Skip to content

Weekly Permissions sync 2026-05-21#1535

Open
marabooy wants to merge 1 commit into
masterfrom
permissions-update/2026-05-21
Open

Weekly Permissions sync 2026-05-21#1535
marabooy wants to merge 1 commit into
masterfrom
permissions-update/2026-05-21

Conversation

@marabooy
Copy link
Copy Markdown
Contributor

Weekly Permissions sync 2026-05-21

@marabooy marabooy requested a review from a team as a code owner May 21, 2026 00:28
Copilot AI review requested due to automatic review settings May 21, 2026 00:28
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Weekly permissions data sync updating the Microsoft Graph permissions catalog and related provisioning metadata.

Changes:

  • Updates provisioning visibility/enabled state for several permissions (notably IdentityNotifications) and adds new provisioning entries (IdentityVerification., MS-BrandingMigration., User-CredentialAssertions.*).
  • Adds new permission definitions for IdentityNotifications.* and SecurityIdentitiesMigration.* and updates some existing permission descriptions.
  • Updates/adjusts multiple pathSets entries (e.g., app role assignment routes for Application.ReadWrite.All, querycortexitemsnippetsinbatch, and archive/unarchive routes).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

File Description
permissions/new/provisioningInfo.json Updates permission deployment metadata (ids, enabled/hidden flags) and introduces new provisioning entries.
permissions/new/permissions.json Adds/updates permission definitions and adjusts route-to-permission mappings in pathSets.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines +7771 to +7798
"IdentityVerification.Read": [
{
"id": "",
"scheme": "DelegatedWork",
"environment": "",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "ea890292-c8c8-4433-b5ea-b09d0668e1a6"
}
],
"IdentityVerification.Read.All": [
{
"id": "",
"scheme": "DelegatedWork",
"environment": "",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "ea890292-c8c8-4433-b5ea-b09d0668e1a6"
},
{
"id": "",
"scheme": "Application",
"environment": "",
"isHidden": true,
"isEnabled": false,
"resourceAppId": "ea890292-c8c8-4433-b5ea-b09d0668e1a6"
}
],
Comment on lines +8613 to +8630
"MS-BrandingMigration.ReadWrite.All": [
{
"id": "",
"scheme": "Application",
"environment": "",
"isHidden": true,
"isEnabled": true,
"resourceAppId": "00000002-0000-0000-c000-000000000000"
},
{
"id": "",
"scheme": "DelegatedWork",
"environment": "",
"isHidden": true,
"isEnabled": true,
"resourceAppId": "00000002-0000-0000-c000-000000000000"
}
],
Comment on lines +17746 to +17755
"User-CredentialAssertions.ReadWrite.All": [
{
"id": "",
"scheme": "Application",
"environment": "",
"isHidden": true,
"isEnabled": true,
"resourceAppId": "00000002-0000-0000-c000-000000000000"
}
],
Comment on lines +46184 to +46188
"adminDisplayName": "Read identity security sensor migration",
"adminDescription": "Allows the app to read all the identity security sensor migration information of signed user",
"userDisplayName": "Read identity security sensor migration",
"userDescription": "Allows the app to read all the identity security sensor migration information on your behalf.",
"requiresAdminConsent": true,
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants