when available, first and last activity timestamps, and usage totalled by security group, along with Copilot spending policies, who they apply to, and who receives their alerts.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + }, + "Application": { + "adminDisplayName": "Read all Copilot cost management data", + "adminDescription": "Allows the app to read the organization's Copilot tenant credit balance and aggregate usage reports by service and funding class without a signed-in user. This application permission does not grant access to user or group usage reports, raw per-user service or session details, individual user balances, or spending policies and their assignments.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/getTenantCreditBalance": "least=DelegatedWork,Application" + } + }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/usageReports/fundingUsageRecords": "", + "/copilot/costManagement/usageReports/serviceUsageRecords": "", + "/copilot/costManagement/usageReports/serviceUsageRecords/{serviceId}": "" + } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/copilot/costManagement/usageReports/groupUsageRecords": "", + "/copilot/costManagement/usageReports/groupUsageRecords/{groupId}": "", + "/copilot/costManagement/usageReports/userUsageDetails/{userId}": "", + "/copilot/costManagement/usageReports/userUsageDetails/{userId}/services": "", + "/copilot/costManagement/usageReports/userUsageDetails/{userId}/sessions": "", + "/copilot/costManagement/usageReports/userUsageRecords": "", + "/copilot/costManagement/usageReports/userUsageRecords/{userId}": "" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "capalmneptune" + } + }, "CopilotPackages.Read.All": { "authorizationType": "oAuth2", "schemes": { @@ -14813,6 +15333,17 @@ } }, "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/tenantrelationships/delegatedadmincustomers/filterbycurrentuser": "least=DelegatedWork" + } + }, { "schemeKeys": [ "DelegatedWork", @@ -24168,7 +24699,9 @@ "/identitygovernance/accessevaluationpolicies/{id}": "least=DelegatedWork,Application", "/identitygovernance/accessguardian/customextensions": "least=DelegatedWork,Application", "/identitygovernance/accessguardian/customextensions/{id}": "least=DelegatedWork,Application", - "/identitygovernance/accessguardian/customextensions/microsoft.graph.accessremediationextension": "least=DelegatedWork,Application" + "/identitygovernance/accessguardian/customextensions/microsoft.graph.accessremediationextension": "least=DelegatedWork,Application", + "/identitygovernance/catalogs/{id}/resources/{id}/incompatiblepermissionsets": "least=DelegatedWork,Application", + "/identitygovernance/catalogs/{id}/resources/{id}/incompatiblepermissionsets/{id}": "least=DelegatedWork,Application" } }, { @@ -24476,7 +25009,9 @@ "/identitygovernance/accessevaluationpolicies/{id}": "", "/identitygovernance/accessguardian/customextensions": "", "/identitygovernance/accessguardian/customextensions/{id}": "", - "/identitygovernance/accessguardian/customextensions/microsoft.graph.accessremediationextension": "" + "/identitygovernance/accessguardian/customextensions/microsoft.graph.accessremediationextension": "", + "/identitygovernance/catalogs/{id}/resources/{id}/incompatiblepermissionsets": "", + "/identitygovernance/catalogs/{id}/resources/{id}/incompatiblepermissionsets/{id}": "" } }, { @@ -24491,7 +25026,8 @@ "/identitygovernance/accessevaluationdetections/{id}/remediate": "least=DelegatedWork,Application", "/identitygovernance/accessevaluationdetections/remediate": "least=DelegatedWork,Application", "/identitygovernance/accessguardian/customextensions": "least=DelegatedWork,Application", - "/identitygovernance/catalogs/{id}/accessevaluationpolicies": "least=DelegatedWork,Application" + "/identitygovernance/catalogs/{id}/accessevaluationpolicies": "least=DelegatedWork,Application", + "/identitygovernance/catalogs/{id}/resources/{id}/incompatiblepermissionsets": "least=DelegatedWork,Application" } }, { @@ -24505,7 +25041,8 @@ "paths": { "/identitygovernance/accessevaluationdetections/{id}": "least=DelegatedWork,Application", "/identitygovernance/accessguardian/customextensions/{id}": "least=DelegatedWork,Application", - "/identitygovernance/catalogs/{id}/accessevaluationpolicies/{id}": "least=DelegatedWork,Application" + "/identitygovernance/catalogs/{id}/accessevaluationpolicies/{id}": "least=DelegatedWork,Application", + "/identitygovernance/catalogs/{id}/resources/{id}/incompatiblepermissionsets/{id}": "least=DelegatedWork,Application" } }, { @@ -24518,7 +25055,8 @@ ], "paths": { "/identitygovernance/accessguardian/customextensions/{id}": "least=DelegatedWork,Application", - "/identitygovernance/catalogs/{id}/accessevaluationpolicies/{id}": "least=DelegatedWork,Application" + "/identitygovernance/catalogs/{id}/accessevaluationpolicies/{id}": "least=DelegatedWork,Application", + "/identitygovernance/catalogs/{id}/resources/{id}/incompatiblepermissionsets/{id}": "least=DelegatedWork,Application" } }, { @@ -29757,7 +30295,7 @@ "/groups/{id}/threads/{id}/posts/{id}": "", "/groups/{id}/transitivemembers": "", "/groups/delta": "", - "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": "least=DelegatedWork,Application", + "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": "", "/groupsettings": "", "/groupsettings/{id}": "", "/settings": "", @@ -30598,7 +31136,7 @@ "/groups/{id}/permissiongrants": "least=DelegatedWork,Application", "/groups/{id}/transitivemembers": "", "/groups/delta": "", - "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": "", + "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": "least=DelegatedWork,Application", "/users/{id}/transitivememberof": "" } }, @@ -36220,6 +36758,23 @@ "ownerSecurityGroup": "simbaeng" } }, + "MCP.Server.Access": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Access the Microsoft Graph MCP server", + "adminDescription": "Allows the app to connect to and call the Microsoft Graph Model Context Protocol (MCP) server on behalf of the signed-in user.", + "userDisplayName": "Access the Microsoft Graph MCP server", + "userDescription": "Allows the app to connect to the Microsoft Graph MCP server on your behalf.", + "requiresAdminConsent": true, + "privilegeLevel": 2 + } + }, + "pathSets": [], + "ownerInfo": { + "ownerSecurityGroup": "entracopilot" + } + }, "Member.Read.Group": { "authorizationType": "RSC", "schemes": { @@ -36945,6 +37500,18 @@ "/networkAccess/webFilteringPolicies/{id}/policyRules": "least=DelegatedWork,Application" } }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "POST" + ], + "paths": { + "/networkAccess/microsoft.graph.networkaccess.generateClientDisablementCode": "least=DelegatedWork,Application" + } + }, { "schemeKeys": [ "DelegatedWork", @@ -40021,6 +40588,106 @@ "ownerSecurityGroup": "peopleadminadmin" } }, + "Perception.Manage.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read and manage Agentic Security sessions", + "adminDescription": "Allows the app to read Agentic Security resources, create sessions and request cancellation on behalf of the signed-in user, subject to the user's access.", + "userDisplayName": "Read and manage Agentic Security sessions you can access", + "userDescription": "Allows the app to read Agentic Security resources, create sessions and request cancellation for those resources.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/security/agenticSecurity/playbookDefinitions": "", + "/security/agenticSecurity/playbookDefinitions/{playbookDefinitionId}": "", + "/security/agenticSecurity/sessions": "", + "/security/agenticSecurity/sessions/{sessionId}": "", + "/security/agenticSecurity/sessions/{sessionId}/agentRuns": "", + "/security/agenticSecurity/sessions/{sessionId}/agentRuns/{agentRunId}": "", + "/security/agenticSecurity/sessions/{sessionId}/agentRuns/{agentRunId}/messages": "", + "/security/agenticSecurity/sessions/{sessionId}/agentRuns/{agentRunId}/messages/{messageId}": "", + "/security/agenticSecurity/sessions/{sessionId}/inputs": "", + "/security/agenticSecurity/sessions/{sessionId}/inputs/{inputId}": "", + "/security/agenticSecurity/sessions/{sessionId}/messages": "", + "/security/agenticSecurity/sessions/{sessionId}/messages/{messageId}": "", + "/security/agenticSecurity/sessions/{sessionId}/outputs": "", + "/security/agenticSecurity/sessions/{sessionId}/outputs/{outputId}": "", + "/security/agenticSecurity/sessions/{sessionId}/outputs/{outputId}/content": "", + "/security/agenticSecurity/sessions/{sessionId}/playbookDefinition": "" + } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "POST" + ], + "paths": { + "/security/agenticSecurity/sessions": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/cancel": "least=DelegatedWork" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "seccopdea" + } + }, + "Perception.Read.All": { + "authorizationType": "oAuth2", + "schemes": { + "DelegatedWork": { + "adminDisplayName": "Read Agentic Security resources", + "adminDescription": "Allows the app to read Agentic Security playbook definitions, sessions, agent runs, inputs, outputs and messages on behalf of the signed-in user, subject to the user's access.", + "userDisplayName": "Read Agentic Security resources you can access", + "userDescription": "Allows the app to read Agentic Security playbook definitions, sessions, agent runs, inputs, outputs and messages that you can access.", + "requiresAdminConsent": true, + "privilegeLevel": 3 + } + }, + "pathSets": [ + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/security/agenticSecurity/playbookDefinitions": "least=DelegatedWork", + "/security/agenticSecurity/playbookDefinitions/{playbookDefinitionId}": "least=DelegatedWork", + "/security/agenticSecurity/sessions": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/agentRuns": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/agentRuns/{agentRunId}": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/agentRuns/{agentRunId}/messages": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/agentRuns/{agentRunId}/messages/{messageId}": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/inputs": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/inputs/{inputId}": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/messages": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/messages/{messageId}": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/outputs": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/outputs/{outputId}": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/outputs/{outputId}/content": "least=DelegatedWork", + "/security/agenticSecurity/sessions/{sessionId}/playbookDefinition": "least=DelegatedWork" + } + } + ], + "ownerInfo": { + "ownerSecurityGroup": "seccopdea" + } + }, "Place.Read.All": { "authorizationType": "oAuth2", "schemes": { @@ -40488,6 +41155,7 @@ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantGroupDataMigration": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application", @@ -40495,6 +41163,7 @@ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantUserDataMigration": "least=DelegatedWork,Application", "/policies/defaultappmanagementpolicy": "least=DelegatedWork,Application", "/policies/externalidentitiespolicy": "least=DelegatedWork,Application", "/policies/federatedtokenvalidationpolicy": "least=DelegatedWork,Application", @@ -42049,13 +42718,15 @@ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantGroupDataMigration": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMigration": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application", "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application", - "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application" + "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application", + "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantUserDataMigration": "least=DelegatedWork,Application" } } ], @@ -53297,6 +53968,18 @@ "/teams/{id}/members": "least=DelegatedWork", "/teams/{id}/members/{id}": "least=DelegatedWork" } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/teams/{id}/joinRequests": "least=DelegatedWork", + "/teams/{id}/joinRequests/{id}": "least=DelegatedWork" + } } ], "ownerInfo": { @@ -53412,6 +54095,32 @@ "/teams/{id}/members/add": "", "/teams/{id}/members/remove": "least=DelegatedWork,Application" } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "GET" + ], + "paths": { + "/teams/{id}/joinRequests": "", + "/teams/{id}/joinRequests/{id}": "" + } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "POST" + ], + "paths": { + "/teams/{id}/joinRequests/{id}/approve": "", + "/teams/{id}/joinRequests/{id}/reject": "", + "/teams/{id}/joinRequests/approve": "", + "/teams/{id}/joinRequests/reject": "" + } } ], "ownerInfo": { @@ -53462,6 +54171,20 @@ "paths": { "/teams/{id}/members/{id}": "least=DelegatedWork,Application" } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "POST" + ], + "paths": { + "/teams/{id}/joinRequests/{id}/approve": "least=DelegatedWork", + "/teams/{id}/joinRequests/{id}/reject": "least=DelegatedWork", + "/teams/{id}/joinRequests/approve": "least=DelegatedWork", + "/teams/{id}/joinRequests/reject": "least=DelegatedWork" + } } ], "ownerInfo": { diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json index 2e11c4cb..9fb60f20 100644 --- a/permissions/new/provisioningInfo.json +++ b/permissions/new/provisioningInfo.json @@ -1158,6 +1158,16 @@ "resourceAppId": "00000002-0000-0000-c000-000000000000" } ], + "MS-InboundClaimMappingPolicy.ReadWrite.All": [ + { + "id": "", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], "MS-ServicePrincipal.Create": [ { "id": "", @@ -2594,18 +2604,18 @@ ], "CaseManagement.ConfigManage.All": [ { - "id": "", + "id": "ee412db8-63b1-4e10-86fa-41c4a4b59eb5", "scheme": "DelegatedWork", "environment": "PPE;public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "26ec3824-24e6-4a75-a3f1-d614f5121545" }, { - "id": "", + "id": "010650d3-1605-49e9-b242-230afecb9dc5", "scheme": "Application", "environment": "PPE;public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "26ec3824-24e6-4a75-a3f1-d614f5121545" } @@ -6319,6 +6329,88 @@ "resourceAppId": "3471ca03-f150-4759-88e6-0bfc97daf723" } ], + "DynamicPermissionAssignments.Read.All": [ + { + "id": "", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "810dcf14-1858-4bf2-8134-4c369fa3235b" + }, + { + "id": "", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "810dcf14-1858-4bf2-8134-4c369fa3235b" + } + ], + "DynamicPermissions.Read.DetectionAndRemediation": [ + { + "id": "", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "2829028a-b35b-42cc-86e3-517e751a3e2a" + }, + { + "id": "", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "2829028a-b35b-42cc-86e3-517e751a3e2a" + } + ], + "DynamicPermissionRequests.Read.All": [ + { + "id": "", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "810dcf14-1858-4bf2-8134-4c369fa3235b" + }, + { + "id": "", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "810dcf14-1858-4bf2-8134-4c369fa3235b" + } + ], + "DynamicPermissionSessions.Read.All": [ + { + "id": "", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "810dcf14-1858-4bf2-8134-4c369fa3235b" + }, + { + "id": "", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "810dcf14-1858-4bf2-8134-4c369fa3235b" + } + ], + "DynamicPermissionSubjectAccess.ReadWrite": [ + { + "id": "", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "810dcf14-1858-4bf2-8134-4c369fa3235b" + } + ], "EAS.AccessAsUser.All": [ { "id": "ff91d191-45a0-43fd-b837-bd682c4a0b0f", @@ -6365,6 +6457,42 @@ "resourceAppId": "" } ], + "EdgeMonitoring.Read.All": [ + { + "id": "", + "scheme": "DelegatedWork", + "environment": "PPE;public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "", + "scheme": "Application", + "environment": "PPE;public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], + "EdgeMonitoring.ReadWrite.All": [ + { + "id": "", + "scheme": "DelegatedWork", + "environment": "PPE;public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "", + "scheme": "Application", + "environment": "PPE;public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], "EduAssignments.Read": [ { "id": "091460c9-9c4a-49b2-81ef-1f3d852acce2", @@ -9639,7 +9767,7 @@ "resourceAppId": "ce79fdc4-cd1d-4ea5-8139-e74d7dbe0bb7" }, { - "id": "da2c2d45-124a-42d6-b85a-ac0d86b31a25", + "id": "b5847c52-61b1-4d49-af78-317c35c0312b", "scheme": "Application", "environment": "public", "isHidden": false, @@ -9657,7 +9785,7 @@ "resourceAppId": "ce79fdc4-cd1d-4ea5-8139-e74d7dbe0bb7" }, { - "id": "0a0600bd-3cd8-47d8-a983-2c2c194f658f", + "id": "c1f593ee-95ab-4ff0-9112-476cc8105f6d", "scheme": "Application", "environment": "public", "isHidden": false, @@ -10377,7 +10505,7 @@ { "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "e8c77dc2-69b3-43f4-bc51-3213c9d915b4" } @@ -11729,8 +11857,8 @@ "id": "", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, - "isEnabled": false, + "isHidden": false, + "isEnabled": true, "resourceAppId": "bb3d68c2-d09e-4455-94a0-e323996dbaa3" } ], @@ -11739,8 +11867,8 @@ "id": "", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, - "isEnabled": false, + "isHidden": false, + "isEnabled": true, "resourceAppId": "bb3d68c2-d09e-4455-94a0-e323996dbaa3" } ], @@ -12312,6 +12440,24 @@ "resourceAppId": "00000002-0000-0000-c000-000000000000" } ], + "Policy.Read.AlternateTokenSubject": [ + { + "id": "", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], "Policy.ReadWrite.ApplicationConfiguration": [ { "id": "b27add92-efb2-4f16-84f5-8108ba77985c", @@ -12330,6 +12476,24 @@ "resourceAppId": "" } ], + "Policy.ReadWrite.AlternateTokenSubject": [ + { + "id": "", + "scheme": "DelegatedWork", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + }, + { + "id": "", + "scheme": "Application", + "environment": "public", + "isHidden": true, + "isEnabled": false, + "resourceAppId": "00000002-0000-0000-c000-000000000000" + } + ], "Policy.ReadWrite.AuthenticationFlows": [ { "id": "edb72de9-4252-4d03-a925-451deef99db7", @@ -20628,7 +20792,7 @@ "environment": "public", "isHidden": true, "isEnabled": true, - "resourceAppId": "ea890292-c8c8-4433-b5ea-b09d0668e1a6" + "resourceAppId": "479782c3-c61c-4e4d-92ee-4ed266cc7090" } ], "UserCloudClipboard.Read": [ @@ -29658,10 +29822,10 @@ ], "CopilotCostManagement.Read.All": [ { - "id": "377c9c09-ae8c-4ab0-90e7-9b8e293e35df", + "id": "c0fcd4f8-e2a8-4162-892c-652d9bb651fd", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" }, @@ -29686,30 +29850,30 @@ ], "CopilotCostManagement-CreditReq.Read.All": [ { - "id": "", + "id": "0696c9ff-8589-4687-8015-58a87d0ae29f", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" } ], "CopilotCostManagement-CreditReq.ReadWrite.All": [ { - "id": "", + "id": "29dc273e-f551-4fe3-a672-05bea406787f", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" } ], "CopilotCostManagement-Assignment.Read.All": [ { - "id": "", + "id": "fa5c8c5b-5aef-4d37-a426-02fdbb9c4a74", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" }, @@ -29724,10 +29888,10 @@ ], "CopilotCostManagement-Assignment.ReadWrite.All": [ { - "id": "", + "id": "95db0135-a8b4-4ca5-8121-8f693ff53402", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" }, @@ -29778,10 +29942,10 @@ ], "CopilotCostManagement-Policy.Read.All": [ { - "id": "", + "id": "7fe904eb-5276-4ddc-ab01-67e4d708b664", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" }, @@ -29796,10 +29960,10 @@ ], "CopilotCostManagement-Policy.ReadWrite.All": [ { - "id": "", + "id": "f6a3c1c2-c894-40f2-94e9-0eb3bca89847", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" }, @@ -29860,10 +30024,10 @@ ], "CopilotCostManagement-UserData.Read.All": [ { - "id": "", + "id": "d3f39420-6eec-4e63-98ba-b2866ef3ba99", "scheme": "DelegatedWork", "environment": "public", - "isHidden": true, + "isHidden": false, "isEnabled": true, "resourceAppId": "875b9b25-1468-4332-b8aa-fb07da6360bd" },