Skip to content

Weekly Permissions sync 2026-05-26#1540

Open
marabooy wants to merge 1 commit into
masterfrom
permissions-update/2026-05-26
Open

Weekly Permissions sync 2026-05-26#1540
marabooy wants to merge 1 commit into
masterfrom
permissions-update/2026-05-26

Conversation

@marabooy
Copy link
Copy Markdown
Contributor

Weekly Permissions sync 2026-05-26

@marabooy marabooy requested a review from a team as a code owner May 26, 2026 00:29
Copilot AI review requested due to automatic review settings May 26, 2026 00:29
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Weekly permissions sync updating Microsoft Graph permission definitions and provisioning metadata for the 2026-05-26 drop.

Changes:

  • Adds and updates provisioning metadata for several scopes, including visibility/enabled-state changes and new GUIDs.
  • Updates permission descriptions and path mappings, including Application.ReadWrite.All app role assignment support.
  • Adds new permission definitions for Identity Notifications and Security Identities Migration, plus path updates for drive, Android management, and FIDO2 methods.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 6 comments.

File Description
permissions/new/provisioningInfo.json Adds/updates scope provisioning entries and fixes indentation.
permissions/new/permissions.json Updates permission descriptions, pathSets, and adds new scope definitions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +28133 to +28138
{
"scheme": "DelegatedWork",
"environment": "public",
"isHidden": true,
"isEnabled": true,
"resourceAppId": "da472373-a181-4ed0-94ec-bc7779f3b558"
"schemes": {
"DelegatedWork": {
"adminDisplayName": "Read identity security sensor migration",
"adminDescription": "Allows the app to read all the identity security sensor migration information of signed user",
Comment on lines +28142 to +28147
{
"scheme": "Application",
"environment": "public",
"isHidden": true,
"isEnabled": true,
"resourceAppId": "da472373-a181-4ed0-94ec-bc7779f3b558"
Comment on lines +28149 to +28154
{
"scheme": "DelegatedWork",
"environment": "public",
"isHidden": true,
"isEnabled": true,
"resourceAppId": "da472373-a181-4ed0-94ec-bc7779f3b558"
Comment on lines +4082 to +4084
"adminDescription": "Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Allows management of app role assignments, except those exposed by Microsoft Graph. Does not allow management of delegated permission grants.",
"userDisplayName": "Read and write applications",
"userDescription": "Allows the app to create, read, update and delete applications and service principals on your behalf. Does not allow management of consent grants.",
"userDescription": "Allows the app to create, read, update and delete applications and service principals on your behalf. Allows management of app role assignments, except those exposed by Microsoft Graph. Does not allow management of delegated permission grants.",
Comment on lines +46235 to +46245
"pathSets": [
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"POST"
],
"paths": {
"/security/identities/sensorMigration/migrate": "least=DelegatedWork,Application"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants