From 2fddd06ae4544e53c5db98a0c7c7d24190dc9f72 Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 15 Sep 2026 03:57:00 +0300 Subject: [PATCH 1/2] Weekly Permissions sync 2026-09-15 --- permissions/new/permissions.json | 29 +++++++++++++++++++++++------ 1 file changed, 23 insertions(+), 6 deletions(-) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index 0f0d47b6..ab5d41b9 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -23881,8 +23881,6 @@ "GET" ], "paths": { - "/identitygovernance/entitlementmanagement/accessorchestratorrequests": "least=DelegatedWork,Application", - "/identitygovernance/entitlementmanagement/accessorchestratorrequests/{id}": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages/{id}": "least=DelegatedWork,Application", @@ -23926,6 +23924,7 @@ "/identitygovernance/entitlementmanagement/connectedorganizations/{id}": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors": "least=DelegatedWork,Application", + "/identitygovernance/entitlementmanagement/dynamicaccessrequests/{id}": "least=Application", "/identityGovernance/entitlementManagement/externalOriginResourceConnectors": "least=DelegatedWork,Application", "/identityGovernance/entitlementManagement/externalOriginResourceConnectors/{id}": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/settings": "least=DelegatedWork,Application", @@ -24068,7 +24067,6 @@ "POST" ], "paths": { - "/identitygovernance/entitlementmanagement/accessorchestratorrequests": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicies": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicypresets": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests": "least=Application", @@ -24114,9 +24112,9 @@ "GET" ], "paths": { - "/identitygovernance/entitlementmanagement/accessorchestratorrequests/{id}": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/assignmentrequests/{id}": "least=DelegatedWork,Application", + "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}": "least=Application", "/rolemanagement/entitlementmanagement/roleassignments/{id}": "least=DelegatedWork,Application" } }, @@ -24152,6 +24150,9 @@ "/identitygovernance/entitlementmanagement/accesspackages/{id}/movetocatalog": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/assignmentrequests/{id}/reprocess": "least=DelegatedWork,Application", "/identitygovernance/entitlementmanagement/assignments/{id}/reprocess": "least=DelegatedWork,Application", + "/identitygovernance/entitlementmanagement/dynamicaccesssessions": "least=Application", + "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}/clarify": "least=Application", + "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}/submit": "least=Application", "/identityGovernance/entitlementManagement/externalOriginResourceConnectors": "least=DelegatedWork,Application" } }, @@ -24353,7 +24354,9 @@ "/identitygovernance/entitlementmanagement/accesspackagesuggestions/filterbycurrentuser(on={value})": "least=DelegatedWork", "/identitygovernance/entitlementmanagement/assignmentrequests/filterbycurrentuser(on={value})": "least=DelegatedWork", "/identitygovernance/entitlementmanagement/assignments/filterbycurrentuser(on={value})": "least=DelegatedWork", - "/identitygovernance/entitlementmanagement/availableaccesspackages/{id}/resourcerolescopes": "least=DelegatedWork" + "/identitygovernance/entitlementmanagement/availableaccesspackages/{id}/resourcerolescopes": "least=DelegatedWork", + "/identitygovernance/entitlementmanagement/dynamicaccessrequests/{id}": "least=DelegatedWork", + "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}": "least=DelegatedWork" } }, { @@ -24368,7 +24371,21 @@ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}/cancel": "least=DelegatedWork", "/identitygovernance/entitlementmanagement/accesspackages/{id}/getapplicablepolicyrequirements": "least=DelegatedWork", "/identitygovernance/entitlementmanagement/assignmentrequests": "least=DelegatedWork", - "/identitygovernance/entitlementmanagement/assignmentrequests/{id}/cancel": "least=DelegatedWork" + "/identitygovernance/entitlementmanagement/assignmentrequests/{id}/cancel": "least=DelegatedWork", + "/identitygovernance/entitlementmanagement/dynamicaccesssessions": "least=DelegatedWork", + "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}/clarify": "least=DelegatedWork", + "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}/submit": "least=DelegatedWork" + } + }, + { + "schemeKeys": [ + "DelegatedWork" + ], + "methods": [ + "DELETE" + ], + "paths": { + "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}": "least=DelegatedWork" } } ], From 84aef854c7da94661ce052cd7d214926e1e4594d Mon Sep 17 00:00:00 2001 From: David <1511024+marabooy@users.noreply.github.com> Date: Tue, 15 Sep 2026 23:56:12 +0300 Subject: [PATCH 2/2] Weekly Permissions sync 2026-09-15 --- permissions/new/permissions.json | 36 +++++++++++++++++++++++++------- 1 file changed, 28 insertions(+), 8 deletions(-) diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json index ab5d41b9..dfbc096f 100644 --- a/permissions/new/permissions.json +++ b/permissions/new/permissions.json @@ -14097,7 +14097,8 @@ ], "paths": { "/identity/customAuthenticationExtensions": "least=DelegatedWork,Application", - "/identity/customAuthenticationExtensions/{id}": "least=DelegatedWork,Application" + "/identity/customAuthenticationExtensions/{id}": "least=DelegatedWork,Application", + "/identity/customAuthenticationExtensions/microsoft.graph.onAccountTakeoverProtectionStartCustomExtension": "least=DelegatedWork,Application" } }, { @@ -14150,6 +14151,18 @@ "/identity/customAuthenticationExtensions": "least=DelegatedWork,Application" } }, + { + "schemeKeys": [ + "DelegatedWork", + "Application" + ], + "methods": [ + "GET" + ], + "paths": { + "/identity/customAuthenticationExtensions/microsoft.graph.onAccountTakeoverProtectionStartCustomExtension": "" + } + }, { "schemeKeys": [ "DelegatedWork", @@ -24523,6 +24536,7 @@ "/identity/authenticationEventListeners": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}/conditions/applications/includeApplications": "least=DelegatedWork,Application", + "/identity/authenticationEventListeners/{id}/microsoft.graph.onAccountTakeoverProtectionStartListener/handler/microsoft.graph.onAccountTakeoverProtectionStartCustomExtensionHandler/customExtension": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionListener/handler/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionStartListener/handler/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionSubmitListener/handler/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension": "least=DelegatedWork,Application", @@ -24532,6 +24546,7 @@ "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartBrandingOverrideHandler/brandingTheme": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartCustomExtensionHandler/customExtension": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}/microsoft.graph.onVerifiedIdClaimValidationListener/handler/microsoft.graph.onVerifiedIdClaimValidationCustomExtensionHandler/customExtension": "least=DelegatedWork,Application", + "/identity/authenticationEventListeners/microsoft.graph.onAccountTakeoverProtectionStartListener": "least=DelegatedWork,Application", "/identity/authenticationEventsFlows": "least=DelegatedWork,Application", "/identity/authenticationEventsFlows/{id}": "least=DelegatedWork,Application", "/identity/authenticationEventsFlows/{id}/conditions/applications/includeApplications": "least=DelegatedWork,Application", @@ -24605,6 +24620,7 @@ "GET" ], "paths": { + "/identity/authenticationEventListeners/{id}/microsoft.graph.onAccountTakeoverProtectionStartListener/handler/microsoft.graph.onAccountTakeoverProtectionStartCustomExtensionHandler/customExtension": "", "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionListener/handler/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes": "", "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionStartListener/handler/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension": "", "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionSubmitListener/handler/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension": "", @@ -24614,6 +24630,7 @@ "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartBrandingOverrideHandler/brandingTheme": "", "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartCustomExtensionHandler/customExtension": "", "/identity/authenticationEventListeners/{id}/microsoft.graph.onVerifiedIdClaimValidationListener/handler/microsoft.graph.onVerifiedIdClaimValidationCustomExtensionHandler/customExtension": "", + "/identity/authenticationEventListeners/microsoft.graph.onAccountTakeoverProtectionStartListener": "", "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes": "", "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollectionStart/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension": "", "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollectionSubmit/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension": "", @@ -24629,6 +24646,7 @@ "PUT" ], "paths": { + "/identity/authenticationEventListeners/{id}/microsoft.graph.onAccountTakeoverProtectionStartListener/handler/microsoft.graph.onAccountTakeoverProtectionStartCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionStartListener/handler/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionSubmitListener/handler/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application", "/identity/authenticationEventListeners/{id}/microsoft.graph.onEmailOtpSendListener/handler/microsoft.graph.onOtpSendCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application", @@ -58104,16 +58122,16 @@ "authorizationType": "oAuth2", "schemes": { "DelegatedWork": { - "adminDisplayName": "Run hunting queries", - "adminDescription": "Allows the app to run hunting queries, on behalf of the signed-in user.", - "userDisplayName": "Run hunting queries", - "userDescription": "Allows the app to run hunting queries that you can execute.", + "adminDisplayName": "Run hunting queries and read saved hunting queries", + "adminDescription": "Allows the app to run hunting queries and read saved hunting queries, on behalf of the signed-in user.", + "userDisplayName": "Run hunting queries and read saved hunting queries", + "userDescription": "Allows the app to run hunting queries that you can execute and read saved hunting queries that you can access.", "requiresAdminConsent": true, "privilegeLevel": 3 }, "Application": { - "adminDisplayName": "Run hunting queries", - "adminDescription": "Allows the app to run hunting queries, without a signed-in user.", + "adminDisplayName": "Run hunting queries and read shared saved hunting queries", + "adminDescription": "Allows the app to run hunting queries and read shared saved hunting queries, without a signed-in user.", "requiresAdminConsent": true, "privilegeLevel": 3 } @@ -58145,7 +58163,9 @@ "/security/gethuntingschematables(workspaceid={workspaceid})": "least=DelegatedWork,Application", "/security/getrunhuntingquery": "least=DelegatedWork,Application", "/security/huntingFunctions": "least=DelegatedWork,Application", - "/security/huntingFunctions/{id}": "least=DelegatedWork,Application" + "/security/huntingFunctions/{id}": "least=DelegatedWork,Application", + "/security/threathunting/queries": "least=DelegatedWork,Application", + "/security/threathunting/queries/{id}": "least=DelegatedWork,Application" } } ],