Skip to content

Feat: Permission Annotations - #948

Draft
Zacgoose wants to merge 2 commits into
devfrom
feat/permission-annotations
Draft

Zacgoose wants to merge 2 commits into
devfrom
feat/permission-annotations

Conversation

@Zacgoose

Copy link
Copy Markdown
Contributor

Permissions for each cmdlet and endpoint noted in each endpoint and helper and in the API spec

…nto the OpenAPI spec

- build/tools/Update-PermissionAnnotations.ps1 writes a Permission: line per Graph call into each function's .NOTES (least privileged from Microsoft's permissions map, higher privileged from the Learn page tables), keeps hand-written lines for what it cannot derive, and has -Check for CI and -Refresh for the vendored data
- build-openapi.ps1 rolls the lines up through helpers and queued activities into x-cipp-permissions, with a permission-to-endpoint index in x-cipp-permission-index
…em up into the spec

- writes Permission: lines into the .NOTES of every function that calls Graph
- moves the annotated nested helpers (OneDrive and sharing-link scans, CA identity coverage, PIM removal, group cache batches, GDAP trace, site permission removal, app password policy, NudgeMFA) into their own files, passing what they read from the parent as parameters
- regenerates openapi.json with x-cipp-permissions and x-cipp-permission-index
@Zacgoose
Zacgoose force-pushed the feat/permission-annotations branch from 114bd43 to f119cbd Compare October 16, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant