Skip to content

Commit 637e64e

Browse files
jingjingjia-msjingjingjia-ms
authored
Merge pull request #1513 from microsoftgraph/permissions-update/2026-04-29
Weekly Permissions sync 2026-04-29
2 parents 8730a47 + 3a2b60e commit 637e64e

2 files changed

Lines changed: 330 additions & 46 deletions

File tree

‎permissions/new/permissions.json‎

Lines changed: 175 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1314,7 +1314,7 @@
13141314
},
13151315
"Application": {
13161316
"adminDisplayName": "Read and write all agent identities",
1317-
"adminDescription": "Allows the app read, update, and delete agent identities without a signed-in user.",
1317+
"adminDescription": "Allows the app to read, update, and delete agent identities without a signed-in user.",
13181318
"requiresAdminConsent": true,
13191319
"privilegeLevel": 4
13201320
}
@@ -1649,16 +1649,16 @@
16491649
"authorizationType": "oAuth2",
16501650
"schemes": {
16511651
"DelegatedWork": {
1652-
"adminDisplayName": "Add or remove sponsors for agent identity blueprint",
1653-
"adminDescription": "Allows the app to add or remove sponsors for agent identity blueprint on behalf of the signed-in user.",
1652+
"adminDisplayName": "Add or remove sponsors for agent identity blueprints",
1653+
"adminDescription": "Allows the app to add or remove sponsors for agent identity blueprints on behalf of the signed-in user.",
16541654
"userDisplayName": "Update agent identity blueprint authorization related properties",
16551655
"userDescription": "Update agent identity blueprint authorization related properties on user's' behalf",
16561656
"requiresAdminConsent": true,
16571657
"privilegeLevel": 3
16581658
},
16591659
"Application": {
1660-
"adminDisplayName": "Add or remove sponsors for agent identity blueprint",
1661-
"adminDescription": "Allows the app to add or remove sponsors for agent identity blueprint without a signed-in user.",
1660+
"adminDisplayName": "Add or remove sponsors for agent identity blueprints",
1661+
"adminDescription": "Allows the app to add or remove sponsors for agent identity blueprints without a signed-in user.",
16621662
"requiresAdminConsent": true,
16631663
"privilegeLevel": 4
16641664
}
@@ -1697,13 +1697,13 @@
16971697
"authorizationType": "oAuth2",
16981698
"schemes": {
16991699
"DelegatedWork": {
1700-
"adminDisplayName": "Create agent identity blueprint service principals.",
1700+
"adminDisplayName": "Create agent identity blueprint principals.",
17011701
"adminDescription": "Allows creating new agent identity blueprint principals with a signed-in user.",
17021702
"requiresAdminConsent": true,
17031703
"privilegeLevel": 4
17041704
},
17051705
"Application": {
1706-
"adminDisplayName": "Create agent identity blueprint service principals.",
1706+
"adminDisplayName": "Create agent identity blueprint principals.",
17071707
"adminDescription": "Allows creating new agent identity blueprint principals without a signed-in user.",
17081708
"requiresAdminConsent": true,
17091709
"privilegeLevel": 5
@@ -1732,14 +1732,14 @@
17321732
"authorizationType": "oAuth2",
17331733
"schemes": {
17341734
"DelegatedWork": {
1735-
"adminDisplayName": "Delete and restore agent identity blueprints.",
1736-
"adminDescription": "Allows deleting or restoring agent identity blueprints with a signed-in user.",
1735+
"adminDisplayName": "Delete and restore agent identity blueprint principals.",
1736+
"adminDescription": "Allows deleting or restoring agent identity blueprint principals with a signed-in user.",
17371737
"requiresAdminConsent": true,
17381738
"privilegeLevel": 4
17391739
},
17401740
"Application": {
1741-
"adminDisplayName": "Delete and restore agent identity blueprints.",
1742-
"adminDescription": "Allows deleting or restoring agent identity blueprints without a signed-in user.",
1741+
"adminDisplayName": "Delete and restore agent identity blueprint principals.",
1742+
"adminDescription": "Allows deleting or restoring agent identity blueprint principals without a signed-in user.",
17431743
"requiresAdminConsent": true,
17441744
"privilegeLevel": 4
17451745
}
@@ -1814,7 +1814,7 @@
18141814
"authorizationType": "oAuth2",
18151815
"schemes": {
18161816
"DelegatedWork": {
1817-
"adminDisplayName": "Read agent identity blueprints principals.",
1817+
"adminDisplayName": "Read agent identity blueprint principals.",
18181818
"adminDescription": "Allows reading agent identity blueprint principals with a signed-in user.",
18191819
"requiresAdminConsent": true,
18201820
"privilegeLevel": 3
@@ -3106,6 +3106,114 @@
31063106
"ownerSecurityGroup": "agentregistrydevs"
31073107
}
31083108
},
3109+
"AgentRegistration.Read.All": {
3110+
"authorizationType": "oAuth2",
3111+
"schemes": {
3112+
"DelegatedWork": {
3113+
"adminDisplayName": "Read all agent registrations",
3114+
"adminDescription": "Allows the user to read all agent registration information",
3115+
"userDisplayName": "Read all agent registrations",
3116+
"userDescription": "Allows the app to read agent registration information.",
3117+
"requiresAdminConsent": false,
3118+
"privilegeLevel": 3
3119+
},
3120+
"Application": {
3121+
"adminDisplayName": "Read all agent registrations",
3122+
"adminDescription": "Allows the app to read agent registration information without a signed-in user.",
3123+
"requiresAdminConsent": true,
3124+
"privilegeLevel": 4
3125+
}
3126+
},
3127+
"pathSets": [
3128+
{
3129+
"schemeKeys": [
3130+
"DelegatedWork",
3131+
"Application"
3132+
],
3133+
"methods": [
3134+
"GET"
3135+
],
3136+
"paths": {
3137+
"/copilot/agentRegistrations/{agentId}": "least=DelegatedWork,Application"
3138+
}
3139+
}
3140+
],
3141+
"ownerInfo": {
3142+
"ownerSecurityGroup": "m365adminsvcdevteam"
3143+
}
3144+
},
3145+
"AgentRegistration.ReadWrite.All": {
3146+
"authorizationType": "oAuth2",
3147+
"schemes": {
3148+
"DelegatedWork": {
3149+
"adminDisplayName": "Read and write all agent registrations",
3150+
"adminDescription": "Allows the user to read and write all agent registration information",
3151+
"userDisplayName": "Read and write all agent registrations",
3152+
"userDescription": "Allows the app to read and write agent registration information.",
3153+
"requiresAdminConsent": true,
3154+
"privilegeLevel": 3
3155+
},
3156+
"Application": {
3157+
"adminDisplayName": "Read and write all agent registrations",
3158+
"adminDescription": "Allows the app to read and write agent registration information without a signed-in user.",
3159+
"requiresAdminConsent": true,
3160+
"privilegeLevel": 4
3161+
}
3162+
},
3163+
"pathSets": [
3164+
{
3165+
"schemeKeys": [
3166+
"DelegatedWork",
3167+
"Application"
3168+
],
3169+
"methods": [
3170+
"GET"
3171+
],
3172+
"paths": {
3173+
"/copilot/agentRegistrations/{agentId}": "least=DelegatedWork,Application"
3174+
}
3175+
},
3176+
{
3177+
"schemeKeys": [
3178+
"DelegatedWork",
3179+
"Application"
3180+
],
3181+
"methods": [
3182+
"POST"
3183+
],
3184+
"paths": {
3185+
"/copilot/agentRegistrations": "least=DelegatedWork,Application"
3186+
}
3187+
},
3188+
{
3189+
"schemeKeys": [
3190+
"DelegatedWork",
3191+
"Application"
3192+
],
3193+
"methods": [
3194+
"PATCH"
3195+
],
3196+
"paths": {
3197+
"/copilot/agentRegistrations/{agentId}": "least=DelegatedWork,Application"
3198+
}
3199+
},
3200+
{
3201+
"schemeKeys": [
3202+
"DelegatedWork",
3203+
"Application"
3204+
],
3205+
"methods": [
3206+
"DELETE"
3207+
],
3208+
"paths": {
3209+
"/copilot/agentRegistrations/{agentId}": "least=DelegatedWork,Application"
3210+
}
3211+
}
3212+
],
3213+
"ownerInfo": {
3214+
"ownerSecurityGroup": "m365adminsvcdevteam"
3215+
}
3216+
},
31093217
"Agreement.Read.All": {
31103218
"authorizationType": "oAuth2",
31113219
"schemes": {
@@ -5155,7 +5263,9 @@
51555263
"/reports/reconciliations/provisioning": "least=DelegatedWork,Application",
51565264
"/reports/reconciliations/provisioning/{id}": "least=DelegatedWork,Application",
51575265
"/reports/reconciliations/provisioning/{id}/identities": "least=DelegatedWork,Application",
5158-
"/reports/reconciliations/provisioning/{id}/identities/{id}": "least=DelegatedWork,Application"
5266+
"/reports/reconciliations/provisioning/{id}/identities/{id}": "least=DelegatedWork,Application",
5267+
"/users/{id}/agentSignInSessions": "least=DelegatedWork,Application",
5268+
"/users/{id}/agentSignInSessions/{id}": "least=DelegatedWork,Application"
51595269
}
51605270
},
51615271
{
@@ -11644,6 +11754,7 @@
1164411754
"/devicemanagement/virtualendpoint/cloudpcs/{id}/resize": "least=DelegatedWork,Application",
1164511755
"/devicemanagement/virtualendpoint/cloudpcs/{id}/restore": "least=DelegatedWork,Application",
1164611756
"/devicemanagement/virtualendpoint/cloudpcs/{id}/retrypartneragentinstallation": "least=DelegatedWork,Application",
11757+
"/devicemanagement/virtualendpoint/cloudpcs/{id}/setdevicename": "least=DelegatedWork,Application",
1164711758
"/devicemanagement/virtualendpoint/cloudpcs/{id}/start": "least=DelegatedWork,Application",
1164811759
"/devicemanagement/virtualendpoint/cloudpcs/{id}/stop": "least=DelegatedWork,Application",
1164911760
"/devicemanagement/virtualendpoint/cloudpcs/{id}/troubleshoot": "least=DelegatedWork,Application",
@@ -33987,6 +34098,7 @@
3398734098
"/networkaccess/reports/getCrossTenantSummary": "least=DelegatedWork,Application",
3398834099
"/networkaccess/reports/getDestinationSummaries": "least=DelegatedWork,Application",
3398934100
"/networkaccess/reports/getDeviceUsageSummary": "least=DelegatedWork,Application",
34101+
"/networkaccess/reports/getDiscoveredAIAgentReport(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
3399034102
"/networkaccess/reports/getDiscoveredApplicationSegmentReport(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
3399134103
"/networkaccess/reports/getEnterpriseApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
3399234104
"/networkaccess/reports/getUserThreatReport": "least=DelegatedWork,Application",
@@ -34187,6 +34299,7 @@
3418734299
"/networkaccess/reports/getCrossTenantSummary": "",
3418834300
"/networkaccess/reports/getDestinationSummaries": "",
3418934301
"/networkaccess/reports/getDeviceUsageSummary": "",
34302+
"/networkaccess/reports/getDiscoveredAIAgentReport(startDateTime={startDateTime},endDateTime={endDateTime})": "",
3419034303
"/networkaccess/reports/getDiscoveredApplicationSegmentReport(startDateTime={startDateTime},endDateTime={endDateTime})": "",
3419134304
"/networkaccess/reports/getEnterpriseApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})": "",
3419234305
"/networkaccess/reports/getUserThreatReport": "",
@@ -40185,6 +40298,50 @@
4018540298
"ownerSecurityGroup": "updev"
4018640299
}
4018740300
},
40301+
"PrintAlertSettings.ReadWrite.All": {
40302+
"authorizationType": "oAuth2",
40303+
"schemes": {
40304+
"DelegatedWork": {
40305+
"adminDisplayName": "Read and write tenant-wide alert settings",
40306+
"adminDescription": "Allows the application to read and write tenant-wide alert settings on behalf of the signed-in user.",
40307+
"userDisplayName": "Read and write tenant-wide alert settings",
40308+
"userDescription": "Allows the application to read and write tenant-wide alert settings on your behalf.",
40309+
"requiresAdminConsent": true,
40310+
"privilegeLevel": 3
40311+
}
40312+
},
40313+
"pathSets": [
40314+
{
40315+
"schemeKeys": [
40316+
"DelegatedWork"
40317+
],
40318+
"methods": [
40319+
"GET"
40320+
],
40321+
"paths": {
40322+
"/print/services": "",
40323+
"/print/services/{id}": "",
40324+
"/print/services/{id}/endpoints": "",
40325+
"/print/services/{id}/endpoints/{id}": ""
40326+
}
40327+
},
40328+
{
40329+
"schemeKeys": [
40330+
"DelegatedWork"
40331+
],
40332+
"methods": [
40333+
"GET",
40334+
"PATCH"
40335+
],
40336+
"paths": {
40337+
"/print/alertSettings": "least=DelegatedWork"
40338+
}
40339+
}
40340+
],
40341+
"ownerInfo": {
40342+
"ownerSecurityGroup": "updev"
40343+
}
40344+
},
4018840345
"PrintConnector.Read.All": {
4018940346
"authorizationType": "oAuth2",
4019040347
"schemes": {
@@ -42823,6 +42980,7 @@
4282342980
"/reports/getSharePointApiUsage(period={value})": "least=DelegatedWork",
4282442981
"/reports/getuserarchivedprintjobs": "least=DelegatedWork",
4282542982
"/reports/getuserarchivedprintjobs(userid={value},startdatetime={value},enddatetime={value})": "least=DelegatedWork",
42983+
"/reports/microsoftappsfilestoragecontainerusagesummary": "least=DelegatedWork",
4282642984
"/reports/monthlyprintusagebyprinter": "least=DelegatedWork",
4282742985
"/reports/monthlyprintusagebyprinter/{id}": "least=DelegatedWork",
4282842986
"/reports/monthlyprintusagebyuser": "least=DelegatedWork",
@@ -56653,6 +56811,8 @@
5665356811
"/admin/people/itemInsights": "least=DelegatedWork",
5665456812
"/education/me/user": "",
5665556813
"/education/users/{id}/user": "",
56814+
"/me/agentSignInSessions": "least=DelegatedWork",
56815+
"/me/agentSignInSessions/{id}": "least=DelegatedWork",
5665656816
"/me/analytics/settings": "least=DelegatedWork",
5665756817
"/me/cloudLicensing/assignmentErrors": "",
5665856818
"/me/cloudLicensing/assignmentErrors/{id}": "",
@@ -58348,8 +58508,10 @@
5834858508
"POST"
5834958509
],
5835058510
"paths": {
58511+
"/me/agentSignInSessions/{id}/revoke": "least=DelegatedWork,Application",
5835158512
"/me/invalidateAllRefreshTokens": "least=DelegatedWork,Application",
5835258513
"/me/revokesigninsessions": "least=DelegatedWork,Application",
58514+
"/users/{id}/agentSignInSessions/{id}/revoke": "least=DelegatedWork,Application",
5835358515
"/users/{id}/invalidateAllRefreshTokens": "least=DelegatedWork,Application",
5835458516
"/users/{id}/revokeSignInSessions": "least=DelegatedWork,Application"
5835558517
}

0 commit comments

Comments
 (0)