Merge pull request #972 from microsoftgraph/dev

Merge dev into master
microsoftgraph · Jan 20, 2025 · 839b6a2 · 839b6a2
2 parents bc5b070 + 8d81950
commit 839b6a2
Show file tree

Hide file tree

Showing 2 changed files with 140 additions and 7 deletions.
diff --git a/permissions/new/ProvisioningInfo.json b/permissions/new/ProvisioningInfo.json
@@ -3414,6 +3414,17 @@
                 "resourceAppId": "00000000-0000-0000-0000-000000000000"
             }
         ],
+        "Device-AppProtectionCAProperties.ReadWrite.All": [
+            {
+                "id": "2ffea8af-4766-4a4f-ad87-e91dacb3046d",
+                "scheme": "Application",
+                "environment": "public",
+                "isHidden": true,
+                "isEnabled": true,
+                "isPreauthorizationOnly": true,
+                "resourceAppId": "00000000-0000-0000-0000-000000000000"
+            }
+        ],
         "Device-MdmManagedProperties.ReadWrite.All": [
             {
                 "id": "9f65ca3f-9c7c-4be7-b52f-fe5753e364b2",
@@ -9893,15 +9904,15 @@
                 "id": "e197c06f-ae7b-4398-b0a2-89f76ebca159",
                 "scheme": "DelegatedWork",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4"
             },
             {
                 "id": "2a6baefd-edea-4ff6-b24e-bebcaa27a50d",
                 "scheme": "Application",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4"
             }
@@ -9910,15 +9921,15 @@
             {
                 "scheme": "DelegatedWork",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4",
                 "id": "2a7babba-9623-4109-bc9c-79728cf3bb4f"
             },
             {
                 "scheme": "Application",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "isEnabled": true,
                 "resourceAppId": "bb2a2e3a-c5e7-4f0a-88e0-8e01fd3fc1f4",
                 "id": "7fc7225d-eb37-4c39-90f3-a33a57cf1081"
@@ -12593,15 +12604,15 @@
             {
                 "scheme": "Application",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "resourceAppId": "48ac35b8-9aa8-4d74-927d-1f4a14a0b239",
                 "id": "b55aa226-33a1-4396-bcf4-edce5e7a31c1",
                 "isEnabled": true
             },
             {
                 "scheme": "DelegatedWork",
                 "environment": "public",
-                "isHidden": true,
+                "isHidden": false,
                 "resourceAppId": "48ac35b8-9aa8-4d74-927d-1f4a14a0b239",
                 "id": "ea2cbd09-253c-4f69-a0e6-07383c5f07cc",
                 "isEnabled": true

diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json
@@ -16756,7 +16756,7 @@
         }
       ],
       "ownerInfo": {
-        "ownerSecurityGroup": "DirectoryPreAuthZReq"
+        "ownerSecurityGroup": "iamut-dev"
       }
     },
     "Domain.ReadWrite.All": {
@@ -36054,6 +36054,92 @@
         "ownerSecurityGroup": "TeamsPermissions"
       }
     },
+    "RiskPreventionProviders.Read.All": {
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read all identity risk prevention providers",
+          "adminDescription": "Allows the app to read your organization's risk prevention providers, on behalf of the signed-in user.",
+          "userDisplayName": "Read all identity risk prevention providers",
+          "userDescription": "Allows the app to read your organization's risk prevention providers, on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        },
+        "Application": {
+          "adminDisplayName": "Read all identity risk prevention providers",
+          "adminDescription": "Allows the app to read your organization's risk prevention providers, without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/identity/riskPreventionProviders": "least=DelegatedWork,Application",
+            "/identity/riskPreventionProviders/{id}": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "cpimmsgraphadmins"
+      }
+    },
+    "RiskPreventionProviders.ReadWrite.All": {
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read and write all identity risk prevention providers",
+          "adminDescription": "Allows the app to read and write your organization's risk prevention providers, on behalf of the signed-in user.",
+          "userDisplayName": "Read and write all identity risk prevention providers",
+          "userDescription": "Allows the app to read and write your organization's risk prevention providers, on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        },
+        "Application": {
+          "adminDisplayName": "Read and write all identity risk prevention providers",
+          "adminDescription": "Allows the app to read and write your organization's risk prevention providers, without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET",
+            "POST"
+          ],
+          "paths": {
+            "/identity/riskPreventionProviders": "least=DelegatedWork,Application"
+          }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "DELETE",
+            "GET",
+            "PATCH"
+          ],
+          "paths": {
+            "/identity/riskPreventionProviders/{id}": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "cpimmsgraphadmins"
+      }
+    },
     "RoleAssignmentSchedule.Read.Directory": {
       "schemes": {
         "DelegatedWork": {
@@ -44608,6 +44694,42 @@
         "ownerSecurityGroup": "TeamsPermissions"
       }
     },
+    "TeamsResourceAccount.Read.All": {
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read Teams resource accounts",
+          "adminDescription": "Allows the app to read your tenant's resource accounts on behalf of the signed-in admin user.",
+          "userDisplayName": "Read Teams resource accounts",
+          "userDescription": "Allows the app to read your tenant's resource accounts on behalf of the signed-in admin user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        },
+        "Application": {
+          "adminDisplayName": "Read Teams resource accounts",
+          "adminDescription": "Allows the app to read your tenant's resource accounts without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/admin/teams/resourceAccounts": "least=DelegatedWork,Application",
+            "/admin/teams/resourceAccounts/{id}": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "IC3_Agent_Provisioning_Approvers"
+      }
+    },
     "TeamsTab.Create": {
       "schemes": {
         "DelegatedWork": {