Skip to content

Weekly Permissions sync 2026-03-18#1471

Open
marabooy wants to merge 1 commit intomasterfrom
permissions-update/2026-03-18
Open

Weekly Permissions sync 2026-03-18#1471
marabooy wants to merge 1 commit intomasterfrom
permissions-update/2026-03-18

Conversation

@marabooy
Copy link
Contributor

Weekly Permissions sync 2026-03-18

@marabooy marabooy requested a review from a team as a code owner March 18, 2026 00:32
Copilot AI review requested due to automatic review settings March 18, 2026 00:32
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Weekly permissions metadata sync updating Graph permission provisioning and API path mappings.

Changes:

  • Removed a hidden AgentIdentityBlueprintPrincipal permission entry from provisioning metadata.
  • Added new hidden provisioning entries for delegated permission grant management and user operations.
  • Updated permission metadata for delegated permission grants and added DELETE retentionLabel path coverage.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 4 comments.

File Description
permissions/new/provisioningInfo.json Removes one hidden permission entry; adds new hidden provisioning entries (DelegatedPermissionGrant / User).
permissions/new/permissions.json Adjusts DelegatedPermissionGrant.ReadWrite.All metadata (privilege/path mappings) and adds DELETE retentionLabel paths in multiple permission blocks.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

"resourceAppId": "00000002-0000-0000-c000-000000000000"
}
],
],
Comment on lines 13690 to +13692
"paths": {
"/serviceprincipals(appid={value})/inheritedoauth2permissiongrants": "least=Application",
"/serviceprincipals(appid={value})/oauth2permissiongrants": "least=Application",
"/serviceprincipals(appid={value})/inheritedoauth2permissiongrants": "",
"/serviceprincipals(appid={value})/oauth2permissiongrants": "",
Comment on lines +26501 to +26505
"paths": {
"/drives/{id}/items/{id}/retentionLabel": "least=DelegatedWork,Application",
"/groups/{id}/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
"/me/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
"/users/{user-id}/drive/items/{item-id}/retentionLabel": "least=DelegatedWork,Application"
Comment on lines +47942 to +47946
"paths": {
"/drives/{id}/items/{id}/retentionLabel": "",
"/groups/{id}/drive/items/{id}/retentionLabel": "",
"/me/drive/items/{id}/retentionLabel": "",
"/users/{user-id}/drive/items/{item-id}/retentionLabel": ""
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants