From 83b2aaa67382d0bb1cc854f4173e39cbb1cd291b Mon Sep 17 00:00:00 2001
From: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
Date: Fri, 16 Oct 2026 14:01:00 +0800
Subject: [PATCH 1/2] feat(api): annotate Graph permissions per function and
roll them up into the OpenAPI spec
- build/tools/Update-PermissionAnnotations.ps1 writes a Permission: line per Graph call into each function's .NOTES (least privileged from Microsoft's permissions map, higher privileged from the Learn page tables), keeps hand-written lines for what it cannot derive, and has -Check for CI and -Refresh for the vendored data
- build-openapi.ps1 rolls the lines up through helpers and queued activities into x-cipp-permissions, with a permission-to-endpoint index in x-cipp-permission-index
---
.github/agents/CIPP-Endpoint-Agent.md | 23 +
.github/workflows/openapi_spec.yml | 20 +-
backend/Tests/Build/Build-OpenApi.Tests.ps1 | 101 +
backend/Tests/Build/Invoke-BuildTests.ps1 | 2 +-
.../Update-PermissionAnnotations.Tests.ps1 | 207 +
build/tools/Update-PermissionAnnotations.ps1 | 730 +
build/tools/build-openapi.ps1 | 129 +-
build/tools/graph-learn-permissions.json | 1 +
build/tools/graph-permissions.json | 65763 ++++++++++++++++
9 files changed, 66970 insertions(+), 6 deletions(-)
create mode 100644 backend/Tests/Build/Update-PermissionAnnotations.Tests.ps1
create mode 100644 build/tools/Update-PermissionAnnotations.ps1
create mode 100644 build/tools/graph-learn-permissions.json
create mode 100644 build/tools/graph-permissions.json
diff --git a/.github/agents/CIPP-Endpoint-Agent.md b/.github/agents/CIPP-Endpoint-Agent.md
index b574155e43..169671963a 100644
--- a/.github/agents/CIPP-Endpoint-Agent.md
+++ b/.github/agents/CIPP-Endpoint-Agent.md
@@ -150,6 +150,29 @@ A helper must let its caller tell an input problem apart from an upstream failur
explicit `[HttpStatusCode]::BadRequest` / `NotFound` returns where you can.
- Ask the maintainer before regenerating the spec.
+### Permissions
+
+Each function that calls Microsoft Graph lists the permissions those calls need in its help `.NOTES`, one line per
+operation and permission type:
+
+```
+.NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All
+ Permission: Exchange | Set-Mailbox | Delegated | Mail Recipients | Organization Management | only when archiving
+```
+
+Columns: API | operation | `Delegated` or `Application` | least privileged | higher privileged [| condition].
+
+- `pwsh build/tools/Update-PermissionAnnotations.ps1` writes the Graph lines from the code: the URI, method and
+ `-AsApp`, least privileged from Microsoft's permissions map and higher privileged from the Learn page. Run it after
+ changing a Graph call; CI runs it with `-Check`. `-Refresh` re-downloads Microsoft's data.
+- Write a line by hand only for what the script cannot derive: other APIs (Exchange, SharePoint, Partner Center),
+ or a Graph call whose URI is built at runtime. The script keeps those, and keeps a condition you add to a line it writes.
+- Never add a new help keyword such as `.PERMISSIONS`: an unknown keyword stops PowerShell reading the whole help block,
+ `.ROLE` and `.FUNCTIONALITY` included, and the endpoint stops routing.
+- `build-openapi.ps1` rolls the lines up through every helper and queued activity an endpoint reaches into
+ `x-cipp-permissions`, and indexes them by permission in the top-level `x-cipp-permission-index`.
+
---
## Tests
diff --git a/.github/workflows/openapi_spec.yml b/.github/workflows/openapi_spec.yml
index c325c5ee3e..eb5d49dee7 100644
--- a/.github/workflows/openapi_spec.yml
+++ b/.github/workflows/openapi_spec.yml
@@ -6,14 +6,16 @@ on:
- main
- dev
paths:
- - 'backend/Modules/CIPPHTTP/**'
- # entrypoints hand the body to these, and the generator follows the call
- - 'backend/Modules/CIPPCore/**'
+ # entrypoints hand the body to CIPPCore helpers, and permissions roll up through every module
+ - 'backend/Modules/**'
- 'backend/Config/openapi.json'
- 'backend/Config/openapi-overrides/**'
+ - 'backend/Config/SAMManifest.json'
# simpleColumns declarations type the list responses
- 'frontend/src/**'
- 'build/tools/build-openapi.ps1'
+ - 'build/tools/Update-PermissionAnnotations.ps1'
+ - 'build/tools/graph-*permissions.json'
concurrency:
group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.ref }}
cancel-in-progress: true
@@ -29,6 +31,18 @@ jobs:
steps:
- uses: actions/checkout@v4
+ # Each function's .NOTES lists the Graph permissions its calls need; the spec rolls them up per endpoint.
+ - name: Check the Permission lines match the Graph calls
+ shell: pwsh
+ run: |
+ try {
+ ./build/tools/Update-PermissionAnnotations.ps1 -Check
+ } catch {
+ Write-Host "::error::$($_.Exception.Message)"
+ Write-Host 'Regenerate with: pwsh build/tools/Update-PermissionAnnotations.ps1'
+ exit 1
+ }
+
# backend/Config/openapi.json is loaded at runtime by Get-CippMcpSpec and
# projected into the MCP tool list, so a stale committed spec ships a tool
# contract that no longer matches the endpoints.
diff --git a/backend/Tests/Build/Build-OpenApi.Tests.ps1 b/backend/Tests/Build/Build-OpenApi.Tests.ps1
index 926894bb64..e8c21104b7 100644
--- a/backend/Tests/Build/Build-OpenApi.Tests.ps1
+++ b/backend/Tests/Build/Build-OpenApi.Tests.ps1
@@ -717,3 +717,104 @@ Describe 'determinism and drift checking' {
{ & $script:GeneratorPath -PublicPath $script:PublicCopy -EntrypointPath $script:FixtureRoot -ModulesPath $script:ModulesRoot -OverridePath (Join-Path $TestDrive 'empty') -OutputPath $Path -Check } | Should -Throw -ExpectedMessage '*stale*'
}
}
+
+Describe 'permission rollup' {
+ BeforeAll {
+ $Root = Join-Path $TestDrive 'perm'
+ $Http = Join-Path $Root 'Entrypoints'
+ $Core = Join-Path $Root 'Modules/CIPPCore/Public'
+ $Queue = Join-Path $Root 'Modules/CIPPActivityTriggers/Public'
+ $null = New-Item -ItemType Directory -Path $Http, $Core, $Queue -Force
+ Set-Content -Path (Join-Path $Http 'Invoke-ListPermFixture.ps1') -Value @'
+function Invoke-ListPermFixture {
+ <#
+ .FUNCTIONALITY
+ Entrypoint
+ .ROLE
+ Identity.User.Read
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.Read.All | Directory.Read.All
+ #>
+ param($Request)
+ $User = Get-PermFixtureUser
+ $null = Get-Tenants
+ $null = @{ FunctionName = 'PermFixtureQueued'; TenantFilter = 'x' }
+}
+'@
+ Set-Content -Path (Join-Path $Core 'Get-PermFixtureUser.ps1') -Value @'
+function Get-PermFixtureUser {
+ <#
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All
+ #>
+ param()
+}
+'@
+ Set-Content -Path (Join-Path $Core 'Get-Tenants.ps1') -Value @'
+function Get-Tenants {
+ <#
+ .NOTES
+ Permission: Graph | GET /contracts | Delegated | Directory.Read.All
+ #>
+ param()
+}
+'@
+ Set-Content -Path (Join-Path $Queue 'Push-PermFixtureQueued.ps1') -Value @'
+function Push-PermFixtureQueued {
+ <#
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All
+ Permission: Exchange | Set-Mailbox | Delegated | Mail Recipients | Organization Management | only when archiving
+ #>
+ param($Item)
+}
+'@
+ $Out = Join-Path $Root 'openapi.json'
+ & $script:GeneratorPath -EntrypointPath $Http -ModulesPath (Join-Path $Root 'Modules') -OverridePath (Join-Path $TestDrive 'empty') `
+ -FrontendPath (Join-Path $TestDrive 'none') -PublicPath $script:PublicCopy -OutputPath $Out | Out-Null
+ $script:PermSpec = Get-Content $Out -Raw | ConvertFrom-Json -AsHashtable
+ $script:Perms = $script:PermSpec.paths['/api/ListPermFixture'].get.'x-cipp-permissions'
+ $script:PermRoot = $Root
+ }
+
+ It 'rolls up the entrypoint, its helpers and the activities it queues' {
+ $Perms.operation | Should -Be @('Set-Mailbox', 'GET /groups', 'GET /users/{id}')
+ $Perms.Where({ $_.operation -eq 'GET /users/{id}' })[0].via | Should -Be @('Get-PermFixtureUser', 'Push-PermFixtureQueued')
+ }
+
+ It 'splits least and higher into lists and keeps the condition' {
+ $User = $Perms.Where({ $_.operation -eq 'GET /users/{id}' })[0]
+ $User.least | Should -Be @('User.ReadBasic.All')
+ $User.higher | Should -Be @('User.Read.All', 'User.ReadWrite.All')
+ $Perms.Where({ $_.api -eq 'Exchange' })[0].condition | Should -Be 'only when archiving'
+ }
+
+ It 'skips partner-tenant plumbing' {
+ $Perms.operation | Should -Not -Contain 'GET /contracts'
+ }
+
+ It 'indexes each least-privileged permission to its endpoints' {
+ $PermSpec.'x-cipp-permission-index'.Graph.Delegated.'User.ReadBasic.All' | Should -Be @('ListPermFixture')
+ $PermSpec.'x-cipp-permission-index'.Exchange.Delegated.'Mail Recipients' | Should -Be @('ListPermFixture')
+ }
+
+ It 'rejects a malformed Permission line' {
+ $Bad = Join-Path $PermRoot 'bad'
+ $null = New-Item -ItemType Directory -Path $Bad -Force
+ Set-Content -Path (Join-Path $Bad 'Invoke-ListBadPerm.ps1') -Value @'
+function Invoke-ListBadPerm {
+ <#
+ .FUNCTIONALITY
+ Entrypoint
+ .ROLE
+ Identity.User.Read
+ .NOTES
+ Permission: Graph | GET /users | AppOnly | User.Read.All
+ #>
+ param($Request)
+}
+'@
+ { & $script:GeneratorPath -EntrypointPath $Bad -ModulesPath (Join-Path $PermRoot 'Modules') -OverridePath (Join-Path $TestDrive 'empty') `
+ -FrontendPath (Join-Path $TestDrive 'none') -PublicPath $script:PublicCopy -OutputPath (Join-Path $Bad 'openapi.json') } | Should -Throw -ExpectedMessage '*Malformed Permission line in Invoke-ListBadPerm*'
+ }
+}
diff --git a/backend/Tests/Build/Invoke-BuildTests.ps1 b/backend/Tests/Build/Invoke-BuildTests.ps1
index f7639ad360..90d1f67415 100644
--- a/backend/Tests/Build/Invoke-BuildTests.ps1
+++ b/backend/Tests/Build/Invoke-BuildTests.ps1
@@ -20,7 +20,7 @@ $ErrorActionPreference = 'Stop'
$repoRoot = Split-Path -Parent (Split-Path -Parent $PSScriptRoot)
$toolsRoot = Join-Path (Split-Path -Parent $repoRoot) 'build' 'tools'
-$generators = @('build-function-parameters.ps1', 'build-openapi.ps1') |
+$generators = @('build-function-parameters.ps1', 'build-openapi.ps1', 'Update-PermissionAnnotations.ps1') |
ForEach-Object { Join-Path $toolsRoot $_ }
$missing = @($generators | Where-Object { -not (Test-Path $_) })
diff --git a/backend/Tests/Build/Update-PermissionAnnotations.Tests.ps1 b/backend/Tests/Build/Update-PermissionAnnotations.Tests.ps1
new file mode 100644
index 0000000000..1abcd58462
--- /dev/null
+++ b/backend/Tests/Build/Update-PermissionAnnotations.Tests.ps1
@@ -0,0 +1,207 @@
+# Pester tests for build/tools/Update-PermissionAnnotations.ps1
+# Runs the script over a fixture module tree with a small permissions map and Learn table, so the cases do
+# not move when Microsoft's data changes.
+
+BeforeAll {
+ $RepoRoot = Split-Path -Parent (Split-Path -Parent (Split-Path -Parent $PSCommandPath))
+ $script:ScriptPath = Join-Path (Split-Path -Parent $RepoRoot) 'build/tools/Update-PermissionAnnotations.ps1'
+
+ $script:Modules = Join-Path $TestDrive 'Modules'
+ $HttpDir = Join-Path $Modules 'CIPPHTTP/Public/Entrypoints/HTTP Functions'
+ $CoreDir = Join-Path $Modules 'CIPPCore/Public'
+ $null = New-Item -ItemType Directory -Path $HttpDir, $CoreDir -Force
+
+ Set-Content -Path (Join-Path $HttpDir 'Invoke-ExecFixtureUser.ps1') -Value @'
+function Invoke-ExecFixtureUser {
+ <#
+ .FUNCTIONALITY
+ Entrypoint
+ .ROLE
+ Identity.User.ReadWrite
+ #>
+ param($Request)
+ $User = New-GraphGetRequest -uri "https://graph.microsoft.com/beta/users/$($Request.Body.id)" -tenantid $TenantFilter
+ Set-FixtureUser -Id $User.id
+}
+'@
+ Set-Content -Path (Join-Path $CoreDir 'Set-FixtureUser.ps1') -Value @'
+function Set-FixtureUser {
+ # A leading comment that must not become help.
+ param($Id)
+ New-GraphPOSTRequest -uri "https://graph.microsoft.com/v1.0/users/$Id" -type PATCH -tenantid $TenantFilter -body '{}'
+}
+'@
+ Set-Content -Path (Join-Path $HttpDir 'Invoke-ListFixtureGroups.ps1') -Value @'
+function Invoke-ListFixtureGroups {
+ <#
+ .FUNCTIONALITY
+ Entrypoint
+ .NOTES
+ Groups are read app-only.
+ Permission: Exchange | Get-Mailbox | Delegated | View-Only Recipients
+ Permission: Graph | GET /custom | Delegated | Custom.Read.All
+ #>
+ param($Request)
+ $BaseUri = 'https://graph.microsoft.com/beta/groups'
+ New-GraphGetRequest -uri "$BaseUri/$($Request.Query.id)/members" -tenantid $TenantFilter -AsApp $true
+ New-GraphGetRequest -uri $Request.Query.Uri -tenantid $TenantFilter
+}
+'@
+ Set-Content -Path (Join-Path $HttpDir 'Invoke-ExecFixtureDevices.ps1') -Value @'
+function Invoke-ExecFixtureDevices {
+
+ # Help may follow a line comment set apart by a blank line.
+
+ <#
+ .FUNCTIONALITY
+ Entrypoint
+ .NOTES
+ Permission: Graph | GET /old | Delegated | Old.Read.All
+ Permission: Graph | GET /users/{id}/managedDevices | Delegated | Wrong.Read | | only for Intune tenants
+ #>
+ param($Request)
+ if ($Request.Body.Intune) { $Root = 'deviceManagement' } else { $Root = 'notAResource' }
+ New-GraphGetRequest -uri "https://graph.microsoft.com/beta/$Root/managedDevices" -tenantid $TenantFilter
+ New-GraphGetRequest -uri "https://graph.microsoft.com/beta/users/$($Request.Body.id)/managedDevices" -tenantid $TenantFilter
+ New-GraphPOSTRequest -uri "https://graph.microsoft.com/beta/groups/$($Request.Body.id)/members/`$ref" -type POST -tenantid $TenantFilter -body '{}'
+}
+'@
+ Set-Content -Path (Join-Path $CoreDir 'Get-FixtureUndocumented.ps1') -Value @'
+<#
+.SYNOPSIS
+ Help before the function keyword.
+#>
+function Get-FixtureUndocumented {
+ param()
+ New-GraphGetRequest -uri 'https://graph.microsoft.com/beta/policies/undocumentedPolicy' -tenantid $TenantFilter
+}
+'@
+
+ $script:Metadata = Join-Path $TestDrive 'graph-metadata'
+ $null = New-Item -ItemType Directory -Path $Metadata -Force
+ $Csdl = @'
+
+
+
+
+
+
+
+
+
+
+
+'@
+ Set-Content -Path (Join-Path $Metadata 'v1.0.xml'), (Join-Path $Metadata 'beta.xml') -Value $Csdl
+
+ $script:PermissionsPath = Join-Path $TestDrive 'permissions.json'
+ Set-Content -Path $PermissionsPath -Value (@{
+ permissions = @{
+ 'User.ReadBasic.All' = @{ schemes = @{ DelegatedWork = @{ privilegeLevel = 2 } }; pathSets = @(@{ schemeKeys = @('DelegatedWork'); methods = @('GET'); paths = @{ '/users/{id}' = 'least=DelegatedWork' } }) }
+ 'User.Read.All' = @{ schemes = @{ DelegatedWork = @{ privilegeLevel = 3 } }; pathSets = @(@{ schemeKeys = @('DelegatedWork'); methods = @('GET'); paths = @{ '/users/{id}' = '' } }) }
+ 'User.ReadWrite.All' = @{ schemes = @{ DelegatedWork = @{ privilegeLevel = 4 } }; pathSets = @(@{ schemeKeys = @('DelegatedWork'); methods = @('GET', 'PATCH'); paths = @{ '/users/{id}' = 'least=DelegatedWork' } }) }
+ 'DeviceManagementApps.Read.All' = @{ schemes = @{ DelegatedWork = @{ privilegeLevel = 3 } }; pathSets = @(@{ schemeKeys = @('DelegatedWork'); methods = @('PATCH'); paths = @{ '/users/{id}' = '' } }) }
+ 'GroupMember.Read.All' = @{ schemes = @{ Application = @{ privilegeLevel = 3 } }; pathSets = @(@{ schemeKeys = @('Application'); methods = @('GET'); paths = @{ '/groups/{id}/members' = 'least=Application' } }) }
+ 'Group-NestingSupport.ReadWrite.All' = @{ schemes = @{ Application = @{ privilegeLevel = 2 } }; pathSets = @(@{ schemeKeys = @('Application'); methods = @('GET'); paths = @{ '/groups/{id}/members' = 'least=Application' } }) }
+ 'GroupMember.ReadWrite.All' = @{ schemes = @{ DelegatedWork = @{ privilegeLevel = 3 } }; pathSets = @(@{ schemeKeys = @('DelegatedWork'); methods = @('DELETE'); paths = @{ '/groups/{id}/members/{id}' = 'least=DelegatedWork' } }) }
+ 'DeviceManagementManagedDevices.Read.All' = @{ schemes = @{ DelegatedWork = @{ privilegeLevel = 3 } }; pathSets = @(@{ schemeKeys = @('DelegatedWork'); methods = @('GET'); paths = @{ '/devicemanagement/manageddevices' = 'least=DelegatedWork' } }) }
+ }
+ } | ConvertTo-Json -Depth 10)
+ # Learn lists User.Read first because the page also covers GET /me.
+ $script:LearnPath = Join-Path $TestDrive 'learn.json'
+ Set-Content -Path $LearnPath -Value (@{
+ tables = @(
+ @{ DelegatedWork = @{ least = @('User.Read'); higher = @('User.ReadWrite', 'User.ReadBasic.All', 'User.Read.All', 'User.ReadWrite.All', 'Directory.Read.All') } }
+ @{ Application = @{ least = @('GroupMember.Read.All'); higher = @('Group.Read.All', 'Directory.Read.All') } }
+ )
+ 'v1.0' = @{ 'GET /users/{id}' = 0 }
+ beta = @{ 'GET /groups/{id}/members' = 1 }
+ } | ConvertTo-Json -Depth 10)
+ Set-Content -Path (Join-Path $TestDrive 'translator.json') -Value '[{ "id": "rw", "value": "User.ReadWrite.All" }]'
+ Set-Content -Path (Join-Path $TestDrive 'sam.json') -Value '{ "requiredResourceAccess": [{ "resourceAppId": "00000003-0000-0000-c000-000000000000", "resourceAccess": [{ "id": "rw", "type": "Scope" }] }] }'
+
+ $script:Arguments = @{
+ ModulesPath = $Modules
+ PermissionsPath = $PermissionsPath
+ LearnPath = $LearnPath
+ SamManifestPath = Join-Path $TestDrive 'sam.json'
+ TranslatorPath = Join-Path $TestDrive 'translator.json'
+ GraphMetadataPath = $Metadata
+ }
+ $script:ReportPath = Join-Path $TestDrive 'report.json'
+ $null = & $ScriptPath @Arguments -ReportPath $ReportPath 6>$null
+ $script:Report = Get-Content $ReportPath -Raw | ConvertFrom-Json
+
+ function Get-Function([string]$File, [string]$Name) {
+ $Ast = [System.Management.Automation.Language.Parser]::ParseFile($File, [ref]$null, [ref]$null)
+ $Ast.FindAll({ $args[0] -is [System.Management.Automation.Language.FunctionDefinitionAst] -and $args[0].Name -eq $Name }, $true)[0]
+ }
+ function Get-Line([string]$File, [string]$Name) {
+ @(((Get-Function $File $Name).GetHelpContent().Notes -split '\r?\n').Where({ $_ -match '^\s*Permission:' }).ForEach({ $_.Trim() }))
+ }
+ $script:UserFile = Join-Path $HttpDir 'Invoke-ExecFixtureUser.ps1'
+ $script:HelperFile = Join-Path $CoreDir 'Set-FixtureUser.ps1'
+ $script:GroupsFile = Join-Path $HttpDir 'Invoke-ListFixtureGroups.ps1'
+ $script:DevicesFile = Join-Path $HttpDir 'Invoke-ExecFixtureDevices.ps1'
+ $script:UndocumentedFile = Join-Path $CoreDir 'Get-FixtureUndocumented.ps1'
+}
+
+Describe 'Update-PermissionAnnotations' {
+ It 'adds a .NOTES section to existing help and keeps the rest of it' {
+ Get-Line $UserFile 'Invoke-ExecFixtureUser' | Should -Be @('Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All')
+ $Help = (Get-Function $UserFile 'Invoke-ExecFixtureUser').GetHelpContent()
+ $Help.Role.Trim() | Should -Be 'Identity.User.ReadWrite'
+ $Help.Functionality.Trim() | Should -Be 'Entrypoint'
+ }
+
+ It 'gives a function without help a new block with only its own calls' {
+ Get-Line $HelperFile 'Set-FixtureUser' | Should -Be @('Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All')
+ }
+
+ It 'falls back to the map for higher when Learn has no page, keeping only related permissions' {
+ (Get-Content $HelperFile -Raw) | Should -Not -Match 'DeviceManagementApps'
+ }
+
+ It 'marks -AsApp calls Application and takes higher from Learn' {
+ (Get-Line $GroupsFile 'Invoke-ListFixtureGroups')[0] | Should -Be 'Permission: Graph | GET /groups/{id}/members | Application | GroupMember.Read.All | Group.Read.All, Directory.Read.All'
+ }
+
+ It 'keeps hand-written lines and other notes where a call cannot be read' {
+ Get-Line $GroupsFile 'Invoke-ListFixtureGroups' | Should -Contain 'Permission: Exchange | Get-Mailbox | Delegated | View-Only Recipients'
+ Get-Line $GroupsFile 'Invoke-ListFixtureGroups' | Should -Contain 'Permission: Graph | GET /custom | Delegated | Custom.Read.All'
+ (Get-Function $GroupsFile 'Invoke-ListFixtureGroups').GetHelpContent().Notes | Should -Match 'Groups are read app-only\.'
+ $Report.Where({ $_.function -eq 'Invoke-ListFixtureGroups' })[0].graphGaps | Should -BeLike 'unreadable URI: *Query.Uri*'
+ }
+
+ It 'drops a stale line, refreshes a derivable one and keeps its condition' {
+ $Lines = Get-Line $DevicesFile 'Invoke-ExecFixtureDevices'
+ $Lines | Should -Not -Contain 'Permission: Graph | GET /old | Delegated | Old.Read.All'
+ $Lines | Should -Contain 'Permission: Graph | GET /users/{id}/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | | only for Intune tenants'
+ }
+
+ It 'keeps only the branch combinations the schema has and rematches by $ref pair' {
+ $Lines = Get-Line $DevicesFile 'Invoke-ExecFixtureDevices'
+ $Lines | Should -Contain 'Permission: Graph | GET /deviceManagement/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All'
+ $Lines | Should -Contain 'Permission: Graph | POST /groups/{id}/members/$ref | Delegated | GroupMember.ReadWrite.All'
+ ($Lines -join "`n") | Should -Not -Match 'notAResource'
+ }
+
+ It 'reports calls outside the schema instead of annotating them' {
+ Get-Line $UndocumentedFile 'Get-FixtureUndocumented' | Should -BeNullOrEmpty
+ $Report.Where({ $_.function -eq 'Get-FixtureUndocumented' })[0].graphGaps | Should -Be @('GET /policies/undocumentedPolicy (not in the Graph beta schema)')
+ }
+
+ It 'is idempotent and passes -Check' {
+ $Before = Get-Content $DevicesFile -Raw
+ $null = & $ScriptPath @Arguments 6>$null
+ Get-Content $DevicesFile -Raw | Should -BeExactly $Before
+ { & $ScriptPath @Arguments -Check 6>$null } | Should -Not -Throw
+ }
+
+ It '-Check fails when a line is missing' {
+ $Text = Get-Content $HelperFile -Raw
+ Set-Content -Path $HelperFile -Value ($Text -replace '(?m)^\s*Permission:.*\r?\n', '') -NoNewline
+ { & $ScriptPath @Arguments -Check 6>$null } | Should -Throw -ExpectedMessage '*stale Permission lines*'
+ Set-Content -Path $HelperFile -Value $Text -NoNewline
+ }
+}
diff --git a/build/tools/Update-PermissionAnnotations.ps1 b/build/tools/Update-PermissionAnnotations.ps1
new file mode 100644
index 0000000000..8061633584
--- /dev/null
+++ b/build/tools/Update-PermissionAnnotations.ps1
@@ -0,0 +1,730 @@
+#Requires -Version 7.0
+using namespace System.Management.Automation.Language
+<#
+.SYNOPSIS
+ Writes the Microsoft Graph permissions each function needs into its comment-based help.
+.DESCRIPTION
+ Every function that calls Graph gets one .NOTES line per call and permission type:
+
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All
+
+ Columns: API | operation | Delegated or Application | least privileged | higher privileged [| condition].
+ A line covers the function's own calls. build-openapi.ps1 rolls the lines up through everything an
+ endpoint calls into x-cipp-permissions in openapi.json.
+
+ URIs, methods and -AsApp come from the AST. Paths are checked against the vendored Graph schema
+ (backend/Config/graph-metadata) and matched to Microsoft's permissions map (graph-permissions.json, from
+ microsoftgraph/microsoft-graph-devx-content). Where several permissions are least privileged, the one the
+ CIPP SAM app requests wins. When the map has no entry for a valid path, the permission comes from a path
+ it does list for the same resource type.
+
+ Lines the script cannot derive are written by hand and kept: any API other than Graph, and Graph lines
+ in a function with a call the script cannot read or match. A hand-written line for a call the script
+ can derive is replaced, keeping its condition column.
+
+ Run: pwsh build/tools/Update-PermissionAnnotations.ps1
+ CI: pwsh build/tools/Update-PermissionAnnotations.ps1 -Check
+ Refresh map: pwsh build/tools/Update-PermissionAnnotations.ps1 -Refresh
+#>
+[CmdletBinding()]
+param(
+ [string]$ModulesPath = "$PSScriptRoot/../../backend/Modules",
+ [string]$PermissionsPath = "$PSScriptRoot/graph-permissions.json",
+ # The permission tables from Microsoft Learn's Graph API pages, built by -Refresh.
+ [string]$LearnPath = "$PSScriptRoot/graph-learn-permissions.json",
+ [string]$SamManifestPath = "$PSScriptRoot/../../backend/Config/SAMManifest.json",
+ [string]$TranslatorPath = "$PSScriptRoot/../../backend/Config/PermissionsTranslator.json",
+ [string]$GraphMetadataPath = "$PSScriptRoot/../../backend/Config/graph-metadata",
+ # JSON list of the calls that need a hand-written line.
+ [string]$ReportPath,
+ [switch]$Check,
+ [switch]$Refresh
+)
+$ErrorActionPreference = 'Stop'
+
+$GraphAppId = '00000003-0000-0000-c000-000000000000'
+$HelpKeyword = '(?im)^\s*\.(SYNOPSIS|DESCRIPTION|PARAMETER|EXAMPLE|INPUTS|OUTPUTS|NOTES|LINK|COMPONENT|ROLE|FUNCTIONALITY|FORWARDHELPTARGETNAME|FORWARDHELPCATEGORY|REMOTEHELPRUNSPACE|EXTERNALHELP)\b'
+
+function ConvertTo-LearnKey([string]$Method, [string]$Path) {
+ $Path = $Path.ToLowerInvariant() -replace "\('?\{id\}'?\)", '/{id}' -replace '/microsoft\.graph\.', '/'
+ "$($Method.ToUpperInvariant()) $Path"
+}
+
+if ($Refresh) {
+ $Uri = 'https://raw.githubusercontent.com/microsoftgraph/microsoft-graph-devx-content/master/permissions/new/permissions.json'
+ $Content = (Invoke-WebRequest -Uri $Uri -TimeoutSec 300).Content
+ if ($Content -is [byte[]]) { $Content = [System.Text.Encoding]::UTF8.GetString($Content) }
+ if (-not ($Content | ConvertFrom-Json -AsHashtable).permissions) { throw 'Downloaded file is not a Graph permissions map.' }
+ [System.IO.File]::WriteAllText([System.IO.Path]::GetFullPath($PermissionsPath), $Content, [System.Text.UTF8Encoding]::new($false))
+ Write-Host "Refreshed $PermissionsPath"
+
+ # The permission tables on each Learn API page, keyed by the requests the page lists.
+ $Docs = Join-Path ([System.IO.Path]::GetTempPath()) "graph-docs-$([guid]::NewGuid().ToString('n'))"
+ git clone -q --depth 1 --filter=blob:none --sparse https://github.com/microsoftgraph/microsoft-graph-docs-contrib.git $Docs
+ git -C $Docs sparse-checkout set --no-cone 'api-reference/*/api/*.md' 'api-reference/*/includes/permissions/*.md'
+ if ($LASTEXITCODE) { throw 'Could not fetch the Microsoft Graph docs.' }
+ $RowTypes = @{ 'Delegated (work or school account)' = 'DelegatedWork'; 'Application' = 'Application' }
+ $Tables = [System.Collections.Generic.List[string]]::new()
+ $TableIndex = @{}
+ $Learn = [ordered]@{ tables = $Tables }
+ foreach ($Version in 'v1.0', 'beta') {
+ $Root = Join-Path $Docs "api-reference/$Version"
+ $Ops = [System.Collections.Generic.SortedDictionary[string, int]]::new([StringComparer]::Ordinal)
+ # A request listed on several pages belongs to the page that lists the fewest; Intune's generated pages
+ # (intune-mam-user-get and friends repeat GET /users/{id}) only when no other page has it.
+ $Rank = @{}
+ foreach ($Page in Get-ChildItem (Join-Path $Root 'api') -Filter *.md | Sort-Object Name) {
+ $Text = [System.IO.File]::ReadAllText($Page.FullName)
+ $Include = [regex]::Match($Text, 'includes/permissions/([\w.-]+)\.md')
+ $TableText = if ($Include.Success) { [System.IO.File]::ReadAllText((Join-Path $Root "includes/permissions/$($Include.Groups[1].Value).md")) } else { [regex]::Match($Text, '(?s)## Permissions(.*?)(\n## |\z)').Groups[1].Value }
+ $Table = [ordered]@{}
+ foreach ($Line in $TableText -split '\r?\n') {
+ $Cols = @($Line.Trim('|', ' ') -split '\|').ForEach({ $_.Trim() })
+ if (-not $RowTypes.ContainsKey($Cols[0])) { continue }
+ $Perms = @(($Cols[1..($Cols.Count - 1)] -join ',') -split ',').ForEach({ $_.Trim() }).Where({ $_ -match '^[\w-]+(\.[\w-]+)+$' })
+ $LeastCount = if ($Cols.Count -ge 3) { @(($Cols[1] -split ',').Where({ $_.Trim() -match '^[\w-]+(\.[\w-]+)+$' })).Count } else { [Math]::Min(1, $Perms.Count) }
+ if ($LeastCount) { $Table[$RowTypes[$Cols[0]]] = [ordered]@{ least = @($Perms[0..($LeastCount - 1)]); higher = @($Perms | Select-Object -Skip $LeastCount) } }
+ }
+ if (-not $Table.Count) { continue }
+ $Json = ConvertTo-Json -InputObject $Table -Depth 4 -Compress
+ if (-not $TableIndex.ContainsKey($Json)) { $TableIndex[$Json] = $Tables.Count; $Tables.Add($Json) }
+ $Index = $TableIndex[$Json]
+ $Http = [regex]::Match($Text, '(?is)## HTTP request(.*?)(\n## |\z)').Groups[1].Value
+ $Requests = [regex]::Matches($Http, '(?m)^\s*(GET|POST|PATCH|PUT|DELETE)\s+(/\S[^\r\n]*?)\s*$')
+ $PageRank = $Requests.Count + $(if ($Page.Name.StartsWith('intune-')) { 100000 } else { 0 })
+ foreach ($Op in $Requests) {
+ $Path = (($Op.Groups[2].Value -replace '\{[^}]*\}', '{id}' -replace '\s+', '') -split '\?')[0].TrimEnd('/')
+ $Key = ConvertTo-LearnKey $Op.Groups[1].Value $Path
+ if (-not $Ops.ContainsKey($Key) -or $PageRank -lt $Rank[$Key]) { $Ops[$Key] = $Index; $Rank[$Key] = $PageRank }
+ }
+ }
+ $Learn[$Version] = $Ops
+ }
+ Remove-Item -LiteralPath $Docs -Recurse -Force
+ $Learn.tables = @($Tables | ForEach-Object { ConvertFrom-Json -InputObject $_ })
+ ConvertTo-Json -InputObject $Learn -Depth 6 -Compress | Set-Content -LiteralPath $LearnPath -Encoding utf8NoBOM
+ Write-Host "Refreshed $LearnPath ($($Learn['v1.0'].Count) v1.0 and $($Learn['beta'].Count) beta requests)"
+}
+
+#region Source files
+$Files = foreach ($File in Get-ChildItem -LiteralPath $ModulesPath -Recurse -Filter *.ps1 -File | Sort-Object FullName) {
+ $Tokens = $null
+ $Ast = [Parser]::ParseFile($File.FullName, [ref]$Tokens, [ref]$null)
+ $Functions = @($Ast.FindAll({ $args[0] -is [FunctionDefinitionAst] }, $true))
+ if ($Functions.Count) { [pscustomobject]@{ Path = $File.FullName; Tokens = $Tokens; Functions = $Functions } }
+}
+#endregion
+
+#region Static value resolution
+function Get-ArgAst($Cmd, [string]$Name) {
+ $Elements = $Cmd.CommandElements
+ for ($i = 1; $i -lt $Elements.Count; $i++) {
+ if ($Elements[$i] -is [CommandParameterAst] -and $Elements[$i].ParameterName -ieq $Name) {
+ if ($Elements[$i].Argument) { return $Elements[$i].Argument }
+ if ($i + 1 -lt $Elements.Count -and $Elements[$i + 1] -isnot [CommandParameterAst]) { return $Elements[$i + 1] }
+ return [StringConstantExpressionAst]::new($Elements[$i].Extent, 'true', [StringConstantType]::BareWord)
+ }
+ }
+}
+
+function Get-PipelineExpression($Statement) {
+ if ($Statement -is [CommandExpressionAst]) { return $Statement.Expression }
+ if ($Statement -is [PipelineAst] -and $Statement.PipelineElements.Count -eq 1 -and $Statement.PipelineElements[0] -is [CommandExpressionAst]) {
+ return $Statement.PipelineElements[0].Expression
+ }
+}
+
+# Every literal value a variable can hold in this function: assignments, parameter defaults, ValidateSet.
+function Resolve-Variable([string]$Name, $Fn, [int]$Depth) {
+ if ($Depth -gt 3 -or -not $Fn) { return @() }
+ $Values = [System.Collections.Generic.List[string]]::new()
+ foreach ($Assign in $Fn.FindAll({ $args[0] -is [AssignmentStatementAst] -and $args[0].Operator -eq 'Equals' -and $args[0].Left -is [VariableExpressionAst] -and $args[0].Left.VariablePath.UserPath -ieq $Name }, $true)) {
+ $Expr = Get-PipelineExpression $Assign.Right
+ if ($Expr) { foreach ($V in (Resolve-Value $Expr $Fn ($Depth + 1))) { $Values.Add($V) } }
+ }
+ $Param = $Fn.FindAll({ $args[0] -is [ParameterAst] -and $args[0].Name.VariablePath.UserPath -ieq $Name }, $true) | Select-Object -First 1
+ if ($Param) {
+ if ($Param.DefaultValue) { foreach ($V in (Resolve-Value $Param.DefaultValue $Fn ($Depth + 1))) { $Values.Add($V) } }
+ $Set = $Param.Attributes.Where({ $_.TypeName.Name -eq 'ValidateSet' })[0]
+ if ($Set) { foreach ($V in $Set.PositionalArguments.Where({ $_ -is [StringConstantExpressionAst] })) { $Values.Add($V.Value) } }
+ }
+ @($Values.Where({ $_ -ne '{id}' }) | Select-Object -Unique)
+}
+
+# Literal string values an expression can take; '{id}' stands in for anything dynamic.
+function Resolve-Value($Expr, $Fn, [int]$Depth = 0) {
+ if ($Expr -is [StringConstantExpressionAst]) { return @($Expr.Value) }
+ if ($Expr -is [ConstantExpressionAst]) { return @([string]$Expr.Value) }
+ if ($Expr -is [VariableExpressionAst]) {
+ if ($Expr.VariablePath.UserPath -in 'true', 'false') { return @($Expr.VariablePath.UserPath) }
+ return @(Resolve-Variable $Expr.VariablePath.UserPath $Fn $Depth)
+ }
+ if ($Expr -is [ParenExpressionAst]) {
+ $Inner = Get-PipelineExpression $Expr.Pipeline
+ if ($Inner) { return @(Resolve-Value $Inner $Fn $Depth) }
+ return @()
+ }
+ if ($Expr -is [SubExpressionAst]) {
+ $Statements = $Expr.SubExpression.Statements
+ if ($Statements.Count -eq 1) { $Inner = Get-PipelineExpression $Statements[0]; if ($Inner) { return @(Resolve-Value $Inner $Fn $Depth) } }
+ return @()
+ }
+ if ($Expr -is [ExpandableStringExpressionAst]) {
+ $Text = $Expr.Extent.Text
+ $Quote = if ($Text.StartsWith('@')) { 2 } else { 1 }
+ $Base = $Expr.Extent.StartOffset + $Quote
+ $Results = @($Text.Substring($Quote, $Text.Length - 2 * $Quote))
+ foreach ($Nested in ($Expr.NestedExpressions | Sort-Object { $_.Extent.StartOffset } -Descending)) {
+ $Options = @(Resolve-Value $Nested $Fn $Depth)
+ if (-not $Options.Count -or $Options.Count -gt 6) { $Options = @('{id}') }
+ $Start = $Nested.Extent.StartOffset - $Base
+ $Results = @(foreach ($R in $Results) { foreach ($O in $Options) { $R.Remove($Start, $Nested.Extent.Text.Length).Insert($Start, $O) } }) | Select-Object -First 24
+ }
+ return @($Results.ForEach({ $_.Replace('`', '') }))
+ }
+ if ($Expr -is [BinaryExpressionAst] -and $Expr.Operator -eq 'Format') {
+ return @((Resolve-Value $Expr.Left $Fn $Depth).ForEach({ $_ -replace '\{\d+(:[^}]*)?\}', '{id}' }))
+ }
+ if ($Expr -is [BinaryExpressionAst] -and $Expr.Operator -eq 'Plus') {
+ $Left = @(Resolve-Value $Expr.Left $Fn $Depth); if (-not $Left.Count) { $Left = @('{id}') }
+ $Right = @(Resolve-Value $Expr.Right $Fn $Depth); if (-not $Right.Count) { $Right = @('{id}') }
+ return @(foreach ($L in $Left) { foreach ($R in $Right) { "$L$R" } })
+ }
+ @()
+}
+
+# A splatted command reads its arguments from a hashtable literal assigned in the same function.
+function Get-SplatArgument($Cmd, $Fn) {
+ $Splat = $Cmd.CommandElements.Where({ $_ -is [VariableExpressionAst] -and $_.Splatted })[0]
+ if (-not $Splat) { return @{} }
+ $Name = $Splat.VariablePath.UserPath
+ $Table = @($Fn.FindAll({ $args[0] -is [AssignmentStatementAst] -and $args[0].Left -is [VariableExpressionAst] -and $args[0].Left.VariablePath.UserPath -ieq $Name }, $true)).ForEach({ Get-PipelineExpression $_.Right }).Where({ $_ -is [HashtableAst] })[0]
+ $SplatArgs = @{}
+ foreach ($Pair in $Table.KeyValuePairs) { if ($Pair.Item1 -is [StringConstantExpressionAst]) { $SplatArgs[$Pair.Item1.Value] = Get-PipelineExpression $Pair.Item2 } }
+ $SplatArgs
+}
+
+function Get-CallArg($Cmd, $Splat, [string]$Name) {
+ $Arg = Get-ArgAst $Cmd $Name
+ if ($Arg) { return $Arg }
+ $Splat[$Name]
+}
+
+function Test-AsApp($ArgAst, $Fn) {
+ if (-not $ArgAst) { return $false }
+ # ponytail: a variable -AsApp counts only when a literal $true/'true' can reach it in the same function
+ 'true' -in @(Resolve-Value $ArgAst $Fn)
+}
+
+# Split a URI into the Graph version + path, or report the host it calls instead.
+function ConvertTo-GraphPath([string]$Uri) {
+ $Version = 'beta'
+ if ($Uri -match '^https://graph\.microsoft\.com/(v1\.0|beta)/') { $Version = $Matches[1]; $Uri = $Uri.Substring($Matches[0].Length) }
+ elseif ($Uri -match '^https?://([^/:]+)') { return @{ Host = $Matches[1] } }
+ elseif ($Uri -match '^/?(v1\.0|beta)/') { $Version = $Matches[1]; $Uri = $Uri.Substring($Matches[0].Length) }
+ $Path = ($Uri -split '[?#]')[0].Trim('/') -replace "\('?\{id\}'?\)", '/{id}'
+ if (-not $Path -or $Path.StartsWith('{id}') -or $Path.StartsWith('&')) { return $null }
+ @{ Version = $Version; Path = "/$Path" }
+}
+#endregion
+
+#region Graph schema
+function ConvertTo-SchemaRef([string]$Type, $Alias) {
+ $Many = $Type -match '^Collection\((.+)\)$'
+ if ($Many) { $Type = $Matches[1] }
+ $Ns, $Short = $Type.ToLowerInvariant() -split '\.(?=[^.]+$)'
+ @{ Type = "$($Alias[$Ns] ?? $Ns).$Short"; Many = [bool]$Many }
+}
+
+function Read-GraphSchema([string]$Path) {
+ $Schemas = @(([xml][System.IO.File]::ReadAllText($Path)).Edmx.DataServices.Schema)
+ $Alias = @{}
+ foreach ($S in $Schemas) { if ($S.Alias) { $Alias[$S.Alias.ToLowerInvariant()] = $S.Namespace.ToLowerInvariant() } }
+ $Model = @{ Root = @{}; Types = @{}; Ops = @{} }
+ foreach ($S in $Schemas) {
+ $Ns = $S.Namespace.ToLowerInvariant()
+ foreach ($T in @(@($S.EntityType) + @($S.ComplexType)).Where({ $_ })) {
+ $Members = @{}
+ foreach ($M in @(@($T.Property) + @($T.NavigationProperty)).Where({ $_ })) { $Members[$M.Name.ToLowerInvariant()] = ConvertTo-SchemaRef $M.Type $Alias }
+ $Model.Types["$Ns.$($T.Name.ToLowerInvariant())"] = @{ Base = if ($T.BaseType) { (ConvertTo-SchemaRef $T.BaseType $Alias).Type }; Members = $Members }
+ }
+ foreach ($Op in @(@($S.Function) + @($S.Action)).Where({ $_.IsBound -eq 'true' })) {
+ $Binding = ConvertTo-SchemaRef @($Op.Parameter)[0].Type $Alias
+ $Key = "$($Binding.Type)|$($Binding.Many)"
+ if (-not $Model.Ops.ContainsKey($Key)) { $Model.Ops[$Key] = @{} }
+ $Return = if ($Op.ReturnType) { ConvertTo-SchemaRef $Op.ReturnType.Type $Alias } else { @{ Type = $null; Many = $false } }
+ $Return.Op = $true
+ $Model.Ops[$Key][$Op.Name.ToLowerInvariant()] = $Return
+ }
+ foreach ($C in @($S.EntityContainer).Where({ $_ })) {
+ foreach ($E in @($C.EntitySet).Where({ $_ })) { $Model.Root[$E.Name.ToLowerInvariant()] = @{ Type = (ConvertTo-SchemaRef $E.EntityType $Alias).Type; Many = $true } }
+ foreach ($E in @($C.Singleton).Where({ $_ })) { $Model.Root[$E.Name.ToLowerInvariant()] = ConvertTo-SchemaRef $E.Type $Alias }
+ }
+ }
+ $Model
+}
+
+# A segment is a type cast, a property or navigation, or an operation bound to the type or one of its bases.
+function Find-SchemaStep($Model, $State, [string]$Name) {
+ if ($Model.Types.ContainsKey($Name)) { return @{ Type = $Name; Many = $State.Many } }
+ $Type = $State.Type
+ while ($Type) {
+ $Def = $Model.Types[$Type]
+ if ($Def -and $Def.Members.ContainsKey($Name)) { return $Def.Members[$Name] }
+ $Ops = $Model.Ops["$Type|$($State.Many)"]
+ if ($Ops -and $Ops.ContainsKey($Name)) { return $Ops[$Name] }
+ $Type = $Def.Base
+ }
+}
+
+function Resolve-SchemaPath($Model, [string]$Path) {
+ $State = $null
+ # Path addressing (root:/folder/file:, host:/sites/path) names the item it lands on.
+ foreach ($Seg in ($Path.ToLowerInvariant() -replace ':/[^:]*(:|$)', '').Trim('/').Split('/')) {
+ if ($Seg -in '$ref', '$count', '$value') { continue }
+ $Name = $Seg
+ $Keyed = $Seg -match '^([^(]+)\((.*)\)$'
+ if ($Keyed) { $Name = $Matches[1] }
+ $Next = if ($null -eq $State) { $Model.Root[$Name] } else { Find-SchemaStep $Model $State $Name }
+ if (-not $Next) {
+ if ($State.Many -and -not $Keyed) { $State = @{ Type = $State.Type; Many = $false }; continue }
+ return @{ Status = if ($Seg.Contains('{')) { 'dynamic' } else { 'notInSchema' } }
+ }
+ if ($Keyed -and $Next.Many -and -not $Next.Op) { $Next = @{ Type = $Next.Type; Many = $false } }
+ $State = $Next
+ }
+ @{ Status = 'valid'; Type = $State.Type; Many = $State.Many }
+}
+
+$Schemas = @{
+ 'v1.0' = Read-GraphSchema (Join-Path $GraphMetadataPath 'v1.0.xml')
+ 'beta' = Read-GraphSchema (Join-Path $GraphMetadataPath 'beta.xml')
+}
+$SchemaCache = @{}
+function Get-SchemaStatus([string]$Version, [string]$Path) {
+ $Key = "$Version|$Path"
+ if ($SchemaCache.ContainsKey($Key)) { return $SchemaCache[$Key] }
+ $Status = Resolve-SchemaPath $Schemas[$Version] $Path
+ if ($Status.Status -eq 'notInSchema') {
+ $Other = if ($Version -eq 'beta') { 'v1.0' } else { 'beta' }
+ $InOther = Resolve-SchemaPath $Schemas[$Other] $Path
+ if ($InOther.Status -eq 'valid') { $Status = @{ Status = "${Other}Only"; Type = $InOther.Type; Many = $InOther.Many } }
+ }
+ $SchemaCache[$Key] = $Status
+ $Status
+}
+#endregion
+
+#region Per-function extraction
+function Get-OwningFunction($Node) {
+ $P = $Node.Parent
+ while ($P -and $P -isnot [FunctionDefinitionAst]) { $P = $P.Parent }
+ $P
+}
+
+function Get-FunctionCall($Fn) {
+ $Calls = [System.Collections.Generic.List[object]]::new()
+ $Exo = [System.Collections.Generic.HashSet[string]]::new([StringComparer]::OrdinalIgnoreCase)
+ $Hosts = [System.Collections.Generic.HashSet[string]]::new([StringComparer]::OrdinalIgnoreCase)
+ $Unresolved = [System.Collections.Generic.List[string]]::new()
+ $BulkCalls = [System.Collections.Generic.List[object]]::new()
+ $BulkAsApp = $false
+
+ $AddCall = {
+ param($UriAst, $Methods, $AsApp, $Source, $Into, $ScopeAst)
+ # A -scope for another resource (SharePoint REST, admin portal) means the call is not Graph.
+ if ($ScopeAst) {
+ $Scopes = @(Resolve-Value $ScopeAst $Fn)
+ if (-not $Scopes.Count) { [void]$Hosts.Add('(dynamic scope)'); return }
+ $ScopeHosts = @($Scopes.ForEach({ if ($_ -match '^https?://([^/:]+)') { $Matches[1] } }).Where({ $_ -ne 'graph.microsoft.com' }))
+ if ($ScopeHosts.Count) { foreach ($H in $ScopeHosts) { [void]$Hosts.Add($H) }; return }
+ }
+ $Paths = @((Resolve-Value $UriAst $Fn).ForEach({ ConvertTo-GraphPath $_ }).Where({ $_ }))
+ foreach ($H in $Paths.Where({ $_.Host })) { [void]$Hosts.Add($H.Host) }
+ if (-not $Paths.Count) { $Unresolved.Add(($Source -replace '\s+', ' ')) }
+ $GraphPaths = @($Paths.Where({ $_.Path }))
+ # Values are resolved without flow, so a variable set per branch yields every combination; keep the ones Graph has.
+ $InSchema = @($GraphPaths.Where({ (Get-SchemaStatus $_.Version $_.Path).Status -ne 'notInSchema' }))
+ if ($InSchema.Count) { $GraphPaths = $InSchema }
+ foreach ($P in $GraphPaths) {
+ foreach ($M in $Methods) { $Into.Add([pscustomobject]@{ Method = $M; Version = $P.Version; Path = $P.Path; AsApp = $AsApp }) }
+ }
+ }
+
+ foreach ($Cmd in $Fn.Body.FindAll({ $args[0] -is [CommandAst] }, $true)) {
+ if ((Get-OwningFunction $Cmd) -ne $Fn) { continue }
+ $CmdName = $Cmd.GetCommandName()
+ if (-not $CmdName) { continue }
+ $Splat = Get-SplatArgument $Cmd $Fn
+ switch -Regex ($CmdName) {
+ '^New-Graph(Get|POST)Request$' {
+ $Methods = @('GET')
+ if ($CmdName -ieq 'New-GraphPOSTRequest') {
+ $Type = Get-CallArg $Cmd $Splat 'type'
+ $Methods = if ($Type) { @((Resolve-Value $Type $Fn).ForEach({ $_.ToUpperInvariant() })) } else { @('POST') }
+ if (-not $Methods.Count) { $Methods = @('POST') }
+ }
+ & $AddCall (Get-CallArg $Cmd $Splat 'uri') $Methods (Test-AsApp (Get-CallArg $Cmd $Splat 'AsApp') $Fn) $Cmd.Extent.Text $Calls (Get-CallArg $Cmd $Splat 'scope')
+ }
+ '^New-GraphBulkRequest$' { if (Test-AsApp (Get-CallArg $Cmd $Splat 'asapp') $Fn) { $BulkAsApp = $true } }
+ '^New-Exo(Bulk)?Request$' {
+ $Cmdlet = Get-CallArg $Cmd $Splat 'cmdlet'
+ if ($Cmdlet) { foreach ($C in (Resolve-Value $Cmdlet $Fn)) { if ($C -match '^\w+-\w+$') { [void]$Exo.Add($C) } } }
+ }
+ }
+ }
+
+ # Bulk requests are hashtable literals with url + method.
+ foreach ($Table in $Fn.Body.FindAll({ $args[0] -is [HashtableAst] }, $true)) {
+ if ((Get-OwningFunction $Table) -ne $Fn) { continue }
+ $Pairs = @{}
+ foreach ($Pair in $Table.KeyValuePairs) { if ($Pair.Item1 -is [StringConstantExpressionAst]) { $Pairs[$Pair.Item1.Value] = Get-PipelineExpression $Pair.Item2 } }
+ if ($Pairs['url'] -and $Pairs.ContainsKey('method')) {
+ $Methods = @((Resolve-Value $Pairs['method'] $Fn).ForEach({ $_.ToUpperInvariant() }))
+ if (-not $Methods.Count) { $Methods = @('GET') }
+ & $AddCall $Pairs['url'] $Methods $false $Table.Extent.Text $BulkCalls
+ }
+ }
+ foreach ($C in $BulkCalls) { $C.AsApp = $BulkAsApp; $Calls.Add($C) }
+
+ @{ Calls = $Calls; Exo = $Exo; Hosts = $Hosts; Unresolved = $Unresolved }
+}
+#endregion
+
+#region Microsoft's path -> permission map
+$Granted = @{ DelegatedWork = [System.Collections.Generic.HashSet[string]]::new(); Application = [System.Collections.Generic.HashSet[string]]::new() }
+$Translator = @{}
+foreach ($Entry in (Get-Content -LiteralPath $TranslatorPath -Raw | ConvertFrom-Json)) { $Translator[$Entry.id] = $Entry.value }
+foreach ($Access in ((Get-Content -LiteralPath $SamManifestPath -Raw | ConvertFrom-Json).requiredResourceAccess.Where({ $_.resourceAppId -eq $GraphAppId }).resourceAccess)) {
+ $Scheme = if ($Access.type -eq 'Role') { 'Application' } else { 'DelegatedWork' }
+ if ($Translator[$Access.id]) { [void]$Granted[$Scheme].Add($Translator[$Access.id]) }
+}
+
+$Permissions = (Get-Content -LiteralPath $PermissionsPath -Raw | ConvertFrom-Json -AsHashtable).permissions
+$Templates = @{}
+foreach ($PermName in $Permissions.Keys) {
+ $Def = $Permissions[$PermName]
+ $Levels = @{}
+ foreach ($SchemeName in $Def.schemes.Keys) { $Levels[$SchemeName] = $Def.schemes[$SchemeName].privilegeLevel }
+ foreach ($Set in $Def.pathSets) {
+ foreach ($Path in $Set.paths.Keys) {
+ $Least = if ($Set.paths[$Path] -match 'least=(.+)') { $Matches[1] -split ',' } else { @() }
+ $Key = $Path.ToLowerInvariant()
+ if (-not $Templates.ContainsKey($Key)) { $Templates[$Key] = [System.Collections.Generic.List[object]]::new() }
+ $Templates[$Key].Add(@{ Perm = $PermName; Methods = $Set.methods; Schemes = $Set.schemeKeys; Least = $Least; Levels = $Levels })
+ }
+ }
+}
+# Most literal template wins (/users/delta over /users/{id}); bucketed by first segment.
+$ByFirstSegment = @{}
+foreach ($T in $Templates.Keys) {
+ $First = ($T -split '/')[1] -replace '\(.*$', ''
+ if (-not $ByFirstSegment.ContainsKey($First)) { $ByFirstSegment[$First] = [System.Collections.Generic.List[object]]::new() }
+ $ByFirstSegment[$First].Add([pscustomobject]@{
+ Template = $T
+ Regex = [regex]::new('^' + ([regex]::Escape($T) -replace '\\\{[^}]+}', '[^/]+') + '$', 'IgnoreCase')
+ Holes = ([regex]::Matches($T, '\{')).Count
+ })
+}
+foreach ($K in @($ByFirstSegment.Keys)) { $ByFirstSegment[$K] = @($ByFirstSegment[$K] | Sort-Object Holes, Template) }
+
+$TemplateCache = @{}
+function Find-Template([string]$Path) {
+ if ($TemplateCache.ContainsKey($Path)) { return $TemplateCache[$Path] }
+ $Candidates = $ByFirstSegment[(($Path -split '/')[1] -replace '\(.*$', '')]
+ $Try = $Path
+ $Hit = $null
+ while ($Candidates -and -not $Hit) {
+ $Hit = $Candidates.Where({ $_.Regex.IsMatch($Try) }, 'First')[0]
+ $Next = $Try -replace '/(microsoft\.graph\.[^/]+|\$count|\$value|\$ref)$', ''
+ if ($Next -eq $Try) { break }
+ $Try = $Next
+ }
+ $TemplateCache[$Path] = ${Hit}?.Template
+ $TemplateCache[$Path]
+}
+
+function Get-LeastPermission($Template, [string]$Method, [string]$Scheme) {
+ $Candidates = @($Templates[$Template].Where({ $_.Schemes -contains $Scheme -and $_.Methods -contains $Method }))
+ if (-not $Candidates.Count) { return $null }
+ # Hyphenated permissions (Group-NestingSupport.*, User-Mail.*) cover a single property.
+ $Whole = @($Candidates.Where({ $_.Perm -notmatch '^[^.]+-' }))
+ if ($Whole.Count) { $Candidates = $Whole }
+ # Microsoft flags "least" per path rather than per method, so a ReadWrite flagged for PATCH also shows
+ # up for GET; keep only the lowest level of the flagged set, then prefer Read, then what the SAM app holds.
+ $Least = @($Candidates.Where({ $_.Least -contains $Scheme }))
+ if ($Method -eq 'GET') {
+ $ReadOf = $Least.ForEach({ $_.Perm -replace '\.ReadWrite\.', '.Read.' })
+ $Least = @($Least) + @($Candidates.Where({ $_.Perm -in $ReadOf -and $_ -notin $Least }))
+ }
+ $Pool = if ($Least.Count) { $Least } else { $Candidates }
+ # Microsoft's levels are not always ordered (DeviceManagementConfiguration.Read.All app-only rates above its ReadWrite).
+ $Pool = @($Pool.Where({ $_.Perm -notmatch '\.ReadWrite' -or ($_.Perm -replace '\.ReadWrite', '.Read') -notin $Pool.Perm }))
+ $Min =($Pool.ForEach({ $_.Levels[$Scheme] ?? 9 }) | Measure-Object -Minimum).Minimum
+ $Pool = @($Pool.Where({ ($_.Levels[$Scheme] ?? 9) -eq $Min }))
+ $Pick = @($Pool | Sort-Object { $_.Perm -notmatch '\.Read(Basic)?(\.|$)' }, { -not $Granted[$Scheme].Contains($_.Perm) }, { $_.Perm -like 'Directory.*' }, { $_.Perm })[0].Perm
+ # Microsoft's map lists every permission that reaches a path; Learn pages list only the resource's own family and Directory.*.
+ $Family = ($Pick -split '[.-]')[0]
+ $Related = @($Candidates.Where({ $Other = ($_.Perm -split '[.-]')[0]; $_.Perm -ne $Pick -and ($Other -eq 'Directory' -or $Other.StartsWith($Family) -or $Family.StartsWith($Other)) }))
+ $Higher = @($Related | Sort-Object { $_.Levels[$Scheme] ?? 9 }, { $_.Perm } | ForEach-Object Perm | Select-Object -Unique)
+ @{ Permission = $Pick; Higher = $Higher }
+}
+
+$Learn = Get-Content -LiteralPath $LearnPath -Raw | ConvertFrom-Json -AsHashtable
+# The Learn table row for a request, from the page for the call's Graph version or else the other one.
+function Find-LearnRow([string]$Version, [string]$Method, [string]$Path, [string]$Scheme) {
+ $Key = ConvertTo-LearnKey $Method $Path
+ foreach ($V in $Version, $(if ($Version -eq 'beta') { 'v1.0' } else { 'beta' })) {
+ $Index = $Learn[$V][$Key]
+ if ($null -ne $Index) { return $Learn.tables[$Index][$Scheme] }
+ }
+}
+#endregion
+
+#region Schema rematch
+function Get-ResourceName([string]$Path) {
+ @(($Path -replace ':/[^:]*(:|$)', '' -split '/').Where({ $_ -and $_ -notmatch '^(\{[^}]+\}|\$\w+|microsoft\.graph\..*)$' }))[-1] -replace '\(.*$', ''
+}
+
+# Map templates by the resource type and collection name they address, shortest path first.
+$TemplatesByType = @{}
+foreach ($T in @($Templates.Keys | Sort-Object { ($_ -split '/').Count }, { $_ })) {
+ $Status = Resolve-SchemaPath $Schemas['beta'] ($T -replace '\{[^}]+\}', '{id}')
+ if ($Status.Status -ne 'valid' -or -not $Status.Type) { continue }
+ $Key = '{0}|{1}|{2}' -f $Status.Type, $Status.Many, (Get-ResourceName $T)
+ if (-not $TemplatesByType.ContainsKey($Key)) { $TemplatesByType[$Key] = [System.Collections.Generic.List[string]]::new() }
+ $TemplatesByType[$Key].Add($T)
+}
+
+$CallCache = @{}
+function Resolve-CallPermission($Call, [string]$Scheme) {
+ $Key = '{0}|{1}|{2}|{3}' -f $Call.Version, $Call.Method, $Call.Path, $Scheme
+ if ($CallCache.ContainsKey($Key)) { return $CallCache[$Key] }
+ $Schema = Get-SchemaStatus $Call.Version $Call.Path
+ $Path = $Call.Path.ToLowerInvariant()
+ $AltKey = $Path -replace "\(\w+id='?\{id\}'?\)", '/{id}'
+ $Tries = @(
+ @{ Path = $Path; Method = $Call.Method }
+ if ($AltKey -ne $Path) { @{ Path = $AltKey; Method = $Call.Method } }
+ if ($AltKey -match '^(.+)/(microsoft\.graph\.[^/]+|\$count)$') { @{ Path = $Matches[1]; Method = $Call.Method } }
+ # Microsoft lists adding a reference under neither the collection nor $ref; the matching remove carries the same permission.
+ if ($AltKey -match '^(.+)/\$ref$' -and $Call.Method -ne 'GET') {
+ @{ Path = $Matches[1]; Method = 'POST' }
+ @{ Path = "$($Matches[1])/{id}"; Method = 'DELETE' }
+ }
+ )
+ $Found = $null
+ $Hit = $null
+ $HitTry = $null
+ foreach ($Try in $Tries) {
+ $T = Find-Template $Try.Path
+ if (-not $T) { continue }
+ $Found ??= $T
+ $Hit = Get-LeastPermission $T $Try.Method $Scheme
+ if ($Hit) { $HitTry = @{ Path = $T; Method = $Try.Method }; break }
+ }
+ if (-not $Found -and $Schema.Type) {
+ foreach ($T in $TemplatesByType['{0}|{1}|{2}' -f $Schema.Type, $Schema.Many, (Get-ResourceName $Path)]) {
+ $Hit = Get-LeastPermission $T $Call.Method $Scheme
+ if ($Hit) { $HitTry = @{ Path = $T; Method = $Call.Method }; break }
+ }
+ }
+
+ # Least comes from Microsoft's per-path map: a Learn page covers several requests (GET /me with GET /users/{id}),
+ # so its least can be one that only works for some of them. Higher comes from the Learn page.
+ $Row = $null
+ foreach ($Try in @($Tries) + @($HitTry)) { if ($Try -and ($Row = Find-LearnRow $Call.Version $Try.Method $Try.Path $Scheme)) { break } }
+ if ($Row) {
+ $FromMap = [bool]$Hit
+ $Least = if ($FromMap) { @($Hit.Permission) } else { @($Row.least) }
+ $Higher = @((@($Row.least) + @($Row.higher)).Where({ $_ -notin $Least -and -not ($FromMap -and $_ -in $Row.least) }) | Select-Object -Unique)
+ $Hit = @{ Permission = $Least; Higher = $Higher }
+ }
+ $Reason = if ($Hit) { $null }
+ elseif ($Schema.Status -eq 'notInSchema') { "not in the Graph $($Call.Version) schema" }
+ elseif ($Schema.Status -like '*Only') { "only in the Graph $($Schema.Status -replace 'Only$') schema" }
+ elseif ($Schema.Status -eq 'dynamic') { 'dynamic path segment' }
+ elseif ($Found) { "no $Scheme permission for $($Call.Method) in Microsoft's map" }
+ else { "not in Microsoft's map" }
+ $CallCache[$Key] = @{ Permission = $Hit.Permission; Higher = $Hit.Higher; Reason = $Reason }
+ $CallCache[$Key]
+}
+#endregion
+
+#region Annotation lines
+function Format-PermissionLine([string[]]$Cols) {
+ 'Permission: ' + (($Cols -join ' | ') -replace '\| (?=\|)', '| ').TrimEnd(' |')
+}
+
+function ConvertFrom-PermissionLine([string]$Line) {
+ $Cols = @(($Line -replace '^\s*Permission:\s*') -split '\|').ForEach({ $_.Trim() })
+ @{ Api = $Cols[0]; Operation = $Cols[1]; Type = $Cols[2]; Condition = $Cols[5]; Key = ('{0}|{1}|{2}' -f $Cols[0], $Cols[1], $Cols[2]).ToLowerInvariant(); Text = Format-PermissionLine $Cols }
+}
+
+function Get-PermissionLine($Fn) {
+ $Notes = $Fn.GetHelpContent().Notes
+ if (-not $Notes) { return @() }
+ @(($Notes -split '\r?\n').Where({ $_ -match '^\s*Permission:' }).ForEach({ ConvertFrom-PermissionLine $_ }))
+}
+
+# The lines a function should carry: one per derived call, then the hand-written lines the script cannot derive.
+function Get-DesiredLine($Fn, $Extracted, $Gaps) {
+ $Existing = Get-PermissionLine $Fn
+ $Derived = [ordered]@{}
+ foreach ($C in $Extracted.Calls) {
+ $Type = if ($C.AsApp) { 'Application' } else { 'Delegated' }
+ $Resolved = Resolve-CallPermission $C $(if ($C.AsApp) { 'Application' } else { 'DelegatedWork' })
+ if (-not $Resolved.Permission) { $Gaps.Add("$($C.Method) $($C.Path) ($($Resolved.Reason))"); continue }
+ $Key = ('Graph|{0} {1}|{2}' -f $C.Method, $C.Path, $Type).ToLowerInvariant()
+ if ($Derived.Contains($Key)) { continue }
+ $Derived[$Key] = @('Graph', "$($C.Method) $($C.Path)", $Type, ($Resolved.Permission -join ', '), ($Resolved.Higher -join ', '))
+ }
+ foreach ($U in $Extracted.Unresolved) { $Gaps.Add("unreadable URI: $U") }
+
+ $Lines = foreach ($Key in ($Derived.Keys | Sort-Object { ($_ -split '\|')[1] -replace '^\w+ ' }, { $_ })) {
+ $Cols = @($Derived[$Key])
+ $Condition = $Existing.Where({ $_.Key -eq $Key -and $_.Condition })[0].Condition
+ Format-PermissionLine (@($Cols) + @($Condition))
+ }
+ $Manual = foreach ($E in $Existing) {
+ if ($Derived.Contains($E.Key)) { continue }
+ if ($E.Api -ne 'Graph' -or $Gaps.Count) { $E.Text }
+ }
+ @(@($Lines) + @($Manual) | Select-Object -Unique)
+}
+#endregion
+
+#region Help block rewrite
+# The comment block PowerShell reads help from: before the function keyword first, then the start of the body.
+function Find-HelpToken($Fn, $Tokens, $ByOffset) {
+ $i = $ByOffset[$Fn.Extent.StartOffset]
+ $j = $i - 1
+ $NewLines = 0
+ while ($j -ge 0 -and $Tokens[$j].Kind -eq 'NewLine') { $NewLines++; $j-- }
+ if ($j -ge 0 -and $NewLines -le 2 -and $Tokens[$j].Kind -eq 'Comment' -and $Tokens[$j].Text.StartsWith('<#') -and $Tokens[$j].Text -match $HelpKeyword) { return $Tokens[$j] }
+ for ($j = $ByOffset[$Fn.Body.Extent.StartOffset] + 1; $j -lt $Tokens.Count -and $Tokens[$j].Kind -in 'NewLine', 'Comment'; $j++) {
+ if ($Tokens[$j].Kind -eq 'Comment' -and $Tokens[$j].Text.StartsWith('<#') -and $Tokens[$j].Text -match $HelpKeyword) { return $Tokens[$j] }
+ }
+}
+
+function Get-HelpEdit($Fn, $Tokens, $ByOffset, [string]$Source, [string[]]$Lines, [string]$NL) {
+ $Token = Find-HelpToken $Fn $Tokens $ByOffset
+ if (-not $Token) {
+ if (-not $Lines.Count) { return $null }
+ if ($Fn.GetHelpContent()) { throw "$($Fn.Name): help comes from a block this script cannot locate; add the lines by hand." }
+ $LineStart = $Source.LastIndexOf("`n", [Math]::Max($Fn.Extent.StartOffset - 1, 0)) + 1
+ $Indent = ($Source.Substring($LineStart) -replace '(?s)^([ \t]*).*', '$1') + ' '
+ $Block = @("$Indent<#", "$Indent.NOTES") + @($Lines.ForEach({ "$Indent $_" })) + "$Indent#>"
+ $At = $Fn.Body.Extent.StartOffset + 1
+ # Comments directly below the new block would join it as help; a blank line keeps them apart.
+ $Next = $ByOffset[$Fn.Body.Extent.StartOffset] + 1
+ while ($Next -lt $Tokens.Count -and $Tokens[$Next].Kind -eq 'NewLine') { $Next++ }
+ $Gap = if ($Tokens[$Next].Kind -eq 'Comment') { $NL } else { '' }
+ return @{ Start = $At; Length = 0; Text = $NL + ($Block -join $NL) + $Gap }
+ }
+
+ $BlockLines = [System.Collections.Generic.List[string]]::new([string[]]($Token.Text -split '\r?\n'))
+ $Last = $BlockLines.Count - 1
+ if ($Last -eq 0 -or $BlockLines[$Last].Trim() -ne '#>') {
+ $Opening = $Source.Substring($Source.LastIndexOf("`n", [Math]::Max($Token.Extent.StartOffset - 1, 0)) + 1) -replace '(?s)^([ \t]*).*', '$1'
+ $BlockLines[$Last] = $BlockLines[$Last] -replace '\s*#>$', ''
+ $BlockLines.Add("$Opening#>")
+ $Last++
+ }
+ $KeywordLine = $BlockLines.Where({ $_ -match $HelpKeyword })[0]
+ $KeywordIndent = $KeywordLine -replace '^([ \t]*).*', '$1'
+ $Notes = -1
+ for ($k = 0; $k -lt $Last; $k++) { if ($BlockLines[$k] -match '(?i)^\s*\.NOTES\s*$') { $Notes = $k; break } }
+ if ($Notes -lt 0) {
+ if (-not $Lines.Count) { return $null }
+ $New = @("$KeywordIndent.NOTES") + @($Lines.ForEach({ "$KeywordIndent $_" }))
+ $BlockLines.InsertRange($Last, [string[]]$New)
+ } else {
+ $End = $Notes + 1
+ while ($End -lt $Last -and $BlockLines[$End] -notmatch $HelpKeyword) { $End++ }
+ $Kept = @($BlockLines.GetRange($Notes + 1, $End - $Notes - 1).Where({ $_ -notmatch '^\s*Permission:' }))
+ $ContentIndent = $Kept.Where({ $_.Trim() })[0] -replace '^([ \t]*).*', '$1'
+ if (-not $ContentIndent) { $ContentIndent = "$KeywordIndent " }
+ while ($Kept.Count -and -not $Kept[-1].Trim()) { $Kept = @($Kept | Select-Object -SkipLast 1) }
+ $Section = @($Kept) + @($Lines.ForEach({ "$ContentIndent$_" }))
+ $Header = $BlockLines[$Notes]
+ $BlockLines.RemoveRange($Notes, $End - $Notes)
+ if ($Section.Count) { $BlockLines.InsertRange($Notes, [string[]](@($Header) + $Section)) }
+ }
+ $Text = $BlockLines -join $NL
+ if ($Text -ceq $Token.Text) { return $null }
+ @{ Start = $Token.Extent.StartOffset; Length = $Token.Extent.EndOffset - $Token.Extent.StartOffset; Text = $Text }
+}
+
+function Get-HelpSignature($Help) {
+ $Notes = (($Help.Notes ?? '') -split '\r?\n').Where({ $_.Trim() -and $_ -notmatch '^\s*Permission:' }) -join '|'
+ '{0}#{1}#{2}#{3}#{4}#{5}' -f "$($Help.Synopsis)".Trim(), "$($Help.Description)".Trim(), "$($Help.Role)".Trim(), "$($Help.Functionality)".Trim(), (@($Help.Parameters.Keys) -join ','), $Notes
+}
+#endregion
+
+#region Run
+$Drift = [System.Collections.Generic.List[string]]::new()
+$Problems = [System.Collections.Generic.List[string]]::new()
+$Report = [System.Collections.Generic.List[object]]::new()
+$Written = 0
+$Annotated = 0
+foreach ($File in $Files) {
+ $ByOffset = @{}
+ for ($i = 0; $i -lt $File.Tokens.Count; $i++) { $ByOffset[$File.Tokens[$i].Extent.StartOffset] = $i }
+ $Source = [System.IO.File]::ReadAllText($File.Path)
+ $NL = if ($Source.Contains("`r`n")) { "`r`n" } else { "`n" }
+ $Edits = [System.Collections.Generic.List[object]]::new()
+ $Expected = [System.Collections.Generic.List[object]]::new()
+
+ foreach ($Fn in $File.Functions) {
+ $Extracted = Get-FunctionCall $Fn
+ $Gaps = [System.Collections.Generic.List[string]]::new()
+ $Lines = @(Get-DesiredLine $Fn $Extracted $Gaps)
+ $Current = @((Get-PermissionLine $Fn).Text)
+ if ($Lines.Count) { $Annotated++ }
+ $Expected.Add(@{ Signature = Get-HelpSignature $Fn.GetHelpContent(); Lines = $Lines })
+ if ($Gaps.Count -or $Extracted.Exo.Count -or $Extracted.Hosts.Count) {
+ $Report.Add([ordered]@{ function = $Fn.Name; file = [System.IO.Path]::GetRelativePath($ModulesPath, $File.Path); graphGaps = @($Gaps); exchangeCmdlets = @($Extracted.Exo | Sort-Object); otherHosts = @($Extracted.Hosts | Sort-Object) })
+ }
+ if ((@($Current) -join "`n") -ceq ($Lines -join "`n")) { continue }
+ if ($Check) { $Drift.Add("$($Fn.Name) ($([System.IO.Path]::GetRelativePath($ModulesPath, $File.Path)))"); continue }
+ try {
+ $Edit = Get-HelpEdit $Fn $File.Tokens $ByOffset $Source $Lines $NL
+ if ($Edit) { $Edits.Add($Edit) }
+ } catch { $Problems.Add($_.Exception.Message); $Edits.Clear(); break }
+ }
+ if ($Check -or -not $Edits.Count) { continue }
+
+ $Builder = [System.Text.StringBuilder]::new($Source)
+ foreach ($Edit in ($Edits | Sort-Object { $_.Start } -Descending)) { [void]$Builder.Remove($Edit.Start, $Edit.Length).Insert($Edit.Start, $Edit.Text) }
+ $NewSource = $Builder.ToString()
+
+ # The rewritten file must parse to the same help everywhere, with exactly the intended lines.
+ $Errors = $null
+ $NewAst = [Parser]::ParseInput($NewSource, $File.Path, [ref]$null, [ref]$Errors)
+ if ($Errors.Count) { throw "$($File.Path): rewrite does not parse: $($Errors[0].Message)" }
+ $NewFunctions = @($NewAst.FindAll({ $args[0] -is [FunctionDefinitionAst] }, $true))
+ $Changed = @(for ($i = 0; $i -lt $NewFunctions.Count; $i++) {
+ $Signature = Get-HelpSignature $NewFunctions[$i].GetHelpContent()
+ $Got = @((Get-PermissionLine $NewFunctions[$i]).Text) -join "`n"
+ if ($Signature -cne $Expected[$i].Signature -or $Got -cne ($Expected[$i].Lines -join "`n")) { "$($NewFunctions[$i].Name) (help '$($Expected[$i].Signature)' became '$Signature')" }
+ })
+ if ($Changed.Count) { $Problems.Add("$($Changed -join ', '): rewriting the help block would change it; add the lines by hand."); continue }
+ $Bom = [System.IO.File]::ReadAllBytes($File.Path)[0..2] -join ',' -eq '239,187,191'
+ [System.IO.File]::WriteAllText($File.Path, $NewSource, [System.Text.UTF8Encoding]::new($Bom))
+ $Written++
+}
+
+if ($ReportPath) { ConvertTo-Json -InputObject @($Report) -Depth 4 | Set-Content -LiteralPath $ReportPath -Encoding utf8NoBOM }
+$GapCount = $Report.Where({ $_.graphGaps.Count }).Count
+if ($Check) {
+ if ($Drift.Count) {
+ $Drift | ForEach-Object { Write-Host " $_" }
+ throw "$($Drift.Count) function(s) have stale Permission lines. Run build/tools/Update-PermissionAnnotations.ps1 and commit the result."
+ }
+ Write-Host "Permission lines are current ($Annotated functions annotated, $GapCount with Graph calls that need a hand-written line)."
+ return
+}
+Write-Host "Updated $Written file(s). $Annotated functions annotated; $GapCount have Graph calls that need a hand-written line$(if ($ReportPath) { " (see $ReportPath)" })."
+if ($Problems.Count) { throw "$($Problems.Count) file(s) were left unchanged:`n $($Problems -join "`n ")" }
+#endregion
diff --git a/build/tools/build-openapi.ps1 b/build/tools/build-openapi.ps1
index 4bcaa4bb36..255b05a9d2 100644
--- a/build/tools/build-openapi.ps1
+++ b/build/tools/build-openapi.ps1
@@ -800,6 +800,106 @@ function Get-HelperDefinition {
return $Result
}
+# Partner-tenant plumbing every request passes through; not work done in the customer tenant.
+$PermissionStopList = @('Get-Tenants', 'Get-GraphToken', 'Update-AppManagementPolicy', 'Update-CIPPSAMCertificate', 'Get-CIPPSchemaExtensions', 'Test-CIPPAccessUserRole', 'Write-LogMessage')
+$FunctionPermissionCache = @{}
+
+function Get-FunctionPermission {
+ # The Permission: lines in a function's .NOTES (Update-PermissionAnnotations.ps1 writes them) and the
+ # functions it hands work to: direct calls, queued activities (FunctionName = 'X' runs Push-X) and
+ # scheduled or offboarding commands (Command / Cmdlet = 'X').
+ param($Definition, [hashtable]$Index)
+
+ $Name = $Definition.Name
+ if ($FunctionPermissionCache.ContainsKey($Name)) { return $FunctionPermissionCache[$Name] }
+
+ $Lines = foreach ($Line in ("$($Definition.GetHelpContent().Notes)" -split '\r?\n')) {
+ if ($Line -notmatch '^\s*Permission:\s*(.+)$') { continue }
+ $Cols = @($Matches[1] -split '\|').ForEach({ $_.Trim() })
+ if ($Cols.Count -lt 4 -or -not $Cols[0] -or -not $Cols[1] -or $Cols[2] -notin 'Delegated', 'Application' -or -not $Cols[3]) {
+ throw "Malformed Permission line in ${Name}: '$($Line.Trim())'. Expected 'Permission: API | operation | Delegated or Application | least | higher [| condition]'."
+ }
+ [pscustomobject]@{
+ Api = $Cols[0]
+ Operation = $Cols[1]
+ Type = $Cols[2]
+ Least = @(($Cols[3] -split ',').ForEach({ $_.Trim() }).Where({ $_ }))
+ Higher = @(("$($Cols[4])" -split ',').ForEach({ $_.Trim() }).Where({ $_ }))
+ Condition = $Cols[5]
+ }
+ }
+
+ $Callees = [System.Collections.Generic.HashSet[string]]::new([StringComparer]::OrdinalIgnoreCase)
+ foreach ($Command in $Definition.FindAll({ param($n) $n -is [System.Management.Automation.Language.CommandAst] }, $true)) {
+ $CommandName = $Command.GetCommandName()
+ if ($CommandName -and $CommandName -ne $Name -and $Index.ContainsKey($CommandName)) { $null = $Callees.Add($CommandName) }
+ }
+ foreach ($Table in $Definition.FindAll({ param($n) $n -is [System.Management.Automation.Language.HashtableAst] }, $true)) {
+ foreach ($Pair in $Table.KeyValuePairs) {
+ if ($Pair.Item1 -isnot [System.Management.Automation.Language.StringConstantExpressionAst]) { continue }
+ $Value = Get-UnwrappedAst -Ast $Pair.Item2
+ if ($Value -is [System.Management.Automation.Language.HashtableAst]) {
+ $Value = Get-UnwrappedAst -Ast $Value.KeyValuePairs.Where({ "$($_.Item1.Value)" -eq 'value' })[0].Item2
+ }
+ if ($Value -isnot [System.Management.Automation.Language.StringConstantExpressionAst]) { continue }
+ $Target = switch ($Pair.Item1.Value) {
+ 'FunctionName' { "Push-$($Value.Value)" }
+ { $_ -in 'Command', 'Cmdlet' } { $Value.Value }
+ }
+ if ($Target -and $Index.ContainsKey($Target)) { $null = $Callees.Add($Target) }
+ }
+ }
+
+ $Result = [pscustomobject]@{ Lines = @($Lines); Callees = @($Callees) }
+ $FunctionPermissionCache[$Name] = $Result
+ return $Result
+}
+
+function Get-PermissionRollup {
+ # Every Permission: line of an entrypoint and of everything it reaches, once per API, operation and
+ # type, with the functions that carry it.
+ param($Definition, [hashtable]$Index)
+
+ $Entries = @{}
+ $Seen = [System.Collections.Generic.HashSet[string]]::new([StringComparer]::OrdinalIgnoreCase)
+ $null = $Seen.Add($Definition.Name)
+ $Queue = [System.Collections.Generic.Queue[object]]::new()
+ $Queue.Enqueue($Definition)
+ while ($Queue.Count) {
+ $Current = $Queue.Dequeue()
+ $Info = Get-FunctionPermission -Definition $Current -Index $Index
+ foreach ($Line in $Info.Lines) {
+ $Key = ('{0}|{1}|{2}' -f $Line.Api, $Line.Operation, $Line.Type).ToLowerInvariant()
+ if (-not $Entries.ContainsKey($Key)) {
+ $Entries[$Key] = [pscustomobject]@{ Line = $Line; Condition = $Line.Condition; Via = [System.Collections.Generic.SortedSet[string]]::new([StringComparer]::Ordinal) }
+ } elseif (-not $Line.Condition) {
+ # needed unconditionally somewhere, so the condition no longer holds
+ $Entries[$Key].Condition = $null
+ }
+ $null = $Entries[$Key].Via.Add($Current.Name)
+ }
+ foreach ($Callee in $Info.Callees) {
+ if ($Callee -in $PermissionStopList -or -not $Seen.Add($Callee)) { continue }
+ $Helper = Get-HelperDefinition -Name $Callee -Index $Index
+ if ($Helper) { $Queue.Enqueue($Helper.Definition) }
+ }
+ }
+
+ foreach ($Key in ($Entries.Keys | Sort-Object -CaseSensitive)) {
+ $Entry = $Entries[$Key]
+ $Out = [ordered]@{
+ api = $Entry.Line.Api
+ operation = $Entry.Line.Operation
+ type = $Entry.Line.Type
+ least = @($Entry.Line.Least)
+ higher = @($Entry.Line.Higher)
+ }
+ if ($Entry.Condition) { $Out['condition'] = $Entry.Condition }
+ $Out['via'] = @($Entry.Via)
+ $Out
+ }
+}
+
function Get-CommentMap {
# A comment block above a statement documents it; a comment trailing code on the
# same line documents that line. Telling them apart needs the source, since both
@@ -994,7 +1094,7 @@ function Add-MemberAccess {
}
function Get-EndpointContract {
- param([string]$Path, [string]$RootPath, [hashtable]$HelperIndex, [hashtable]$ColumnMap, [int]$FollowDepth = 2)
+ param([string]$Path, [string]$RootPath, [hashtable]$HelperIndex, [hashtable]$ColumnMap, [hashtable]$FunctionIndex, [int]$FollowDepth = 2)
$Tokens = $null
$Errors = $null
@@ -1108,6 +1208,7 @@ function Get-EndpointContract {
GraphRefs = @(Get-GraphEntityReference -FunctionAst $Definition)
GraphSelect = @(Get-GraphSelectField -FunctionAst $Definition)
OutputNames = @(Get-OutputMemberName -FunctionAst $Definition)
+ Permissions = @(if ($FunctionIndex) { Get-PermissionRollup -Definition $Definition -Index $FunctionIndex })
Path = $Path
}
}
@@ -2047,6 +2148,7 @@ function ConvertTo-OasOperation {
# entrypoint; recorded so a surprising field can be traced back to its source
$Operation['x-cipp-reads-via'] = @($Contract.Downstream | Sort-Object -CaseSensitive)
}
+ if ($Contract.Permissions.Count -gt 0) { $Operation['x-cipp-permissions'] = @($Contract.Permissions) }
return $Operation
}
@@ -2086,6 +2188,9 @@ if ($ModulesPath -and (Test-Path $ModulesPath)) {
Where-Object { Test-Path $_ }
if ($HelperRoots) { $HelperIndex = Get-HelperSourceIndex -SearchPath $HelperRoots }
}
+# Permissions roll up through every module an endpoint reaches, queued Push-* activities included.
+$FunctionIndex = $null
+if ($ModulesPath -and (Test-Path $ModulesPath)) { $FunctionIndex = Get-HelperSourceIndex -SearchPath @($ModulesPath) }
# Storage tables are written all over the backend (CIPPDB's cache writers, CIPPCore's
# settings and scheduler code), so the writer scan covers every module rather than the
# handful searched for request helpers.
@@ -2123,7 +2228,7 @@ $ParseErrors = [System.Collections.Generic.List[string]]::new()
$Skipped = [System.Collections.Generic.List[string]]::new()
foreach ($File in $Files) {
- $Contract = Get-EndpointContract -Path $File.FullName -RootPath $RootPath -HelperIndex $HelperIndex -ColumnMap $ColumnMap
+ $Contract = Get-EndpointContract -Path $File.FullName -RootPath $RootPath -HelperIndex $HelperIndex -ColumnMap $ColumnMap -FunctionIndex $FunctionIndex
if ($null -eq $Contract) { $Skipped.Add($File.Name); continue }
if ($Contract.PSObject.Properties.Name -contains 'ParseError') {
$ParseErrors.Add("$($File.Name): $($Contract.ParseError)")
@@ -2237,6 +2342,25 @@ foreach ($Contract in ($Contracts | Sort-Object Name -CaseSensitive)) {
})
}
+# The central index: for each API, permission type and least-privileged permission, the endpoints that need it.
+$PermissionEndpoints = @{}
+foreach ($Contract in $Contracts) {
+ foreach ($Permission in $Contract.Permissions) {
+ foreach ($Least in $Permission.least) {
+ $Key = '{0}|{1}|{2}' -f $Permission.api, $Permission.type, $Least
+ if (-not $PermissionEndpoints.ContainsKey($Key)) { $PermissionEndpoints[$Key] = [System.Collections.Generic.SortedSet[string]]::new([StringComparer]::Ordinal) }
+ $null = $PermissionEndpoints[$Key].Add($Contract.Name)
+ }
+ }
+}
+$PermissionIndex = [ordered]@{}
+foreach ($Key in ($PermissionEndpoints.Keys | Sort-Object -CaseSensitive)) {
+ $Api, $Type, $Least = $Key -split '\|', 3
+ if (-not $PermissionIndex.Contains($Api)) { $PermissionIndex[$Api] = [ordered]@{} }
+ if (-not $PermissionIndex[$Api].Contains($Type)) { $PermissionIndex[$Api][$Type] = [ordered]@{} }
+ $PermissionIndex[$Api][$Type][$Least] = @($PermissionEndpoints[$Key])
+}
+
$Spec = [ordered]@{
openapi = '3.1.0'
info = [ordered]@{
@@ -2322,6 +2446,7 @@ backend and must be sent as an object, not a bare string.
}
}
paths = $Paths
+ 'x-cipp-permission-index' = $PermissionIndex
}
if ($Endpoint) {
diff --git a/build/tools/graph-learn-permissions.json b/build/tools/graph-learn-permissions.json
new file mode 100644
index 0000000000..3e1817596e
--- /dev/null
+++ b/build/tools/graph-learn-permissions.json
@@ -0,0 +1 @@
+{"tables":[{"DelegatedWork":{"least":["EntitlementManagement.ReadWrite.All"],"higher":[]},"Application":{"least":["EntitlementManagement.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["EntitlementMgmt-SubjectAccess.ReadWrite"],"higher":["EntitlementManagement.Read.All","EntitlementManagement.ReadWrite.All"]}},{"DelegatedWork":{"least":["EntitlementManagement.Read.All"],"higher":["EntitlementManagement.ReadWrite.All"]},"Application":{"least":["EntitlementManagement.Read.All"],"higher":["EntitlementManagement.ReadWrite.All"]}},{"DelegatedWork":{"least":["EntitlementMgmt-SubjectAccess.ReadWrite"],"higher":["EntitlementManagement.ReadWrite.All"]}},{"DelegatedWork":{"least":["EntitlementMgmt-SubjectAccess.ReadWrite"],"higher":["EntitlementManagement.Read.All","EntitlementManagement.ReadWrite.All"]},"Application":{"least":["EntitlementManagement.Read.All"],"higher":["EntitlementManagement.ReadWrite.All"]}},{"DelegatedWork":{"least":["AccessReview.ReadWrite.All"],"higher":[]},"Application":{"least":["AccessReview.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AccessReview.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AccessReview.Read.All"],"higher":["AccessReview.ReadWrite.All"]},"Application":{"least":["AccessReview.Read.All"],"higher":["AccessReview.ReadWrite.All"]}},{"DelegatedWork":{"least":["ContentActivity.Write"],"higher":[]},"Application":{"least":["ContentActivity.Write"],"higher":[]}},{"DelegatedWork":{"least":["Policy.ReadWrite.ApplicationConfiguration"],"higher":[]},"Application":{"least":["Policy.ReadWrite.ApplicationConfiguration"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.ApplicationConfiguration"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.ApplicationConfiguration"]}},{"Application":{"least":["CallRecordings.Read.All"],"higher":[]}},{"Application":{"least":["CallTranscripts.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.ConsentRequest","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.ConsentRequest","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.ConsentRequest"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["Policy.ReadWrite.ConsentRequest"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["AdministrativeUnit.ReadWrite.All"],"higher":[]},"Application":{"least":["AdministrativeUnit.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["RoleManagement.ReadWrite.Directory"],"higher":[]},"Application":{"least":["RoleManagement.ReadWrite.Directory"],"higher":[]}},{"DelegatedWork":{"least":["AdministrativeUnit.Read.All"],"higher":["AdministrativeUnit.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["AdministrativeUnit.Read.All"],"higher":["AdministrativeUnit.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["RoleManagement.Read.Directory"],"higher":["RoleManagement.ReadWrite.Directory","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["RoleManagement.Read.Directory"],"higher":["RoleManagement.ReadWrite.Directory","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Directory.ReadWrite.All"],"higher":[]},"Application":{"least":["Directory.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ReportSettings.Read.All"],"higher":["ReportSettings.ReadWrite.All"]},"Application":{"least":["ReportSettings.Read.All"],"higher":["ReportSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["ReportSettings.ReadWrite.All"],"higher":[]},"Application":{"least":["ReportSettings.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AgentIdentity.ReadWrite.All"],"higher":[]},"Application":{"least":["AgentIdentity.ReadWrite.All","AgentIdentity.CreateAsManager"],"higher":[]}},{"Application":{"least":["AgentIdentity.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AgentIdentity.DeleteRestore.All"],"higher":[]},"Application":{"least":["AgentIdentity.DeleteRestore.All","AgentIdentity.CreateAsManager"],"higher":[]}},{"DelegatedWork":{"least":["AgentIdentity.Read.All"],"higher":["Application.Read.All"]},"Application":{"least":["AgentIdentity.Read.All","AgentIdentity.CreateAsManager"],"higher":["Application.Read.All"]}},{"DelegatedWork":{"least":["AgentIdentity.Read.All"],"higher":["AgentIdentity.ReadWrite.All"]},"Application":{"least":["AgentIdentity.Read.All"],"higher":["AgentIdentity.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentity.Create.All"],"higher":["AgentIdentity.ReadWrite.All"]},"Application":{"least":["AgentIdentity.Create.All"],"higher":["AgentIdentity.CreateAsManager","AgentIdentity.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentity.EnableDisable.All"],"higher":["AgentIdentity.ReadWrite.All"]},"Application":{"least":["AgentIdentity.EnableDisable.All","AgentIdentity.CreateAsManager"],"higher":["AgentIdentity.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprint.AddRemoveCreds.All"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprint.AddRemoveCreds.All"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprint.ReadWrite.All"],"higher":[]},"Application":{"least":["AgentIdentityBlueprint.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AgentIdentityBlueprint.DeleteRestore.All"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprint.DeleteRestore.All"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprint.Read.All"],"higher":["Application.Read.All"]},"Application":{"least":["AgentIdentityBlueprint.Read.All"],"higher":["Application.Read.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprint.Read.All"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprint.Read.All"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprint.Create"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprint.Create"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AgentIdentityBlueprint.AddRemoveCreds.All","AgentIdentityBlueprint.UpdateBranding.All"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprint.AddRemoveCreds.All","AgentIdentityBlueprint.UpdateBranding.All"],"higher":["AgentIdentityBlueprint.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprintPrincipal.ReadWrite.All"],"higher":[]},"Application":{"least":["AgentIdentityBlueprintPrincipal.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AgentIdentityBlueprintPrincipal.DeleteRestore.All"],"higher":["AgentIdentityBlueprintPrincipal.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprintPrincipal.DeleteRestore.All"],"higher":["AgentIdentityBlueprintPrincipal.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprintPrincipal.Read.All"],"higher":["Application.Read.All"]},"Application":{"least":["AgentIdentityBlueprintPrincipal.Read.All"],"higher":["Application.Read.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Application.ReadWrite.OwnedBy","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprintPrincipal.Read.All"],"higher":["AgentIdentityBlueprintPrincipal.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprintPrincipal.Read.All"],"higher":["AgentIdentityBlueprintPrincipal.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprintPrincipal.Create"],"higher":["AgentIdentityBlueprintPrincipal.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprintPrincipal.Create"],"higher":["AgentIdentityBlueprintPrincipal.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprintPrincipal.EnableDisable.All"],"higher":["AgentIdentityBlueprintPrincipal.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprintPrincipal.EnableDisable.All"],"higher":["AgentIdentityBlueprintPrincipal.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdUser.ReadWrite.IdentityParentedBy"],"higher":["AgentIdUser.ReadWrite.All","User.ReadWrite.All"]},"Application":{"least":["AgentIdUser.ReadWrite.IdentityParentedBy"],"higher":["AgentIdUser.ReadWrite.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.ReadWrite.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.ReadWrite.All"]},"Application":{"least":["User.ReadWrite.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentIdUser.ReadWrite.IdentityParentedBy"],"higher":["AgentIdUser.ReadWrite.All","User.DeleteRestore.All","User.ReadWrite.All"]},"Application":{"least":["AgentIdUser.ReadWrite.IdentityParentedBy"],"higher":["AgentIdUser.ReadWrite.All","User.DeleteRestore.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.ReadBasic.All"],"higher":["User.Read.All","AgentIdUser.ReadWrite.IdentityParentedBy","AgentIdUser.ReadWrite.All","User.ReadWrite.All"]},"Application":{"least":["User.ReadBasic.All"],"higher":["User.Read.All","AgentIdUser.ReadWrite.IdentityParentedBy","AgentIdUser.ReadWrite.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["AppRoleAssignment.ReadWrite.All"],"higher":["Directory.Read.All"]},"Application":{"least":["Directory.Read.All"],"higher":["AppRoleAssignment.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","User.Read.All","User.ReadWrite.All"]},"Application":{"least":["User.Read.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read.All"],"higher":["User.ReadWrite.All","AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["User.Read.All"],"higher":["User.ReadWrite.All","AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.ReadBasic.All","GroupMember.Read.All","GroupMember.ReadBasic.All"]},"Application":{"least":["Directory.Read.All"],"higher":["Directory.ReadWrite.All","Group.ReadBasic.All","GroupMember.ReadBasic.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["User.ReadWrite.All","AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","User.Read.All"]},"Application":{"least":["User.Read.All"],"higher":["User.ReadWrite.All","AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadBasic.All","GroupMember.Read.All","GroupMember.ReadBasic.All","User.Read.All"]},"Application":{"least":["User.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadBasic.All","GroupMember.Read.All","GroupMember.ReadBasic.All"]}},{"DelegatedWork":{"least":["User.Read.All"],"higher":["AgentIdUser.ReadWrite.IdentityParentedBy","AgentIdUser.ReadWrite.All","User.ReadWrite.All"]},"Application":{"least":["User.Read.All"],"higher":["AgentIdUser.ReadWrite.IdentityParentedBy","AgentIdUser.ReadWrite.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.ReadBasic.All"],"higher":["User.ReadWrite.All","AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","DeviceManagementApps.Read.All","DeviceManagementApps.ReadWrite.All","DeviceManagementConfiguration.Read.All","DeviceManagementConfiguration.ReadWrite.All","DeviceManagementManagedDevices.Read.All","DeviceManagementManagedDevices.ReadWrite.All","DeviceManagementServiceConfig.Read.All","DeviceManagementServiceConfig.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","User.Read","User.Read.All","User.ReadWrite"]},"Application":{"least":["User.ReadBasic.All"],"higher":["User.ReadWrite.All","AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","DeviceManagementApps.Read.All","DeviceManagementApps.ReadWrite.All","DeviceManagementConfiguration.Read.All","DeviceManagementConfiguration.ReadWrite.All","DeviceManagementManagedDevices.Read.All","DeviceManagementManagedDevices.ReadWrite.All","DeviceManagementServiceConfig.Read.All","DeviceManagementServiceConfig.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","User.Read.All","User.ReadWrite.CrossCloud"]}},{"DelegatedWork":{"least":["AppRoleAssignment.ReadWrite.All"],"higher":[]},"Application":{"least":["AppRoleAssignment.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Agreement.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Agreement.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["AgreementAcceptance.Read"],"higher":["AgreementAcceptance.Read.All"]}},{"DelegatedWork":{"least":["Agreement.Read.All"],"higher":["Agreement.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityEvents.Read.All"],"higher":["SecurityEvents.ReadWrite.All"]},"Application":{"least":["SecurityEvents.Read.All"],"higher":["SecurityEvents.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityEvents.ReadWrite.All"],"higher":[]},"Application":{"least":["SecurityEvents.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["CustomSecAttributeDefinition.Read.All"],"higher":["CustomSecAttributeDefinition.ReadWrite.All"]},"Application":{"least":["CustomSecAttributeDefinition.Read.All"],"higher":["CustomSecAttributeDefinition.ReadWrite.All"]}},{"DelegatedWork":{"least":["CustomSecAttributeDefinition.ReadWrite.All"],"higher":[]},"Application":{"least":["CustomSecAttributeDefinition.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AppCatalog.Submit"],"higher":["AppCatalog.Read.All","AppCatalog.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["AppCatalog.Read.All"],"higher":["AppCatalog.ReadWrite.All"]}},{"DelegatedWork":{"least":["ConsentRequest.Read.All"],"higher":["ConsentRequest.ReadWrite.All"]},"Application":{"least":["ConsentRequest.Read.All"],"higher":["ConsentRequest.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["Application.ReadWrite.OwnedBy"],"higher":["Application.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.ReadWrite.All"],"higher":[]},"Application":{"least":["Application.ReadWrite.OwnedBy"],"higher":["Application.ReadWrite.All"]}},{"DelegatedWork":{"least":["Directory.Read.All"],"higher":["Application.Read.All","Application.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["Application.ReadWrite.OwnedBy"],"higher":["Application.Read.All","Application.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.OwnedBy","Application.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Directory.ReadWrite.All","Directory.Read.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.OwnedBy","Application.ReadWrite.All","Directory.Read.All"]}},{"DelegatedWork":{"least":["AppRegistration.Create"],"higher":["Application.ReadWrite.All"]},"Application":{"least":["AppRegistration.Create"],"higher":["Application.ReadWrite.OwnedBy","Application.ReadWrite.All"]}},{"Application":{"least":["Calls.JoinGroupCalls.Chat"],"higher":["Calls.Initiate.All","Calls.InitiateGroupCall.All","Calls.JoinGroupCall.All","Calls.JoinGroupCallAsGuest.All"]}},{"DelegatedWork":{"least":["OnlineMeetings.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["EntitlementManagement.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application-RemoteDesktopConfig.ReadWrite.All","Application.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application-RemoteDesktopConfig.ReadWrite.All","Application.ReadWrite.All","Application.ReadWrite.OwnedBy","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application-RemoteDesktopConfig.ReadWrite.All"],"higher":["Application.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["Application-RemoteDesktopConfig.ReadWrite.All"],"higher":["Application.ReadWrite.All","Application.ReadWrite.OwnedBy","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Team.ReadBasic.All"],"higher":["TeamSettings.Read.All","TeamSettings.ReadWrite.All"]},"Application":{"least":["Team.ReadBasic.All"],"higher":["TeamSettings.Read.All","TeamSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["Calendars.ReadWrite"],"higher":["Mail.ReadWrite"]},"Application":{"least":["Calendars.ReadWrite"],"higher":["Mail.ReadWrite"]}},{"DelegatedWork":{"least":["AttackSimulation.Read.All"],"higher":[]},"Application":{"least":["AttackSimulation.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["AttackSimulation.ReadWrite.All"],"higher":[]},"Application":{"least":["AttackSimulation.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["OnlineMeetingArtifact.Read.All"],"higher":[]},"Application":{"least":["OnlineMeetingArtifact.Read.All"],"higher":["OnlineMeetingArtifact.Read.Chat"]}},{"Application":{"least":["Calls.JoinGroupCall.All"],"higher":["Calls.InitiateGroupCall.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-External.ReadWrite"],"higher":["UserAuthMethod-External.ReadWrite.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-External.ReadWrite.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Email.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-Email.Read.All","UserAuthMethod-Email.ReadWrite","UserAuthMethod-Email.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-Email.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-Email.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.Read"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Password.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-Password.Read.All","UserAuthMethod-Password.ReadWrite","UserAuthMethod-Password.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-Password.Read.All"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-Password.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Phone.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-Phone.Read.All","UserAuthMethod-Phone.ReadWrite","UserAuthMethod-Phone.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-Phone.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-Phone.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-ResourceKey.Read.All"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-ResourceKey.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-ResourceKey.Read.All"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-ResourceKey.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-SoftwareOATH.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-SoftwareOATH.Read.All","UserAuthMethod-SoftwareOATH.ReadWrite","UserAuthMethod-SoftwareOATH.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-SoftwareOATH.Read.All"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-SoftwareOATH.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-TAP.Read"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthMethod-TAP.Read.All","UserAuthMethod-TAP.ReadWrite","UserAuthMethod-TAP.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-TAP.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-TAP.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Email.ReadWrite"],"higher":["UserAuthMethod-Email.ReadWrite.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-Email.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Passkey.ReadWrite.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-Passkey.ReadWrite.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Phone.ReadWrite"],"higher":["UserAuthMethod-Phone.ReadWrite.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-Phone.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-QR.ReadWrite","UserAuthMethod-QR.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-QR.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.Read.AuthenticationMethod"],"higher":["Policy.Read.All","Policy.ReadWrite.AuthenticationMethod","Policy.ReadWrite.ConditionalAccess"]},"Application":{"least":["Policy.Read.AuthenticationMethod"],"higher":["Policy.Read.All","Policy.ReadWrite.AuthenticationMethod","Policy.ReadWrite.ConditionalAccess"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.ConditionalAccess"],"higher":["Policy.ReadWrite.AuthenticationMethod"]},"Application":{"least":["Policy.ReadWrite.ConditionalAccess"],"higher":["Policy.ReadWrite.AuthenticationMethod"]}},{"DelegatedWork":{"least":["EventListener.ReadWrite.All"],"higher":[]},"Application":{"least":["EventListener.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["EventListener.Read.All"],"higher":["EventListener.ReadWrite.All"]},"Application":{"least":["EventListener.Read.All"],"higher":["EventListener.ReadWrite.All"]}},{"DelegatedWork":{"least":["AuthenticationContext.ReadWrite.All"],"higher":["Policy.Read.ConditionalAccess"]},"Application":{"least":["AuthenticationContext.ReadWrite.All"],"higher":["Policy.Read.ConditionalAccess"]}},{"DelegatedWork":{"least":["AuthenticationContext.Read.All"],"higher":["AuthenticationContext.ReadWrite.All","Policy.Read.ConditionalAccess"]},"Application":{"least":["AuthenticationContext.Read.All"],"higher":["AuthenticationContext.ReadWrite.All","Policy.Read.ConditionalAccess"]}},{"DelegatedWork":{"least":["AuthenticationContext.ReadWrite.All"],"higher":["Policy.ReadWrite.ConditionalAccess"]},"Application":{"least":["AuthenticationContext.ReadWrite.All"],"higher":["Policy.ReadWrite.ConditionalAccess"]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.AuthenticationFlows"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.AuthenticationFlows"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.AuthenticationFlows"],"higher":[]},"Application":{"least":["Policy.ReadWrite.AuthenticationFlows"],"higher":[]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.Read"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.AuthenticationMethod"],"higher":["Policy.ReadWrite.AuthenticationMethod","Policy.Read.All"]},"Application":{"least":["Policy.Read.AuthenticationMethod"],"higher":["Policy.ReadWrite.AuthenticationMethod","Policy.Read.All"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.AuthenticationMethod"],"higher":[]},"Application":{"least":["Policy.ReadWrite.AuthenticationMethod"],"higher":[]}},{"DelegatedWork":{"least":["AuditLog.Read.All"],"higher":[]},"Application":{"least":["AuditLog.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["AuditLog.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.Authorization"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.Authorization"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.Authorization"],"higher":[]},"Application":{"least":["Policy.ReadWrite.Authorization"],"higher":[]}},{"DelegatedWork":{"least":["IdentityUserFlow.ReadWrite.All"],"higher":[]},"Application":{"least":["IdentityUserFlow.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IdentityUserFlow.Read.All"],"higher":["IdentityUserFlow.ReadWrite.All"]},"Application":{"least":["IdentityUserFlow.Read.All"],"higher":["IdentityUserFlow.ReadWrite.All"]}},{"DelegatedWork":{"least":["BackupRestore-Control.ReadWrite.All"],"higher":[]},"Application":{"least":["BackupRestore-Control.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["BackupRestore-Control.Read.All"],"higher":[]},"Application":{"least":["BackupRestore-Control.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["BackupRestore-Restore.ReadWrite.All"],"higher":[]},"Application":{"least":["BackupRestore-Restore.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["BackupRestore-Configuration.Read.All"],"higher":[]},"Application":{"least":["BackupRestore-Configuration.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["BackupRestore-Search.Read.All"],"higher":[]},"Application":{"least":["BackupRestore-Search.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["BackupRestore-Restore.Read.All"],"higher":["BackupRestore-Restore.ReadWrite.All"]},"Application":{"least":["BackupRestore-Restore.Read.All"],"higher":["BackupRestore-Restore.ReadWrite.All"]}},{"DelegatedWork":{"least":["BackupRestore-Control.Read.All"],"higher":["BackupRestore-Control.ReadWrite.All"]},"Application":{"least":["BackupRestore-Control.Read.All"],"higher":["BackupRestore-Control.ReadWrite.All"]}},{"DelegatedWork":{"least":["BackupRestore-Configuration.ReadWrite.All"],"higher":[]},"Application":{"least":["BackupRestore-Configuration.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Sites.ReadWrite.All"],"higher":[]},"Application":{"least":["Sites.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All"]},"Application":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["BitlockerKey.ReadBasic.All"],"higher":["BitlockerKey.Read.All"]},"Application":{"least":["BitlockerKey.ReadBasic.All"],"higher":["BitlockerKey.Read.All"]}},{"DelegatedWork":{"least":["BookingsAppointment.ReadWrite.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All"]},"Application":{"least":["Bookings.ReadWrite.All"],"higher":["Bookings.Manage.All"]}},{"DelegatedWork":{"least":["BookingsAppointment.ReadWrite.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All"]},"Application":{"least":["BookingsAppointment.ReadWrite.All"],"higher":["Bookings.Manage.All","Bookings.Read.All","Bookings.ReadWrite.All"]}},{"DelegatedWork":{"least":["Bookings.Read.All"],"higher":["BookingsAppointment.ReadWrite.All","Bookings.Manage.All","Bookings.ReadWrite.All"]},"Application":{"least":["BookingsAppointment.ReadWrite.All"],"higher":["Bookings.Manage.All","Bookings.Read.All","Bookings.ReadWrite.All"]}},{"DelegatedWork":{"least":["Bookings.Manage.All"],"higher":[]}},{"DelegatedWork":{"least":["Bookings.Read.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All","BookingsAppointment.ReadWrite.All"]},"Application":{"least":["BookingsAppointment.ReadWrite.All"],"higher":["Bookings.Manage.All","Bookings.Read.All","Bookings.ReadWrite.All"]}},{"Application":{"least":["Bookings.Read.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All","Calendars.Read","Calendars.ReadWrite"]}},{"DelegatedWork":{"least":["Bookings.Read.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All","BookingsAppointment.ReadWrite.All"]},"Application":{"least":["Bookings.Read.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All","BookingsAppointment.ReadWrite.All"]}},{"DelegatedWork":{"least":["Bookings.Read.All"],"higher":["BookingsAppointment.ReadWrite.All","Bookings.Manage.All","Bookings.ReadWrite.All"]},"Application":{"least":["Bookings.Read.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All"]}},{"DelegatedWork":{"least":["Bookings.Read.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All","BookingsAppointment.ReadWrite.All"]},"Application":{"least":["Bookings.Read.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All"]}},{"DelegatedWork":{"least":["BookingsAppointment.ReadWrite.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All"]},"Application":{"least":["BookingsAppointment.ReadWrite.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All"]}},{"DelegatedWork":{"least":["Bookings.ReadWrite.All"],"higher":["Bookings.Manage.All"]},"Application":{"least":["Bookings.ReadWrite.All"],"higher":["Bookings.Manage.All"]}},{"DelegatedWork":{"least":["Bookings.Manage.All"],"higher":[]},"Application":{"least":["Bookings.Manage.All"],"higher":[]}},{"DelegatedWork":{"least":["Bookings.Read.All"],"higher":["Bookings.Manage.All","Bookings.ReadWrite.All","BookingsAppointment.ReadWrite.All"]}},{"DelegatedWork":{"least":["BrowserSiteLists.Read.All"],"higher":["BrowserSiteLists.ReadWrite.All"]},"Application":{"least":["BrowserSiteLists.Read.All"],"higher":["BrowserSiteLists.ReadWrite.All"]}},{"DelegatedWork":{"least":["BrowserSiteLists.ReadWrite.All"],"higher":[]},"Application":{"least":["BrowserSiteLists.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Place.ReadWrite.All"],"higher":[]},"Application":{"least":["Place.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Place.Read.All"],"higher":["Place.ReadWrite.All"]},"Application":{"least":["Place.Read.All"],"higher":["Place.ReadWrite.All"]}},{"DelegatedWork":{"least":["Calendars.ReadWrite"],"higher":[]},"Application":{"least":["Calendars.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["Calendars.Read"],"higher":["Calendars.ReadBasic","Calendars.ReadWrite"]},"Application":{"least":["Calendars.Read"],"higher":["Calendars.ReadBasic","Calendars.ReadWrite"]}},{"DelegatedWork":{"least":["Calendars.ReadBasic"],"higher":["Calendars.Read","Calendars.ReadWrite"]},"Application":{"least":["Calendars.ReadBasic"],"higher":["Calendars.Read","Calendars.ReadWrite"]}},{"DelegatedWork":{"least":["Calendars.ReadBasic"],"higher":["Calendars.Read"]},"Application":{"least":["Calendars.ReadBasic"],"higher":["Calendars.Read"]}},{"DelegatedWork":{"least":["Calendars.ReadBasic"],"higher":["Calendars.ReadWrite","Calendars.Read","Calendars.Read.Shared"]},"Application":{"least":["Calendars.ReadBasic"],"higher":["Calendars.ReadWrite","Calendars.Read"]}},{"Application":{"least":["Calls.JoinGroupCallAsGuest.All"],"higher":["Calls.InitiateGroupCall.All","Calls.JoinGroupCall.All"]}},{"Application":{"least":["Calls.JoinGroupCall.All"],"higher":["Calls.JoinGroupCallAsGuest.All"]}},{"Application":{"least":["Calls.Initiate.All"],"higher":["Calls.AccessMedia.All"]}},{"Application":{"least":["Calls.AccessMedia.All"],"higher":[]}},{"Application":{"least":["Calls.JoinGroupCallAsGuest.All"],"higher":["Calls.Initiate.All","Calls.InitiateGroupCall.All","Calls.JoinGroupCall.All"]}},{"Application":{"least":["Calls.Initiate.All"],"higher":[]}},{"Application":{"least":["Calls.AccessMedia.All"],"higher":["Calls.JoinGroupCall.All"]}},{"Application":{"least":["OnlineMeetingRecording.Read.All"],"higher":[]}},{"Application":{"least":["CallRecords.Read.All"],"higher":[]}},{"Application":{"least":["OnlineMeetingTranscript.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["PublicKeyInfrastructure.Read.All"],"higher":["PublicKeyInfrastructure.ReadWrite.All"]},"Application":{"least":["PublicKeyInfrastructure.Read.All"],"higher":["PublicKeyInfrastructure.ReadWrite.All"]}},{"DelegatedWork":{"least":["PublicKeyInfrastructure.ReadWrite.All"],"higher":[]},"Application":{"least":["PublicKeyInfrastructure.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Organization.ReadWrite.All"],"higher":[]},"Application":{"least":["Organization.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Organization.Read.All"],"higher":["Organization.ReadWrite.All"]},"Application":{"least":["Organization.Read.All"],"higher":["Organization.ReadWrite.All"]}},{"DelegatedWork":{"least":["Schedule.ReadWrite.All"],"higher":["Group.ReadWrite.All"]},"Application":{"least":["Schedule.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ChannelSettings.ReadWrite.All"],"higher":[]},"Application":{"least":["ChannelSettings.ReadWrite.All"],"higher":[]}},{"Application":{"least":["Teamwork.Migrate.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ManageSelectedForTeam"],"higher":["TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.ManageSelectedForTeam.All"],"higher":["TeamsAppInstallation.ReadWriteForTeam.All"]}},{"DelegatedWork":{"least":["ChannelMember.ReadWrite.All"],"higher":[]},"Application":{"least":["ChannelMember.ReadWrite.Group"],"higher":["ChannelMember.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsTab.ReadWriteSelfForTeam"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForTeam"]},"Application":{"least":["TeamsTab.Delete.Group"],"higher":["TeamsTab.ReadWrite.Group","Directory.ReadWrite.All","Group.ReadWrite.All","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForTeam.All","TeamsTab.ReadWriteSelfForTeam.All"]}},{"DelegatedWork":{"least":["Channel.Delete.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["Channel.Delete.Group"],"higher":["Channel.Delete.All","Directory.ReadWrite.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["ChannelMember.Read.All"],"higher":["ChannelMember.ReadWrite.All"]},"Application":{"least":["ChannelMember.Read.All"],"higher":["ChannelMember.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read.All"],"higher":["Files.Read","Files.ReadWrite","Files.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.Read.All"],"higher":["File.Read.Group","Files.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["ChannelMember.Read.All"],"higher":["ChannelMember.ReadWrite.All"]},"Application":{"least":["ChannelMember.Read.Group"],"higher":["ChannelMember.Read.All","ChannelMember.ReadWrite.All","ChannelMember.ReadWrite.Group"]}},{"DelegatedWork":{"least":["TeamsTab.Read.All"],"higher":["TeamsTab.ReadWriteSelfForTeam","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForTeam"]},"Application":{"least":["TeamsTab.Read.Group"],"higher":["TeamsTab.ReadWrite.Group","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","TeamsTab.Read.All","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForTeam.All","TeamsTab.ReadWriteSelfForTeam.All"]}},{"DelegatedWork":{"least":["Channel.ReadBasic.All"],"higher":["ChannelSettings.ReadWrite.All","ChannelSettings.Read.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]},"Application":{"least":["ChannelSettings.Read.Group"],"higher":["ChannelSettings.ReadWrite.Group","Channel.ReadBasic.All","ChannelSettings.Read.All","ChannelSettings.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]}},{"Application":{"least":["ChannelMessage.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForTeam"],"higher":["TeamsAppInstallation.ManageSelectedForTeam","TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.Read.Group"],"higher":["TeamsAppInstallation.ManageSelectedForTeam.All","TeamsAppInstallation.Read.All","TeamsAppInstallation.ReadForTeam.All","TeamsAppInstallation.ReadWriteForTeam.All"]}},{"DelegatedWork":{"least":["ChannelMember.Read.All"],"higher":["ChannelMember.ReadWrite.All","Group.Read.All"]},"Application":{"least":["ChannelMember.Read.Group"],"higher":["ChannelMember.Read.All","ChannelMember.ReadWrite.All","ChannelMember.ReadWrite.Group"]}},{"DelegatedWork":{"least":["ChannelMessage.Read.All"],"higher":["Group.Read.All","Group.ReadWrite.All"]},"Application":{"least":["ChannelMessage.Read.Group"],"higher":["ChannelMessage.Read.All","Group.Read.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsTab.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForTeam","TeamsTab.ReadWriteSelfForTeam"]},"Application":{"least":["TeamsTab.Read.Group"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","TeamsTab.Read.All","TeamsTab.ReadWrite.All","TeamsTab.ReadWrite.Group","TeamsTab.ReadWriteForTeam.All","TeamsTab.ReadWriteSelfForTeam.All"]}},{"DelegatedWork":{"least":["Channel.ReadBasic.All"],"higher":["ChannelSettings.Read.All","ChannelSettings.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]},"Application":{"least":["ChannelSettings.Read.Group"],"higher":["Channel.ReadBasic.All","ChannelSettings.Read.All","ChannelSettings.ReadWrite.All","ChannelSettings.ReadWrite.Group","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsTab.ReadWriteSelfForTeam"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForTeam"]},"Application":{"least":["TeamsTab.ReadWrite.Group"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForTeam.All","TeamsTab.ReadWriteSelfForTeam.All"]}},{"DelegatedWork":{"least":["ChannelSettings.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["ChannelSettings.ReadWrite.Group"],"higher":["ChannelSettings.ReadWrite.All","Directory.ReadWrite.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["ChannelMessage.Send"],"higher":["Group.ReadWrite.All"]},"Application":{"least":["Teamwork.Migrate.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsTab.Create"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForTeam","TeamsTab.ReadWriteSelfForTeam"]},"Application":{"least":["TeamsTab.Create.Group"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsTab.Create","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForTeam.All","TeamsTab.ReadWriteSelfForTeam.All"]}},{"DelegatedWork":{"least":["Channel.Create"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["Channel.Create.Group"],"higher":["Channel.Create","Directory.ReadWrite.All","Group.ReadWrite.All","Teamwork.Migrate.All"]}},{"DelegatedWork":{"least":["ChannelSettings.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ChannelMember.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["ChannelMember.ReadWrite.Group"],"higher":["ChannelMember.ReadWrite.All","Directory.ReadWrite.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadWriteSelfForChat"],"higher":["TeamsAppInstallation.ManageSelectedForChat","TeamsAppInstallation.ReadWriteForChat"]},"Application":{"least":["TeamsAppInstallation.ReadWriteSelfForChat.All"],"higher":["Chat.Manage.Chat","TeamsAppInstallation.ManageSelectedForChat.All","TeamsAppInstallation.ReadWriteForChat.All"]}},{"DelegatedWork":{"least":["ChatMember.ReadWrite"],"higher":[]},"Application":{"least":["ChatMember.ReadWrite.All"],"higher":["Chat.Manage.Chat"]}},{"DelegatedWork":{"least":["Chat.ReadWrite"],"higher":[]},"Application":{"least":["Chat.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsTab.ReadWriteSelfForChat"],"higher":["TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForChat"]},"Application":{"least":["TeamsTab.ReadWriteSelfForChat.All"],"higher":["TeamsTab.Delete.Chat","TeamsTab.ReadWrite.All","TeamsTab.ReadWrite.Chat","TeamsTab.ReadWriteForChat"]}},{"DelegatedWork":{"least":["TeamworkTargetedMessage.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["Chat.ManageDeletion.All"],"higher":[]},"Application":{"least":["Chat.ManageDeletion.Chat"],"higher":["Chat.ManageDeletion.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForChat"],"higher":["TeamsAppInstallation.ReadWriteSelfForChat","TeamsAppInstallation.ManageSelectedForChat","TeamsAppInstallation.ReadWriteForChat"]},"Application":{"least":["TeamsAppInstallation.ReadForChat.All"],"higher":["TeamsAppInstallation.ReadWriteSelfForChat.All","Chat.Manage.Chat","TeamsAppInstallation.ManageSelectedForChat.All","TeamsAppInstallation.Read.All","TeamsAppInstallation.Read.Chat","TeamsAppInstallation.ReadWriteForChat.All"]}},{"DelegatedWork":{"least":["Chat.ReadBasic"],"higher":["ChatMember.ReadWrite","Chat.Read","Chat.ReadWrite","ChatMember.Read"]},"Application":{"least":["ChatMember.Read.All"],"higher":["ChatMember.ReadWrite.All","Chat.Manage.Chat","Chat.Read.All","Chat.ReadBasic.All","Chat.ReadWrite.All","ChatMember.Read.Chat","TeamMember.Read.Group"]}},{"DelegatedWork":{"least":["TeamsTab.Read.All"],"higher":["TeamsTab.ReadWriteSelfForChat","TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForChat"]},"Application":{"least":["TeamsTab.Read.All"],"higher":["TeamsTab.ReadWriteSelfForChat.All","TeamsTab.Read.Chat","TeamsTab.ReadWrite.All","TeamsTab.ReadWrite.Chat","TeamsTab.ReadWriteForChat.All"]}},{"DelegatedWork":{"least":["Chat.ReadBasic"],"higher":["Chat.Read","Chat.ReadWrite"]},"Application":{"least":["Chat.ReadBasic.WhereInstalled"],"higher":["Chat.Manage.Chat","Chat.Read.All","Chat.ReadBasic.All","Chat.ReadWrite.All","ChatSettings.Read.Chat","ChatSettings.ReadWrite.Chat"]}},{"Application":{"least":["Chat.Read.All"],"higher":["Chat.ReadWrite.All"]}},{"DelegatedWork":{"least":["Chat.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForChat"],"higher":["TeamsAppInstallation.ReadWriteSelfForChat","TeamsAppInstallation.ManageSelectedForChat","TeamsAppInstallation.ReadWriteAndConsentForChat","TeamsAppInstallation.ReadWriteAndConsentSelfForChat","TeamsAppInstallation.ReadWriteForChat"]},"Application":{"least":["TeamsAppInstallation.ReadForChat.All"],"higher":["TeamsAppInstallation.ReadWriteSelfForChat.All","Chat.Manage.Chat","TeamsAppInstallation.ManageSelectedForChat.All","TeamsAppInstallation.Read.All","TeamsAppInstallation.Read.Chat","TeamsAppInstallation.ReadWriteAndConsentForChat.All","TeamsAppInstallation.ReadWriteAndConsentSelfForChat.All","TeamsAppInstallation.ReadWriteForChat.All"]}},{"DelegatedWork":{"least":["Chat.ReadBasic"],"higher":["ChatMember.ReadWrite","Chat.Read","Chat.ReadWrite","ChatMember.Read"]},"Application":{"least":["ChatMember.Read.All"],"higher":["Chat.Manage.Chat","Chat.Read.All","Chat.ReadBasic.All","Chat.ReadWrite.All","ChatMember.Read.Chat","ChatMember.ReadWrite.All"]}},{"DelegatedWork":{"least":["Chat.Read"],"higher":["Chat.ReadWrite"]},"Application":{"least":["ChatMessage.Read.Chat"],"higher":["Chat.Read.All","Chat.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForChat"],"higher":["TeamsAppInstallation.ReadWriteSelfForChat","TeamsAppInstallation.ReadWriteForChat"]},"Application":{"least":["TeamsAppInstallation.ReadForChat.All"],"higher":["TeamsAppInstallation.ReadWriteSelfForChat.All","TeamsAppInstallation.ReadWriteForChat.All"]}},{"DelegatedWork":{"least":["Chat.Read"],"higher":["Chat.ReadWrite"]},"Application":{"least":["ChatMessage.Read.All"],"higher":["Chat.ReadWrite.All","Chat.Read.All"]}},{"DelegatedWork":{"least":["TeamsTab.Read.All"],"higher":["TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForChat","TeamsTab.ReadWriteSelfForChat"]},"Application":{"least":["TeamsTab.Read.All"],"higher":["TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForChat.All","TeamsTab.ReadWriteSelfForChat.All"]}},{"DelegatedWork":{"least":["Chat.ReadBasic"],"higher":["Chat.Read","Chat.ReadWrite"]}},{"DelegatedWork":{"least":["TeamsTab.ReadWriteSelfForChat"],"higher":["TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForChat"]},"Application":{"least":["TeamsTab.ReadWriteSelfForChat.All"],"higher":["TeamsTab.ReadWrite.All","TeamsTab.ReadWrite.Chat","TeamsTab.ReadWriteForChat"]}},{"DelegatedWork":{"least":["Chat.ReadWrite"],"higher":[]},"Application":{"least":["ChatSettings.ReadWrite.Chat"],"higher":["Chat.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadWriteSelfForChat"],"higher":["TeamsAppInstallation.ManageSelectedForChat","TeamsAppInstallation.ReadWriteAndConsentForChat","TeamsAppInstallation.ReadWriteAndConsentSelfForChat","TeamsAppInstallation.ReadWriteForChat"]},"Application":{"least":["TeamsAppInstallation.ReadWriteSelfForChat.All"],"higher":["Chat.Manage.Chat","TeamsAppInstallation.ManageSelectedForChat.All","TeamsAppInstallation.ReadWriteAndConsentForChat.All","TeamsAppInstallation.ReadWriteAndConsentSelfForChat.All","TeamsAppInstallation.ReadWriteForChat.All"]}},{"DelegatedWork":{"least":["ChatMember.ReadWrite"],"higher":["Chat.ReadWrite"]},"Application":{"least":["Chat.Manage.Chat"],"higher":["Chat.ReadWrite.All","ChatMember.ReadWrite.All"]}},{"DelegatedWork":{"least":["ChatMessage.Send"],"higher":["Chat.ReadWrite","Group.ReadWrite.All"]},"Application":{"least":["Teamwork.Migrate.All"],"higher":[]}},{"DelegatedWork":{"least":["ChatMessage.Send"],"higher":["Chat.ReadWrite"]},"Application":{"least":["Chat.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsTab.Create"],"higher":["TeamsTab.ReadWrite.All","TeamsTab.ReadWriteForChat","TeamsTab.ReadWriteSelfForChat"]},"Application":{"least":["TeamsTab.Create"],"higher":["TeamsTab.Create.Chat","TeamsTab.ReadWrite.All","TeamsTab.ReadWrite.Chat","TeamsTab.ReadWriteForChat.All","TeamsTab.ReadWriteSelfForChat.All"]}},{"DelegatedWork":{"least":["Chat.Create"],"higher":["Chat.ReadWrite"]},"Application":{"least":["Chat.Create"],"higher":[]}},{"DelegatedWork":{"least":["Chat.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsActivity.Send"],"higher":[]},"Application":{"least":["TeamsActivity.Send.Chat"],"higher":["TeamsActivity.Send"]}},{"DelegatedWork":{"least":["Chat.Read"],"higher":["Chat.ReadWrite"]},"Application":{"least":["Chat.Read.All"],"higher":["Chat.ReadWrite.All"]}},{"DelegatedWork":{"least":["ChatMessage.Send"],"higher":[]}},{"DelegatedWork":{"least":["Chat.ReadWrite"],"higher":["ChatMessage.Send"]}},{"DelegatedWork":{"least":["Chat.ReadWrite"],"higher":[]},"Application":{"least":["Chat.UpdatePolicyViolation.All"],"higher":["Chat.ReadWrite.All"]}},{"DelegatedWork":{"least":["Calendars.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["Tasks.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":["Tasks.ReadWrite"]},"Application":{"least":["Tasks.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["UserCloudClipboard.Read"],"higher":[]}},{"Application":{"least":["EngagementMeetingConversation.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Presence.Read.All"],"higher":[]},"Application":{"least":["Presence.Read.All"],"higher":["Presence.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudPC.ReadWrite.All"],"higher":[]},"Application":{"least":["CloudPC.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["CloudPC.Read.All"],"higher":["CloudPC.ReadWrite.All"]},"Application":{"least":["CloudPC.Read.All"],"higher":["CloudPC.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudPC.Read.All"],"higher":["CloudPC.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudPC.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Sites.Manage.All"],"higher":["Sites.FullControl.All"]},"Application":{"least":["Sites.Manage.All"],"higher":["Sites.FullControl.All"]}},{"DelegatedWork":{"least":["Sites.Read.All"],"higher":["Sites.Manage.All","Sites.FullControl.All","Sites.ReadWrite.All"]},"Application":{"least":["Sites.Read.All"],"higher":["Sites.Manage.All","Sites.FullControl.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Community.ReadWrite.All"],"higher":[]},"Application":{"least":["Community.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Community.Read.All"],"higher":["Community.ReadWrite.All"]},"Application":{"least":["Community.Read.All"],"higher":["Community.ReadWrite.All"]}},{"DelegatedWork":{"least":["Organization.Read.All"],"higher":["Directory.Read.All"]},"Application":{"least":["Organization.Read.All"],"higher":["Directory.Read.All","Organization.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":[]},"Application":{"least":["Policy.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.ConditionalAccess"],"higher":["Policy.Read.All","Policy.ReadWrite.ConditionalAccess"]},"Application":{"least":["Policy.Read.ConditionalAccess"],"higher":["Policy.Read.All","Policy.ReadWrite.ConditionalAccess"]}},{"DelegatedWork":{"least":["AuthenticationContext.Read.All"],"higher":["AuthenticationContext.ReadWrite.All","Policy.Read.ConditionalAccess","Policy.ReadWrite.ConditionalAccess"]},"Application":{"least":["AuthenticationContext.Read.All"],"higher":["AuthenticationContext.ReadWrite.All","Policy.Read.ConditionalAccess","Policy.ReadWrite.ConditionalAccess"]}},{"DelegatedWork":{"least":["ConfigurationMonitoring.ReadWrite.All"],"higher":[]},"Application":{"least":["ConfigurationMonitoring.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ConfigurationMonitoring.Read.All"],"higher":["ConfigurationMonitoring.ReadWrite.All"]},"Application":{"least":["ConfigurationMonitoring.Read.All"],"higher":["ConfigurationMonitoring.ReadWrite.All"]}},{"DelegatedWork":{"least":["Contacts.ReadWrite"],"higher":[]},"Application":{"least":["Contacts.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["Contacts.Read"],"higher":["Contacts.ReadWrite"]},"Application":{"least":["Contacts.Read"],"higher":["Contacts.ReadWrite"]}},{"DelegatedWork":{"least":["Sites.ReadWrite.All"],"higher":["Sites.FullControl.All","Sites.Manage.All"]},"Application":{"least":["Sites.ReadWrite.All"],"higher":["Sites.FullControl.All","Sites.Manage.All"]}},{"DelegatedWork":{"least":["Sites.FullControl.All"],"higher":[]},"Application":{"least":["Sites.FullControl.All"],"higher":[]}},{"DelegatedWork":{"least":["Directory.Read.All"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["Directory.Read.All"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Group.ReadWrite.All"],"higher":[]},"Application":{"least":["Group.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Group.ReadWrite.All"],"higher":["Group.Read.All"]},"Application":{"least":["Group.ReadWrite.All"],"higher":["Group.Read.All"]}},{"DelegatedWork":{"least":["Group-Conversation.Read.All"],"higher":["Group-Conversation.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]},"Application":{"least":["Group-Conversation.Read.All"],"higher":["Group-Conversation.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["Group-Conversation.ReadWrite.All"],"higher":["Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["Chat.Read"],"higher":["ChannelMember.ReadWrite"]},"Application":{"least":["ChannelMember.Read.All"],"higher":["ChannelMember.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamMember.ReadWrite.All"],"higher":[]},"Application":{"least":["TeamMember.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamMember.ReadWriteNonOwnerRole.All"],"higher":["TeamMember.ReadWrite.All"]},"Application":{"least":["TeamMember.ReadWriteNonOwnerRole.All"],"higher":["TeamMember.ReadWrite.All"]}},{"DelegatedWork":{"least":["Group.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Group-Conversation.ReadWrite.All"],"higher":["Group.ReadWrite.All"]},"Application":{"least":["Group-Conversation.ReadWrite.All"],"higher":["Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.CrossTenantAccess"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.CrossTenantAccess"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.CrossTenantAccess"],"higher":[]},"Application":{"least":["Policy.ReadWrite.CrossTenantAccess"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.CrossTenantCapability"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.CrossTenantCapability"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.CrossTenantCapability"],"higher":[]},"Application":{"least":["Policy.ReadWrite.CrossTenantCapability"],"higher":[]}},{"DelegatedWork":{"least":["CustomAuthenticationExtension.ReadWrite.All"],"higher":[]},"Application":{"least":["CustomAuthenticationExtension.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["CustomAuthenticationExtension.Read.All"],"higher":["CustomAuthenticationExtension.ReadWrite.All"]},"Application":{"least":["CustomAuthenticationExtension.Read.All"],"higher":["CustomAuthenticationExtension.ReadWrite.All"]}},{"DelegatedWork":{"least":["Schedule.Read.All"],"higher":["Schedule.ReadWrite.All"]},"Application":{"least":["Schedule.Read.All"],"higher":["Schedule.ReadWrite.All"]}},{"DelegatedWork":{"least":["Schedule.ReadWrite.All"],"higher":[]},"Application":{"least":["Schedule.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DelegatedAdminRelationship.ReadWrite.All"],"higher":[]},"Application":{"least":["DelegatedAdminRelationship.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DelegatedAdminRelationship.Read.All"],"higher":["DelegatedAdminRelationship.ReadWrite.All"]},"Application":{"least":["DelegatedAdminRelationship.Read.All"],"higher":["DelegatedAdminRelationship.ReadWrite.All"]}},{"DelegatedWork":{"least":["Directory.AccessAsUser.All"],"higher":[]}},{"DelegatedWork":{"least":["Directory.AccessAsUser.All"],"higher":[]},"Application":{"least":["Device.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Device.Read.All"],"higher":[]},"Application":{"least":["Device.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Device.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Device.Read.All"],"higher":["Device.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Device.ProvisionForVDI"],"higher":[]}},{"DelegatedWork":{"least":["Directory.AccessAsUser.All"],"higher":[]},"Application":{"least":["Device.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceLocalCredential.ReadBasic.All"],"higher":["DeviceLocalCredential.Read.All"]},"Application":{"least":["DeviceLocalCredential.ReadBasic.All"],"higher":["DeviceLocalCredential.Read.All"]}},{"DelegatedWork":{"least":["Policy.Read.DeviceConfiguration"],"higher":["Policy.Read.All","Policy.ReadWrite.DeviceConfiguration"]},"Application":{"least":["Policy.Read.DeviceConfiguration"],"higher":["Policy.ReadWrite.DeviceConfiguration"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.DeviceConfiguration"],"higher":[]},"Application":{"least":["Policy.ReadWrite.DeviceConfiguration"],"higher":[]}},{"DelegatedWork":{"least":["Group.Read.All"],"higher":["Group.ReadWrite.All"]},"Application":{"least":["Group.Read.All"],"higher":["Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["RemoteTenantGroups.Read.All"],"higher":[]},"Application":{"least":["RemoteTenantGroups.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["AuditLog.Read.All"],"higher":["Directory.Read.All"]},"Application":{"least":["AuditLog.Read.All"],"higher":["Directory.Read.All"]}},{"DelegatedWork":{"least":["Device.Read.All"],"higher":["Device.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Device.Read.All"],"higher":["Device.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Directory.Read.All"],"higher":[]},"Application":{"least":["Directory.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Device.Read.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadBasic.All","Group.ReadWrite.All","GroupMember.Read.All","GroupMember.ReadBasic.All","User.Read.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Device.Read.All","Device.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadBasic.All","Group.ReadWrite.All","GroupMember.Read.All","GroupMember.ReadBasic.All","User.Read.All"]}},{"DelegatedWork":{"least":["Group.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Group.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["RoleManagement.Read.Directory"],"higher":["Directory.Read.All","Directory.ReadWrite.All","RoleManagement.ReadWrite.Directory"]},"Application":{"least":["RoleManagement.Read.Directory"],"higher":["Directory.Read.All","Directory.ReadWrite.All","RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["Sites.ReadWrite.All"],"higher":["Sites.FullControl.All","Sites.Manage.All","Sites.Selected"]},"Application":{"least":["Sites.ReadWrite.All"],"higher":["Sites.FullControl.All","Sites.Manage.All","Sites.Selected"]}},{"DelegatedWork":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All","Sites.FullControl.All","Sites.Manage.All","Sites.Selected"]},"Application":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All","Sites.FullControl.All","Sites.Manage.All","Sites.Selected"]}},{"DelegatedWork":{"least":["Domain.ReadWrite.All"],"higher":[]},"Application":{"least":["Domain.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Domain.Read.All"],"higher":["Directory.Read.All","Domain.ReadWrite.All"]},"Application":{"least":["Domain.Read.All"],"higher":["Directory.Read.All","Domain.ReadWrite.All"]}},{"DelegatedWork":{"least":["Domain.Read.All"],"higher":["Domain.ReadWrite.All","Directory.Read.All"]},"Application":{"least":["Domain.Read.All"],"higher":["Domain.ReadWrite.All","Directory.Read.All"]}},{"DelegatedWork":{"least":["Domain.Read.All"],"higher":["Domain.ReadWrite.All"]},"Application":{"least":["Domain.Read.All"],"higher":["Domain.ReadWrite.All"]}},{"DelegatedWork":{"least":["Domain-InternalFederation.Read.All"],"higher":["Domain-InternalFederation.ReadWrite.All"]},"Application":{"least":["Domain-InternalFederation.Read.All"],"higher":["Domain-InternalFederation.ReadWrite.All"]}},{"DelegatedWork":{"least":["Domain-InternalFederation.ReadWrite.All"],"higher":["Domain.ReadWrite.All"]},"Application":{"least":["Domain-InternalFederation.ReadWrite.All"],"higher":["Domain.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read"],"higher":["Files.Read.All","Files.ReadWrite","Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read"],"higher":["Files.Read.All","Files.ReadWrite","Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All","User.Read"]}},{"DelegatedWork":{"least":["Files.Read"],"higher":["Files.Read.All","Files.ReadWrite","Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.Read.All"],"higher":["Files.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read"],"higher":["Files.Read.All","Files.ReadWrite","Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.Read.All"],"higher":["Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read.All"],"higher":["Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.ReadWrite.All"],"higher":["Sites.ReadWrite.All"]},"Application":{"least":["Files.ReadWrite.All"],"higher":["Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.ReadWrite"],"higher":["Files.ReadWrite.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.ReadWrite.All"],"higher":["Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.ReadWrite"],"higher":["Files.ReadWrite.All","Sites.ReadWrite.All"]},"Application":{"least":["Sites.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Files.Read.All"],"higher":["Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.Read.All"],"higher":["Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read"],"higher":["Files.ReadWrite","Files.Read.All","Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.ReadWrite.All"],"higher":["Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read"],"higher":["Files.ReadWrite","Files.Read.All","Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.Read.All"],"higher":["Files.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read"],"higher":["Files.ReadWrite","Files.Read.All","Files.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.Read.All"],"higher":["Files.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","Sites.Read.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read.All"],"higher":["Sites.Read.All"]},"Application":{"least":["Files.Read.All"],"higher":["Sites.Read.All"]}},{"DelegatedWork":{"least":["Files.ReadWrite"],"higher":["Files.ReadWrite.All","Files.SelectedOperations.Selected","Sites.ReadWrite.All","Sites.FullControl.All","Sites.Manage.All","Sites.Selected","Lists.SelectedOperations.Selected","ListItems.SelectedOperations.Selected"]},"Application":{"least":["Files.ReadWrite.All"],"higher":["Sites.FullControl.All","Sites.Manage.All","Sites.ReadWrite.All","Sites.Selected","Files.SelectedOperations.Selected","Lists.SelectedOperations.Selected","ListItems.SelectedOperations.Selected"]}},{"DelegatedWork":{"least":["Files.ReadWrite.All"],"higher":["Sites.FullControl.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.ReadWrite.All"],"higher":["Sites.ReadWrite.All"]}},{"Application":{"least":["Files.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Files.Read.All"],"higher":["Files.ReadWrite.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.Read.All"],"higher":["Files.ReadWrite.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["BackupRestore-Restore.Read.All"],"higher":[]},"Application":{"least":["BackupRestore-Restore.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["EduAssignments.ReadWriteBasic"],"higher":["EduAssignments.ReadWrite"]}},{"DelegatedWork":{"least":["EduAssignments.ReadWriteBasic"],"higher":["EduAssignments.ReadWrite"]},"Application":{"least":["EduAssignments.ReadWriteBasic.All"],"higher":["EduAssignments.ReadWrite.All"]}},{"DelegatedWork":{"least":["EduAssignments.ReadBasic"],"higher":["EduAssignments.Read","EduAssignments.ReadWrite","EduAssignments.ReadWriteBasic"]},"Application":{"least":["EduAssignments.ReadBasic.All"],"higher":["EduAssignments.Read.All","EduAssignments.ReadWrite.All","EduAssignments.ReadWriteBasic.All"]}},{"DelegatedWork":{"least":["EduAssignments.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["EduAssignments.ReadWrite"],"higher":[]},"Application":{"least":["EduAssignments.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["EduAssignments.ReadBasic"],"higher":["EduAssignments.ReadWrite","EduAssignments.Read"]},"Application":{"least":["EduAssignments.ReadBasic.All"],"higher":["EduAssignments.Read.All","EduAssignments.ReadWrite.All","EduAssignments.ReadWriteBasic.All"]}},{"Application":{"least":["EduRoster.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["EduRoster.ReadBasic"],"higher":["EduRoster.Read","EduRoster.ReadWrite"]},"Application":{"least":["EduRoster.ReadBasic.All"],"higher":["EduRoster.Read.All","EduRoster.ReadWrite.All"]}},{"DelegatedWork":{"least":["EduRoster.ReadBasic"],"higher":[]},"Application":{"least":["EduRoster.Read.All"],"higher":["EduRoster.ReadWrite.All"]}},{"DelegatedWork":{"least":["EduAssignments.Read"],"higher":["EduAssignments.ReadWrite"]},"Application":{"least":["EduAssignments.Read.All"],"higher":["EduAssignments.ReadWrite.All"]}},{"DelegatedWork":{"least":["EduRoster.ReadBasic"],"higher":[]},"Application":{"least":["EduRoster.Read.All"],"higher":["EduRoster.ReadWrite.All","Member.Read.Hidden"]}},{"DelegatedWork":{"least":["EduCurricula.Read"],"higher":["EduCurricula.ReadWrite"]},"Application":{"least":["EduCurricula.Read.All"],"higher":["EduCurricula.ReadWrite.All"]}},{"Application":{"least":["EduRoster.ReadWrite.All"],"higher":["Member.Read.Hidden"]}},{"DelegatedWork":{"least":["EduCurricula.ReadWrite"],"higher":[]},"Application":{"least":["EduCurricula.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["EduAssignments.ReadBasic"],"higher":["EduAssignments.Read","EduAssignments.ReadWrite","EduAssignments.ReadWriteBasic"]}},{"DelegatedWork":{"least":["EduRoster.ReadBasic"],"higher":["EduRoster.Read","EduRoster.ReadWrite"]},"Application":{"least":["EduRoster.ReadBasic.All"],"higher":["EduRoster.Read.All","EduRoster.ReadWrite.All","EduRoster.WriteWrite.All"]}},{"DelegatedWork":{"least":["EduRoster.ReadBasic"],"higher":["Directory.Read.All","EduRoster.Read","EduRoster.Write"]},"Application":{"least":["EduRoster.Read.All"],"higher":["Directory.Read.All","EduRoster.ReadWrite.All"]}},{"Application":{"least":["EduRoster.Read.All"],"higher":["EduRoster.ReadWrite.All"]}},{"DelegatedWork":{"least":["EduAssignments.ReadWrite"],"higher":[]},"Application":{"least":["EduAssignments.ReadWrite.All"],"higher":["Notes.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-Email.ReadWrite","UserAuthMethod-Email.ReadWrite.All","UserAuthenticationMethod.ReadWrite"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-Email.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Email.Read"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthMethod-Email.Read.All","UserAuthMethod-Email.ReadWrite","UserAuthMethod-Email.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-Email.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-Email.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.Read.AuthenticationMethod"],"higher":["Policy.ReadWrite.AuthenticationMethod"]},"Application":{"least":["Policy.Read.AuthenticationMethod"],"higher":["Policy.ReadWrite.AuthenticationMethod"]}},{"DelegatedWork":{"least":["BackupRestore-Control.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["LearningProvider.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["LearningProvider.Read"],"higher":["LearningProvider.ReadWrite"]}},{"DelegatedWork":{"least":["EngagementRole.Read.All"],"higher":["EngagementRole.ReadWrite.All"]},"Application":{"least":["EngagementRole.Read.All"],"higher":["EngagementRole.ReadWrite.All"]}},{"DelegatedWork":{"least":["EngagementRole.Read"],"higher":["EngagementRole.ReadWrite.All"]},"Application":{"least":["EngagementRole.Read.All"],"higher":["EngagementRole.ReadWrite.All"]}},{"Application":{"least":["LearningAssignedCourse.ReadWrite.All"],"higher":["LearningSelfInitiatedCourse.ReadWrite.All"]}},{"DelegatedWork":{"least":["Community.Read.All"],"higher":["Community.ReadWrite.All"]},"Application":{"least":["Community.Read.All"],"higher":["Community.ReadWrite.All","EngagementConversation.Migration.All"]}},{"DelegatedWork":{"least":["EngagementRole.ReadWrite.All"],"higher":[]},"Application":{"least":["EngagementRole.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["EntitlementMgmt-SubjectAccess.ReadWrite"],"higher":["EntitlementManagement.ReadWrite.All"]},"Application":{"least":["EntitlementManagement.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["EntraBackup.Read.All"],"higher":[]},"Application":{"least":["EntraBackup.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["EntraBackup.ReadWrite.Recovery"],"higher":[]}},{"DelegatedWork":{"least":["EntraBackup.ReadWrite.Preview"],"higher":[]}},{"DelegatedWork":{"least":["Calendars.Read"],"higher":[]},"Application":{"least":["Calendars.Read"],"higher":[]}},{"DelegatedWork":{"least":["Mail.ReadWrite"],"higher":[]},"Application":{"least":["Mail.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["Mail.Read"],"higher":[]},"Application":{"least":["Mail.Read"],"higher":[]}},{"DelegatedWork":{"least":["ExchangeMessageTrace.Read.All"],"higher":[]},"Application":{"least":["ExchangeMessageTrace.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["BackupRestore-Configuration.Read.All"],"higher":["BackupRestore-Configuration.ReadWrite.All"]},"Application":{"least":["BackupRestore-Configuration.Read.All"],"higher":["BackupRestore-Configuration.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Directory.Read.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.OwnedBy","Application.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.Read"],"higher":["UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.Read.AuthenticationMethod"],"higher":["Policy.Read.All","Policy.ReadWrite.AuthenticationMethod"]},"Application":{"least":["Policy.Read.AuthenticationMethod"],"higher":["Policy.Read.All","Policy.ReadWrite.AuthenticationMethod"]}},{"DelegatedWork":{"least":["ExternalConnection.ReadWrite.OwnedBy"],"higher":["ExternalConnection.Read.All","ExternalConnection.ReadWrite.All"]},"Application":{"least":["ExternalConnection.ReadWrite.OwnedBy"],"higher":["ExternalConnection.Read.All","ExternalConnection.ReadWrite.All"]}},{"DelegatedWork":{"least":["ExternalConnection.ReadWrite.OwnedBy"],"higher":["ExternalConnection.ReadWrite.All"]},"Application":{"least":["ExternalConnection.ReadWrite.OwnedBy"],"higher":["ExternalConnection.ReadWrite.All"]}},{"DelegatedWork":{"least":["ExternalItem.ReadWrite.OwnedBy"],"higher":["ExternalItem.ReadWrite.All"]},"Application":{"least":["ExternalItem.ReadWrite.OwnedBy"],"higher":["ExternalItem.ReadWrite.All"]}},{"DelegatedWork":{"least":["ExternalItem.Read.All"],"higher":["ExternalItem.ReadWrite.OwnedBy","ExternalItem.ReadWrite.All"]},"Application":{"least":["ExternalItem.Read.All"],"higher":["ExternalItem.ReadWrite.OwnedBy","ExternalItem.ReadWrite.All"]}},{"Application":{"least":["ExternalItem.ReadWrite.OwnedBy"],"higher":["ExternalItem.ReadWrite.All"]}},{"DelegatedWork":{"least":["ExternalItem.ReadWrite.OwnedBy"],"higher":["ExternalItem.Read.All","ExternalItem.ReadWrite.All"]},"Application":{"least":["ExternalItem.ReadWrite.OwnedBy"],"higher":["ExternalItem.Read.All","ExternalItem.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.Read.HybridAuthentication"],"higher":["Directory.ReadWrite.All","Policy.ReadWrite.HybridAuthentication"]}},{"DelegatedWork":{"least":["Directory.ReadWrite.All"],"higher":["Policy.ReadWrite.HybridAuthentication"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.HybridAuthentication"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.OwnedBy","Application.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Passkey.ReadWrite"],"higher":["UserAuthMethod-Passkey.ReadWrite.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-Passkey.ReadWrite.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Passkey.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-Passkey.Read.All","UserAuthMethod-Passkey.ReadWrite","UserAuthMethod-Passkey.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-Passkey.Read.All"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-Passkey.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Passkey.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.ReadWrite","UserAuthMethod-Passkey.Read.All","UserAuthMethod-Passkey.ReadWrite"]},"Application":{"least":["UserAuthMethod-Passkey.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["FileStorageContainer.Selected"],"higher":["FileStorageContainer.Manage.All"]},"Application":{"least":["FileStorageContainer.Selected"],"higher":[]}},{"DelegatedWork":{"least":["FileStorageContainerTypeReg.Selected"],"higher":["FileStorageContainerTypeReg.Manage.All"]},"Application":{"least":["FileStorageContainerTypeReg.Selected"],"higher":[]}},{"DelegatedWork":{"least":["FileStorageContainerType.Manage.All"],"higher":[]}},{"DelegatedWork":{"least":["FileStorageContainer.Selected"],"higher":[]},"Application":{"least":["FileStorageContainer.Selected"],"higher":[]}},{"Application":{"least":["FileStorageContainer.Selected"],"higher":[]}},{"DelegatedWork":{"least":["RiskPreventionProviders.Read.All"],"higher":["RiskPreventionProviders.ReadWrite.All"]}},{"DelegatedWork":{"least":["RiskPreventionProviders.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["LicenseAssignment.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["LicenseAssignment.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["GroupMember.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["GroupMember.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["Group.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["Group.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Group-NestingSupport.ReadWrite.All"],"higher":["Group.ReadBasic.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","GroupMember.Read.All"]},"Application":{"least":["Group-NestingSupport.ReadWrite.All"],"higher":["Group.ReadBasic.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","GroupMember.Read.All"]}},{"DelegatedWork":{"least":["Group.Read.All"],"higher":["Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["Group-NestingSupport.ReadWrite.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group-PreferredDataLocation.ReadWrite.All","Group-XTenantIdentitySync.Read.All","Group.ManageProtection.All","Group.Read.All","Group.ReadBasic.All","Group.ReadWrite.All","GroupMember.Read.All"]},"Application":{"least":["Group-NestingSupport.ReadWrite.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group-PreferredDataLocation.ReadWrite.All","Group-XTenantIdentitySync.Read.All","Group.ManageProtection.All","Group.Read.All","Group.ReadBasic.All","Group.ReadWrite.All","GroupMember.Read.All"]}},{"DelegatedWork":{"least":["Directory.Read.All"],"higher":["AppRoleAssignment.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["Directory.Read.All"],"higher":["AppRoleAssignment.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Group.Read.All"],"higher":["Calendars.Read","Calendars.ReadBasic","Calendars.ReadWrite","Group.ReadWrite.All"]},"Application":{"least":["Calendars.ReadBasic"],"higher":["Calendars.Read","Calendars.ReadWrite"]}},{"DelegatedWork":{"least":["GroupMember.ReadBasic.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadBasic.All","GroupMember.Read.All"]},"Application":{"least":["GroupMember.ReadBasic.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadBasic.All","GroupMember.Read.All"]}},{"DelegatedWork":{"least":["GroupMember.ReadBasic.All"],"higher":["Directory.Read.All","Group.Read.All","Group.ReadBasic.All","Group.ReadWrite.All","GroupMember.Read.All","GroupMember.ReadWrite.All"]},"Application":{"least":["GroupMember.ReadBasic.All"],"higher":["Directory.Read.All","Group.Read.All","Group.ReadBasic.All","Group.ReadWrite.All","GroupMember.Read.All","GroupMember.ReadWrite.All"]}},{"DelegatedWork":{"least":["GroupMember.Read.All"],"higher":["Group.ReadWrite.All","Directory.Read.All","Group.Read.All","GroupMember.ReadWrite.All"]},"Application":{"least":["GroupMember.Read.All"],"higher":["Group.ReadWrite.All","Directory.Read.All","Group.Read.All","GroupMember.ReadWrite.All"]}},{"DelegatedWork":{"least":["GroupMember.Read.All"],"higher":["Group.Read.All","Group.ReadWrite.All","GroupMember.ReadWrite.All"]},"Application":{"least":["GroupMember.Read.All"],"higher":["Group.Read.All","Group.ReadWrite.All","GroupMember.ReadWrite.All"]}},{"DelegatedWork":{"least":["ProfilePhoto.Read.All"],"higher":["Group.Read.All","ProfilePhoto.ReadWrite.All"]},"Application":{"least":["ProfilePhoto.Read.All"],"higher":["Group.Read.All","ProfilePhoto.ReadWrite.All"]}},{"DelegatedWork":{"least":["GroupSettings.Read.All"],"higher":["GroupSettings.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]},"Application":{"least":["GroupSettings.Read.All"],"higher":["GroupSettings.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["GroupMember.ReadBasic.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadBasic.All","GroupMember.Read.All"]},"Application":{"least":["GroupMember.ReadBasic.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.ReadBasic.All"]}},{"DelegatedWork":{"least":["Group-NestingSupport.ReadWrite.All"],"higher":["Group.ReadBasic.All","Directory.Read.All","Directory.ReadWrite.All","Group-PreferredDataLocation.ReadWrite.All","Group.ManageProtection.All","Group.Read.All","Group.ReadWrite.All","GroupMember.Read.All"]},"Application":{"least":["Group-NestingSupport.ReadWrite.All"],"higher":["Group.ReadBasic.All","Directory.Read.All","Directory.ReadWrite.All","Group-PreferredDataLocation.ReadWrite.All","Group.ManageProtection.All","Group.Read.All","Group.ReadWrite.All","GroupMember.Read.All"]}},{"DelegatedWork":{"least":["Group.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group-PreferredDataLocation.ReadWrite.All"]},"Application":{"least":["Group.Create"],"higher":["Directory.ReadWrite.All","Group-PreferredDataLocation.ReadWrite.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["GroupSettings.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["GroupSettings.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Group-NestingSupport.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group-PreferredDataLocation.ReadWrite.All","Group.ManageProtection.All","Group.ReadWrite.All"]},"Application":{"least":["Group-NestingSupport.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group-PreferredDataLocation.ReadWrite.All","Group.ManageProtection.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["GroupSettings.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Policy.ReadWrite.Authorization"]},"Application":{"least":["GroupSettings.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Policy.ReadWrite.Authorization"]}},{"DelegatedWork":{"least":["GroupSettings.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","GroupSettings.ReadWrite.All"]},"Application":{"least":["GroupSettings.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","GroupSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["APIConnectors.ReadWrite.All"],"higher":[]},"Application":{"least":["APIConnectors.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IdentityProvider.Read.All"],"higher":["IdentityProvider.ReadWrite.All"]},"Application":{"least":["IdentityProvider.Read.All"],"higher":["IdentityProvider.ReadWrite.All"]}},{"DelegatedWork":{"least":["IdentityProvider.ReadWrite.All"],"higher":[]},"Application":{"least":["IdentityProvider.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["LifecycleWorkflows-CustomExt.ReadWrite.All"],"higher":["LifecycleWorkflows.ReadWrite.All"]},"Application":{"least":["LifecycleWorkflows-CustomExt.ReadWrite.All"],"higher":["LifecycleWorkflows.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecycleWorkflows-CustomExt.Read.All"],"higher":["LifecycleWorkflows-CustomExt.ReadWrite.All","LifecycleWorkflows.Read.All","LifecycleWorkflows.ReadWrite.All"]},"Application":{"least":["LifecycleWorkflows-CustomExt.Read.All"],"higher":["LifecycleWorkflows-CustomExt.ReadWrite.All","LifecycleWorkflows.Read.All","LifecycleWorkflows.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecycleWorkflows-Workflow.ReadWrite.All"],"higher":["LifecycleWorkflows.ReadWrite.All"]},"Application":{"least":["LifecycleWorkflows-Workflow.ReadWrite.All"],"higher":["LifecycleWorkflows.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecycleWorkflows-Workflow.Read.All"],"higher":["LifecycleWorkflows-Workflow.ReadWrite.All","LifecycleWorkflows.Read.All","LifecycleWorkflows.ReadWrite.All"]},"Application":{"least":["LifecycleWorkflows-Workflow.Read.All"],"higher":["LifecycleWorkflows-Workflow.ReadWrite.All","LifecycleWorkflows.Read.All","LifecycleWorkflows.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecycleWorkflows.Read.All"],"higher":["LifecycleWorkflows.ReadWrite.All"]},"Application":{"least":["LifecycleWorkflows.Read.All"],"higher":["LifecycleWorkflows.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecycleWorkflows.ReadWrite.All"],"higher":[]},"Application":{"least":["LifecycleWorkflows.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["LifecycleWorkflows-Workflow.ReadBasic.All"],"higher":["LifecycleWorkflows-Workflow.Read.All","LifecycleWorkflows-Workflow.ReadWrite.All","LifecycleWorkflows.Read.All","LifecycleWorkflows.ReadWrite.All"]},"Application":{"least":["LifecycleWorkflows-Workflow.ReadBasic.All"],"higher":["LifecycleWorkflows-Workflow.Read.All","LifecycleWorkflows-Workflow.ReadWrite.All","LifecycleWorkflows.Read.All","LifecycleWorkflows.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecycleWorkflows-Reports.Read.All"],"higher":["LifecycleWorkflows.Read.All","LifecycleWorkflows.ReadWrite.All"]},"Application":{"least":["LifecycleWorkflows-Reports.Read.All"],"higher":["LifecycleWorkflows.Read.All","LifecycleWorkflows.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecycleWorkflows-Workflow.Read.All"],"higher":["LifecycleWorkflows-Workflow.ReadWrite.All","LifecycleWorkflows.Read.All"]},"Application":{"least":["LifecycleWorkflows-Workflow.Read.All"],"higher":["LifecycleWorkflows-Workflow.ReadWrite.All","LifecycleWorkflows.Read.All"]}},{"DelegatedWork":{"least":["LifecycleWorkflows-Workflow.Activate"],"higher":["LifecycleWorkflows-Workflow.ReadWrite.All","LifecycleWorkflows.ReadWrite.All"]},"Application":{"least":["LifecycleWorkflows-Workflow.Activate"],"higher":["LifecycleWorkflows-Workflow.ReadWrite.All","LifecycleWorkflows.ReadWrite.All"]}},{"DelegatedWork":{"least":["IdentityRiskyServicePrincipal.Read.All"],"higher":["IdentityRiskyServicePrincipal.ReadWrite.All"]},"Application":{"least":["IdentityRiskyServicePrincipal.Read.All"],"higher":["IdentityRiskyServicePrincipal.ReadWrite.All"]}},{"DelegatedWork":{"least":["IdentityRiskEvent.Read.All"],"higher":[]},"Application":{"least":["IdentityRiskEvent.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["VerifiedId-Profile.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["VerifiedId-Profile.Read.All"],"higher":["VerifiedId-Profile.ReadWrite.All"]},"Application":{"least":["VerifiedId-Profile.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["ThreatAssessment.ReadWrite.All"],"higher":[]},"Application":{"least":["ThreatAssessment.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["ThreatAssessment.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AgentIdentityBlueprint.Read.All"],"higher":["Application.Read.All","Directory.Read.All"]},"Application":{"least":["AgentIdentityBlueprint.Read.All"],"higher":["Application.Read.All","Directory.Read.All"]}},{"DelegatedWork":{"least":["AgentIdentityBlueprint.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["AgentIdentityBlueprint.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["PeopleSettings.ReadWrite.All"],"higher":[]},"Application":{"least":["PeopleSettings.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Domain-InternalFederation.Read.All"],"higher":["Domain-InternalFederation.ReadWrite.All","Domain.Read.All","Domain.ReadWrite.All"]},"Application":{"least":["Domain-InternalFederation.Read.All"],"higher":["Domain-InternalFederation.ReadWrite.All","Domain.Read.All","Domain.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementApps.ReadWrite.All"],"higher":[]},"Application":{"least":["DeviceManagementApps.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementApps.Read.All","DeviceManagementApps.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementApps.Read.All","DeviceManagementApps.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementApps.Read.All"],"higher":["DeviceManagementApps.ReadWrite.All"]},"Application":{"least":["DeviceManagementApps.Read.All"],"higher":["DeviceManagementApps.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementApps.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementApps.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":[]},"Application":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementApps.Read.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementApps.Read.All"]}},{"DelegatedWork":{"least":["DeviceManagementServiceConfig.ReadWrite.All"],"higher":[]},"Application":{"least":["DeviceManagementServiceConfig.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementServiceConfig.Read.All"],"higher":["DeviceManagementServiceConfig.ReadWrite.All"]},"Application":{"least":["DeviceManagementServiceConfig.Read.All"],"higher":["DeviceManagementServiceConfig.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementManagedDevices.ReadWrite.All"],"higher":[]},"Application":{"least":["DeviceManagementManagedDevices.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementManagedDevices.Read.All"],"higher":["DeviceManagementManagedDevices.ReadWrite.All"]},"Application":{"least":["DeviceManagementManagedDevices.Read.All"],"higher":["DeviceManagementManagedDevices.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementManagedDevices.PrivilegedOperations.All"],"higher":[]},"Application":{"least":["DeviceManagementManagedDevices.PrivilegedOperations.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementServiceConfig.ReadWrite.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All"]},"Application":{"least":["DeviceManagementServiceConfig.ReadWrite.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementServiceConfig.Read.All"],"higher":["DeviceManagementConfiguration.Read.All"]},"Application":{"least":["DeviceManagementServiceConfig.Read.All"],"higher":["DeviceManagementConfiguration.Read.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementManagedDevices.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementManagedDevices.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementServiceConfig.Read.All"],"higher":["DeviceManagementServiceConfig.ReadWrite.All","DeviceManagementConfiguration.Read.All","DeviceManagementConfiguration.ReadWrite.All"]},"Application":{"least":["DeviceManagementServiceConfig.Read.All"],"higher":["DeviceManagementServiceConfig.ReadWrite.All","DeviceManagementConfiguration.Read.All","DeviceManagementConfiguration.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementApps.ReadWrite.All"],"higher":["DeviceManagementServiceConfig.ReadWrite.All"]},"Application":{"least":["DeviceManagementApps.ReadWrite.All"],"higher":["DeviceManagementServiceConfig.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementApps.Read.All"],"higher":["DeviceManagementApps.ReadWrite.All","DeviceManagementServiceConfig.Read.All","DeviceManagementServiceConfig.ReadWrite.All"]},"Application":{"least":["DeviceManagementApps.Read.All"],"higher":["DeviceManagementApps.ReadWrite.All","DeviceManagementServiceConfig.Read.All","DeviceManagementServiceConfig.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementRBAC.ReadWrite.All"],"higher":[]},"Application":{"least":["DeviceManagementRBAC.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementRBAC.Read.All"],"higher":["DeviceManagementRBAC.ReadWrite.All"]},"Application":{"least":["DeviceManagementRBAC.Read.All"],"higher":["DeviceManagementRBAC.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementApps.ReadWrite.All","DeviceManagementManagedDevices.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementApps.ReadWrite.All","DeviceManagementManagedDevices.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementApps.Read.All","DeviceManagementApps.ReadWrite.All","DeviceManagementManagedDevices.Read.All","DeviceManagementManagedDevices.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementApps.Read.All","DeviceManagementApps.ReadWrite.All","DeviceManagementManagedDevices.Read.All","DeviceManagementManagedDevices.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Invite.All"],"higher":["Directory.ReadWrite.All","User.ReadWrite.All"]},"Application":{"least":["User.Invite.All"],"higher":["Directory.ReadWrite.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["LearningContent.Read.All"],"higher":[]},"Application":{"least":["LearningContent.Read.All"],"higher":["LearningContent.ReadWrite.All"]}},{"Application":{"least":["LearningContent.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["LearningAssignedCourse.Read"],"higher":["LearningSelfInitiatedCourse.Read"]},"Application":{"least":["LearningAssignedCourse.Read.All"],"higher":["LearningAssignedCourse.ReadWrite.All","LearningSelfInitiatedCourse.Read.All","LearningSelfInitiatedCourse.ReadWrite.All"]}},{"DelegatedWork":{"least":["LearningAssignedCourse.Read.All"],"higher":["LearningSelfInitiatedCourse.Read.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Sites.Manage.All"],"higher":[]},"Application":{"least":["Sites.Manage.All"],"higher":["Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Sites.Read.All"],"higher":["Sites.FullControl.All","Sites.Manage.All","Sites.ReadWrite.All"]},"Application":{"least":["Sites.Read.All"],"higher":["Sites.FullControl.All","Sites.Manage.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All"]},"Application":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All","Sites.Manage.All"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.Read.All"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrgSettings-Microsoft365Install.Read.All"],"higher":["OrgSettings-Microsoft365Install.ReadWrite.All"]},"Application":{"least":["OrgSettings-Microsoft365Install.Read.All"],"higher":["OrgSettings-Microsoft365Install.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrgSettings-Microsoft365Install.ReadWrite.All"],"higher":[]},"Application":{"least":["OrgSettings-Microsoft365Install.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["MailboxItem.ImportExport"],"higher":[]},"Application":{"least":["MailboxItem.ImportExport.All"],"higher":[]}},{"DelegatedWork":{"least":["MailboxFolder.ReadWrite"],"higher":[]},"Application":{"least":["MailboxFolder.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["MailboxItem.Export"],"higher":["MailboxItem.ImportExport"]},"Application":{"least":["MailboxItem.Export.All"],"higher":["MailboxItem.ImportExport.All"]}},{"DelegatedWork":{"least":["MailboxFolder.Read"],"higher":["MailboxFolder.ReadWrite"]},"Application":{"least":["MailboxFolder.Read.All"],"higher":["MailboxFolder.ReadWrite.All"]}},{"DelegatedWork":{"least":["MailboxItem.ReadWrite"],"higher":[]},"Application":{"least":["MailboxItem.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["MailboxItem.Read"],"higher":["MailboxItem.ReadWrite"]},"Application":{"least":["MailboxItem.Read.All"],"higher":["MailboxItem.ReadWrite.All"]}},{"DelegatedWork":{"least":["Mail.ReadBasic"],"higher":["Mail.Read","Mail.ReadWrite"]},"Application":{"least":["Mail.ReadBasic.All"],"higher":["Mail.Read","Mail.ReadWrite"]}},{"DelegatedWork":{"least":["Mail.ReadBasic"],"higher":["Mail.ReadWrite","Mail.Read"]},"Application":{"least":["Mail.ReadBasic.All"],"higher":["Mail.ReadWrite","Mail.Read"]}},{"DelegatedWork":{"least":["MailboxSettings.Read"],"higher":[]},"Application":{"least":["MailboxSettings.Read"],"higher":[]}},{"DelegatedWork":{"least":["MailboxSettings.ReadWrite"],"higher":[]},"Application":{"least":["MailboxSettings.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["Mail.Send"],"higher":[]},"Application":{"least":["Mail.Send"],"higher":[]}},{"DelegatedWork":{"least":["Mail.ReadBasic"],"higher":["Mail.Read"]},"Application":{"least":["Mail.ReadBasic.All"],"higher":["Mail.Read"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthMethod-MicrosoftAuthApp.ReadWrite","UserAuthMethod-MicrosoftAuthApp.ReadWrite.All","UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-MicrosoftAuthApp.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-MicrosoftAuthApp.Read"],"higher":["UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-MicrosoftAuthApp.Read.All","UserAuthMethod-MicrosoftAuthApp.ReadWrite","UserAuthMethod-MicrosoftAuthApp.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-MicrosoftAuthApp.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-MicrosoftAuthApp.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-MicrosoftAuthApp.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-MicrosoftAuthApp.Read.All","UserAuthMethod-MicrosoftAuthApp.ReadWrite","UserAuthMethod-MicrosoftAuthApp.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-MicrosoftAuthApp.Read.All"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-MicrosoftAuthApp.ReadWrite.All"]}},{"DelegatedWork":{"least":["MultiTenantOrganization.ReadWrite.All"],"higher":[]},"Application":{"least":["MultiTenantOrganization.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["MultiTenantOrganization.ReadBasic.All"],"higher":["MultiTenantOrganization.ReadWrite.All","MultiTenantOrganization.Read.All"]},"Application":{"least":["MultiTenantOrganization.Read.All"],"higher":["MultiTenantOrganization.ReadWrite.All"]}},{"DelegatedWork":{"least":["MultiTenantOrganization.Read.All"],"higher":["MultiTenantOrganization.ReadWrite.All"]},"Application":{"least":["MultiTenantOrganization.Read.All"],"higher":["MultiTenantOrganization.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.ReadWrite"],"higher":["Sites.Read.All"]},"Application":{"least":["Sites.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["ShortNotes.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["ShortNotes.Read"],"higher":["ShortNotes.ReadWrite"]}},{"DelegatedWork":{"least":["Notes.Create"],"higher":["Notes.ReadWrite","Notes.ReadWrite.All"]},"Application":{"least":["Notes.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Notes.Create"],"higher":["Notes.Read","Notes.Read.All","Notes.ReadWrite","Notes.ReadWrite.All"]},"Application":{"least":["Notes.Read.All"],"higher":["Notes.ReadWrite.All"]}},{"DelegatedWork":{"least":["DelegatedPermissionGrant.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["DelegatedPermissionGrant.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Directory.Read.All"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["Directory.Read.All"],"higher":["DelegatedPermissionGrant.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Directory.Read.All"],"higher":["DelegatedPermissionGrant.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["Directory.Read.All"],"higher":["DelegatedPermissionGrant.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Schedule.Read.All"],"higher":["Group.Read.All","Group.ReadWrite.All","Schedule.ReadWrite.All"]},"Application":{"least":["Schedule.Read.All"],"higher":["Schedule.ReadWrite.All"]}},{"DelegatedWork":{"least":["Notes.Read"],"higher":["Notes.Read.All","Notes.ReadWrite","Notes.ReadWrite.All"]},"Application":{"least":["Notes.Read.All"],"higher":["Notes.ReadWrite.All"]}},{"DelegatedWork":{"least":["OnlineMeetings.Read"],"higher":["OnlineMeetings.ReadWrite"]}},{"DelegatedWork":{"least":["OnlineMeetingRecording.Read.All"],"higher":[]},"Application":{"least":["OnlineMeetingRecording.Read.All","OnlineMeetingRecording.Read.Chat"],"higher":[]}},{"DelegatedWork":{"least":["OnlineMeetingTranscript.Read.All"],"higher":[]},"Application":{"least":["OnlineMeetingTranscript.Read.All","OnlineMeetingTranscript.Read.Chat"],"higher":[]}},{"DelegatedWork":{"least":["OnPremDirectorySynchronization.Read.All"],"higher":["OnPremDirectorySynchronization.ReadWrite.All"]}},{"DelegatedWork":{"least":["OnPremDirectorySynchronization.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Schedule.Read.All"],"higher":["Schedule.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]},"Application":{"least":["Schedule.Read.All"],"higher":["Schedule.ReadWrite.All"]}},{"DelegatedWork":{"least":["Schedule.ReadWrite.All"],"higher":["Group.Read.All","Group.ReadWrite.All"]},"Application":{"least":["Schedule.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Organization.Read.All","Directory.Read.All","Organization.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["Organization.Read.All"],"higher":["Directory.Read.All","Organization.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrganizationalBranding.ReadWrite.All"],"higher":["Organization.ReadWrite.All"]},"Application":{"least":["OrganizationalBranding.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Organization.Read.All","Organization.ReadWrite.All","OrganizationalBranding.Read.All","OrganizationalBranding.ReadWrite.All","User.Read.All"]},"Application":{"least":["OrganizationalBranding.Read.All"],"higher":["Organization.Read.All","Organization.ReadWrite.All","OrganizationalBranding.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrganizationalBranding.ReadWrite.All"],"higher":["Organization.ReadWrite.All"]},"Application":{"least":["OrganizationalBranding.ReadWrite.All"],"higher":["Organization.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrgContact.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["OrgContact.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrgContact.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All"]},"Application":{"least":["OrgContact.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["User.Read.All","User.ReadBasic.All"]}},{"DelegatedWork":{"least":["Notes.ReadWrite"],"higher":["Notes.ReadWrite.All"]},"Application":{"least":["Notes.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Notes.Read"],"higher":["Notes.ReadWrite","Notes.Read.All","Notes.ReadWrite.All"]},"Application":{"least":["Notes.Read.All"],"higher":["Notes.ReadWrite.All"]}},{"Application":{"least":["Calls.InitiateGroupCall.All"],"higher":[]}},{"Application":{"least":["Calls.JoinGroupCallasGuest.All"],"higher":["Calls.JoinGroupCall.All"]}},{"DelegatedWork":{"least":["PartnerBilling.Read.All"],"higher":[]},"Application":{"least":["PartnerBilling.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["AttackSimulation.Read.All"],"higher":["AttackSimulation.ReadWrite.All"]},"Application":{"least":["AttackSimulation.Read.All"],"higher":["AttackSimulation.ReadWrite.All"]}},{"DelegatedWork":{"least":["PeopleSettings.Read.All"],"higher":["PeopleSettings.ReadWrite.All"]},"Application":{"least":["PeopleSettings.Read.All"],"higher":["PeopleSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["PeopleSettings.ReadWrite.All","AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","PeopleSettings.Read.All","User.Read.All","User.ReadWrite","User.ReadWrite.All"]},"Application":{"least":["PeopleSettings.Read.All"],"higher":["PeopleSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["PeopleSettings.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Policy.ReadWrite.PermissionGrant"],"higher":[]},"Application":{"least":["Policy.ReadWrite.PermissionGrant"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.PermissionGrant"],"higher":["Policy.ReadWrite.PermissionGrant"]},"Application":{"least":["Policy.Read.PermissionGrant"],"higher":["Policy.ReadWrite.PermissionGrant"]}},{"DelegatedWork":{"least":["Policy.Read.PermissionGrant"],"higher":["Directory.Read.All"]},"Application":{"least":["Policy.Read.PermissionGrant"],"higher":["Directory.Read.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Phone.ReadWrite"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-Phone.ReadWrite.All","UserAuthenticationMethod.ReadWrite"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-Phone.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Phone.ReadWrite"],"higher":["UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-Phone.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-Phone.ReadWrite.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-Phone.Read"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthMethod-Phone.Read.All","UserAuthMethod-Phone.ReadWrite","UserAuthMethod-Phone.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-Phone.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-Phone.ReadWrite.All"]}},{"DelegatedWork":{"least":["Place.Read.All"],"higher":[]},"Application":{"least":["Place.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":["Tasks.ReadWrite","Group.Read.All","Group.ReadWrite.All"]},"Application":{"least":["Tasks.Read.All"],"higher":["Tasks.ReadWrite.All"]}},{"DelegatedWork":{"least":["Tasks.ReadWrite"],"higher":["Group.ReadWrite.All"]},"Application":{"least":["Tasks.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":["Group.Read.All","Group.ReadWrite.All","Tasks.ReadWrite"]},"Application":{"least":["Tasks.Read.All"],"higher":["Tasks.ReadWrite.All"]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":["Group.Read.All","Group.ReadWrite.All","Tasks.ReadWrite"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthMethod-PlatformCred.ReadWrite","UserAuthMethod-PlatformCred.ReadWrite.All","UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-PlatformCred.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-PlatformCred.Read"],"higher":["UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-PlatformCred.Read.All","UserAuthMethod-PlatformCred.ReadWrite","UserAuthMethod-PlatformCred.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-PlatformCred.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-PlatformCred.Read.All","UserAuthMethod-PlatformCred.ReadWrite","UserAuthMethod-PlatformCred.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-PlatformCred.Read.All"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-PlatformCred.ReadWrite.All"]}},{"DelegatedWork":{"least":["RoleManagementPolicy.Read.AzureADGroup"],"higher":["RoleManagementPolicy.ReadWrite.AzureADGroup"]},"Application":{"least":["RoleManagementPolicy.Read.AzureADGroup"],"higher":["RoleManagementPolicy.ReadWrite.AzureADGroup"]}},{"DelegatedWork":{"least":["Group-Conversation.Read.All"],"higher":["Group-Conversation.ReadWrite.All","Group.Read.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["Presence.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["Presence.ReadWrite"],"higher":[]},"Application":{"least":["Presence.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Presence.Read"],"higher":["Presence.Read.All"]},"Application":{"least":["Presence.Read.All"],"higher":["Presence.ReadWrite.All"]}},{"Application":{"least":["PrintTaskDefinition.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PrintSettings.Read.All"],"higher":["PrintSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["PrintConnector.Read.All"],"higher":["PrintConnector.ReadWrite.All"]}},{"DelegatedWork":{"least":["Printer.Read.All"],"higher":["Printer.FullControl.All","Printer.ReadWrite.All"]}},{"DelegatedWork":{"least":["PrinterShare.ReadBasic.All"],"higher":["PrinterShare.Read.All","PrinterShare.ReadWrite.All"]}},{"DelegatedWork":{"least":["PrintJob.ReadBasic"],"higher":["PrintAlertSettings.Read.All","PrintAlertSettings.ReadWrite.All","PrintConnector.Read.All","PrintConnector.ReadWrite.All","Printer.Create","Printer.Read.All","Printer.ReadWrite.All","PrinterShare.Read.All","PrinterShare.ReadBasic.All","PrinterShare.ReadWrite.All","PrintJob.Create","PrintJob.Read","PrintJob.Read.All","PrintJob.ReadBasic.All","PrintJob.ReadWrite","PrintJob.ReadWrite.All","PrintJob.ReadWriteBasic","PrintJob.ReadWriteBasic.All","PrintSettings.Read.All","PrintSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["PrinterShare.ReadBasic.All"],"higher":["PrinterShare.ReadWrite.All","PrinterShare.Read.All"]}},{"DelegatedWork":{"least":["PrinterShare.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PrintSettings.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PrintConnector.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PrintJob.Create"],"higher":["PrintJob.ReadWrite","PrintJob.ReadWrite.All"]},"Application":{"least":["PrintJob.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PrintJob.Read"],"higher":["PrintJob.Read.All","PrintJob.ReadWrite","PrintJob.ReadWrite.All"]},"Application":{"least":["PrintJob.Read.All"],"higher":["PrintJob.ReadWrite.All"]}},{"DelegatedWork":{"least":["Printer.Create"],"higher":["Printer.FullControl.All","Printer.ReadWrite.All"]}},{"DelegatedWork":{"least":["Printer.ReadWrite.All"],"higher":["Printer.FullControl.All"]}},{"DelegatedWork":{"least":["Printer.FullControl.All"],"higher":[]}},{"DelegatedWork":{"least":["Printer.Read.All"],"higher":["Printer.ReadWrite.All","Printer.FullControl.All"]},"Application":{"least":["Printer.Read.All"],"higher":["Printer.ReadWrite.All"]}},{"DelegatedWork":{"least":["PrintJob.ReadBasic"],"higher":["PrintJob.Read","PrintJob.Read.All","PrintJob.ReadBasic.All","PrintJob.ReadWrite","PrintJob.ReadWrite.All","PrintJob.ReadWriteBasic","PrintJob.ReadWriteBasic.All"]},"Application":{"least":["PrintJob.ReadBasic.All"],"higher":["PrintJob.Read.All","PrintJob.ReadWrite.All","PrintJob.ReadWriteBasic.All"]}},{"DelegatedWork":{"least":["Printer.Read.All"],"higher":["Printer.ReadWrite.All","Printer.FullControl.All"]}},{"DelegatedWork":{"least":["PrintJob.Create"],"higher":["PrintJob.ReadWrite","PrintJob.ReadWrite.All","PrintJob.ReadWriteBasic","PrintJob.ReadWriteBasic.All"]}},{"DelegatedWork":{"least":["Printer.ReadWrite.All"],"higher":["Printer.FullControl.All"]},"Application":{"least":["Printer.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PrinterShare.Read.All"],"higher":["PrinterShare.ReadWrite.All"]}},{"DelegatedWork":{"least":["PrintJob.ReadBasic"],"higher":["PrintJob.ReadWriteBasic","PrintJob.Read","PrintJob.Read.All","PrintJob.ReadBasic.All","PrintJob.ReadWrite","PrintJob.ReadWrite.All","PrintJob.ReadWriteBasic.All"]},"Application":{"least":["PrintJob.ReadBasic.All"],"higher":["PrintJob.Read.All","PrintJob.ReadWrite.All","PrintJob.ReadWriteBasic.All"]}},{"DelegatedWork":{"least":["PrintJob.ReadWriteBasic"],"higher":["PrintJob.ReadWrite","PrintJob.ReadWrite.All","PrintJob.ReadWriteBasic.All"]}},{"Application":{"least":["PrintJob.ReadWriteBasic.All"],"higher":["PrintJob.Manage.All","PrintJob.ReadWrite.All"]}},{"Application":{"least":["PrintJob.Manage.All"],"higher":[]}},{"DelegatedWork":{"least":["Reports.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["PrivilegedAssignmentSchedule.Read.AzureADGroup"],"higher":["PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup"]},"Application":{"least":["PrivilegedAssignmentSchedule.Read.AzureADGroup"],"higher":["PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup"]}},{"DelegatedWork":{"least":["PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup"],"higher":[]},"Application":{"least":["PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup"],"higher":[]}},{"DelegatedWork":{"least":["PrivilegedEligibilitySchedule.Read.AzureADGroup"],"higher":["PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup"]},"Application":{"least":["PrivilegedEligibilitySchedule.Read.AzureADGroup"],"higher":["PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup"]}},{"DelegatedWork":{"least":["PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup"],"higher":["PrivilegedAssignmentSchedule.Remove.AzureADGroup"]},"Application":{"least":["PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup"],"higher":["PrivilegedAssignmentSchedule.Remove.AzureADGroup"]}},{"DelegatedWork":{"least":["PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup"],"higher":["PrivilegedEligibilitySchedule.Remove.AzureADGroup"]},"Application":{"least":["PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup"],"higher":["PrivilegedEligibilitySchedule.Remove.AzureADGroup"]}},{"DelegatedWork":{"least":["PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup"],"higher":[]},"Application":{"least":["PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup"],"higher":[]}},{"DelegatedWork":{"least":["PeopleSettings.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["ProfilePhoto.ReadWrite.All"],"higher":["Group.ReadWrite.All"]},"Application":{"least":["ProfilePhoto.ReadWrite.All"],"higher":["Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["ProfilePhoto.Read.All"],"higher":["ProfilePhoto.ReadWrite.All","User.Read","User.ReadBasic.All","User.Read.All","User.ReadWrite","User.ReadWrite.All"]},"Application":{"least":["ProfilePhoto.Read.All"],"higher":["ProfilePhoto.ReadWrite.All","User.Read.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["ProfilePhoto.ReadWrite.All"],"higher":["User.ReadWrite","User.ReadWrite.All"]},"Application":{"least":["ProfilePhoto.ReadWrite.All"],"higher":["User.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserActivity.ReadWrite.CreatedByApp"],"higher":[]}},{"DelegatedWork":{"least":["BackupRestore-Configuration.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-QR.ReadWrite","UserAuthMethod-QR.ReadWrite.All","UserAuthenticationMethod.ReadWrite"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-QR.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-QR.Read"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthMethod-QR.Read.All","UserAuthMethod-QR.ReadWrite","UserAuthMethod-QR.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-QR.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-QR.ReadWrite.All"]}},{"DelegatedWork":{"least":["RoleAssignmentSchedule.Read.Directory"],"higher":["RoleAssignmentSchedule.ReadWrite.Directory","RoleManagement.Read.All","RoleManagement.Read.Directory","RoleManagement.ReadWrite.Directory"]},"Application":{"least":["RoleAssignmentSchedule.Read.Directory"],"higher":["RoleAssignmentSchedule.ReadWrite.Directory","RoleManagement.Read.All","RoleManagement.Read.Directory","RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["RoleAssignmentSchedule.ReadWrite.Directory"],"higher":["RoleManagement.ReadWrite.Directory"]},"Application":{"least":["RoleAssignmentSchedule.ReadWrite.Directory"],"higher":["RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["RoleEligibilitySchedule.Read.Directory"],"higher":["RoleEligibilitySchedule.ReadWrite.Directory","RoleManagement.Read.All","RoleManagement.Read.Directory","RoleManagement.ReadWrite.Directory"]},"Application":{"least":["RoleEligibilitySchedule.Read.Directory"],"higher":["RoleEligibilitySchedule.ReadWrite.Directory","RoleManagement.Read.All","RoleManagement.Read.Directory","RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["RoleEligibilitySchedule.ReadWrite.Directory"],"higher":["RoleManagement.ReadWrite.Directory"]},"Application":{"least":["RoleEligibilitySchedule.ReadWrite.Directory"],"higher":["RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["RoleAssignmentSchedule.ReadWrite.Directory"],"higher":["RoleAssignmentSchedule.Remove.Directory","RoleEligibilitySchedule.Remove.Directory","RoleManagement.ReadWrite.Directory"]},"Application":{"least":["RoleAssignmentSchedule.ReadWrite.Directory"],"higher":["RoleManagement.ReadWrite.Directory","RoleAssignmentSchedule.Remove.Directory","RoleEligibilitySchedule.Remove.Directory"]}},{"DelegatedWork":{"least":["RoleManagement.ReadWrite.Directory"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["RoleManagement.ReadWrite.Directory"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Directory.Read.All","Application-RemoteDesktopConfig.ReadWrite.All","Application.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["Application.Read.All"],"higher":["Directory.Read.All","Application-RemoteDesktopConfig.ReadWrite.All","Application.ReadWrite.OwnedBy","Application.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application-RemoteDesktopConfig.ReadWrite.All"],"higher":["Application.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["Application-RemoteDesktopConfig.ReadWrite.All"],"higher":["Application.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Reports.Read.All"],"higher":[]},"Application":{"least":["Reports.Read.All"],"higher":[]}},{"Application":{"least":["EduReports-Reading.ReadAnonymous.All"],"higher":["EduReports-Reading.Read.All"]}},{"Application":{"least":["EduReports-Reflect.ReadAnonymous.All"],"higher":["EduReports-Reflect.Read.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-ResourceKey.ReadWrite.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-ResourceKey.ReadWrite.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["RiskPreventionProviders.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["IdentityRiskyServicePrincipal.ReadWrite.All"],"higher":[]},"Application":{"least":["IdentityRiskyServicePrincipal.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IdentityRiskyUser.ReadWrite.All"],"higher":[]},"Application":{"least":["IdentityRiskyUser.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IdentityRiskyUser.Read.All"],"higher":[]},"Application":{"least":["IdentityRiskyUser.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["IdentityRiskyUser.Read.All"],"higher":["IdentityRiskyUser.ReadWrite.All"]},"Application":{"least":["IdentityRiskyUser.Read.All"],"higher":["IdentityRiskyUser.ReadWrite.All"]}},{"DelegatedWork":{"least":["Domain.ReadWrite.All"],"higher":["IdentityProvider.ReadWrite.All"]},"Application":{"least":["Domain.ReadWrite.All"],"higher":["IdentityProvider.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Application.Read.All"]},"Application":{"least":["Application.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["SearchConfiguration.Read.All"],"higher":["SearchConfiguration.ReadWrite.All"]},"Application":{"least":["SearchConfiguration.Read.All"],"higher":["SearchConfiguration.ReadWrite.All"]}},{"DelegatedWork":{"least":["Mail.Read"],"higher":["Acronym.Read.All","Bookmark.Read.All","Calendars.Read","Chat.Read","ExternalItem.Read.All","Files.Read.All","QnA.Read.All","Sites.Read.All"]},"Application":{"least":["Files.Read.All"],"higher":["Sites.Read.All"]}},{"DelegatedWork":{"least":["SecurityAlert.Read.All"],"higher":["SecurityAlert.ReadWrite.All"]},"Application":{"least":["SecurityAlert.Read.All"],"higher":["SecurityAlert.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityData.Manage.All"],"higher":[]},"Application":{"least":["SecurityData.Manage.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityAlert.ReadWrite.All"],"higher":[]},"Application":{"least":["SecurityAlert.ReadWrite.All"],"higher":[]}},{"Application":{"least":["SecurityAnalyzedMessage.Read.All"],"higher":["SecurityAnalyzedMessage.ReadWrite.All"]}},{"Application":{"least":["SecurityAnalyzedMessage.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ThreatIntelligence.Read.All"],"higher":[]},"Application":{"least":["ThreatIntelligence.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["AuditLogsQuery-Entra.Read.All"],"higher":["AuditLogsQuery-CRM.Read.All","AuditLogsQuery-Endpoint.Read.All","AuditLogsQuery-Exchange.Read.All","AuditLogsQuery-OneDrive.Read.All","AuditLogsQuery-SharePoint.Read.All","AuditLogsQuery.Read.All"]},"Application":{"least":["AuditLogsQuery-Entra.Read.All"],"higher":["AuditLogsQuery-CRM.Read.All","AuditLogsQuery-Endpoint.Read.All","AuditLogsQuery-Exchange.Read.All","AuditLogsQuery-OneDrive.Read.All","AuditLogsQuery-SharePoint.Read.All","AuditLogsQuery.Read.All"]}},{"DelegatedWork":{"least":["RecordsManagement.Read.All"],"higher":["RecordsManagement.ReadWrite.All"]},"Application":{"least":["RecordsManagement.Read.All"],"higher":["RecordsManagement.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityIdentitiesAutoConfig.Read.All"],"higher":[]},"Application":{"least":["SecurityIdentitiesAutoConfig.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityIdentitiesAutoConfig.ReadWrite.All"],"higher":[]},"Application":{"least":["SecurityIdentitiesAutoConfig.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["eDiscovery.ReadWrite.All"],"higher":[]},"Application":{"least":["eDiscovery.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["eDiscovery.Read.All"],"higher":["eDiscovery.ReadWrite.All"]},"Application":{"least":["eDiscovery.Read.All"],"higher":["eDiscovery.ReadWrite.All"]}},{"DelegatedWork":{"least":["RecordsManagement.ReadWrite.All"],"higher":[]},"Application":{"least":["RecordsManagement.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["eDiscovery.ReadWrite.All"],"higher":["eDiscovery.ReadWrite.All"]},"Application":{"least":["eDiscovery.ReadWrite.All"],"higher":["eDiscovery.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityIdentitiesHealth.Read.All"],"higher":["SecurityIdentitiesHealth.ReadWrite.All"]},"Application":{"least":["SecurityIdentitiesHealth.Read.All"],"higher":["SecurityIdentitiesHealth.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityIdentitiesHealth.ReadWrite.All"],"higher":[]},"Application":{"least":["SecurityIdentitiesHealth.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityIdentitiesAccount.Read.All"],"higher":[]},"Application":{"least":["SecurityIdentitiesAccount.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityIdentitiesActions.ReadWrite.All"],"higher":[]},"Application":{"least":["SecurityIdentitiesActions.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityIdentitiesSensors.Read.All"],"higher":["SecurityIdentitiesSensors.ReadWrite.All"]},"Application":{"least":["SecurityIdentitiesSensors.Read.All"],"higher":["SecurityIdentitiesSensors.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityIdentitiesSensors.Read.All"],"higher":[]},"Application":{"least":["SecurityIdentitiesSensors.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityIdentitiesSensors.ReadWrite.All"],"higher":[]},"Application":{"least":["SecurityIdentitiesSensors.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityIncident.Read.All"],"higher":["SecurityIncident.ReadWrite.All"]},"Application":{"least":["SecurityIncident.Read.All"],"higher":["SecurityIncident.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityIncident.ReadWrite.All"],"higher":[]},"Application":{"least":["SecurityIncident.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["RecordsManagement.Read.All"],"higher":["RecordsManagement.ReadWrite.All"]}},{"DelegatedWork":{"least":["RecordsManagement.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ThreatHunting.Read.All"],"higher":[]},"Application":{"least":["ThreatHunting.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["SensitivityLabel.Evaluate"],"higher":["SensitivityLabel.Evaluate.All"]},"Application":{"least":["SensitivityLabel.Evaluate"],"higher":["SensitivityLabel.Evaluate.All"]}},{"DelegatedWork":{"least":["SensitivityLabel.Read"],"higher":["SensitivityLabels.Read.All"]},"Application":{"least":["SensitivityLabel.Read"],"higher":["SensitivityLabels.Read.All"]}},{"DelegatedWork":{"least":["ServiceHealth.Read.All"],"higher":[]},"Application":{"least":["ServiceHealth.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["ServiceMessage.Read.All"],"higher":[]},"Application":{"least":["ServiceMessage.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["AppRoleAssignment.ReadWrite.All"],"higher":["Application.ReadWrite.All"]},"Application":{"least":["AppRoleAssignment.ReadWrite.All"],"higher":["Application.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Directory.Read.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.OwnedBy","Directory.Read.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.OwnedBy","Application.ReadWrite.All","Directory.Read.All"]}},{"DelegatedWork":{"least":["Application-RemoteDesktopConfig.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["Application-RemoteDesktopConfig.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.ReadWrite.All"],"higher":["AgentIdentity.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["Application.ReadWrite.OwnedBy"],"higher":["AgentIdentity.ReadWrite.All","Application.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["ServiceMessageViewpoint.Write"],"higher":[]}},{"DelegatedWork":{"least":["SharePointTenantSettings.Read.All"],"higher":["SharePointTenantSettings.ReadWrite.All"]},"Application":{"least":["SharePointTenantSettings.Read.All"],"higher":["SharePointTenantSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["SharePointTenantSettings.ReadWrite.All"],"higher":[]},"Application":{"least":["SharePointTenantSettings.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Group.Read.All"],"higher":["Schedule.ReadWrite.All","Group.ReadWrite.All","Schedule.Read.All"]},"Application":{"least":["Schedule.Read.All"],"higher":["Schedule.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read.All"],"higher":["User.ReadWrite.All","AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy"]},"Application":{"least":["UserShiftPreferences.Read.All"],"higher":["UserShiftPreferences.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.ReadWrite.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy"]},"Application":{"least":["UserShiftPreferences.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IdentityRiskyUser.ReadWrite.All"],"higher":[]},"Application":{"least":["IdentityRiskEvent.ReadWrite.All"],"higher":[]}},{"Application":{"least":["Sites.FullControl.All"],"higher":[]}},{"Application":{"least":["Sites.Read.All"],"higher":["Sites.FullControl.All","Sites.Manage.All","Sites.ReadWrite.All"]}},{"Application":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthMethod-SoftwareOATH.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-SoftwareOATH.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-SoftwareOATH.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-SoftwareOATH.Read"],"higher":["UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-SoftwareOATH.Read.All","UserAuthMethod-SoftwareOATH.ReadWrite","UserAuthMethod-SoftwareOATH.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-SoftwareOATH.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-SoftwareOATH.ReadWrite.All"]}},{"DelegatedWork":{"least":["SubjectRightsRequest.Read.All"],"higher":["SubjectRightsRequest.ReadWrite.All"]}},{"DelegatedWork":{"least":["SubjectRightsRequest.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["LicenseAssignment.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Organization.Read.All"]},"Application":{"least":["LicenseAssignment.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Organization.Read.All","Organization.ReadWrite.All"]}},{"DelegatedWork":{"least":["LicenseAssignment.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Organization.Read.All","Organization.ReadWrite.All"]},"Application":{"least":["LicenseAssignment.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Organization.Read.All","Organization.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read"],"higher":["Files.ReadWrite","Files.ReadWrite.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Directory.ReadWrite.All"],"higher":[]},"Application":{"least":["Application.ReadWrite.OwnedBy"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Synchronization.ReadWrite.All"],"higher":[]},"Application":{"least":["Application.ReadWrite.OwnedBy"],"higher":["Synchronization.ReadWrite.All"]}},{"DelegatedWork":{"least":["Synchronization.Read.All"],"higher":["Synchronization.ReadWrite.All"]},"Application":{"least":["Application.ReadWrite.OwnedBy"],"higher":["Synchronization.Read.All","Synchronization.ReadWrite.All"]}},{"DelegatedWork":{"least":["SynchronizationData-User.Upload"],"higher":[]},"Application":{"least":["SynchronizationData-User.Upload.OwnedBy"],"higher":["SynchronizationData-User.Upload"]}},{"DelegatedWork":{"least":["Synchronization.ReadWrite.All"],"higher":["CustomSecAttributeProvisioning.ReadWrite.All"]},"Application":{"least":["Application.ReadWrite.OwnedBy"],"higher":["CustomSecAttributeProvisioning.ReadWrite.All","Synchronization.ReadWrite.All"]}},{"DelegatedWork":{"least":["Synchronization.Read.All"],"higher":["Synchronization.ReadWrite.All","CustomSecAttributeProvisioning.Read.All","CustomSecAttributeProvisioning.ReadWrite.All"]},"Application":{"least":["CustomSecAttributeProvisioning.Read.All"],"higher":["Application.ReadWrite.OwnedBy","CustomSecAttributeProvisioning.ReadWrite.All","Synchronization.Read.All","Synchronization.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamSettings.ReadWrite.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["TeamSettings.ReadWrite.Group"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["Team.Create"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["Team.Create"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["Channel.Delete.All"],"higher":[]},"Application":{"least":["Channel.Delete.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadWriteSelfForTeam"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam","TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.ReadWriteSelfForTeam.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam.All","TeamsAppInstallation.ReadWriteForTeam.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadWriteSelfForTeam"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam","TeamsAppInstallation.ReadForTeam","TeamsAppInstallation.ReadForUser","TeamsAppInstallation.ReadWriteAndConsentForTeam","TeamsAppInstallation.ReadWriteAndConsentSelfForTeam","TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.Read.Group"],"higher":["TeamsAppInstallation.ReadWriteSelfForTeam.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam.All","TeamsAppInstallation.Read.All","TeamsAppInstallation.ReadForTeam.All","TeamsAppInstallation.ReadWriteAndConsentForTeam.All","TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All","TeamsAppInstallation.ReadWriteForTeam.All","TeamsAppInstallation.ReadWriteSelfForTeam"]}},{"DelegatedWork":{"least":["TeamMember.Read.All"],"higher":["TeamMember.ReadWrite.All"]},"Application":{"least":["TeamMember.Read.Group"],"higher":["TeamMember.ReadWrite.All","TeamMember.Read.All"]}},{"DelegatedWork":{"least":["Channel.ReadBasic.All"],"higher":["ChannelSettings.Read.All","ChannelSettings.ReadWrite.All"]},"Application":{"least":["ChannelSettings.Read.Group"],"higher":["Channel.ReadBasic.All","ChannelSettings.Read.All","ChannelSettings.ReadWrite.All","ChannelSettings.ReadWrite.Group"]}},{"DelegatedWork":{"least":["Team.ReadBasic.All"],"higher":["TeamSettings.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","TeamSettings.Read.All"]},"Application":{"least":["TeamSettings.Read.Group"],"higher":["TeamSettings.ReadWrite.Group","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","Team.ReadBasic.All","TeamSettings.Read.All","TeamSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["Channel.ReadBasic.All"],"higher":["ChannelSettings.Read.All","ChannelSettings.ReadWrite.All"]},"Application":{"least":["Channel.ReadBasic.All"],"higher":["ChannelSettings.Read.All","ChannelSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForTeam"],"higher":["TeamsAppInstallation.ReadWriteSelfForTeam","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam","TeamsAppInstallation.ReadWriteAndConsentForTeam","TeamsAppInstallation.ReadWriteAndConsentSelfForTeam","TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.Read.Group"],"higher":["TeamsAppInstallation.ReadWriteSelfForTeam.All","Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam.All","TeamsAppInstallation.Read.All","TeamsAppInstallation.ReadForTeam.All","TeamsAppInstallation.ReadWriteAndConsentForTeam.All","TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All","TeamsAppInstallation.ReadWriteForTeam.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForTeam"],"higher":["TeamsAppInstallation.ReadWriteSelfForTeam","TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.ReadForTeam.All"],"higher":["TeamsAppInstallation.ReadWriteSelfForTeam.All","TeamsAppInstallation.ReadWriteForTeam.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadWriteAndConsentSelfForTeam"],"higher":[]},"Application":{"least":["TeamsAppInstallation.ReadWriteAndConsentForTeam.All"],"higher":["TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All"]}},{"DelegatedWork":{"least":["Team.Create"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["Team.Create"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","Teamwork.Migrate.All"]}},{"DelegatedWork":{"least":["TeamsActivity.Send"],"higher":[]},"Application":{"least":["TeamsActivity.Send.Group"],"higher":["TeamsActivity.Send"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadWriteSelfForTeam"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam","TeamsAppInstallation.ReadWriteAndConsentForTeam","TeamsAppInstallation.ReadWriteAndConsentSelfForTeam","TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.ReadWriteSelfForTeam.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam.All","TeamsAppInstallation.ReadWriteAndConsentForTeam.All","TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All","TeamsAppInstallation.ReadWriteForTeam.All"]}},{"DelegatedWork":{"least":["TeamsTelephoneNumber.ReadWrite.All"],"higher":[]},"Application":{"least":["TeamsTelephoneNumber.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsTelephoneNumber.Read.All"],"higher":["TeamsTelephoneNumber.ReadWrite.All"]},"Application":{"least":["TeamsTelephoneNumber.Read.All"],"higher":["TeamsTelephoneNumber.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsUserConfiguration.Read.All"],"higher":[]},"Application":{"least":["TeamsUserConfiguration.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsPolicyUserAssign.ReadWrite.All"],"higher":[]},"Application":{"least":["TeamsPolicyUserAssign.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AppCatalog.Submit"],"higher":["AppCatalog.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForTeam"],"higher":["TeamsAppInstallation.ManageSelectedForTeam","TeamsAppInstallation.ReadForUser","TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.Read.Group"],"higher":["TeamsAppInstallation.ManageSelectedForTeam.All","TeamsAppInstallation.Read.All","TeamsAppInstallation.ReadForTeam.All","TeamsAppInstallation.ReadWriteForTeam.All"]}},{"DelegatedWork":{"least":["TeamworkAppSettings.Read.All"],"higher":["TeamworkAppSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamworkAppSettings.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Teamwork.Read.All"],"higher":[]},"Application":{"least":["Teamwork.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Team.ReadBasic.All"],"higher":[]},"Application":{"least":["Team.ReadBasic.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamsActivity.Send"],"higher":[]},"Application":{"least":["TeamsActivity.Send.User"],"higher":["TeamsActivity.Send"]}},{"DelegatedWork":{"least":["AppCatalog.Read.All"],"higher":["AppCatalog.ReadWrite.All","AppCatalog.Submit"]},"Application":{"least":["AppCatalog.Read.All"],"higher":["AppCatalog.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamworkTag.ReadWrite"],"higher":[]},"Application":{"least":["TeamworkTag.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamworkTag.Read"],"higher":["TeamworkTag.ReadWrite"]},"Application":{"least":["TeamworkTag.Read.All"],"higher":["TeamworkTag.ReadWrite.All"]}},{"Application":{"least":["TeamworkTag.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthMethod-TAP.ReadWrite","UserAuthMethod-TAP.ReadWrite.All","UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-TAP.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-TAP.Read"],"higher":["UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-TAP.Read.All","UserAuthMethod-TAP.ReadWrite","UserAuthMethod-TAP.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-TAP.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-TAP.ReadWrite.All"]}},{"DelegatedWork":{"least":["Content.Process.All"],"higher":[]},"Application":{"least":["Content.Process.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-PolicyTemplate.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-Invitation.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-Invitation.Read.All"],"higher":["TenantGovernance-Invitation.ReadWrite.All"]},"Application":{"least":["TenantGovernance-Invitation.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-PolicyTemplate.Read.All"],"higher":["TenantGovernance-PolicyTemplate.ReadWrite.All"]},"Application":{"least":["TenantGovernance-PolicyTemplate.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-Relationship.Read.All"],"higher":["TenantGovernance-Relationship.ReadWrite.All"]},"Application":{"least":["TenantGovernance-Relationship.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-Relationship.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-Request.Read.All"],"higher":["TenantGovernance-Request.ReadWrite.All"]},"Application":{"least":["TenantGovernance-Request.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-Request.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-RelatedTenant.Read.All"],"higher":["TenantGovernance-RelatedTenant.ReadWrite.All"]},"Application":{"least":["TenantGovernance-RelatedTenant.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-RelatedTenant.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-Setting.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TenantGovernance-Setting.Read.All"],"higher":["TenantGovernance-Setting.ReadWrite.All"]},"Application":{"least":["TenantGovernance-Setting.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["ProtectionScopes.Compute.All"],"higher":[]},"Application":{"least":["ProtectionScopes.Compute.All"],"higher":[]}},{"DelegatedWork":{"least":["CrossTenantInformation.ReadBasic.All"],"higher":[]},"Application":{"least":["CrossTenantInformation.ReadBasic.All"],"higher":[]}},{"DelegatedWork":{"least":["TermStore.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TermStore.Read.All"],"higher":["TermStore.ReadWrite.All"]}},{"DelegatedWork":{"least":["Schedule.Read.All"],"higher":["Group.Read.All","Schedule.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["Schedule.Read.All"],"higher":["Schedule.ReadWrite.All"]}},{"DelegatedWork":{"least":["Group.Read.All"],"higher":["Schedule.ReadWrite.All","Group.ReadWrite.All"]},"Application":{"least":["Schedule.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Tasks.ReadWrite"],"higher":[]},"Application":{"least":["Tasks.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Tasks.ReadWrite"],"higher":["Tasks.Read"]},"Application":{"least":["Tasks.ReadWrite.All"],"higher":["Tasks.Read.All"]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":["Tasks.ReadWrite"]}},{"DelegatedWork":{"least":["Tasks.ReadWrite"],"higher":[]},"Application":{"least":["Tasks.Read.All"],"higher":["Tasks.ReadWrite.All"]}},{"DelegatedWork":{"least":["RoleManagementPolicy.ReadWrite.AzureADGroup"],"higher":[]},"Application":{"least":["RoleManagementPolicy.ReadWrite.AzureADGroup"],"higher":[]}},{"DelegatedWork":{"least":["LicenseAssignment.ReadWrite.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.ReadWrite.All","User.ReadWrite.All"]},"Application":{"least":["LicenseAssignment.ReadWrite.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.ReadWrite.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User-PasswordProfile.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["User.ReadWrite.All"],"higher":[]},"Application":{"least":["User.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["User.Read.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","User.ReadWrite.All"]},"Application":{"least":["User.Read.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Export.All"],"higher":[]},"Application":{"least":["User.Export.All"],"higher":[]}},{"DelegatedWork":{"least":["Calendars.Read.Shared"],"higher":["Calendars.ReadWrite.Shared"]}},{"DelegatedWork":{"least":["MailboxSettings.Read"],"higher":["MailboxSettings.ReadWrite"]},"Application":{"least":["MailboxSettings.Read"],"higher":["MailboxSettings.ReadWrite"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["User.ReadWrite","User.ReadBasic.All","User.Read.All","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["User.Read.All"],"higher":["User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Mail.Read"],"higher":["Mail.Read.Shared","MailTips.ReadBasic.Shared"]},"Application":{"least":["Mail.Read"],"higher":[]}},{"DelegatedWork":{"least":["Calendars.ReadBasic"],"higher":["Calendars.ReadWrite","Calendars.Read"]},"Application":{"least":["Calendars.ReadBasic"],"higher":["Calendars.ReadWrite","Calendars.Read"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","User.Read.All","User.ReadWrite","User.ReadWrite.All"]},"Application":{"least":["User.Read.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","User.ReadWrite.All"]}},{"Application":{"least":["User.Read.All"],"higher":["User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Team.ReadBasic.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","TeamSettings.Read.All","TeamSettings.ReadWrite.All","User.Read.All","User.ReadWrite.All"]},"Application":{"least":["Team.ReadBasic.All"],"higher":["TeamSettings.Read.All","TeamSettings.ReadWrite.All"]}},{"DelegatedWork":{"least":["LicenseAssignment.Read.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","User.Read","User.Read.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Directory.Read.All","Directory.ReadWrite.All","GroupMember.Read.All"]}},{"DelegatedWork":{"least":["Directory.Read.All"],"higher":["DelegatedPermissionGrant.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Directory.Read.All","Directory.ReadWrite.All","User.Read.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.Read.All","Directory.ReadWrite.All","User.Read.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["People.Read"],"higher":["People.Read.All"]},"Application":{"least":["People.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["ResourceSpecificPermissionGrant.ReadForUser"],"higher":["TeamsAppInstallation.ManageSelectedForUser","TeamsAppInstallation.ReadWriteAndConsentForUser","TeamsAppInstallation.ReadWriteAndConsentSelfForUser"]},"Application":{"least":["ResourceSpecificPermissionGrant.ReadForUser.All"],"higher":["TeamsAppInstallation.ManageSelectedForUser.All","TeamsAppInstallation.ReadWriteAndConsentForUser.All","TeamsAppInstallation.ReadWriteAndConsentSelfForUser.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["User.Read.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group.Read.All","GroupMember.Read.All","User.Read.All"]}},{"DelegatedWork":{"least":["User.ReadBasic.All"],"higher":["User.Read.All","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["User.Read.All"],"higher":["User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Create"],"higher":["User.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["User.Create"],"higher":["User.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.ReadWrite"],"higher":["User.ManageIdentities.All","User.EnableDisableAccount.All","User.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["User.ManageIdentities.All"],"higher":["User.EnableDisableAccount.All","User.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.RevokeSessions.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","Directory.ReadWrite.All","User.ReadWrite.All"]},"Application":{"least":["User.RevokeSessions.All"],"higher":[]}},{"DelegatedWork":{"least":["User.ReadBasic.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","User.Read","User.Read.All","User.ReadWrite","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.ReadUpdate.All"],"higher":["User.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["User.ReadUpdate.All"],"higher":["User.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Content.Process.User"],"higher":["Content.Process.All"]},"Application":{"least":["Content.Process.User"],"higher":["Content.Process.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["User.ReadWrite"]}},{"DelegatedWork":{"least":["User.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["ProtectionScopes.Compute.User"],"higher":["ProtectionScopes.Compute.All"]},"Application":{"least":["ProtectionScopes.Compute.User"],"higher":["ProtectionScopes.Compute.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForUser"],"higher":["TeamsAppInstallation.ReadWriteForUser","TeamsAppInstallation.ReadWriteSelectedForUser","TeamsAppInstallation.ReadWriteSelfForUser"]},"Application":{"least":["TeamsAppInstallation.ReadForUser.All"],"higher":["TeamsAppInstallation.Read.All","TeamsAppInstallation.Read.User","TeamsAppInstallation.ReadWriteForUser.All","TeamsAppInstallation.ReadWriteSelectedForUser.All","TeamsAppInstallation.ReadWriteSelfForUser.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","User.Read.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read.All"],"higher":["User.ReadWrite.All"]},"Application":{"least":["User.Read.All"],"higher":["User.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserWindowsSettings.Read"],"higher":[]}},{"DelegatedWork":{"least":["User.ReadWrite"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadWriteSelfForUser"],"higher":["TeamsAppInstallation.ManageSelectedForUser","TeamsAppInstallation.ReadWriteAndConsentForUser","TeamsAppInstallation.ReadWriteAndConsentSelfForUser","TeamsAppInstallation.ReadWriteForUser","TeamsAppInstallation.ReadWriteSelectedForUser"]},"Application":{"least":["TeamsAppInstallation.ReadWriteSelfForUser.All"],"higher":["TeamsAppInstallation.ManageSelectedForUser.All","TeamsAppInstallation.ReadWriteAndConsentForUser.All","TeamsAppInstallation.ReadWriteAndConsentSelfForUser.All","TeamsAppInstallation.ReadWriteForUser.All","TeamsAppInstallation.ReadWriteSelectedForUser.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForUser"],"higher":["TeamsAppInstallation.ReadWriteSelfForUser","TeamsAppInstallation.ManageSelectedForUser","TeamsAppInstallation.ReadWriteAndConsentForUser","TeamsAppInstallation.ReadWriteAndConsentSelfForUser","TeamsAppInstallation.ReadWriteForUser","TeamsAppInstallation.ReadWriteSelectedForUser"]},"Application":{"least":["TeamsAppInstallation.ReadForUser.All"],"higher":["TeamsAppInstallation.ReadWriteSelfForUser.All","TeamsAppInstallation.ManageSelectedForUser.All","TeamsAppInstallation.Read.All","TeamsAppInstallation.Read.User","TeamsAppInstallation.ReadWriteAndConsentForUser.All","TeamsAppInstallation.ReadWriteAndConsentSelfForUser.All","TeamsAppInstallation.ReadWriteForUser.All","TeamsAppInstallation.ReadWriteSelectedForUser.All"]}},{"DelegatedWork":{"least":["UserTeamwork.Read"],"higher":[]},"Application":{"least":["UserTeamwork.Read.All"],"higher":[]}},{"Application":{"least":["TeamworkTargetedMessage.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["VirtualAppointment.Read"],"higher":["OnlineMeetings.Read","OnlineMeetings.ReadWrite","VirtualAppointment.ReadWrite"]}},{"DelegatedWork":{"least":["VirtualAppointmentNotification.Send"],"higher":[]}},{"DelegatedWork":{"least":["VirtualEvent.Read"],"higher":["VirtualEvent.ReadWrite"]},"Application":{"least":["VirtualEvent.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["VirtualEvent.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["VirtualEvent.ReadWrite"],"higher":[]},"Application":{"least":["VirtualEventRegistration-Anon.ReadWrite.Chat"],"higher":[]}},{"DelegatedWork":{"least":["VirtualEvent.Read"],"higher":["VirtualEvent.ReadWrite"]},"Application":{"least":["VirtualEvent.Read.Chat"],"higher":["VirtualEvent.Read.All","VirtualEventRegistration-Anon.ReadWrite.All"]}},{"Application":{"least":["VirtualEvent.Read.Chat"],"higher":[]}},{"DelegatedWork":{"least":["VirtualEvent.Read"],"higher":[]},"Application":{"least":["VirtualEvent.Read.All"],"higher":[]}},{"Application":{"least":["VirtualEvent.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["VirtualEvent.Read"],"higher":["VirtualEvent.ReadWrite"]},"Application":{"least":["VirtualEvent.Read.Chat"],"higher":["VirtualEvent.Read.All"]}},{"DelegatedWork":{"least":["VirtualEvent.Read"],"higher":["VirtualEvent.ReadWrite"]}},{"DelegatedWork":{"least":["VirtualEvent.ReadWrite"],"higher":[]},"Application":{"least":["VirtualEventRegistration-Anon.ReadWrite.Chat"],"higher":["VirtualEventRegistration-Anon.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthMethod-WindowsHello.ReadWrite","UserAuthMethod-WindowsHello.ReadWrite.All","UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":["UserAuthMethod-WindowsHello.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-WindowsHello.Read"],"higher":["UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-WindowsHello.Read.All","UserAuthMethod-WindowsHello.ReadWrite","UserAuthMethod-WindowsHello.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-WindowsHello.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthMethod-WindowsHello.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-WindowsHello.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-WindowsHello.Read.All","UserAuthMethod-WindowsHello.ReadWrite","UserAuthMethod-WindowsHello.ReadWrite.All"]},"Application":{"least":["UserAuthMethod-WindowsHello.Read.All"],"higher":["UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-WindowsHello.ReadWrite.All"]}},{"DelegatedWork":{"least":["Files.Read"],"higher":[]}},{"DelegatedWork":{"least":["WorkforceIntegration.ReadWrite.All"],"higher":[]},"Application":{"least":["WorkforceIntegration.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["WorkforceIntegration.Read.All"],"higher":["WorkforceIntegration.ReadWrite.All"]},"Application":{"least":["WorkforceIntegration.Read.All"],"higher":["WorkforceIntegration.ReadWrite.All"]}},{"DelegatedWork":{"least":["MailboxSettings.Read"],"higher":["Calendars.Read","Calendars.ReadWrite","MailboxSettings.ReadWrite"]}},{"DelegatedWork":{"least":["Calendars.Read"],"higher":["Calendars.ReadWrite"]}},{"DelegatedWork":{"least":["Calendars.Read"],"higher":["Calendars.ReadWrite"]},"Application":{"least":["Calendars.Read.All"],"higher":["Calendars.ReadWrite.All"]}},{"DelegatedWork":{"least":["Calendars.ReadWrite"],"higher":["MailboxSettings.ReadWrite"]}},{"Application":{"least":["Schedule-WorkingTime.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Files.ReadWrite"],"higher":["Files.Read","Sites.Read.All"]}},{"DelegatedWork":{"least":["EntitlementManagement.Read.All"],"higher":["EntitlementManagement.ReadWrite.All"]}},{"DelegatedWork":{"least":["EntitlementManagement.ReadWrite.All"],"higher":[]},"Application":{"least":["EntitlementManagement.Read.All"],"higher":["EntitlementManagement.ReadWrite.All"]}},{"DelegatedWork":{"least":["AccessReview.ReadWrite.Membership"],"higher":["AccessReview.ReadWrite.All"]},"Application":{"least":["AccessReview.ReadWrite.Membership"],"higher":[]}},{"DelegatedWork":{"least":["AccessReview.Read.All"],"higher":["AccessReview.ReadWrite.Membership","AccessReview.ReadWrite.All"]},"Application":{"least":["AccessReview.Read.All"],"higher":["AccessReview.ReadWrite.Membership"]}},{"DelegatedWork":{"least":["AccessReview.Read.All"],"higher":["AccessReview.ReadWrite.All","AccessReview.ReadWrite.Membership"]},"Application":{"least":["AccessReview.Read.All"],"higher":["AccessReview.ReadWrite.Membership"]}},{"DelegatedWork":{"least":["AccessReview.Read.All"],"higher":["AccessReview.ReadWrite.All","AccessReview.ReadWrite.Membership"]}},{"DelegatedWork":{"least":["AccessReview.Read.All"],"higher":["AccessReview.ReadWrite.All"]}},{"DelegatedWork":{"least":["AccessReview.Read.All"],"higher":["AccessReview.ReadWrite.All"]},"Application":{"least":["AccessReview.ReadWrite.All"],"higher":["AccessReview.Read.All"]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.AccessReview"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.AccessReview"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.AccessReview"],"higher":[]},"Application":{"least":["Policy.ReadWrite.AccessReview"],"higher":[]}},{"DelegatedWork":{"least":["Analytics.Read"],"higher":[]}},{"DelegatedWork":{"least":["OrgSettings-AppsAndServices.Read.All"],"higher":["OrgSettings-AppsAndServices.ReadWrite.All"]},"Application":{"least":["OrgSettings-AppsAndServices.Read.All"],"higher":["OrgSettings-AppsAndServices.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrgSettings-AppsAndServices.ReadWrite.All"],"higher":[]},"Application":{"least":["OrgSettings-AppsAndServices.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["OrgSettings-DynamicsVoice.Read.All"],"higher":["OrgSettings-DynamicsVoice.ReadWrite.All"]},"Application":{"least":["OrgSettings-DynamicsVoice.Read.All"],"higher":["OrgSettings-DynamicsVoice.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrgSettings-DynamicsVoice.ReadWrite.All"],"higher":[]},"Application":{"least":["OrgSettings-DynamicsVoice.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["OrgSettings-Forms.Read.All"],"higher":["OrgSettings-Forms.ReadWrite.All"]},"Application":{"least":["OrgSettings-Forms.Read.All"],"higher":["OrgSettings-Forms.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrgSettings-Forms.ReadWrite.All"],"higher":[]},"Application":{"least":["OrgSettings-Forms.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["OrgSettings-Todo.Read.All"],"higher":["OrgSettings-Todo.ReadWrite.All"]},"Application":{"least":["OrgSettings-Todo.Read.All"],"higher":["OrgSettings-Todo.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrgSettings-Todo.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["WindowsUpdates.Read.All"],"higher":["WindowsUpdates.ReadWrite.All"]},"Application":{"least":["WindowsUpdates.Read.All"],"higher":["WindowsUpdates.ReadWrite.All"]}},{"DelegatedWork":{"least":["WindowsUpdates.ReadWrite.All"],"higher":[]},"Application":{"least":["WindowsUpdates.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AgentCardManifest.Read.All"],"higher":["AgentCardManifest.ReadWrite.All"]},"Application":{"least":["AgentCardManifest.Read.All"],"higher":["AgentCardManifest.ReadWrite.All","AgentCardManifest.ReadWrite.ManagedBy"]}},{"DelegatedWork":{"least":["AgentCardManifest.ReadWrite.All"],"higher":[]},"Application":{"least":["AgentCardManifest.ReadWrite.All"],"higher":["AgentCardManifest.ReadWrite.ManagedBy"]}},{"DelegatedWork":{"least":["AgentCollection.ReadWrite.All"],"higher":["AgentCollection.ReadWrite.All"]},"Application":{"least":["AgentCollection.ReadWrite.ManagedBy"],"higher":["AgentCollection.ReadWrite.All"]}},{"DelegatedWork":{"least":["AgentCollection.Read.All"],"higher":["AgentCollection.Read.Global","AgentCollection.Read.Quarantined","AgentCollection.ReadWrite.All","AgentCollection.ReadWrite.Global","AgentCollection.ReadWrite.Quarantined"]},"Application":{"least":["AgentCollection.Read.All"],"higher":["AgentCollection.ReadWrite.All","AgentCollection.ReadWrite.ManagedBy"]}},{"DelegatedWork":{"least":["AgentCollection.Read.All"],"higher":["AgentCollection.ReadWrite.All"]},"Application":{"least":["AgentCollection.Read.All"],"higher":["AgentCollection.ReadWrite.All","AgentCollection.ReadWrite.ManagedBy"]}},{"DelegatedWork":{"least":["AgentCollection.ReadWrite.All"],"higher":["AgentCollection.ReadWrite.Global","AgentCollection.ReadWrite.Quarantined"]},"Application":{"least":["AgentCollection.ReadWrite.All"],"higher":["AgentCollection.ReadWrite.ManagedBy"]}},{"DelegatedWork":{"least":["AgentCommunicationConfiguration.ReadWrite"],"higher":[]},"Application":{"least":["AgentCommunicationConfiguration.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AgentInstance.Read.All"],"higher":["AgentInstance.ReadWrite.All"]},"Application":{"least":["AgentInstance.Read.All"],"higher":["AgentInstance.ReadWrite.All","AgentInstance.ReadWrite.ManagedBy"]}},{"DelegatedWork":{"least":["AgentInstance.ReadWrite.All"],"higher":[]},"Application":{"least":["AgentInstance.ReadWrite.All"],"higher":["AgentInstance.ReadWrite.ManagedBy"]}},{"DelegatedWork":{"least":["AgentCollection.ReadWrite.All"],"higher":[]},"Application":{"least":["AgentCollection.ReadWrite.All"],"higher":["AgentCollection.ReadWrite.ManagedBy"]}},{"DelegatedWork":{"least":["ApprovalSolution.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["ApprovalSolution.Read"],"higher":["ApprovalSolution.ReadWrite","ApprovalSolutionResponse.ReadWrite"]}},{"DelegatedWork":{"least":["ApprovalSolution.ReadWrite"],"higher":["ApprovalSolutionResponse.ReadWrite"]}},{"DelegatedWork":{"least":["CustomSecAttributeAuditLogs.Read.All"],"higher":[]},"Application":{"least":["CustomSecAttributeAuditLogs.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.Read"],"higher":["UserAuthenticationMethod.ReadWrite"]},"Application":{"least":["UserAuthenticationMethod.Read"],"higher":["UserAuthenticationMethod.ReadWrite"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.Read"],"higher":["UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":[]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthenticationMethod.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.AuthenticationMethod"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.AuthenticationMethod"]}},{"Application":{"least":["PermissionsAnalytics.Read.OwnedBy"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.B2BManagementPolicy"],"higher":["Policy.ReadWrite.B2BManagementPolicy"]},"Application":{"least":["Policy.Read.B2BManagementPolicy"],"higher":["Policy.ReadWrite.B2BManagementPolicy"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.B2BManagementPolicy"],"higher":[]},"Application":{"least":["Policy.ReadWrite.B2BManagementPolicy"],"higher":[]}},{"DelegatedWork":{"least":["BackupRestore-Monitor.Read.All"],"higher":[]},"Application":{"least":["BackupRestore-Monitor.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":["Tasks.ReadWrite"]},"Application":{"least":["Tasks.Read"],"higher":["Tasks.ReadWrite"]}},{"DelegatedWork":{"least":["Tasks.ReadWrite"],"higher":[]},"Application":{"least":["Tasks.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":[]}},{"DelegatedWork":{"least":["BusinessScenarioConfig.ReadWrite.OwnedBy"],"higher":["BusinessScenarioConfig.ReadWrite.All"]},"Application":{"least":["BusinessScenarioConfig.ReadWrite.OwnedBy"],"higher":[]}},{"DelegatedWork":{"least":["BusinessScenarioConfig.Read.OwnedBy"],"higher":["BusinessScenarioConfig.ReadWrite.OwnedBy","BusinessScenarioConfig.Read.All","BusinessScenarioConfig.ReadWrite.All"]},"Application":{"least":["BusinessScenarioConfig.Read.OwnedBy"],"higher":["BusinessScenarioConfig.ReadWrite.OwnedBy"]}},{"DelegatedWork":{"least":["BusinessScenarioData.ReadWrite.OwnedBy"],"higher":[]},"Application":{"least":["BusinessScenarioData.ReadWrite.OwnedBy"],"higher":[]}},{"DelegatedWork":{"least":["BusinessScenarioConfig.Read.OwnedBy"],"higher":["BusinessScenarioConfig.Read.All","BusinessScenarioConfig.ReadWrite.All","BusinessScenarioConfig.ReadWrite.OwnedBy"]},"Application":{"least":["BusinessScenarioConfig.Read.OwnedBy"],"higher":["BusinessScenarioConfig.ReadWrite.OwnedBy"]}},{"DelegatedWork":{"least":["BusinessScenarioData.Read.OwnedBy"],"higher":["BusinessScenarioData.ReadWrite.OwnedBy"]},"Application":{"least":["BusinessScenarioData.Read.OwnedBy"],"higher":["BusinessScenarioData.ReadWrite.OwnedBy"]}},{"Application":{"least":["Calls.JoinGroupCall.All"],"higher":[]}},{"DelegatedWork":{"least":["CallDelegation.Read"],"higher":["CallDelegation.ReadWrite"]}},{"DelegatedWork":{"least":["AppCertTrustConfiguration.ReadWrite.All"],"higher":[]},"Application":{"least":["AppCertTrustConfiguration.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["AppCertTrustConfiguration.Read.All"],"higher":["AppCertTrustConfiguration.ReadWrite.All"]},"Application":{"least":["AppCertTrustConfiguration.Read.All"],"higher":["AppCertTrustConfiguration.ReadWrite.All"]}},{"DelegatedWork":{"least":["MutualTlsOauthConfiguration.Read.All"],"higher":["MutualTlsOauthConfiguration.ReadWrite.All","Directory.Read.All"]},"Application":{"least":["MutualTlsOauthConfiguration.Read.All"],"higher":["MutualTlsOauthConfiguration.ReadWrite.All","Directory.Read.All"]}},{"DelegatedWork":{"least":["MutualTlsOauthConfiguration.ReadWrite.All"],"higher":[]},"Application":{"least":["MutualTlsOauthConfiguration.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Chat.ReadBasic"],"higher":["Chat.Read","Chat.ReadWrite"]},"Application":{"least":["ChatSettings.Read.Chat"],"higher":["Chat.Manage.Chat","Chat.Read.All","Chat.ReadBasic.All","Chat.ReadWrite.All","ChatSettings.ReadWrite.Chat"]}},{"DelegatedWork":{"least":["ResourceSpecificPermissionGrant.ReadForChat"],"higher":["TeamsAppInstallation.ManageSelectedForChat","TeamsAppInstallation.ReadForChat","TeamsAppInstallation.ReadWriteForChat","TeamsAppInstallation.ReadWriteSelfForChat"]},"Application":{"least":["TeamsAppInstallation.Read.Chat"],"higher":["Chat.Manage.Chat","ResourceSpecificPermissionGrant.ReadForChat.All","TeamsAppInstallation.ManageSelectedForChat.All","TeamsAppInstallation.Read.All","TeamsAppInstallation.ReadForChat.All","TeamsAppInstallation.ReadWriteForChat.All","TeamsAppInstallation.ReadWriteSelfForChat.All"]}},{"DelegatedWork":{"least":["CloudLicensing.Read"],"higher":["CloudLicensing.Read.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["CloudLicensing.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing.Read"],"higher":["CloudLicensing.Read.All","User-CloudLicensing.Read.All","User.Read.All","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["CloudLicensing.Read.All"],"higher":["User-CloudLicensing.Read.All","User.Read.All","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing.AssignLicenses"],"higher":["CloudLicensing.AssignLicenses.Organization","User-CloudLicensing.AssignLicenses","User-CloudLicensing.AssignLicenses.Organization","User.ReadWrite.All","Group-CloudLicensing.AssignLicenses","Group-CloudLicensing.AssignLicenses.Organization","Group.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["CloudLicensing.AssignLicenses.Organization"],"higher":["User-CloudLicensing.AssignLicenses.Organization","User.ReadWrite.All","Group-CloudLicensing.AssignLicenses.Organization","Group.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing.Read"],"higher":["Directory.Read.All","Directory.ReadWrite.All","CloudLicensing.Read.All"]},"Application":{"least":["CloudLicensing.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing.Read"],"higher":["CloudLicensing.Read.All","User-CloudLicensing.Read.All","User.Read.All","User.ReadWrite.All","Group-CloudLicensing.Read","Group-CloudLicensing.Read.All","Group.Read.All","Group.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["CloudLicensing.Read.All"],"higher":["User-CloudLicensing.Read.All","User.Read.All","User.ReadWrite.All","Group-CloudLicensing.Read.All","Group.Read.All","Group.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing.Read"],"higher":["CloudLicensing.Read.All","User-CloudLicensing.Read","User-CloudLicensing.Read.All","User.Read.All","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["CloudLicensing.Read.All"],"higher":["User-CloudLicensing.Read.All","User.Read.All","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing.AssignLicenses"],"higher":["CloudLicensing.AssignLicenses.Organization","Directory.ReadWrite.All"]},"Application":{"least":["CloudLicensing.AssignLicenses.Organization"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing.AssignLicenses"],"higher":["CloudLicensing.AssignLicenses.Organization","User-CloudLicensing.AssignLicenses","User-CloudLicensing.AssignLicenses.Organization","AgentIdUser.ReadWrite.IdentityParentedBy","AgentIdUser.ReadWrite.All","User.ReadWrite.All","Group-CloudLicensing.AssignLicenses","Group-CloudLicensing.AssignLicenses.Organization","Group.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["CloudLicensing.AssignLicenses.Organization"],"higher":["User-CloudLicensing.AssignLicenses.Organization","AgentIdUser.ReadWrite.IdentityParentedBy","AgentIdUser.ReadWrite.All","User.ReadWrite.All","Group-CloudLicensing.AssignLicenses.Organization","Group.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing-UsageRights.Read"],"higher":["CloudLicensing-UsageRights.ReadWrite"]},"Application":{"least":["CloudLicensing-UsageRights.Read.All"],"higher":["CloudLicensing-UsageRights.ReadWrite.All"]}},{"DelegatedWork":{"least":["Device-CloudLicensing.Read"],"higher":["Device-CloudLicensing.Read.All","Device.Read.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Device-CloudLicensing.Read.All"],"higher":["Device.Read.All","Device.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing-Assignment.ReadWrite"],"higher":[]},"Application":{"least":["CloudLicensing-Assignment.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Group-UsageRight.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group-CloudLicensing.Read","Group-CloudLicensing.Read.All","Group.Read.All","Group.ReadWrite.All","User.Read.All","User.ReadWrite.All"]},"Application":{"least":["Group-UsageRight.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","Group-CloudLicensing.Read.All","Group.Read.All","Group.ReadWrite.All","User.Read.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudLicensing.AssignLicenses.Organization"],"higher":["Group-CloudLicensing.AssignLicenses.Organization","Group.ReadWrite.All","User.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["CloudLicensing.AssignLicenses.Organization"],"higher":["Group-CloudLicensing.AssignLicenses.Organization","Group.ReadWrite.All","User.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["User-UsageRight.Read"],"higher":["User.Read","User.Read.All","User.ReadWrite","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","User-CloudLicensing.Read.All","User-CloudLicensing.Read","User-UsageRight.Read.All","User-UsageRight.Read"]},"Application":{"least":["User-UsageRight.Read.All"],"higher":["User.Read.All","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All","User-CloudLicensing.Read.All","User-UsageRight.Read.All"]}},{"DelegatedWork":{"least":["User-CloudLicensing.Read"],"higher":["User-CloudLicensing.Read.All","Group-CloudLicensing.Read","Group-CloudLicensing.Read.All","User.Read.All","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["User-CloudLicensing.Read.All"],"higher":["Group-CloudLicensing.Read.All","User.Read.All","User.ReadWrite.All","Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["User-CloudLicensing.AssignLicenses.Organization"],"higher":["AgentIdUser.ReadWrite.IdentityParentedBy","AgentIdUser.ReadWrite.All","User.ReadWrite.All","Directory.ReadWrite.All"]},"Application":{"least":["User-CloudLicensing.AssignLicenses.Organization"],"higher":["AgentIdUser.ReadWrite.IdentityParentedBy","AgentIdUser.ReadWrite.All","User.ReadWrite.All","Directory.ReadWrite.All"]}},{"Application":{"least":["CloudPC.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["CloudPC.Read.All"],"higher":[]},"Application":{"least":["CloudPC.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["CloudPC.ReadWrite.All"],"higher":["CloudPC.Read.All"]},"Application":{"least":["CloudPC.ReadWrite.All"],"higher":["CloudPC.Read.All"]}},{"DelegatedWork":{"least":["CloudPC.Read.All"],"higher":[]},"Application":{"least":["CloudPC.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Directory.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Site.Manage.All"],"higher":["Site.Manage.All"]},"Application":{"least":["Site.Manage.All"],"higher":["Site.Manage.All"]}},{"DelegatedWork":{"least":["Sites.Read.All"],"higher":["Sites.Manage.All","Sites.ReadWrite.All"]},"Application":{"least":["Sites.Read.All"],"higher":["Sites.Manage.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Sites.Manage.All"],"higher":[]},"Application":{"least":["Sites.Manage.All"],"higher":[]}},{"DelegatedWork":{"least":["ProvisioningLog.Read.All"],"higher":["AuditLog.Read.All"]},"Application":{"least":["ProvisioningLog.Read.All"],"higher":["AuditLog.Read.All"]}},{"DelegatedWork":{"least":["RoleManagement.ReadWrite.Exchange"],"higher":[]},"Application":{"least":["RoleManagement.ReadWrite.Exchange"],"higher":[]}},{"DelegatedWork":{"least":["RoleManagement.Read.Exchange"],"higher":["RoleManagement.Read.All","RoleManagement.ReadWrite.Exchange"]},"Application":{"least":["RoleManagement.Read.Exchange"],"higher":["RoleManagement.Read.All","RoleManagement.ReadWrite.Exchange"]}},{"DelegatedWork":{"least":["Insights-UserMetric.Read.All"],"higher":[]},"Application":{"least":["Insights-UserMetric.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Device.CreateFromOwnedTemplate"],"higher":[]}},{"DelegatedWork":{"least":["DeviceTemplate.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]},"Application":{"least":["DeviceTemplate.ReadWrite.All"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceTemplate.ReadWrite.All"],"higher":[]},"Application":{"least":["DeviceTemplate.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceTemplate.Read"],"higher":["DeviceTemplate.Read.All","DeviceTemplate.ReadWrite.All"]},"Application":{"least":["DeviceTemplate.Read.All"],"higher":["DeviceTemplate.ReadWrite.All"]}},{"DelegatedWork":{"least":["ExternalUserProfile.ReadWrite.All"],"higher":[]},"Application":{"least":["ExternalUserProfile.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PendingExternalUserProfile.ReadWrite.All"],"higher":[]},"Application":{"least":["PendingExternalUserProfile.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ExternalUserProfile.Read.All"],"higher":["ExternalUserProfile.ReadWrite.All"]},"Application":{"least":["ExternalUserProfile.Read.All"],"higher":["ExternalUserProfile.ReadWrite.All"]}},{"DelegatedWork":{"least":["CrossTenantUserProfileSharing.Read.All"],"higher":["CrossTenantUserProfileSharing.ReadWrite.All"]},"Application":{"least":["CrossTenantUserProfileSharing.Read.All"],"higher":["CrossTenantUserProfileSharing.ReadWrite.All"]}},{"DelegatedWork":{"least":["CrossTenantUserProfileSharing.Read"],"higher":["CrossTenantUserProfileSharing.Read.All","CrossTenantUserProfileSharing.ReadWrite","CrossTenantUserProfileSharing.ReadWrite.All"]},"Application":{"least":["CrossTenantUserProfileSharing.Read.All"],"higher":["CrossTenantUserProfileSharing.ReadWrite.All"]}},{"DelegatedWork":{"least":["PendingExternalUserProfile.Read.All"],"higher":["PendingExternalUserProfile.ReadWrite.All"]},"Application":{"least":["PendingExternalUserProfile.Read.All"],"higher":["PendingExternalUserProfile.ReadWrite.All"]}},{"DelegatedWork":{"least":["DirectoryRecommendations.Read.All"],"higher":["DirectoryRecommendations.ReadWrite.All"]},"Application":{"least":["DirectoryRecommendations.Read.All"],"higher":["DirectoryRecommendations.ReadWrite.All"]}},{"DelegatedWork":{"least":["Device.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All"]},"Application":{"least":["Device.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["RoleManagement.Read.Directory"],"higher":["RoleManagement.ReadWrite.Directory"]},"Application":{"least":["RoleManagement.Read.Directory"],"higher":["RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["Files.ReadWrite"],"higher":["Files.ReadWrite.All","Sites.FullControl.All","Sites.Manage.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.ReadWrite.All"],"higher":["Sites.FullControl.All","Sites.Manage.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["Financials.ReadWrite.All"],"higher":[]},"Application":{"least":["Financials.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["eDiscovery.Read.All"],"higher":["eDiscovery.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["User.ReadWrite","AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","User.Read.All","User.ReadBasic.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["EngagementMeetingConversation.Read.All"],"higher":[]},"Application":{"least":["EngagementMeetingConversation.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Calendars.ReadBasic"],"higher":["Calendars.Read","Calendars.ReadWrite"]},"Application":{"least":["Calendars.Read"],"higher":["Calendars.ReadBasic","Calendars.ReadWrite"]}},{"Application":{"least":["ExternalConnection.ReadWrite.OwnedBy"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.ExternalIdentities"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.ExternalIdentities"]}},{"DelegatedWork":{"least":["Policy.ReadWrite.ExternalIdentities"],"higher":[]},"Application":{"least":["Policy.ReadWrite.ExternalIdentities"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.FedTokenValidation"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.FedTokenValidation"]}},{"DelegatedWork":{"least":["FileStorageContainer.Manage.All"],"higher":[]}},{"DelegatedWork":{"least":["Goals-Export.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Goals-Export.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PrivilegedAccess.ReadWrite.AzureResources"],"higher":[]}},{"DelegatedWork":{"least":["PrivilegedAccess.ReadWrite.AzureAD"],"higher":["PrivilegedAccess.ReadWrite.AzureADGroup","PrivilegedAccess.ReadWrite.AzureResources"]},"Application":{"least":["PrivilegedAccess.Read.AzureAD"],"higher":["PrivilegedAccess.Read.AzureADGroup","PrivilegedAccess.Read.AzureResources"]}},{"DelegatedWork":{"least":["Directory.AccessAsUser.All"],"higher":["Application.ReadWrite.All","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Reports.Read.All"],"higher":["Directory.Read.All"]},"Application":{"least":["Reports.Read.All"],"higher":["Directory.Read.All"]}},{"DelegatedWork":{"least":["PrivilegedAccess.Read.AzureADGroup"],"higher":["PrivilegedAccess.ReadWrite.AzureADGroup"]},"Application":{"least":["PrivilegedAccess.Read.AzureADGroup"],"higher":["PrivilegedAccess.ReadWrite.AzureADGroup"]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.Read"],"higher":["UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthenticationMethod.Read.All"]}},{"DelegatedWork":{"least":["HealthMonitoringAlert.Read.All"],"higher":["HealthMonitoringAlert.ReadWrite.All"]},"Application":{"least":["HealthMonitoringAlert.Read.All"],"higher":["HealthMonitoringAlert.ReadWrite.All"]}},{"DelegatedWork":{"least":["HealthMonitoringAlert.ReadWrite.All"],"higher":[]},"Application":{"least":["HealthMonitoringAlert.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["HealthMonitoringAlertConfig.Read.All"],"higher":["HealthMonitoringAlertConfig.ReadWrite.All"]},"Application":{"least":["HealthMonitoringAlertConfig.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["HealthMonitoringAlertConfig.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["HealthMonitoringAlertConfig.Read.All"],"higher":[]},"Application":{"least":["HealthMonitoringAlertConfig.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["HealthMonitoringAlert.Read.All"],"higher":[]},"Application":{"least":["HealthMonitoringAlert.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["LifecyclePolicies-AgentId.ReadWrite.All"],"higher":["LifecyclePolicies-Guests.ReadWrite.All"]},"Application":{"least":["LifecyclePolicies-AgentId.ReadWrite.All"],"higher":["LifecyclePolicies-Guests.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecyclePolicies-AgentId.Read.All"],"higher":["LifecyclePolicies-AgentId.ReadWrite.All","LifecyclePolicies-Guests.Read.All","LifecyclePolicies-Guests.ReadWrite.All"]},"Application":{"least":["LifecyclePolicies-AgentId.Read.All"],"higher":["LifecyclePolicies-AgentId.ReadWrite.All","LifecyclePolicies-Guests.Read.All","LifecyclePolicies-Guests.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecyclePolicies-Guests.Read.All"],"higher":["LifecyclePolicies-AgentId.Read.All","LifecyclePolicies-AgentId.ReadWrite.All","LifecyclePolicies-Guests.ReadWrite.All"]},"Application":{"least":["LifecyclePolicies-Guests.Read.All"],"higher":["LifecyclePolicies-AgentId.Read.All","LifecyclePolicies-AgentId.ReadWrite.All","LifecyclePolicies-Guests.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecyclePolicies-AgentId.Read.All"],"higher":["LifecyclePolicies-AgentId.ReadWrite.All"]},"Application":{"least":["LifecyclePolicies-AgentId.Read.All"],"higher":["LifecyclePolicies-AgentId.ReadWrite.All"]}},{"DelegatedWork":{"least":["LifecyclePolicies-AgentId.ReadWrite.All"],"higher":[]},"Application":{"least":["LifecyclePolicies-AgentId.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DirectoryRecommendations.ReadWrite.All"],"higher":[]},"Application":{"least":["DirectoryRecommendations.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["CrossTenantUserProfileSharing.ReadWrite"],"higher":["CrossTenantUserProfileSharing.ReadWrite.All"]},"Application":{"least":["CrossTenantUserProfileSharing.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-OutboundFlow.ReadWrite.All"],"higher":[]},"Application":{"least":["IndustryData-OutboundFlow.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-OutboundFlow.Read.All"],"higher":["IndustryData-OutboundFlow.ReadWrite.All"]},"Application":{"least":["IndustryData-OutboundFlow.Read.All"],"higher":["IndustryData-OutboundFlow.ReadWrite.All"]}},{"DelegatedWork":{"least":["IndustryData-DataConnector.Upload"],"higher":["IndustryData-DataConnector.ReadWrite.All"]},"Application":{"least":["IndustryData-DataConnector.ReadWrite.All"],"higher":["IndustryData-DataConnector.Upload"]}},{"DelegatedWork":{"least":["IndustryData-DataConnector.ReadWrite.All"],"higher":[]},"Application":{"least":["IndustryData-DataConnector.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData.ReadBasic.All"],"higher":[]},"Application":{"least":["IndustryData.ReadBasic.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-InboundFlow.ReadWrite.All"],"higher":[]},"Application":{"least":["IndustryData-InboundFlow.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-InboundFlow.Read.All"],"higher":["IndustryData-InboundFlow.ReadWrite.All"]},"Application":{"least":["IndustryData-InboundFlow.Read.All"],"higher":["IndustryData-InboundFlow.ReadWrite.All"]}},{"DelegatedWork":{"least":["IndustryData-DataConnector.Read.All"],"higher":["IndustryData-DataConnector.ReadWrite.All"]},"Application":{"least":["IndustryData-DataConnector.Read.All"],"higher":["IndustryData-DataConnector.ReadWrite.All"]}},{"DelegatedWork":{"least":["IndustryData-OutboundFlow.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-OutboundFlow.Read.All"],"higher":["IndustryData-OutboundFlow.ReadWrite.All"]},"Application":{"least":["IndustryData-OutboundFlow.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-Run.Read.All"],"higher":["IndustryData-Run.Start"]},"Application":{"least":["IndustryData-Run.Read.All"],"higher":["IndustryData-Run.Start"]}},{"DelegatedWork":{"least":["IndustryData-Run.Start"],"higher":[]},"Application":{"least":["IndustryData-Run.Start"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-ReferenceDefinition.ReadWrite.All"],"higher":[]},"Application":{"least":["IndustryData-ReferenceDefinition.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-ReferenceDefinition.Read.All"],"higher":["IndustryData-ReferenceDefinition.ReadWrite.All"]},"Application":{"least":["IndustryData-ReferenceDefinition.Read.All"],"higher":["IndustryData-ReferenceDefinition.ReadWrite.All"]}},{"DelegatedWork":{"least":["IndustryData.ReadBasic.All"],"higher":["IndustryData-ReferenceDefinition.ReadWrite.All"]},"Application":{"least":["IndustryData.ReadBasic.All"],"higher":["IndustryData-ReferenceDefinition.ReadWrite.All"]}},{"DelegatedWork":{"least":["IndustryData-ReferenceDefinition.Read.All"],"higher":[]},"Application":{"least":["IndustryData-ReferenceDefinition.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-SourceSystem.ReadWrite.All"],"higher":[]},"Application":{"least":["IndustryData-SourceSystem.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-SourceSystem.Read.All"],"higher":["IndustryData-SourceSystem.ReadWrite.All"]},"Application":{"least":["IndustryData-SourceSystem.Read.All"],"higher":["IndustryData-SourceSystem.ReadWrite.All"]}},{"DelegatedWork":{"least":["IndustryData-TimePeriod.ReadWrite.All"],"higher":[]},"Application":{"least":["IndustryData-TimePeriod.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IndustryData-TimePeriod.Read.All"],"higher":["IndustryData-TimePeriod.ReadWrite.All"]},"Application":{"least":["IndustryData-TimePeriod.Read.All"],"higher":["IndustryData-TimePeriod.ReadWrite.All"]}},{"DelegatedWork":{"least":["InformationProtectionPolicy.Read"],"higher":[]},"Application":{"least":["InformationProtectionPolicy.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Organization.ReadWrite.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","User.ReadWrite.All"]},"Application":{"least":["Organization.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":[]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementApps.Read.All"],"higher":["DeviceManagementApps.ReadWrite.All","User.Read.All"]},"Application":{"least":["DeviceManagementApps.Read.All"],"higher":["DeviceManagementApps.ReadWrite.All","User.Read.All"]}},{"DelegatedWork":{"least":["DeviceManagementCloudCA.Read.All"],"higher":["DeviceManagementCloudCA.ReadWrite.All"]},"Application":{"least":["DeviceManagementCloudCA.Read.All"],"higher":["DeviceManagementCloudCA.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementCloudCA.ReadWrite.All"],"higher":[]},"Application":{"least":["DeviceManagementCloudCA.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementEndpointSecurity.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementEndpointSecurity.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementEndpointSecurity.Read.All","DeviceManagementEndpointSecurity.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementEndpointSecurity.Read.All","DeviceManagementEndpointSecurity.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementEndpointSecurity.Read.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementEndpointSecurity.Read.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementManagedDevices.Read.All","DeviceManagementManagedDevices.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementManagedDevices.Read.All","DeviceManagementManagedDevices.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementServiceConfig.ReadWrite.All"],"higher":["DeviceManagementConfiguration.Read.All","DeviceManagementConfiguration.ReadWrite.All"]},"Application":{"least":["DeviceManagementServiceConfig.ReadWrite.All"],"higher":["DeviceManagementConfiguration.Read.All","DeviceManagementConfiguration.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementScripts.ReadWrite.All"],"higher":[]},"Application":{"least":["DeviceManagementScripts.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementScripts.Read.All"],"higher":["DeviceManagementScripts.ReadWrite.All"]},"Application":{"least":["DeviceManagementScripts.Read.All"],"higher":["DeviceManagementScripts.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementManagedDevices.Read.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementManagedDevices.Read.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementRBAC.Read.All","DeviceManagementRBAC.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All","DeviceManagementRBAC.Read.All","DeviceManagementRBAC.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementRBAC.Read.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementRBAC.Read.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementRBAC.ReadWrite.All"]},"Application":{"least":["DeviceManagementConfiguration.ReadWrite.All"],"higher":["DeviceManagementRBAC.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementApps.Read.All","DeviceManagementManagedDevices.Read.All"]},"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementApps.Read.All","DeviceManagementManagedDevices.Read.All"]}},{"Application":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All"]}},{"DelegatedWork":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All"]},"Application":{"least":["Application.Read.All"],"higher":["Application.ReadWrite.All","Application.ReadWrite.OwnedBy"]}},{"DelegatedWork":{"least":["Application.ReadWrite.All"],"higher":[]},"Application":{"least":["Application.ReadWrite.All"],"higher":["Application.ReadWrite.OwnedBy"]}},{"DelegatedWork":{"least":["Sites.ReadWrite.All"],"higher":["Sites.ReadWrite.All","Sites.FullControl.All","Sites.Manage.All","Sites.Selected","Lists.SelectedOperations.Selected","ListItems.SelectedOperations.Selected"]},"Application":{"least":["Sites.ReadWrite.All"],"higher":["Sites.FullControl.All","Sites.Manage.All","Sites.ReadWrite.All","Sites.Selected","Files.SelectedOperations.Selected","Lists.SelectedOperations.Selected","ListItems.SelectedOperations.Selected"]}},{"DelegatedWork":{"least":["RoleManagementAlert.Read.Directory"],"higher":["RoleManagementAlert.ReadWrite.Directory"]},"Application":{"least":["RoleManagementAlert.Read.Directory"],"higher":["RoleManagementAlert.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["MailboxConfigItem.ReadWrite"],"higher":[]},"Application":{"least":["MailboxConfigItem.ReadWrite"],"higher":[]}},{"DelegatedWork":{"least":["ManagedTenants.Read.All"],"higher":["ManagedTenants.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Application.Read.All","Policy.ReadWrite.ConditionalAccess"]}},{"DelegatedWork":{"least":["DeviceManagementConfiguration.Read.All"],"higher":["DeviceManagementConfiguration.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceManagementManagedDevices.Read.All"],"higher":["DeviceManagementManagedDevices.ReadWrite.All"]}},{"DelegatedWork":{"least":["ManagedTenant.Read.All"],"higher":["ManagedTenant.ReadWrite.All"]}},{"DelegatedWork":{"least":["ManagedTenants.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["OnlineMeetings.ReadWrite"],"higher":[]},"Application":{"least":["OnlineMeetings.Read.All"],"higher":["OnlineMeetings.ReadWrite.All"]}},{"DelegatedWork":{"least":["CrossTenantContentMigration.Read.All"],"higher":["CrossTenantContentMigration.ReadWrite.All"]},"Application":{"least":["CrossTenantContentMigration.Read.All"],"higher":["CrossTenantContentMigration.ReadWrite.All"]}},{"DelegatedWork":{"least":["CrossTenantContentMigration.ReadWrite.All"],"higher":[]},"Application":{"least":["CrossTenantContentMigration.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Policy.ReadWrite.MobilityManagement"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.MobilityManagement"]}},{"DelegatedWork":{"least":["MutualTlsOauthConfiguration.Read.All"],"higher":[]},"Application":{"least":["MutualTlsOauthConfiguration.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Files.ReadWrite.Selected"],"higher":["Files.ReadWrite","Files.ReadWrite.All","Files.ReadWrite.AppFolder","Sites.FullControl.All","Sites.Manage.All","Sites.ReadWrite.All"]},"Application":{"least":["Files.ReadWrite.All"],"higher":["Sites.FullControl.All","Sites.Manage.All","Sites.ReadWrite.All"]}},{"DelegatedWork":{"least":["NetworkAccess.Read.All"],"higher":[]},"Application":{"least":["NetworkAccess.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["NetworkAccess-Reports.Read.All"],"higher":[]},"Application":{"least":["NetworkAccess-Reports.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["NetworkAccess.Read.All"],"higher":["NetworkAccess.ReadWrite.All"]},"Application":{"least":["NetworkAccess.Read.All"],"higher":["NetworkAccess.ReadWrite.All"]}},{"DelegatedWork":{"least":["NetworkAccess.ReadWrite.All"],"higher":[]},"Application":{"least":["NetworkAccess.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["NetworkAccessPolicy.Read.All"],"higher":["NetworkAccessPolicy.ReadWrite.All"]}},{"DelegatedWork":{"least":["NetworkAccessPolicy.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["NetworkAccess-Reports.Read.All"],"higher":["NetworkAccess.ReadWrite.All"]},"Application":{"least":["NetworkAccess-Reports.Read.All"],"higher":["NetworkAccess.ReadWrite.All"]}},{"DelegatedWork":{"least":["NetworkAccess.Read.All"],"higher":["NetworkAccess.ReadWrite.All"]},"Application":{"least":["NetworkAccess.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["NetworkAccessPolicy.Read.All"],"higher":["NetworkAccessPolicy.ReadWrite.All"]},"Application":{"least":["NetworkAccessPolicy.Read.All"],"higher":["NetworkAccessPolicy.ReadWrite.All"]}},{"DelegatedWork":{"least":["NetworkAccess.ReadWrite.All"],"higher":["NetworkAccess.ReadWrite.All"]}},{"DelegatedWork":{"least":["Notifications.ReadWrite.CreatedByApp"],"higher":[]}},{"DelegatedWork":{"least":["Policy.ReadWrite.OnPremAuthenticationPolicy"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.OnPremAuthenticationPolicy"],"higher":["Policy.ReadWrite.OnPremAuthenticationPolicy"]}},{"DelegatedWork":{"least":["Policy.Read.OnPremAuthenticationPolicy"],"higher":[]}},{"DelegatedWork":{"least":["Policy.Read.HybridAuthentication"],"higher":["Policy.ReadWrite.HybridAuthentication","Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["OnPremisesPublishingProfiles.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["OrganizationalBranding.ReadWrite.All"],"higher":[]},"Application":{"least":["OrganizationalBranding.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["OrganizationalBranding.Read.All"],"higher":[]},"Application":{"least":["OrganizationalBranding.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["OrganizationalBranding.Read.All"],"higher":["OrganizationalBranding.ReadWrite.All"]},"Application":{"least":["OrganizationalBranding.Read.All"],"higher":["OrganizationalBranding.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["OrgContact.Read"],"higher":["OrgContact.Read.All","Directory.Read.All"]},"Application":{"least":["OrgContact.Read"],"higher":["OrgContact.Read.All","Directory.Read.All"]}},{"DelegatedWork":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All","Sites.FullControl.All","Sites.Manage.All"]},"Application":{"least":["Sites.Read.All"],"higher":["Sites.ReadWrite.All","Sites.FullControl.All","Sites.Manage.All"]}},{"Application":{"least":["Calls.ReportSyntheticMedia.All"],"higher":[]}},{"DelegatedWork":{"least":["PartnerSecurity.Read.All"],"higher":["PartnerSecurity.ReadWrite.All"]},"Application":{"least":["PartnerSecurity.Read.All"],"higher":["PartnerSecurity.ReadWrite.All"]}},{"DelegatedWork":{"least":["PartnerSecurity.ReadWrite.All"],"higher":[]},"Application":{"least":["PartnerSecurity.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PartnerSecurity.Read.All"],"higher":[]},"Application":{"least":["PartnerSecurity.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["UserAuthenticationMethod.ReadWrite"],"higher":["UserAuthMethod-MicrosoftAuthApp.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-MicrosoftAuthApp.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["UserAuthMethod-MicrosoftAuthApp.Read"],"higher":["UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-MicrosoftAuthApp.Read.All","UserAuthMethod-MicrosoftAuthApp.ReadWrite","UserAuthMethod-MicrosoftAuthApp.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["UserAuthMethod-MicrosoftAuthApp.Read"],"higher":["UserAuthenticationMethod.Read","UserAuthenticationMethod.Read.All","UserAuthenticationMethod.ReadWrite","UserAuthenticationMethod.ReadWrite.All","UserAuthMethod-MicrosoftAuthApp.Read.All","UserAuthMethod-MicrosoftAuthApp.ReadWrite","UserAuthMethod-MicrosoftAuthApp.ReadWrite.All"]},"Application":{"least":["UserAuthenticationMethod.Read.All"],"higher":["UserAuthenticationMethod.ReadWrite.All"]}},{"DelegatedWork":{"least":["ScheduledPermissions.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["User.Read"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy","User.Read.All","User.ReadBasic.All","User.ReadWrite","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":["Tasks.ReadWrite"]},"Application":{"least":["Tasks.Read.All"],"higher":["Tasks.ReadWrite.All"]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":[]},"Application":{"least":["Tasks.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":["Tasks.ReadWrite","Group.Read.All"]},"Application":{"least":["Tasks.Read.All"],"higher":["Tasks.ReadWrite.All"]}},{"DelegatedWork":{"least":["Tasks.Read"],"higher":["Group.Read.All","Tasks.ReadWrite"]}},{"DelegatedWork":{"least":["Tasks.ReadWrite"],"higher":["Group.ReadWrite.All"]}},{"DelegatedWork":{"least":["ProgramControl.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ProgramControl.Read.All"],"higher":["ProgramControl.ReadWrite.All"]},"Application":{"least":["ProgramControl.Read.All"],"higher":["ProgramControl.ReadWrite.All"]}},{"DelegatedWork":{"least":["ProgramControl.ReadWrite.All"],"higher":[]},"Application":{"least":["ProgramControl.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["DeviceManagementRBAC.ReadWrite.All"],"higher":["CloudPC.ReadWrite.All","Directory.ReadWrite.All","RoleManagement.ReadWrite.CloudPC","RoleManagement.ReadWrite.Directory"]},"Application":{"least":["DeviceManagementRBAC.ReadWrite.All"],"higher":["CloudPC.ReadWrite.All","Directory.ReadWrite.All","RoleManagement.ReadWrite.CloudPC","RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["PrivilegedAccess.ReadWrite.AzureAD"],"higher":[]},"Application":{"least":["PrivilegedAccess.Read.AzureAD"],"higher":[]}},{"DelegatedWork":{"least":["RoleManagement.Read.Directory"],"higher":["RoleManagement.Read.All","RoleManagement.ReadWrite.Directory"]},"Application":{"least":["RoleManagement.Read.Directory"],"higher":["RoleManagement.Read.All","RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["CloudPC.Read.All"],"higher":["CloudPC.ReadWrite.All","DeviceManagementRBAC.Read.All","DeviceManagementRBAC.ReadWrite.All"]},"Application":{"least":["CloudPC.Read.All"],"higher":["CloudPC.ReadWrite.All","DeviceManagementRBAC.Read.All","DeviceManagementRBAC.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudPC.ReadWrite.All"],"higher":["DeviceManagementRBAC.ReadWrite.All"]},"Application":{"least":["CloudPC.ReadWrite.All"],"higher":["DeviceManagementRBAC.ReadWrite.All"]}},{"DelegatedWork":{"least":["DirectoryRecommendations.Read.All"],"higher":[]},"Application":{"least":["DirectoryRecommendations.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["User.Read"],"higher":["User.Read.All"]},"Application":{"least":["User.Read"],"higher":["User.Read.All"]}},{"DelegatedWork":{"least":["User.ReadWrite"],"higher":["User.ReadWrite.All"]},"Application":{"least":["User.ReadWrite"],"higher":["User.ReadWrite.All"]}},{"DelegatedWork":{"least":["IdentityRiskyAgent.ReadWrite.All"],"higher":[]},"Application":{"least":["IdentityRiskyAgent.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["IdentityRiskyAgent.Read.All"],"higher":[]},"Application":{"least":["IdentityRiskyAgent.Read.All"],"higher":[]}},{"Application":{"least":["Schedule.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityAlert.Create.All"],"higher":["SecurityAlert.ReadWrite.All"]},"Application":{"least":["SecurityAlert.Create.All"],"higher":["SecurityAlert.ReadWrite.All"]}},{"DelegatedWork":{"least":["CaseManagement.ReadWrite.All"],"higher":[]},"Application":{"least":["CaseManagement.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["CaseManagement.Read.All"],"higher":["CaseManagement.ReadWrite.All"]},"Application":{"least":["CaseManagement.Read.All"],"higher":["CaseManagement.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudApp-Discovery.Read.All"],"higher":[]},"Application":{"least":["CloudApp-Discovery.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Workbooks.ReadWrite.All"],"higher":[]},"Application":{"least":["Workbooks.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["CustomDetection.Read.All"],"higher":["CustomDetection.ReadWrite.All"]},"Application":{"least":["CustomDetection.Read.All"],"higher":["CustomDetection.ReadWrite.All"]}},{"DelegatedWork":{"least":["CustomDetection.ReadWrite.All"],"higher":[]},"Application":{"least":["CustomDetection.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ThreatSubmission.Read"],"higher":["ThreatSubmission.Read.All","ThreatSubmission.ReadWrite","ThreatSubmission.ReadWrite.All"]},"Application":{"least":["ThreatSubmission.Read.All"],"higher":["ThreatSubmission.ReadWrite.All"]}},{"DelegatedWork":{"least":["ThreatSubmission.Read"],"higher":["ThreatSubmission.ReadWrite","ThreatSubmission.Read.All","ThreatSubmission.ReadWrite.All"]},"Application":{"least":["ThreatSubmission.Read.All"],"higher":["ThreatSubmission.ReadWrite.All"]}},{"DelegatedWork":{"least":["ThreatSubmission.ReadWrite"],"higher":["ThreatSubmission.ReadWrite.All"]},"Application":{"least":["ThreatSubmission.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ThreatSubmission.ReadWrite.All"],"higher":[]},"Application":{"least":["ThreatSubmission.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ThreatSubmissionPolicies.ReadWrite.All"],"higher":[]},"Application":{"least":["ThreatSubmissionPolicy.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ThreatSubmissionPolicy.ReadWrite.All"],"higher":["ThreatSubmission.Read.All","ThreatSubmission.ReadWrite.All"]},"Application":{"least":["ThreatSubmission.Read.All"],"higher":["ThreatSubmissionPolicy.ReadWrite.All","ThreatSubmission.ReadWrite.All"]}},{"DelegatedWork":{"least":["ThreatSubmissionPolicy.ReadWrite.All"],"higher":[]},"Application":{"least":["ThreatSubmissionPolicy.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Zone.ReadWrite.All"],"higher":[]},"Application":{"least":["Zone.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Zone.Read.All"],"higher":["Zone.ReadWrite.All"]},"Application":{"least":["Zone.Read.All"],"higher":["Zone.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityIdentitiesMigration.Read.All"],"higher":[]},"Application":{"least":["SecurityIdentitiesMigration.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["Workbooks.Read.All"],"higher":["Workbooks.ReadWrite.All"]},"Application":{"least":["Workbooks.Read.All"],"higher":["Workbooks.ReadWrite.All"]}},{"DelegatedWork":{"least":["SecurityCopilotWorkspaces.Read.All"],"higher":[]},"Application":{"least":["SecurityCopilotWorkspaces.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityCopilotWorkspaces.ReadWrite.All"],"higher":[]},"Application":{"least":["SecurityCopilotWorkspaces.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["SecurityIdentitiesMigration.ReadWrite.All"],"higher":[]},"Application":{"least":["SecurityIdentitiesMigration.ReadWrite.All"],"higher":[]}},{"Application":{"least":["SecurityActions.ReadWrite.All"],"higher":[]}},{"Application":{"least":["SecurityActions.Read.All"],"higher":["SecurityActions.ReadWrite.All"]}},{"DelegatedWork":{"least":["ServiceActivity-Exchange.Read.All"],"higher":[]},"Application":{"least":["ServiceActivity-Exchange.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["ServiceActivity-Microsoft365Web.Read.All"],"higher":[]},"Application":{"least":["ServiceActivity-Microsoft365Web.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["ServiceActivity-Teams.Read.All"],"higher":[]},"Application":{"least":["ServiceActivity-Teams.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["SharePointCrossTenantMigration.Read.All"],"higher":[]},"Application":{"least":["SharePointCrossTenantMigration.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["SharePointCrossTenantMigration.Manage.All"],"higher":[]},"Application":{"least":["SharePointCrossTenantMigration.Manage.All"],"higher":[]}},{"DelegatedWork":{"least":["ReportSettings.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["ReportSettings.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["User.ReadWrite.All"],"higher":["AgentIdUser.ReadWrite.All","AgentIdUser.ReadWrite.IdentityParentedBy"]}},{"DelegatedWork":{"least":["Schedule.Read.All"],"higher":["SchedulePermissions.ReadWrite.All","Schedule.ReadWrite.All"]},"Application":{"least":["Schedule.Read.All"],"higher":["SchedulePermissions.ReadWrite.All","Schedule.ReadWrite.All"]}},{"DelegatedWork":{"least":["Schedule.ReadWrite.All"],"higher":["SchedulePermissions.ReadWrite.All"]},"Application":{"least":["Schedule.ReadWrite.All"],"higher":["SchedulePermissions.ReadWrite.All"]}},{"DelegatedWork":{"least":["SignInIdentifier.ReadWrite.All"],"higher":[]},"Application":{"least":["SignInIdentifier.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["SignInIdentifier.Read.All"],"higher":["SignInIdentifier.ReadWrite.All"]},"Application":{"least":["SignInIdentifier.Read.All"],"higher":["SignInIdentifier.ReadWrite.All"]}},{"DelegatedWork":{"least":["Sites.Archive.All"],"higher":["Sites.FullControl.All"]},"Application":{"least":["Sites.Archive.All"],"higher":["Sites.FullControl.All"]}},{"DelegatedWork":{"least":["Sites.Create.All"],"higher":["Sites.FullControl.All"]},"Application":{"least":["Sites.Create.All"],"higher":["Sites.FullControl.All"]}},{"DelegatedWork":{"least":["Site.FullControl.All"],"higher":[]},"Application":{"least":["Sites.FullControl.All"],"higher":[]}},{"DelegatedWork":{"least":["Storyline.ReadWrite.All"],"higher":[]},"Application":{"least":["Storyline.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Storyline.Read.All"],"higher":["Storyline.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadForTeam"],"higher":["TeamsAppInstallation.ReadWriteSelfForTeam","TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.ReadForTeam.All"],"higher":["TeamsAppInstallation.ReadWriteSelfForTeam.All","TeamsAppInstallation.ReadWriteForTeam.All","TeamsApp.Read.Group"]}},{"DelegatedWork":{"least":["TeamsAppInstallation.ReadWriteSelfForTeam"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam","TeamsAppInstallation.ReadWriteAndConsentSelfForTeam","TeamsAppInstallation.ReadWriteForTeam"]},"Application":{"least":["TeamsAppInstallation.ReadWriteSelfForTeam.All"],"higher":["Directory.ReadWrite.All","Group.ReadWrite.All","TeamsAppInstallation.ManageSelectedForTeam.All","TeamsAppInstallation.ReadWriteAndConsentForTeam.All","TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All","TeamsAppInstallation.ReadWriteForTeam.All"]}},{"DelegatedWork":{"least":["TeamTemplates.Read"],"higher":[]},"Application":{"least":["TeamTemplates.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamworkUserInteraction.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamworkDevice.Read.All"],"higher":["TeamworkDevice.ReadWrite.All"]},"Application":{"least":["TeamworkDevice.Read.All"],"higher":["TeamworkDevice.ReadWrite.All"]}},{"DelegatedWork":{"least":["TeamworkDevice.ReadWrite.All"],"higher":[]},"Application":{"least":["TeamworkDevice.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["TeamworkCustomEmoji.Read"],"higher":[]},"Application":{"least":["TeamworkCustomEmoji.Read.All"],"higher":["Teamwork.Migrate.All"]}},{"DelegatedWork":{"least":["TeamworkCustomEmoji.Create"],"higher":[]},"Application":{"least":["TeamworkCustomEmoji.Create.All"],"higher":["Teamwork.Migrate.All"]}},{"DelegatedWork":{"least":["TeamworkSection.ReadWrite"],"higher":[]},"Application":{"least":["TeamworkSection.ReadWrite.All"],"higher":["Teamwork.Migrate.All"]}},{"DelegatedWork":{"least":["TeamworkSection.Read"],"higher":["TeamworkSection.ReadWrite"]},"Application":{"least":["TeamworkSection.Read.All"],"higher":["TeamworkSection.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceTemplate.Read.All"],"higher":["DeviceTemplate.ReadWrite.All"]},"Application":{"least":["DeviceTemplate.Read.All"],"higher":["DeviceTemplate.ReadWrite.All"]}},{"DelegatedWork":{"least":["DeviceTemplate.Create"],"higher":["DeviceTemplate.ReadWrite.All"]},"Application":{"least":["DeviceTemplate.Create"],"higher":["DeviceTemplate.ReadWrite.All"]}},{"DelegatedWork":{"least":["ThreatIndicators.ReadWrite.OwnedBy"],"higher":[]},"Application":{"least":["ThreatIndicators.ReadWrite.OwnedBy"],"higher":[]}},{"DelegatedWork":{"least":["TrustFrameworkKeySet.Read.All"],"higher":["TrustFrameworkKeySet.ReadWrite.All"]},"Application":{"least":["TrustFrameworkKeySet.Read.All"],"higher":["TrustFrameworkKeySet.ReadWrite.All"]}},{"DelegatedWork":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.TrustFramework"]},"Application":{"least":["Policy.Read.All"],"higher":["Policy.ReadWrite.TrustFramework"]}},{"DelegatedWork":{"least":["TrustFrameworkKeySet.ReadWrite.All"],"higher":[]},"Application":{"least":["TrustFrameworkKeySet.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["Policy.ReadWrite.TrustFramework"],"higher":[]},"Application":{"least":["Policy.ReadWrite.TrustFramework"],"higher":[]}},{"DelegatedWork":{"least":["RoleManagement.Read.Defender"],"higher":["RoleManagement.Read.All","RoleManagement.ReadWrite.Defender"]},"Application":{"least":["RoleManagement.Read.Defender"],"higher":["RoleManagement.Read.All","RoleManagement.ReadWrite.Defender"]}},{"DelegatedWork":{"least":["DeviceManagementRBAC.ReadWrite.All"],"higher":["CloudPC.ReadWrite.All"]},"Application":{"least":["DeviceManagementRBAC.ReadWrite.All"],"higher":["CloudPC.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudPC.Read.All"],"higher":["DeviceManagementRBAC.ReadWrite.All","CloudPC.ReadWrite.All","DeviceManagementRBAC.Read.All"]},"Application":{"least":["CloudPC.Read.All"],"higher":["DeviceManagementRBAC.ReadWrite.All","CloudPC.ReadWrite.All","DeviceManagementRBAC.Read.All"]}},{"DelegatedWork":{"least":["RoleManagement.Read.Directory"],"higher":["Directory.Read.All","RoleManagement.ReadWrite.Directory"]},"Application":{"least":["RoleManagement.Read.Directory"],"higher":["Directory.Read.All","RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["RoleManagementAlert.ReadWrite.Directory"],"higher":[]},"Application":{"least":["RoleManagementAlert.ReadWrite.Directory"],"higher":[]}},{"DelegatedWork":{"least":["RoleManagementPolicy.Read.Directory"],"higher":["RoleManagement.Read.All","RoleManagement.Read.Directory","RoleManagement.ReadWrite.Directory","RoleManagementPolicy.ReadWrite.Directory"]},"Application":{"least":["RoleManagement.Read.Directory"],"higher":["RoleManagement.Read.All","RoleManagement.ReadWrite.Directory"]}},{"DelegatedWork":{"least":["LifecyclePolicies-Guests.ReadWrite.All"],"higher":[]},"Application":{"least":["LifecyclePolicies-Guests.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["User-ConvertToInternal.ReadWrite.All"],"higher":["User.ReadWrite.All"]},"Application":{"least":["User-ConvertToInternal.ReadWrite.All"],"higher":["User.ReadWrite.All"]}},{"DelegatedWork":{"least":["CloudPC.ReadWrite"],"higher":["CloudPC.Read.All","CloudPC.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":["User.Read.All","Directory.Read.All"]},"Application":{"least":["User.Read"],"higher":["User.Read.All","Directory.Read.All"]}},{"DelegatedWork":{"least":["User.RevokeSessions.All"],"higher":["Directory.ReadWrite.All","User.ReadWrite"]},"Application":{"least":["User.RevokeSessions.All"],"higher":[]}},{"DelegatedWork":{"least":["Directory.Read.All"],"higher":["AppRoleAssignment.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read.All"],"higher":[]},"Application":{"least":["User.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["User.Read"],"higher":["Directory.Read.All","Directory.ReadWrite.All","User.Read.All","User.ReadWrite.All"]},"Application":{"least":["User.Read.All"],"higher":["Directory.Read.All","Directory.ReadWrite.All","User.ReadWrite.All"]}},{"DelegatedWork":{"least":["Directory.Read.All"],"higher":["Directory.ReadWrite.All"]}},{"DelegatedWork":{"least":["Sites.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["User.ReadWrite"],"higher":["User.ReadWrite.All"]}},{"DelegatedWork":{"least":["User.Read"],"higher":[]}},{"DelegatedWork":{"least":["MailboxConfigItem.Read"],"higher":["MailboxConfigItem.ReadWrite"]},"Application":{"least":["MailboxConfigItem.Read"],"higher":["MailboxConfigItem.ReadWrite"]}},{"DelegatedWork":{"least":["UserWindowsSettings.Read"],"higher":["UserWindowsSettings.ReadWrite.All","UserWindowsSettings.Read.All"]}},{"DelegatedWork":{"least":["CloudPC.Read.All"],"higher":[]}},{"DelegatedWork":{"least":["UserWindowsSettings.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["UserWindowsSettings.Read"],"higher":["UserWindowsSettings.Read.All"]}},{"DelegatedWork":{"least":["PlaceDevice.Read.All"],"higher":["PlaceDevice.ReadWrite.All"]},"Application":{"least":["PlaceDevice.Read.All"],"higher":["PlaceDevice.ReadWrite.All"]}},{"DelegatedWork":{"least":["PlaceDevice.ReadWrite.All"],"higher":[]},"Application":{"least":["PlaceDevice.ReadWrite.All"],"higher":[]}},{"DelegatedWork":{"least":["PlaceDevice.ReadWrite.All"],"higher":[]},"Application":{"least":["PlaceDeviceTelemetry.ReadWrite.All"],"higher":["PlaceDevice.ReadWrite.All"]}}],"v1.0":{"DELETE /admin/configurationmanagement/configurationmonitors/{id}":239,"DELETE /admin/configurationmanagement/configurationsnapshotjobs/{id}":239,"DELETE /admin/edge/internetexplorermode/sitelists/{id}":140,"DELETE /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies/{id}":140,"DELETE /admin/edge/internetexplorermode/sitelists/{id}/sites/{id}":140,"DELETE /admin/exchange/mailboxes/{id}/folders/{id}/$ref":450,"DELETE /admin/exchange/mailboxes/{id}/folders/{id}/childfolders/{id}/$ref":450,"DELETE /admin/exchange/mailboxes/{id}/folders/{id}/items/{id}":453,"DELETE /admin/people/profilecardproperties/{id}":499,"DELETE /admin/people/profilepropertysettings/{id}":413,"DELETE /admin/people/profilesources(sourceid='{id}')":413,"DELETE /app/calls/{id}/audioroutinggroups/{id}":83,"DELETE /appcatalogs/teamsapps/{id}":658,"DELETE /applications(appid='{id}')":68,"DELETE /applications(appid='{id}')/extensionproperties/{id}":67,"DELETE /applications(appid='{id}')/federatedidentitycredentials/{id}":68,"DELETE /applications(appid='{id}')/owners/{id}/$ref":67,"DELETE /applications/{id}":68,"DELETE /applications/{id}/agentidentityblueprint":31,"DELETE /applications/{id}/agentidentityblueprint/inheritablepermissions/{id}":30,"DELETE /applications/{id}/agentidentityblueprint/owners/{id}/$ref":30,"DELETE /applications/{id}/extensionproperties/{id}":67,"DELETE /applications/{id}/federatedidentitycredentials/{id}":68,"DELETE /applications/{id}/owners/{id}/$ref":67,"DELETE /applications/{id}/synchronization/templates/{id}/schema":637,"DELETE /chats/{id}":193,"DELETE /chats/{id}/installedapps/{id}":188,"DELETE /chats/{id}/members/{id}":189,"DELETE /chats/{id}/pinnedmessages/{id}":190,"DELETE /chats/{id}/tabs/{id}":191,"DELETE /communications/calls/{id}":150,"DELETE /communications/calls/{id}/audioroutinggroups/{id}":83,"DELETE /communications/calls/{id}/participants/{id}":149,"DELETE /deviceappmanagement/androidmanagedappprotections/{id}":415,"DELETE /deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}":415,"DELETE /deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/defaultmanagedappprotections/{id}":415,"DELETE /deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}":415,"DELETE /deviceappmanagement/enterprisecodesigningcertificates/{id}":415,"DELETE /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/iosmanagedappprotections/{id}":415,"DELETE /deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}":415,"DELETE /deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/managedappregistrations/{id}/operations/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}/devicestates/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates/{id}":415,"DELETE /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}":415,"DELETE /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":415,"DELETE /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":415,"DELETE /deviceappmanagement/mobileappcategories/{id}":418,"DELETE /deviceappmanagement/mobileappconfigurations/{id}":415,"DELETE /deviceappmanagement/mobileappconfigurations/{id}/assignments/{id}":418,"DELETE /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses/{id}":418,"DELETE /deviceappmanagement/mobileappconfigurations/{id}/userstatuses/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}":415,"DELETE /deviceappmanagement/mobileapps/{id}/assignments/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/categories/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/contentversions/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps/{id}":418,"DELETE /deviceappmanagement/targetedmanagedappconfigurations/{id}":415,"DELETE /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}":415,"DELETE /deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/vpptokens/{id}":431,"DELETE /deviceappmanagement/wdacsupplementalpolicies/{id}":415,"DELETE /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/windowsinformationprotectionpolicies/{id}":415,"DELETE /deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":415,"DELETE /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":415,"DELETE /devicemanagement/auditevents/{id}":415,"DELETE /devicemanagement/compliancemanagementpartners/{id}":427,"DELETE /devicemanagement/detectedapps/{id}":424,"DELETE /devicemanagement/detectedapps/{id}/manageddevices/{id}":424,"DELETE /devicemanagement/detectedapps/{id}/manageddevices/{id}/logcollectionrequests/{id}":424,"DELETE /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}":424,"DELETE /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}":424,"DELETE /devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate/detectedmalwarestate/{id}":424,"DELETE /devicemanagement/devicecategories/{id}":429,"DELETE /devicemanagement/devicecompliancepolicies/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/assignments/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/devicestatuses/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/userstatuses/{id}":419,"DELETE /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}":419,"DELETE /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/assignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/devicestatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/userstatuses/{id}":419,"DELETE /devicemanagement/deviceenrollmentconfigurations/{id}":427,"DELETE /devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}":427,"DELETE /devicemanagement/devicemanagementpartners/{id}":427,"DELETE /devicemanagement/exchangeconnectors/{id}":427,"DELETE /devicemanagement/importedwindowsautopilotdeviceidentities/{id}":422,"DELETE /devicemanagement/iosupdatestatuses/{id}":419,"DELETE /devicemanagement/manageddevices/{id}":424,"DELETE /devicemanagement/mobileapptroubleshootingevents/{id}":424,"DELETE /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}":424,"DELETE /devicemanagement/mobilethreatdefenseconnectors/{id}":422,"DELETE /devicemanagement/notificationmessagetemplates/{id}":419,"DELETE /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages/{id}":419,"DELETE /devicemanagement/remoteassistancepartners/{id}":422,"DELETE /devicemanagement/reports/exportjobs/{id}":435,"DELETE /devicemanagement/resourceoperations/{id}":433,"DELETE /devicemanagement/roleassignments/{id}":433,"DELETE /devicemanagement/roledefinitions/{id}":433,"DELETE /devicemanagement/roledefinitions/{id}/roleassignments/{id}":433,"DELETE /devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition":433,"DELETE /devicemanagement/termsandconditions/{id}":422,"DELETE /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}":422,"DELETE /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}/termsandconditions":422,"DELETE /devicemanagement/termsandconditions/{id}/assignments/{id}":422,"DELETE /devicemanagement/troubleshootingevents/{id}":424,"DELETE /devicemanagement/virtualendpoint/deviceimages/{id}":227,"DELETE /devicemanagement/virtualendpoint/onpremisesconnections/{id}":230,"DELETE /devicemanagement/virtualendpoint/provisioningpolicies/{id}":227,"DELETE /devicemanagement/virtualendpoint/usersettings/{id}":227,"DELETE /devicemanagement/windowsautopilotdeviceidentities/{id}":422,"DELETE /devicemanagement/windowsinformationprotectionapplearningsummaries/{id}":415,"DELETE /devicemanagement/windowsinformationprotectionnetworklearningsummaries/{id}":415,"DELETE /devicemanagement/windowsmalwareinformation/{id}":424,"DELETE /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}":424,"DELETE /devices(deviceid='{id}')":266,"DELETE /devices/{id}":266,"DELETE /devices/{id}/registeredowners/{id}/$ref":265,"DELETE /devices/{id}/registeredusers/{id}/$ref":265,"DELETE /directory/administrativeunits/{id}":15,"DELETE /directory/administrativeunits/{id}/members/{id}/$ref":15,"DELETE /directory/administrativeunits/{id}/scopedrolemembers/{id}":16,"DELETE /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}":159,"DELETE /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities/{id}":159,"DELETE /directory/tenantgovernance/governanceinvitations/{id}":673,"DELETE /directory/tenantgovernance/governancepolicytemplates/{id}":672,"DELETE /directoryroles(roletemplateid='{id}')/members/{id}/$ref":16,"DELETE /directoryroles/{id}/members/{id}/$ref":16,"DELETE /domains/{id}":284,"DELETE /domains/{id}/federationconfiguration/{id}":289,"DELETE /drives/{id}/items/{id}":296,"DELETE /drives/{id}/items/{id}/permissions/{id}":296,"DELETE /drives/{id}/items/{id}/retentionlabel":304,"DELETE /education/classes/{id}":314,"DELETE /education/classes/{id}/assignmentcategories/{id}":308,"DELETE /education/classes/{id}/assignments/{id}":309,"DELETE /education/classes/{id}/assignments/{id}/categories/{id}/$ref":308,"DELETE /education/classes/{id}/assignments/{id}/gradingcategory/$ref":308,"DELETE /education/classes/{id}/assignments/{id}/resources/{id}":309,"DELETE /education/classes/{id}/assignments/{id}/rubric/$ref":308,"DELETE /education/classes/{id}/assignments/{id}/submissions/{id}/outcomes/{id}":311,"DELETE /education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}":308,"DELETE /education/classes/{id}/assignmentsettings/gradingschemes/{id}":308,"DELETE /education/classes/{id}/members/{id}/$ref":314,"DELETE /education/classes/{id}/modules/{id}":321,"DELETE /education/classes/{id}/modules/{id}/resources/{id}":321,"DELETE /education/classes/{id}/teachers/{id}/$ref":314,"DELETE /education/me/rubrics/{id}":308,"DELETE /education/schools/{id}":314,"DELETE /education/schools/{id}/classes/{id}/$ref":314,"DELETE /education/schools/{id}/users/{id}/$ref":314,"DELETE /education/users/{id}":314,"DELETE /employeeexperience/communities/{id}":233,"DELETE /employeeexperience/learningproviders/{id}/$ref":331,"DELETE /employeeexperience/learningproviders/{id}/learningcontents(externalid='{id}')/$ref":439,"DELETE /employeeexperience/learningproviders/{id}/learningcontents/{id}/$ref":439,"DELETE /employeeexperience/learningproviders/{id}/learningcourseactivities/{id}":335,"DELETE /employeeexperience/roles/{id}/members/{id}":337,"DELETE /external/connections/{id}":351,"DELETE /external/connections/{id}/groups/{id}":352,"DELETE /external/connections/{id}/groups/{id}/members/{id}":352,"DELETE /external/connections/{id}/items/{id}":352,"DELETE /grouplifecyclepolicies/{id}":19,"DELETE /groups/{id}":246,"DELETE /groups/{id}/acceptedsenders/$ref":253,"DELETE /groups/{id}/calendar/calendarpermissions/{id}":143,"DELETE /groups/{id}/calendar/events/{id}":253,"DELETE /groups/{id}/conversations/{id}":246,"DELETE /groups/{id}/conversations/{id}/threads/{id}":246,"DELETE /groups/{id}/drive/items/{id}":296,"DELETE /groups/{id}/drive/items/{id}/permissions/{id}":296,"DELETE /groups/{id}/drive/items/{id}/retentionlabel":304,"DELETE /groups/{id}/events/{id}":253,"DELETE /groups/{id}/members/{id}/$ref":371,"DELETE /groups/{id}/onenote/pages/{id}":491,"DELETE /groups/{id}/owners/{id}/$ref":372,"DELETE /groups/{id}/photo/$value":552,"DELETE /groups/{id}/rejectedsenders/$ref":253,"DELETE /groups/{id}/settings/{id}":389,"DELETE /groups/{id}/threads/{id}":253,"DELETE /groupsettings/{id}":389,"DELETE /identity/apiconnectors/{id}":391,"DELETE /identity/authenticationeventlisteners/{id}":98,"DELETE /identity/authenticationeventsflows/{id}":98,"DELETE /identity/authenticationeventsflows/{id}/conditions/applications/includeapplications/{id}":98,"DELETE /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onattributecollection/onattributecollectionexternalusersselfservicesignup/attributes/{id}/$ref":98,"DELETE /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onauthenticationmethodloadstart/onauthenticationmethodloadstartexternalusersselfservicesignup/{id}/$ref":98,"DELETE /identity/b2xuserflows/{id}":113,"DELETE /identity/b2xuserflows/{id}/identityproviders/{id}/$ref":113,"DELETE /identity/b2xuserflows/{id}/languages/{id}/overridespages/$value":113,"DELETE /identity/b2xuserflows/{id}/userattributeassignments/{id}":113,"DELETE /identity/conditionalaccess/authenticationcontextclassreferences/{id}":100,"DELETE /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}":97,"DELETE /identity/customauthenticationextensions/{id}":259,"DELETE /identity/identityproviders/{id}":393,"DELETE /identity/riskprevention/fraudprotectionproviders/{id}":369,"DELETE /identity/riskprevention/webapplicationfirewallproviders/{id}":369,"DELETE /identity/riskprevention/webapplicationfirewallverifications/{id}":369,"DELETE /identity/userflowattributes/{id}":113,"DELETE /identity/verifiedid/profiles/{id}":406,"DELETE /identitygovernance/accessreviews/definitions/{id}":5,"DELETE /identitygovernance/entitlementmanagement/accesspackages/{id}":0,"DELETE /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatibleaccesspackages/{id}/$ref":0,"DELETE /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatiblegroups/{id}/$ref":0,"DELETE /identitygovernance/entitlementmanagement/accesspackages/{id}/resourcerolescopes/{id}":0,"DELETE /identitygovernance/entitlementmanagement/assignmentpolicies/{id}":0,"DELETE /identitygovernance/entitlementmanagement/assignmentrequests/{id}":0,"DELETE /identitygovernance/entitlementmanagement/catalogs/{id}":0,"DELETE /identitygovernance/entitlementmanagement/catalogs/{id}/customworkflowextensions/{id}":0,"DELETE /identitygovernance/entitlementmanagement/catalogs/{id}/resources/{id}/uploadsessions/{id}":0,"DELETE /identitygovernance/entitlementmanagement/connectedorganizations/{id}":0,"DELETE /identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors/{id}/$ref":0,"DELETE /identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors/{id}/$ref":0,"DELETE /identitygovernance/entitlementmanagement/externaloriginresourceconnectors/{id}":0,"DELETE /identitygovernance/lifecycleworkflows/customtaskextensions/{id}":394,"DELETE /identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}":396,"DELETE /identitygovernance/lifecycleworkflows/workflows/{id}":396,"DELETE /identitygovernance/termsofuse/agreements/{id}":57,"DELETE /identityproviders/{id}":393,"DELETE /me/activities/{id}":555,"DELETE /me/activities/{id}/historyitems/{id}":555,"DELETE /me/authentication/emailmethods/{id}":327,"DELETE /me/authentication/fido2methods/{id}":360,"DELETE /me/authentication/microsoftauthenticatormethods/{id}":461,"DELETE /me/authentication/phonemethods/{id}":503,"DELETE /me/authentication/platformcredentialmethods/{id}":511,"DELETE /me/authentication/qrcodepinmethod/standardqrcode":557,"DELETE /me/authentication/qrcodepinmethod/temporaryqrcode":557,"DELETE /me/authentication/softwareoathmethods/{id}":626,"DELETE /me/authentication/temporaryaccesspassmethods/{id}":669,"DELETE /me/authentication/windowshelloforbusinessmethods/{id}":749,"DELETE /me/calendar/events/{id}":143,"DELETE /me/calendargroups/{id}":143,"DELETE /me/calendargroups/{id}/calendars/{id}":143,"DELETE /me/calendargroups/{id}/calendars/{id}/events/{id}":143,"DELETE /me/calendars/{id}":143,"DELETE /me/calendars/{id}/events/{id}":143,"DELETE /me/contactfolders/{id}":241,"DELETE /me/contactfolders/{id}/childfolders/{id}/.../contacts/{id}":241,"DELETE /me/contactfolders/{id}/contacts/{id}":241,"DELETE /me/contacts/{id}":241,"DELETE /me/drive/following/{id}":293,"DELETE /me/drive/items/{id}":296,"DELETE /me/drive/items/{id}/permissions/{id}":296,"DELETE /me/drive/items/{id}/retentionlabel":304,"DELETE /me/drive/items/{id}/workbook/tables/{id}":187,"DELETE /me/drive/items/{id}/workbook/tables/{id}/columns/{id}":187,"DELETE /me/drive/items/{id}/workbook/tables/{id}/rows/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/tables/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/tables/{id}/rows/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"DELETE /me/events/{id}":143,"DELETE /me/inferenceclassification/overrides/{id}":343,"DELETE /me/mailfolders/inbox/messagerules/{id}":458,"DELETE /me/mailfolders/{id}":343,"DELETE /me/mailfolders/{id}/messages/{id}":343,"DELETE /me/messages/{id}":343,"DELETE /me/notes/{id}":468,"DELETE /me/onenote/pages/{id}":491,"DELETE /me/onlinemeetings/{id}":74,"DELETE /me/outlook/mastercategories/{id}":458,"DELETE /me/photo/$value":552,"DELETE /me/settings/workhoursandlocations/occurrences/{id}":221,"DELETE /me/settings/workhoursandlocations/recurrences/{id}":221,"DELETE /me/todo/lists/{id}":692,"DELETE /me/todo/lists/{id}/tasks/{id}":222,"DELETE /me/todo/lists/{id}/tasks/{id}/attachments/{id}":222,"DELETE /me/todo/lists/{id}/tasks/{id}/checklistitems/{id}":222,"DELETE /me/todo/lists/{id}/tasks/{id}/linkedresources/{id}":222,"DELETE /oauth2permissiongrants/{id}":472,"DELETE /organization/{id}/branding":485,"DELETE /organization/{id}/branding/localizations/{id}":487,"DELETE /organization/{id}/certificatebasedauthconfiguration/{id}":160,"DELETE /places/{id}":141,"DELETE /places/{id}/building/map":141,"DELETE /places/{id}/building/map/levels/{id}/fixtures/{id}":141,"DELETE /places/{id}/building/map/levels/{id}/sections/{id}":141,"DELETE /places/{id}/building/map/levels/{id}/units/{id}":141,"DELETE /planner/buckets/{id}":508,"DELETE /planner/plans/{id}":508,"DELETE /planner/tasks/{id}":508,"DELETE /policies/activitybasedtimeoutpolicies/{id}":9,"DELETE /policies/appmanagementpolicies/{id}":9,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/email":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/fido2":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/microsoftauthenticator":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/qrcodepin":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/sms":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/softwareoath":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/temporaryaccesspass":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/verifiablecredentials":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/voice":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/x509certificate":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/{id}":108,"DELETE /policies/authenticationstrengthpolicies/{id}":97,"DELETE /policies/claimsmappingpolicies/{id}":9,"DELETE /policies/crosstenantaccesspolicy/partners/{id}":256,"DELETE /policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization":256,"DELETE /policies/crosstenantaccesspolicy/partners/{id}/m365capabilities/{id}":258,"DELETE /policies/featurerolloutpolicies/{id}":358,"DELETE /policies/featurerolloutpolicies/{id}/appliesto/{id}/$ref":358,"DELETE /policies/homerealmdiscoverypolicies/{id}":9,"DELETE /policies/permissiongrantpolicies/{id}":500,"DELETE /policies/permissiongrantpolicies/{id}/excludes/{id}":500,"DELETE /policies/permissiongrantpolicies/{id}/includes/{id}":500,"DELETE /policies/tokenissuancepolicies/{id}":9,"DELETE /policies/tokenlifetimepolicies/{id}":9,"DELETE /print/connectors/{id}":528,"DELETE /print/printers/{id}":533,"DELETE /print/printers/{id}/tasktriggers/{id}":532,"DELETE /print/shares/{id}":526,"DELETE /print/shares/{id}/allowedgroups/{id}/$ref":526,"DELETE /print/shares/{id}/allowedusers/{id}/$ref":526,"DELETE /print/taskdefinitions/{id}":519,"DELETE /rolemanagement/directory/roleassignments/{id}":0,"DELETE /rolemanagement/directory/roledefinitions/{id}":564,"DELETE /rolemanagement/entitlementmanagement/roleassignments/{id}":0,"DELETE /schemaextensions/{id}":35,"DELETE /search/acronyms/{id}":578,"DELETE /search/bookmarks/{id}":578,"DELETE /search/qnas/{id}":578,"DELETE /security/attacksimulation/simulations/{id}":81,"DELETE /security/cases/ediscoverycases/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/casemembers/{id}":593,"DELETE /security/cases/ediscoverycases/{id}/custodians/{id}/sitesources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/custodians/{id}/unifiedgroupsources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/custodians/{id}/usersources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/legalholds/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/legalholds/{id}/usersources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}":590,"DELETE /security/cases/ediscoverycases/{id}/searches/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/searches/{id}/custodiansources/{id}/$ref":590,"DELETE /security/cases/ediscoverycases/{id}/searches/{id}/noncustodialsources/{id}/$ref":590,"DELETE /security/cases/ediscoverycases/{id}/tags/{id}":591,"DELETE /security/identities/sensors/{id}":600,"DELETE /security/labels/authorities/{id}/$ref":592,"DELETE /security/labels/categories/{id}/$ref":592,"DELETE /security/labels/categories/{id}/subcategories/{id}/$ref":592,"DELETE /security/labels/citations/{id}/$ref":592,"DELETE /security/labels/departments/{id}/$ref":592,"DELETE /security/labels/fileplanreferences/{id}/$ref":592,"DELETE /security/labels/retentionlabels/{id}":604,"DELETE /security/labels/retentionlabels/{id}/descriptors/authoritytemplate/$ref":592,"DELETE /security/labels/retentionlabels/{id}/descriptors/categorytemplate/$ref":592,"DELETE /security/labels/retentionlabels/{id}/descriptors/citationtemplate/$ref":592,"DELETE /security/labels/retentionlabels/{id}/descriptors/departmenttemplate/$ref":592,"DELETE /security/labels/retentionlabels/{id}/descriptors/fileplanreferencetemplate/$ref":592,"DELETE /security/labels/retentionlabels/{id}/eventtype/$ref":592,"DELETE /security/triggers/retentionevents/{id}":592,"DELETE /security/triggers/retentionevents/{id}/retentioneventtype/$ref":592,"DELETE /security/triggertypes/retentioneventtypes/{id}/$ref":592,"DELETE /serviceprincipals(appid='{id}')":67,"DELETE /serviceprincipals(appid='{id}')/agentidentityblueprintprincipal":38,"DELETE /serviceprincipals(appid='{id}')/approleassignedto/{id}":610,"DELETE /serviceprincipals(appid='{id}')/approleassignments/{id}":610,"DELETE /serviceprincipals(appid='{id}')/owners/{id}/$ref":67,"DELETE /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps/{id}":77,"DELETE /serviceprincipals/{id}":67,"DELETE /serviceprincipals/{id}/agentidentity":24,"DELETE /serviceprincipals/{id}/agentidentity/owners/{id}/$ref":22,"DELETE /serviceprincipals/{id}/agentidentity/sponsors/{id}/$ref":23,"DELETE /serviceprincipals/{id}/agentidentityblueprintprincipal":38,"DELETE /serviceprincipals/{id}/agentidentityblueprintprincipal/owners/{id}/$ref":37,"DELETE /serviceprincipals/{id}/approleassignedto/{id}":610,"DELETE /serviceprincipals/{id}/approleassignments/{id}":610,"DELETE /serviceprincipals/{id}/delegatedpermissionclassifications/{id}":500,"DELETE /serviceprincipals/{id}/owners/{id}/$ref":67,"DELETE /serviceprincipals/{id}/remotedesktopsecurityconfiguration/$ref":566,"DELETE /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}":77,"DELETE /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}/$ref":77,"DELETE /serviceprincipals/{id}/synchronization/jobs/{id}":634,"DELETE /serviceprincipals/{id}/synchronization/jobs/{id}/schema":637,"DELETE /sites/{id}/columns/{id}":231,"DELETE /sites/{id}/contenttypes/{id}":231,"DELETE /sites/{id}/contenttypes/{id}/columns/{id}":231,"DELETE /sites/{id}/drive/items/{id}":296,"DELETE /sites/{id}/drive/items/{id}/permissions/{id}":296,"DELETE /sites/{id}/lists/{id}/columns/{id}":231,"DELETE /sites/{id}/lists/{id}/contenttypes/{id}":231,"DELETE /sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}":231,"DELETE /sites/{id}/lists/{id}/items/{id}":123,"DELETE /sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}":282,"DELETE /sites/{id}/onenote/pages/{id}":491,"DELETE /sites/{id}/pages/{id}":123,"DELETE /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}":123,"DELETE /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}":124,"DELETE /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection":123,"DELETE /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts/{id}":124,"DELETE /sites/{id}/pages/{id}/sitepage/webparts/{id}":124,"DELETE /sites/{id}/permissions/{id}":623,"DELETE /sites/{id}/termstore/groups/{id}":686,"DELETE /sites/{id}/termstore/sets/{id}/terms/{id}":686,"DELETE /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}":122,"DELETE /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifactsbulkadditionrequests/{id}":117,"DELETE /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}":122,"DELETE /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifactsbulkadditionrequests/{id}":117,"DELETE /solutions/backuprestore/protectionpolicies/{id}":122,"DELETE /solutions/backuprestore/restoresessions/{id}":117,"DELETE /solutions/backuprestore/serviceapps/{id}":115,"DELETE /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules/{id}":122,"DELETE /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifactsbulkadditionrequests/{id}":117,"DELETE /solutions/bookingbusinesses/{id}":129,"DELETE /solutions/bookingbusinesses/{id}/appointments/{id}":127,"DELETE /solutions/bookingbusinesses/{id}/customers/{id}":127,"DELETE /solutions/bookingbusinesses/{id}/customquestions/{id}":126,"DELETE /solutions/bookingbusinesses/{id}/services/{id}":136,"DELETE /solutions/bookingbusinesses/{id}/staffmembers/{id}":136,"DELETE /solutions/virtualevents/townhalls/{id}/presenters/{id}":740,"DELETE /solutions/virtualevents/townhalls/{id}/registrationconfiguration/questions/{id}":740,"DELETE /solutions/virtualevents/webinars/{id}/presenters/{id}":740,"DELETE /solutions/virtualevents/webinars/{id}/registrationconfiguration/questions/{id}":740,"DELETE /storage/filestorage/containers/{id}":363,"DELETE /storage/filestorage/containers/{id}/columns/{id}":366,"DELETE /storage/filestorage/containers/{id}/migrationjobs/{id}":366,"DELETE /storage/filestorage/containers/{id}/permissions/{id}":363,"DELETE /storage/filestorage/containers/{id}/sharepointgroups/{id}":367,"DELETE /storage/filestorage/containers/{id}/sharepointgroups/{id}/members/{id}":367,"DELETE /storage/filestorage/containertyperegistrations/{id}":364,"DELETE /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants/{id}":364,"DELETE /storage/filestorage/containertypes/{id}":365,"DELETE /storage/filestorage/deletedcontainers/{id}":363,"DELETE /teams/{id}/channels/{id}":168,"DELETE /teams/{id}/channels/{id}/enabledapps/{id}/$ref":165,"DELETE /teams/{id}/channels/{id}/members/{id}":166,"DELETE /teams/{id}/channels/{id}/sharedwithteams/{id}":166,"DELETE /teams/{id}/channels/{id}/tabs/{id}":167,"DELETE /teams/{id}/incomingchannels/{id}/$ref":641,"DELETE /teams/{id}/installedapps/{id}":642,"DELETE /teams/{id}/members/{id}":252,"DELETE /teams/{id}/schedule/daynotes/{id}":262,"DELETE /teams/{id}/schedule/openshifts/{id}":162,"DELETE /teams/{id}/schedule/schedulinggroups/{id}":162,"DELETE /teams/{id}/schedule/shifts/{id}":162,"DELETE /teams/{id}/schedule/timecards/{id}":262,"DELETE /teams/{id}/schedule/timeoffreasons/{id}":162,"DELETE /teams/{id}/schedule/timeoffrequests/{id}":162,"DELETE /teams/{id}/schedule/timesoff/{id}":162,"DELETE /teams/{id}/tags/{id}":666,"DELETE /teams/{id}/tags/{id}/members/{id}":666,"DELETE /teamwork/workforceintegrations/{id}":753,"DELETE /tenantrelationships/delegatedadminrelationships/{id}":263,"DELETE /tenantrelationships/delegatedadminrelationships/{id}/accessassignments/{id}":263,"DELETE /tenantrelationships/multitenantorganization/tenants/{id}":464,"DELETE /users/agentuser/{id}":46,"DELETE /users/{id}":697,"DELETE /users/{id}/approleassignments/{id}":56,"DELETE /users/{id}/authentication/emailmethods/{id}":327,"DELETE /users/{id}/authentication/externalauthenticationmethods/{id}/$ref":84,"DELETE /users/{id}/authentication/fido2methods/{id}":360,"DELETE /users/{id}/authentication/microsoftauthenticatormethods/{id}":461,"DELETE /users/{id}/authentication/phonemethods/{id}":503,"DELETE /users/{id}/authentication/platformcredentialmethods/{id}":511,"DELETE /users/{id}/authentication/qrcodepinmethod":557,"DELETE /users/{id}/authentication/qrcodepinmethod/standardqrcode":557,"DELETE /users/{id}/authentication/qrcodepinmethod/temporaryqrcode":557,"DELETE /users/{id}/authentication/resourceaccountkeyauthenticationmethods/{id}":570,"DELETE /users/{id}/authentication/softwareoathmethods/{id}":626,"DELETE /users/{id}/authentication/temporaryaccesspassmethods/{id}":669,"DELETE /users/{id}/authentication/windowshelloforbusinessmethods/{id}":749,"DELETE /users/{id}/calendar/calendarpermissions/{id}":143,"DELETE /users/{id}/calendar/events/{id}":143,"DELETE /users/{id}/calendargroups/{id}":143,"DELETE /users/{id}/calendargroups/{id}/calendars/{id}":143,"DELETE /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}":143,"DELETE /users/{id}/calendars/{id}":143,"DELETE /users/{id}/calendars/{id}/events/{id}":143,"DELETE /users/{id}/chats/{id}/targetedmessages/{id}":192,"DELETE /users/{id}/contactfolders/{id}":241,"DELETE /users/{id}/contactfolders/{id}/childfolders/{id}/contacts/{id}":241,"DELETE /users/{id}/contactfolders/{id}/contacts/{id}":241,"DELETE /users/{id}/contacts/{id}":241,"DELETE /users/{id}/drive/following/{id}":293,"DELETE /users/{id}/drive/items/{id}":296,"DELETE /users/{id}/drive/items/{id}/permissions/{id}":296,"DELETE /users/{id}/drive/items/{id}/retentionlabel":304,"DELETE /users/{id}/events/{id}":143,"DELETE /users/{id}/events/{id}/calendar/calendarpermissions/{id}":143,"DELETE /users/{id}/inferenceclassification/overrides/{id}":343,"DELETE /users/{id}/mailfolders/inbox/messagerules/{id}":458,"DELETE /users/{id}/mailfolders/{id}":343,"DELETE /users/{id}/mailfolders/{id}/messages/{id}":343,"DELETE /users/{id}/manager/$ref":45,"DELETE /users/{id}/manager/{id}/$ref":44,"DELETE /users/{id}/messages/{id}":343,"DELETE /users/{id}/notes/{id}":468,"DELETE /users/{id}/onenote/pages/{id}":491,"DELETE /users/{id}/onlinemeetings/{id}":74,"DELETE /users/{id}/outlook/mastercategories/{id}":458,"DELETE /users/{id}/photo/$value":552,"DELETE /users/{id}/settings/workhoursandlocations/occurrences/{id}":221,"DELETE /users/{id}/settings/workhoursandlocations/recurrences/{id}":221,"DELETE /users/{id}/sponsors/{id}/$ref":45,"DELETE /users/{id}/teamwork/installedapps/{id}":733,"DELETE /users/{id}/todo/lists/{id}":692,"DELETE /users/{id}/todo/lists/{id}/tasks/{id}":222,"DELETE /users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}":222,"DELETE /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}":222,"DELETE /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}":222,"GET /admin/configurationmanagement/configurationdrifts":240,"GET /admin/configurationmanagement/configurationdrifts/{id}":240,"GET /admin/configurationmanagement/configurationmonitoringresults":240,"GET /admin/configurationmanagement/configurationmonitoringresults/{id}":240,"GET /admin/configurationmanagement/configurationmonitors":240,"GET /admin/configurationmanagement/configurationmonitors/{id}":240,"GET /admin/configurationmanagement/configurationmonitors/{id}/baseline":240,"GET /admin/configurationmanagement/configurationsnapshotjobs":240,"GET /admin/configurationmanagement/configurationsnapshotjobs/{id}":240,"GET /admin/edge/internetexplorermode/sitelists":139,"GET /admin/edge/internetexplorermode/sitelists/{id}":139,"GET /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies":139,"GET /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies/{id}":139,"GET /admin/edge/internetexplorermode/sitelists/{id}/sites":139,"GET /admin/edge/internetexplorermode/sitelists/{id}/sites/{id}":139,"GET /admin/exchange/mailboxes/{id}/folders":452,"GET /admin/exchange/mailboxes/{id}/folders/delta":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}/childfolders":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}/childfolders/delta":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}/childfolders/{id}":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}/items":454,"GET /admin/exchange/mailboxes/{id}/folders/{id}/items/delta":454,"GET /admin/exchange/mailboxes/{id}/folders/{id}/items/{id}":454,"GET /admin/exchange/tracing/messagetraces":345,"GET /admin/exchange/tracing/messagetraces/{id}/getdetailsbyrecipient(recipientaddress='parametervalue')":345,"GET /admin/microsoft365apps/installationoptions":447,"GET /admin/people":497,"GET /admin/people/iteminsights":498,"GET /admin/people/profilecardproperties":497,"GET /admin/people/profilecardproperties/{id}":551,"GET /admin/people/profilepropertysettings":497,"GET /admin/people/profilepropertysettings/{id}":497,"GET /admin/people/profilesources":497,"GET /admin/people/profilesources(sourceid='{id}')":497,"GET /admin/people/pronouns":497,"GET /admin/reportsettings":20,"GET /admin/serviceannouncement/healthoverviews":608,"GET /admin/serviceannouncement/healthoverviews/{id}":608,"GET /admin/serviceannouncement/issues":608,"GET /admin/serviceannouncement/issues/{id}":608,"GET /admin/serviceannouncement/issues/{id}/incidentreport":608,"GET /admin/serviceannouncement/messages":609,"GET /admin/serviceannouncement/messages/{id}":609,"GET /admin/serviceannouncement/messages/{id}/attachments":609,"GET /admin/serviceannouncement/messages/{id}/attachments/{id}":609,"GET /admin/sharepoint/settings":617,"GET /admin/teams/policy/getpolicyid(type='{id}',name='{id}')":657,"GET /admin/teams/telephonenumbermanagement/numberassignments":655,"GET /admin/teams/telephonenumbermanagement/numberassignments/{id}":655,"GET /admin/teams/telephonenumbermanagement/operations/{id}":655,"GET /admin/teams/userconfigurations":656,"GET /admin/teams/userconfigurations/{id}":656,"GET /agreements/{id}":58,"GET /agreements/{id}/file":60,"GET /agreements/{id}/file/localizations":60,"GET /app/calls/{id}/audioroutinggroups":83,"GET /app/calls/{id}/audioroutinggroups/{id}":83,"GET /appcatalogs/teamsapps":65,"GET /appcatalogs/teamsapps/{id}/appdefinitions/{id}/bot":665,"GET /applications":71,"GET /applications(appid='{id}')":70,"GET /applications(appid='{id}')/extensionproperties":70,"GET /applications(appid='{id}')/extensionproperties/{id}":347,"GET /applications(appid='{id}')/federatedidentitycredentials":359,"GET /applications(appid='{id}')/federatedidentitycredentials/{id}":68,"GET /applications(appid='{id}')/owners":70,"GET /applications/agentidentityblueprint":33,"GET /applications/delta":69,"GET /applications/{id}":70,"GET /applications/{id}/agentidentityblueprint":32,"GET /applications/{id}/agentidentityblueprint/inheritablepermissions":32,"GET /applications/{id}/agentidentityblueprint/inheritablepermissions/{id}":410,"GET /applications/{id}/agentidentityblueprint/owners":32,"GET /applications/{id}/extensionproperties":70,"GET /applications/{id}/extensionproperties/{id}":347,"GET /applications/{id}/federatedidentitycredentials":359,"GET /applications/{id}/federatedidentitycredentials/{id}":68,"GET /applications/{id}/owners":70,"GET /applications/{id}/synchronization/templates/{id}/schema":638,"GET /applications/{id}/synchronization/templates/{id}/schema/filteroperators":634,"GET /applications/{id}/synchronization/templates/{id}/schema/functions":634,"GET /auditlogs/directoryaudits":276,"GET /auditlogs/signins":109,"GET /auditlogs/signins/{id}":109,"GET /chats":206,"GET /chats/{id}":197,"GET /chats/{id}/installedapps":200,"GET /chats/{id}/installedapps/{id}":194,"GET /chats/{id}/members":201,"GET /chats/{id}/members/{id}":195,"GET /chats/{id}/messages":202,"GET /chats/{id}/messages/{id}":217,"GET /chats/{id}/messages/{id}/hostedcontents":217,"GET /chats/{id}/messages/{id}/hostedcontents/{id}":217,"GET /chats/{id}/permissiongrants":203,"GET /chats/{id}/pinnedmessages":204,"GET /chats/{id}/tabs":205,"GET /chats/{id}/tabs/{id}":196,"GET /communications/callrecords":156,"GET /communications/callrecords/getdirectroutingcalls(fromdatetime={id},todatetime={id})":156,"GET /communications/callrecords/getpstncalls(fromdatetime={id},todatetime={id})":156,"GET /communications/callrecords/{id}":156,"GET /communications/callrecords/{id}/participants_v2":156,"GET /communications/callrecords/{id}/sessions":156,"GET /communications/calls/{id}":150,"GET /communications/calls/{id}/audioroutinggroups":83,"GET /communications/calls/{id}/audioroutinggroups/{id}":83,"GET /communications/calls/{id}/contentsharingsessions":152,"GET /communications/calls/{id}/contentsharingsessions/{id}":152,"GET /communications/calls/{id}/participants":150,"GET /communications/calls/{id}/participants/{id}":149,"GET /communications/getallonlinemeetingmessages":225,"GET /communications/onlinemeetingconversations/{id}/messages/{id}/reactions":225,"GET /communications/onlinemeetings":477,"GET /communications/presences/{id}":518,"GET /contacts":488,"GET /contacts/delta":488,"GET /contacts/{id}":488,"GET /contacts/{id}/directreports":489,"GET /contacts/{id}/manager":489,"GET /contacts/{id}/memberof":489,"GET /contracts":245,"GET /contracts/{id}":245,"GET /deviceappmanagement":416,"GET /deviceappmanagement/androidmanagedappprotections":417,"GET /deviceappmanagement/androidmanagedappprotections/{id}":417,"GET /deviceappmanagement/androidmanagedappprotections/{id}/apps":417,"GET /deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}":417,"GET /deviceappmanagement/androidmanagedappprotections/{id}/assignments":417,"GET /deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}":417,"GET /deviceappmanagement/androidmanagedappprotections/{id}/deploymentsummary":417,"GET /deviceappmanagement/defaultmanagedappprotections":417,"GET /deviceappmanagement/defaultmanagedappprotections/{id}":417,"GET /deviceappmanagement/defaultmanagedappprotections/{id}/apps":417,"GET /deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}":417,"GET /deviceappmanagement/defaultmanagedappprotections/{id}/deploymentsummary":417,"GET /deviceappmanagement/enterprisecodesigningcertificates":420,"GET /deviceappmanagement/enterprisecodesigningcertificates/{id}":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments/{id}":417,"GET /deviceappmanagement/iosmanagedappprotections":417,"GET /deviceappmanagement/iosmanagedappprotections/{id}":417,"GET /deviceappmanagement/iosmanagedappprotections/{id}/apps":417,"GET /deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}":417,"GET /deviceappmanagement/iosmanagedappprotections/{id}/assignments":417,"GET /deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}":417,"GET /deviceappmanagement/iosmanagedappprotections/{id}/deploymentsummary":417,"GET /deviceappmanagement/managedapppolicies":417,"GET /deviceappmanagement/managedapppolicies/{id}":417,"GET /deviceappmanagement/managedappregistrations":417,"GET /deviceappmanagement/managedappregistrations/getuseridswithflaggedappregistration":417,"GET /deviceappmanagement/managedappregistrations/{id}":417,"GET /deviceappmanagement/managedappregistrations/{id}/appliedpolicies":417,"GET /deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}":417,"GET /deviceappmanagement/managedappregistrations/{id}/intendedpolicies":417,"GET /deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}":417,"GET /deviceappmanagement/managedappregistrations/{id}/operations":417,"GET /deviceappmanagement/managedappregistrations/{id}/operations/{id}":417,"GET /deviceappmanagement/managedappstatuses":417,"GET /deviceappmanagement/managedappstatuses/{id}":417,"GET /deviceappmanagement/managedebooks":417,"GET /deviceappmanagement/managedebooks/{id}":417,"GET /deviceappmanagement/managedebooks/{id}/assignments":417,"GET /deviceappmanagement/managedebooks/{id}/assignments/{id}":417,"GET /deviceappmanagement/managedebooks/{id}/devicestates":417,"GET /deviceappmanagement/managedebooks/{id}/devicestates/{id}":417,"GET /deviceappmanagement/managedebooks/{id}/installsummary":417,"GET /deviceappmanagement/managedebooks/{id}/userstatesummary":417,"GET /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}":417,"GET /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates":417,"GET /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates/{id}":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":417,"GET /deviceappmanagement/mobileappcategories":416,"GET /deviceappmanagement/mobileappcategories/{id}":416,"GET /deviceappmanagement/mobileappconfigurations":416,"GET /deviceappmanagement/mobileappconfigurations/{id}":417,"GET /deviceappmanagement/mobileappconfigurations/{id}/assignments":416,"GET /deviceappmanagement/mobileappconfigurations/{id}/assignments/{id}":416,"GET /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses":416,"GET /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses/{id}":416,"GET /deviceappmanagement/mobileappconfigurations/{id}/devicestatussummary":416,"GET /deviceappmanagement/mobileappconfigurations/{id}/userstatuses":416,"GET /deviceappmanagement/mobileappconfigurations/{id}/userstatuses/{id}":416,"GET /deviceappmanagement/mobileappconfigurations/{id}/userstatussummary":416,"GET /deviceappmanagement/mobileapprelationships":416,"GET /deviceappmanagement/mobileapprelationships/{id}":416,"GET /deviceappmanagement/mobileapps":417,"GET /deviceappmanagement/mobileapps/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/assignments":416,"GET /deviceappmanagement/mobileapps/{id}/assignments/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/categories":416,"GET /deviceappmanagement/mobileapps/{id}/categories/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions":416,"GET /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions":416,"GET /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps":416,"GET /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps/{id}":416,"GET /deviceappmanagement/targetedmanagedappconfigurations":417,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}":417,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps":417,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}":417,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments":417,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}":417,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/deploymentsummary":417,"GET /deviceappmanagement/vpptokens":432,"GET /deviceappmanagement/vpptokens/{id}":432,"GET /deviceappmanagement/wdacsupplementalpolicies":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments/{id}":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":417,"GET /devicemanagement/applepushnotificationcertificate":423,"GET /devicemanagement/applepushnotificationcertificate/downloadapplepushnotificationcertificatesigningrequest":422,"GET /devicemanagement/auditevents":417,"GET /devicemanagement/auditevents/getauditactivitytypes":417,"GET /devicemanagement/auditevents/getauditcategories":417,"GET /devicemanagement/auditevents/{id}":417,"GET /devicemanagement/compliancemanagementpartners":423,"GET /devicemanagement/compliancemanagementpartners/{id}":423,"GET /devicemanagement/conditionalaccesssettings":423,"GET /devicemanagement/detectedapps":425,"GET /devicemanagement/detectedapps/{id}":425,"GET /devicemanagement/detectedapps/{id}/manageddevices":425,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}":425,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/devicecategory":425,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/logcollectionrequests":424,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/logcollectionrequests/{id}":424,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/users":425,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}":425,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices":425,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}":425,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate":425,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate/detectedmalwarestate":425,"GET /devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate/detectedmalwarestate/{id}":425,"GET /devicemanagement/devicecategories":425,"GET /devicemanagement/devicecategories/{id}":425,"GET /devicemanagement/devicecompliancepolicies":420,"GET /devicemanagement/devicecompliancepolicies/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/assignments":420,"GET /devicemanagement/devicecompliancepolicies/{id}/assignments/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicestatuses":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicestatuses/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicestatusoverview":420,"GET /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule":420,"GET /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations":420,"GET /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/userstatuses":420,"GET /devicemanagement/devicecompliancepolicies/{id}/userstatuses/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/userstatusoverview":420,"GET /devicemanagement/devicecompliancepolicydevicestatesummary":420,"GET /devicemanagement/devicecompliancepolicysettingstatesummaries":420,"GET /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}":420,"GET /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates":420,"GET /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates/{id}":420,"GET /devicemanagement/deviceconfigurationdevicestatesummaries":420,"GET /devicemanagement/deviceconfigurations":420,"GET /devicemanagement/deviceconfigurations/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/assignments":420,"GET /devicemanagement/deviceconfigurations/{id}/assignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries":420,"GET /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/devicestatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/devicestatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/devicestatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/getomasettingplaintextvalue":420,"GET /devicemanagement/deviceconfigurations/{id}/userstatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/userstatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/userstatusoverview":420,"GET /devicemanagement/deviceenrollmentconfigurations":423,"GET /devicemanagement/deviceenrollmentconfigurations/{id}":423,"GET /devicemanagement/deviceenrollmentconfigurations/{id}/assignments":423,"GET /devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}":430,"GET /devicemanagement/devicemanagementpartners":423,"GET /devicemanagement/devicemanagementpartners/{id}":423,"GET /devicemanagement/exchangeconnectors":423,"GET /devicemanagement/exchangeconnectors/{id}":423,"GET /devicemanagement/geteffectivepermissions":434,"GET /devicemanagement/importedwindowsautopilotdeviceidentities":423,"GET /devicemanagement/importedwindowsautopilotdeviceidentities/{id}":423,"GET /devicemanagement/iosupdatestatuses":420,"GET /devicemanagement/iosupdatestatuses/{id}":420,"GET /devicemanagement/manageddeviceoverview":425,"GET /devicemanagement/manageddevices":425,"GET /devicemanagement/manageddevices/{id}":425,"GET /devicemanagement/mobileapptroubleshootingevents":425,"GET /devicemanagement/mobileapptroubleshootingevents/{id}":425,"GET /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests":425,"GET /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}":425,"GET /devicemanagement/mobilethreatdefenseconnectors":423,"GET /devicemanagement/mobilethreatdefenseconnectors/{id}":423,"GET /devicemanagement/notificationmessagetemplates":420,"GET /devicemanagement/notificationmessagetemplates/{id}":420,"GET /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages":420,"GET /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages/{id}":420,"GET /devicemanagement/remoteassistancepartners":423,"GET /devicemanagement/remoteassistancepartners/{id}":423,"GET /devicemanagement/reports":436,"GET /devicemanagement/reports/exportjobs":436,"GET /devicemanagement/reports/exportjobs/{id}":436,"GET /devicemanagement/resourceoperations":434,"GET /devicemanagement/resourceoperations/{id}":434,"GET /devicemanagement/roleassignments":434,"GET /devicemanagement/roleassignments/{id}":434,"GET /devicemanagement/roledefinitions":434,"GET /devicemanagement/roledefinitions/{id}":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments/{id}":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition":434,"GET /devicemanagement/softwareupdatestatussummary":420,"GET /devicemanagement/termsandconditions":423,"GET /devicemanagement/termsandconditions/{id}":423,"GET /devicemanagement/termsandconditions/{id}/acceptancestatuses":423,"GET /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}":423,"GET /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}/termsandconditions":423,"GET /devicemanagement/termsandconditions/{id}/assignments":423,"GET /devicemanagement/termsandconditions/{id}/assignments/{id}":423,"GET /devicemanagement/troubleshootingevents":425,"GET /devicemanagement/troubleshootingevents/{id}":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformance":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformance/{id}":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails/{id}":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid/{id}":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion/{id}":425,"GET /devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance":425,"GET /devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance/{id}":425,"GET /devicemanagement/userexperienceanalyticsapphealthdeviceperformance":425,"GET /devicemanagement/userexperienceanalyticsapphealthdeviceperformance/{id}":425,"GET /devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails":425,"GET /devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails/{id}":425,"GET /devicemanagement/userexperienceanalyticsapphealthosversionperformance":425,"GET /devicemanagement/userexperienceanalyticsapphealthosversionperformance/{id}":425,"GET /devicemanagement/userexperienceanalyticsapphealthoverview":425,"GET /devicemanagement/userexperienceanalyticsbaselines":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/apphealthmetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/batteryhealthmetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/bestpracticesmetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues/{id}":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/rebootanalyticsmetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/resourceperformancemetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/workfromanywheremetrics":425,"GET /devicemanagement/userexperienceanalyticscategories/{id}":425,"GET /devicemanagement/userexperienceanalyticsdeviceperformance":425,"GET /devicemanagement/userexperienceanalyticsdeviceperformance/summarizedeviceperformancedevices":425,"GET /devicemanagement/userexperienceanalyticsdeviceperformance/{id}":425,"GET /devicemanagement/userexperienceanalyticsdevicescores":425,"GET /devicemanagement/userexperienceanalyticsdevicescores/{id}":425,"GET /devicemanagement/userexperienceanalyticsdevicestartuphistory":425,"GET /devicemanagement/userexperienceanalyticsdevicestartuphistory/{id}":425,"GET /devicemanagement/userexperienceanalyticsdevicestartupprocesses":425,"GET /devicemanagement/userexperienceanalyticsdevicestartupprocesses/{id}":425,"GET /devicemanagement/userexperienceanalyticsdevicestartupprocessperformance":425,"GET /devicemanagement/userexperienceanalyticsdevicestartupprocessperformance/{id}":425,"GET /devicemanagement/userexperienceanalyticsmetrichistory":425,"GET /devicemanagement/userexperienceanalyticsmetrichistory/{id}":425,"GET /devicemanagement/userexperienceanalyticsmetrichistory/{id}/userexperienceanalyticsmetric":425,"GET /devicemanagement/userexperienceanalyticsmodelscores":425,"GET /devicemanagement/userexperienceanalyticsmodelscores/{id}":425,"GET /devicemanagement/userexperienceanalyticsoverview":425,"GET /devicemanagement/userexperienceanalyticsscorehistory":425,"GET /devicemanagement/userexperienceanalyticsscorehistory/{id}":425,"GET /devicemanagement/userexperienceanalyticssummarizeworkfromanywheredevices":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywherehardwarereadinessmetric":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremetrics":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices/{id}":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance/{id}":425,"GET /devicemanagement/verifywindowsenrollmentautodiscovery":427,"GET /devicemanagement/virtualendpoint/auditevents":228,"GET /devicemanagement/virtualendpoint/auditevents/getauditactivitytypes":228,"GET /devicemanagement/virtualendpoint/auditevents/{id}":228,"GET /devicemanagement/virtualendpoint/cloudpcs":228,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}":228,"GET /devicemanagement/virtualendpoint/deviceimages":228,"GET /devicemanagement/virtualendpoint/deviceimages/getsourceimages":228,"GET /devicemanagement/virtualendpoint/deviceimages/{id}":228,"GET /devicemanagement/virtualendpoint/galleryimages":228,"GET /devicemanagement/virtualendpoint/galleryimages/{id}":228,"GET /devicemanagement/virtualendpoint/onpremisesconnections":228,"GET /devicemanagement/virtualendpoint/onpremisesconnections/{id}":228,"GET /devicemanagement/virtualendpoint/provisioningpolicies":228,"GET /devicemanagement/virtualendpoint/provisioningpolicies/{id}":228,"GET /devicemanagement/virtualendpoint/serviceplans":228,"GET /devicemanagement/virtualendpoint/usersettings":228,"GET /devicemanagement/virtualendpoint/usersettings/{id}":228,"GET /devicemanagement/windowsautopilotdeviceidentities":423,"GET /devicemanagement/windowsautopilotdeviceidentities/{id}":423,"GET /devicemanagement/windowsinformationprotectionapplearningsummaries":417,"GET /devicemanagement/windowsinformationprotectionapplearningsummaries/{id}":417,"GET /devicemanagement/windowsinformationprotectionnetworklearningsummaries":417,"GET /devicemanagement/windowsinformationprotectionnetworklearningsummaries/{id}":417,"GET /devicemanagement/windowsmalwareinformation":425,"GET /devicemanagement/windowsmalwareinformation/{id}":425,"GET /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates":425,"GET /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}":425,"GET /devices":268,"GET /devices(deviceid='{id}')":268,"GET /devices(deviceid='{id}')/memberof":268,"GET /devices(deviceid='{id}')/registeredowners":268,"GET /devices(deviceid='{id}')/registeredusers":268,"GET /devices(deviceid='{id}')/transitivememberof":268,"GET /devices/delta":267,"GET /devices/{id}":268,"GET /devices/{id}/memberof":268,"GET /devices/{id}/registeredowners":268,"GET /devices/{id}/registeredusers":268,"GET /devices/{id}/transitivememberof":268,"GET /directory/administrativeunits":17,"GET /directory/administrativeunits/{id}":17,"GET /directory/administrativeunits/{id}/members":17,"GET /directory/administrativeunits/{id}/members/$ref":17,"GET /directory/administrativeunits/{id}/members/{id}":17,"GET /directory/administrativeunits/{id}/scopedrolemembers":18,"GET /directory/administrativeunits/{id}/scopedrolemembers/{id}":18,"GET /directory/attributesets":63,"GET /directory/attributesets/{id}":63,"GET /directory/customsecurityattributedefinitions":63,"GET /directory/customsecurityattributedefinitions/{id}":63,"GET /directory/customsecurityattributedefinitions/{id}/allowedvalues":63,"GET /directory/customsecurityattributedefinitions/{id}/allowedvalues/{id}":63,"GET /directory/devicelocalcredentials":271,"GET /directory/devicelocalcredentials/{id}":271,"GET /directory/federationconfigurations/graph.samlorwsfedexternaldomainfederation":287,"GET /directory/federationconfigurations/samlorwsfedexternaldomainfederation/{id}/domains":392,"GET /directory/onpremisessynchronization":480,"GET /directory/publickeyinfrastructure/certificatebasedauthconfigurations":158,"GET /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}":158,"GET /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities":158,"GET /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities/{id}":158,"GET /directory/recovery/snapshots":339,"GET /directory/recovery/snapshots/{id}":339,"GET /directory/recovery/snapshots/{id}/recoveryjobs/{id}/entrarecoveryservices.getfailedchanges":339,"GET /directory/recovery/snapshots/{id}/recoverypreviewjobs/{id}/entrarecoveryservices.getchanges":339,"GET /directory/remotetenantgroups":275,"GET /directory/remotetenantgroups/{id}":275,"GET /directory/subscriptions":235,"GET /directory/subscriptions(commercesubscriptionid='{id}')":235,"GET /directory/subscriptions/{id}":235,"GET /directory/tenantgovernance/governanceinvitations":674,"GET /directory/tenantgovernance/governanceinvitations/{id}":674,"GET /directory/tenantgovernance/governancepolicytemplates":675,"GET /directory/tenantgovernance/governancepolicytemplates/default":675,"GET /directory/tenantgovernance/governancepolicytemplates/{id}":675,"GET /directory/tenantgovernance/governancerelationships":676,"GET /directory/tenantgovernance/governancerelationships/{id}":676,"GET /directory/tenantgovernance/governancerequests":678,"GET /directory/tenantgovernance/governancerequests/{id}":678,"GET /directory/tenantgovernance/relatedtenants":680,"GET /directory/tenantgovernance/relatedtenants/{id}":680,"GET /directory/tenantgovernance/settings":683,"GET /directoryobjects/{id}":278,"GET /directoryroles":18,"GET /directoryroles(roletemplateid='{id}')":281,"GET /directoryroles(roletemplateid='{id}')/members":18,"GET /directoryroles(roletemplateid='{id}')/scopedmembers":281,"GET /directoryroles/delta":281,"GET /directoryroles/{id}":281,"GET /directoryroles/{id}/members":18,"GET /directoryroles/{id}/scopedmembers":281,"GET /directoryroletemplates":281,"GET /directoryroletemplates/{id}":281,"GET /domains":286,"GET /domains/{id}":286,"GET /domains/{id}/domainnamereferences":287,"GET /domains/{id}/federationconfiguration":288,"GET /domains/{id}/federationconfiguration/{id}":414,"GET /domains/{id}/rootdomain":285,"GET /domains/{id}/serviceconfigurationrecords":287,"GET /domains/{id}/verificationdnsrecords":287,"GET /drive/items/{id}/content":299,"GET /drive/root/createdbyuser/planner/plans":510,"GET /drive/root:/{id}:/content":299,"GET /drives/{id}":366,"GET /drives/{id}/activities":293,"GET /drives/{id}/items/{id}":301,"GET /drives/{id}/items/{id}/activities":293,"GET /drives/{id}/items/{id}/analytics/alltime":293,"GET /drives/{id}/items/{id}/analytics/lastsevendays":293,"GET /drives/{id}/items/{id}/children":300,"GET /drives/{id}/items/{id}/content":300,"GET /drives/{id}/items/{id}/getactivitiesbyinterval(startdatetime={id},enddatetime={id},interval={id})":300,"GET /drives/{id}/items/{id}/permissions":293,"GET /drives/{id}/items/{id}/permissions/{id}":300,"GET /drives/{id}/items/{id}/retentionlabel":302,"GET /drives/{id}/items/{id}/thumbnails":293,"GET /drives/{id}/items/{id}/versions":293,"GET /drives/{id}/items/{id}/versions/{id}":293,"GET /drives/{id}/items/{id}/versions/{id}/content":293,"GET /drives/{id}/list/subscriptions/socketio":632,"GET /drives/{id}/root/delta":293,"GET /drives/{id}/root/search(q='{id}')":293,"GET /drives/{id}/root/subscriptions/socketio":632,"GET /drives/{id}/root:/{id}":301,"GET /education/classes":316,"GET /education/classes/delta":315,"GET /education/classes/{id}":316,"GET /education/classes/{id}/assignmentcategories":310,"GET /education/classes/{id}/assignmentcategories/delta":310,"GET /education/classes/{id}/assignmentcategories/{id}":310,"GET /education/classes/{id}/assignmentdefaults":310,"GET /education/classes/{id}/assignments":310,"GET /education/classes/{id}/assignments/delta":310,"GET /education/classes/{id}/assignments/{id}":310,"GET /education/classes/{id}/assignments/{id}/categories":310,"GET /education/classes/{id}/assignments/{id}/categories/delta":310,"GET /education/classes/{id}/assignments/{id}/resources":310,"GET /education/classes/{id}/assignments/{id}/resources/{id}":310,"GET /education/classes/{id}/assignments/{id}/resources/{id}/dependentresources":313,"GET /education/classes/{id}/assignments/{id}/rubric":310,"GET /education/classes/{id}/assignments/{id}/submissions":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/outcomes":317,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/resources":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources":313,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}":310,"GET /education/classes/{id}/assignmentsettings":310,"GET /education/classes/{id}/assignmentsettings/gradingschemes/{id}":322,"GET /education/classes/{id}/getrecentlymodifiedsubmissions":317,"GET /education/classes/{id}/members":318,"GET /education/classes/{id}/modules":319,"GET /education/classes/{id}/modules/{id}":319,"GET /education/classes/{id}/modules/{id}/resources":319,"GET /education/classes/{id}/modules/{id}/resources/{id}":319,"GET /education/classes/{id}/schools":316,"GET /education/classes/{id}/teachers":316,"GET /education/me":316,"GET /education/me/assignments":310,"GET /education/me/classes":316,"GET /education/me/rubrics":322,"GET /education/me/rubrics/{id}":322,"GET /education/me/schools":316,"GET /education/me/taughtclasses":316,"GET /education/reports/readingassignmentsubmissions":568,"GET /education/reports/readingcoachpassages":568,"GET /education/reports/reflectcheckinresponses":569,"GET /education/reports/speakerassignmentsubmissions":568,"GET /education/schools":316,"GET /education/schools/delta":323,"GET /education/schools/{id}":316,"GET /education/schools/{id}/administrativeunit":324,"GET /education/schools/{id}/classes":316,"GET /education/schools/{id}/users":325,"GET /education/users":325,"GET /education/users/delta":323,"GET /education/users/{id}":316,"GET /education/users/{id}/assignments":310,"GET /education/users/{id}/classes":316,"GET /education/users/{id}/schools":316,"GET /education/users/{id}/taughtclasses":316,"GET /employeeexperience/communities":234,"GET /employeeexperience/communities/{id}":234,"GET /employeeexperience/engagementasyncoperations/{id}":336,"GET /employeeexperience/learningcourseactivities/{id}":440,"GET /employeeexperience/learningproviders":332,"GET /employeeexperience/learningproviders/{id}":332,"GET /employeeexperience/learningproviders/{id}/learningcontents":438,"GET /employeeexperience/learningproviders/{id}/learningcontents(externalid='{id}')":438,"GET /employeeexperience/learningproviders/{id}/learningcontents/{id}":438,"GET /employeeexperience/learningproviders/{id}/learningcourseactivities(externalcourseactivityid='{id}')":440,"GET /employeeexperience/roles":333,"GET /employeeexperience/roles/{id}/members":333,"GET /external/connections":350,"GET /external/connections/{id}":350,"GET /external/connections/{id}/groups/{id}":353,"GET /external/connections/{id}/items/{id}":355,"GET /external/connections/{id}/operations/{id}":350,"GET /external/connections/{id}/schema":350,"GET /grouplifecyclepolicies":245,"GET /grouplifecyclepolicies/{id}":245,"GET /groups":385,"GET /groups/delta":373,"GET /groups/{id}":375,"GET /groups/{id}/acceptedsenders":374,"GET /groups/{id}/approleassignments":376,"GET /groups/{id}/calendar/events":374,"GET /groups/{id}/calendar/events/{id}":374,"GET /groups/{id}/calendar/events/{id}/attachments":342,"GET /groups/{id}/calendar/events/{id}/instances":146,"GET /groups/{id}/calendarview":377,"GET /groups/{id}/conversations":248,"GET /groups/{id}/conversations/{id}":247,"GET /groups/{id}/conversations/{id}/threads":248,"GET /groups/{id}/conversations/{id}/threads/{id}":248,"GET /groups/{id}/conversations/{id}/threads/{id}/posts":248,"GET /groups/{id}/conversations/{id}/threads/{id}/posts/{id}":248,"GET /groups/{id}/conversations/{id}/threads/{id}/posts/{id}/attachments":515,"GET /groups/{id}/drive":291,"GET /groups/{id}/drive/items/{id}":301,"GET /groups/{id}/drive/items/{id}/children":300,"GET /groups/{id}/drive/items/{id}/content":300,"GET /groups/{id}/drive/items/{id}/permissions":293,"GET /groups/{id}/drive/items/{id}/permissions/{id}":300,"GET /groups/{id}/drive/items/{id}/thumbnails":293,"GET /groups/{id}/drive/items/{id}/versions":293,"GET /groups/{id}/drive/items/{id}/versions/{id}":293,"GET /groups/{id}/drive/items/{id}/versions/{id}/content":293,"GET /groups/{id}/drive/root/delta":293,"GET /groups/{id}/drive/root/search(q='{id}')":293,"GET /groups/{id}/drive/root/subscriptions/socketio":632,"GET /groups/{id}/drive/root:/{id}":301,"GET /groups/{id}/drives":293,"GET /groups/{id}/events":374,"GET /groups/{id}/events/{id}":374,"GET /groups/{id}/events/{id}/attachments":342,"GET /groups/{id}/events/{id}/instances":146,"GET /groups/{id}/grouplifecyclepolicies":245,"GET /groups/{id}/memberof":378,"GET /groups/{id}/members":379,"GET /groups/{id}/onenote/notebooks":471,"GET /groups/{id}/onenote/notebooks/{id}":471,"GET /groups/{id}/onenote/notebooks/{id}/sectiongroups":471,"GET /groups/{id}/onenote/notebooks/{id}/sections":471,"GET /groups/{id}/onenote/operations/{id}":471,"GET /groups/{id}/onenote/pages":476,"GET /groups/{id}/onenote/pages/{id}":492,"GET /groups/{id}/onenote/resources/{id}/content":476,"GET /groups/{id}/onenote/sectiongroups":471,"GET /groups/{id}/onenote/sectiongroups/{id}":471,"GET /groups/{id}/onenote/sectiongroups/{id}/sectiongroups":471,"GET /groups/{id}/onenote/sectiongroups/{id}/sections":471,"GET /groups/{id}/onenote/sections":471,"GET /groups/{id}/onenote/sections/{id}":471,"GET /groups/{id}/onenote/sections/{id}/pages":476,"GET /groups/{id}/owners":380,"GET /groups/{id}/permissiongrants":381,"GET /groups/{id}/photo":553,"GET /groups/{id}/photo/$value":553,"GET /groups/{id}/photos":382,"GET /groups/{id}/photos/{id}":553,"GET /groups/{id}/planner/plans":509,"GET /groups/{id}/rejectedsenders":374,"GET /groups/{id}/settings":383,"GET /groups/{id}/settings/{id}":383,"GET /groups/{id}/sites/root":124,"GET /groups/{id}/threads":248,"GET /groups/{id}/threads/{id}":248,"GET /groups/{id}/threads/{id}/posts":248,"GET /groups/{id}/threads/{id}/posts/{id}":248,"GET /groups/{id}/threads/{id}/posts/{id}/attachments":515,"GET /groups/{id}/transitivememberof":384,"GET /groups/{id}/transitivemembers":379,"GET /groupsettings":383,"GET /groupsettings/{id}":383,"GET /groupsettingtemplates":390,"GET /groupsettingtemplates/{id}":390,"GET /identity/apiconnectors":391,"GET /identity/apiconnectors/{id}":391,"GET /identity/authenticationeventlisteners":99,"GET /identity/authenticationeventlisteners/{id}":99,"GET /identity/authenticationeventsflows":99,"GET /identity/authenticationeventsflows/{id}":99,"GET /identity/authenticationeventsflows/{id}/conditions/applications/includeapplications":99,"GET /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onattributecollection/onattributecollectionexternalusersselfservicesignup/attributes":99,"GET /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onauthenticationmethodloadstart/onauthenticationmethodloadstartexternalusersselfservicesignup/identityproviders":99,"GET /identity/b2xuserflows":114,"GET /identity/b2xuserflows/{id}":114,"GET /identity/b2xuserflows/{id}/identityproviders":113,"GET /identity/b2xuserflows/{id}/languages":114,"GET /identity/b2xuserflows/{id}/languages/{id}/defaultpages":114,"GET /identity/b2xuserflows/{id}/languages/{id}/defaultpages/{id}/$value":114,"GET /identity/b2xuserflows/{id}/languages/{id}/overridespages":114,"GET /identity/b2xuserflows/{id}/languages/{id}/overridespages/{id}/$value":114,"GET /identity/b2xuserflows/{id}/userattributeassignments":114,"GET /identity/b2xuserflows/{id}/userattributeassignments/getorder":114,"GET /identity/b2xuserflows/{id}/userattributeassignments/{id}":114,"GET /identity/conditionalaccess/authenticationcontextclassreferences":238,"GET /identity/conditionalaccess/authenticationcontextclassreferences/{id}":101,"GET /identity/conditionalaccess/authenticationstrength/authenticationmethodmodes":96,"GET /identity/conditionalaccess/authenticationstrength/authenticationmethodmodes/{id}":96,"GET /identity/conditionalaccess/authenticationstrength/combinations":96,"GET /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations":96,"GET /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}":96,"GET /identity/conditionalaccess/namedlocations":236,"GET /identity/conditionalaccess/namedlocations/{id}":236,"GET /identity/conditionalaccess/policies":236,"GET /identity/conditionalaccess/policies/{id}":236,"GET /identity/conditionalaccess/templates":236,"GET /identity/conditionalaccess/templates/{id}":236,"GET /identity/customauthenticationextensions":260,"GET /identity/customauthenticationextensions/{id}":260,"GET /identity/identityproviders":392,"GET /identity/identityproviders/availableprovidertypes":392,"GET /identity/identityproviders/{id}":392,"GET /identity/riskprevention/fraudprotectionproviders":368,"GET /identity/riskprevention/fraudprotectionproviders/{id}":368,"GET /identity/riskprevention/webapplicationfirewallproviders":368,"GET /identity/riskprevention/webapplicationfirewallproviders/{id}":368,"GET /identity/riskprevention/webapplicationfirewallverifications":571,"GET /identity/riskprevention/webapplicationfirewallverifications/{id}":368,"GET /identity/userflowattributes":114,"GET /identity/userflowattributes/{id}":114,"GET /identity/verifiedid/profiles":407,"GET /identity/verifiedid/profiles/{id}":407,"GET /identitygovernance/accessreviews/definitions":7,"GET /identitygovernance/accessreviews/definitions/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/contactedreviewers":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/{id}":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}":7,"GET /identitygovernance/accessreviews/historydefinitions":5,"GET /identitygovernance/accessreviews/historydefinitions/{id}":5,"GET /identitygovernance/accessreviews/historydefinitions/{id}/instances":5,"GET /identitygovernance/accessreviews/unified/definitions":7,"GET /identitygovernance/appconsent/appconsentrequests":66,"GET /identitygovernance/appconsent/appconsentrequests/filterbycurrentuser(on='parametervalue')":66,"GET /identitygovernance/appconsent/appconsentrequests/{id}":66,"GET /identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests":66,"GET /identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests/filterbycurrentuser(on='parametervalue')":66,"GET /identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests/{id}":66,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/filterbycurrentuser(on='approver')":75,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackages":2,"GET /identitygovernance/entitlementmanagement/accesspackages/filterbycurrentuser(on='allowedrequestor')":1,"GET /identitygovernance/entitlementmanagement/accesspackages/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackages/{id}/accesspackagesincompatiblewith":2,"GET /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatibleaccesspackages":2,"GET /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatiblegroups":2,"GET /identitygovernance/entitlementmanagement/accesspackagesuggestions/filterbycurrentuser(on='{id}')":4,"GET /identitygovernance/entitlementmanagement/assignmentpolicies":2,"GET /identitygovernance/entitlementmanagement/assignmentpolicies/{id}":2,"GET /identitygovernance/entitlementmanagement/assignmentrequests":2,"GET /identitygovernance/entitlementmanagement/assignmentrequests/filterbycurrentuser(on='parametervalue')":1,"GET /identitygovernance/entitlementmanagement/assignmentrequests/{id}":2,"GET /identitygovernance/entitlementmanagement/assignments":2,"GET /identitygovernance/entitlementmanagement/assignments/additionalaccess(accesspackageid='parametervalue',incompatibleaccesspackageid='parametervalue')":2,"GET /identitygovernance/entitlementmanagement/assignments/filterbycurrentuser(on='parametervalue')":1,"GET /identitygovernance/entitlementmanagement/assignments/{id}":2,"GET /identitygovernance/entitlementmanagement/availableaccesspackages/{id}/resourcerolescopes":4,"GET /identitygovernance/entitlementmanagement/catalogs":2,"GET /identitygovernance/entitlementmanagement/catalogs/{id}":2,"GET /identitygovernance/entitlementmanagement/catalogs/{id}/customworkflowextensions":2,"GET /identitygovernance/entitlementmanagement/catalogs/{id}/customworkflowextensions/{id}":2,"GET /identitygovernance/entitlementmanagement/catalogs/{id}/resourceroles":2,"GET /identitygovernance/entitlementmanagement/catalogs/{id}/resources":2,"GET /identitygovernance/entitlementmanagement/catalogs/{id}/resources/{id}/uploadsessions":2,"GET /identitygovernance/entitlementmanagement/catalogs/{id}/resources/{id}/uploadsessions/{id}":2,"GET /identitygovernance/entitlementmanagement/connectedorganizations":2,"GET /identitygovernance/entitlementmanagement/connectedorganizations/{id}":2,"GET /identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors":2,"GET /identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors":2,"GET /identitygovernance/entitlementmanagement/controlconfigurations/endusersettings":2,"GET /identitygovernance/entitlementmanagement/externaloriginresourceconnectors":2,"GET /identitygovernance/entitlementmanagement/externaloriginresourceconnectors/{id}":2,"GET /identitygovernance/entitlementmanagement/resourcerequests":2,"GET /identitygovernance/entitlementmanagement/settings":2,"GET /identitygovernance/entitlementmanagement/subjects(objectid='{id}')":0,"GET /identitygovernance/lifecycleworkflows/customtaskextensions":395,"GET /identitygovernance/lifecycleworkflows/customtaskextensions/{id}":395,"GET /identitygovernance/lifecycleworkflows/deleteditems/workflows":397,"GET /identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}":397,"GET /identitygovernance/lifecycleworkflows/insights/toptasksprocessedsummary(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/insights/topworkflowsprocessedsummary(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/insights/workflowsprocessedbycategory(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/insights/workflowsprocessedsummary(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/settings":398,"GET /identitygovernance/lifecycleworkflows/taskdefinitions":398,"GET /identitygovernance/lifecycleworkflows/taskdefinitions/{id}":398,"GET /identitygovernance/lifecycleworkflows/workflows":400,"GET /identitygovernance/lifecycleworkflows/workflows/{id}":400,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/executionscope":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/summary(startdatetime={id},enddatetime={id})":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/summary(startdatetime={id},enddatetime={id})":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}/taskprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/taskreports":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/summary(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/taskprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/tasks":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}":402,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults/{id}/taskprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/versions":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks/{id}":402,"GET /identitygovernance/lifecycleworkflows/workflowtemplates":398,"GET /identitygovernance/lifecycleworkflows/workflowtemplates/{id}":398,"GET /identitygovernance/privilegedaccess/group/assignmentapprovals/filterbycurrentuser(on='approver')":75,"GET /identitygovernance/privilegedaccess/group/assignmentapprovals/{id}":2,"GET /identitygovernance/privilegedaccess/group/assignmentapprovals/{id}/stages":2,"GET /identitygovernance/privilegedaccess/group/assignmentapprovals/{id}/stages/{id}":2,"GET /identitygovernance/privilegedaccess/group/assignmentscheduleinstances":545,"GET /identitygovernance/privilegedaccess/group/assignmentscheduleinstances/filterbycurrentuser(on=parametervalue)":545,"GET /identitygovernance/privilegedaccess/group/assignmentscheduleinstances/{id}":545,"GET /identitygovernance/privilegedaccess/group/assignmentschedulerequests":546,"GET /identitygovernance/privilegedaccess/group/assignmentschedulerequests/filterbycurrentuser(on='parametervalue')":546,"GET /identitygovernance/privilegedaccess/group/assignmentschedulerequests/{id}":546,"GET /identitygovernance/privilegedaccess/group/assignmentschedules":545,"GET /identitygovernance/privilegedaccess/group/assignmentschedules/filterbycurrentuser(on='parametervalue')":545,"GET /identitygovernance/privilegedaccess/group/assignmentschedules/{id}":545,"GET /identitygovernance/privilegedaccess/group/eligibilityscheduleinstances":547,"GET /identitygovernance/privilegedaccess/group/eligibilityscheduleinstances/filterbycurrentuser(on='parametervalue')":547,"GET /identitygovernance/privilegedaccess/group/eligibilityscheduleinstances/{id}":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedulerequests":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedulerequests/filterbycurrentuser(on='parametervalue')":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedulerequests/{id}":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedules":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedules/filterbycurrentuser(on='parametervalue')":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedules/{id}":547,"GET /identitygovernance/termsofuse/agreements":58,"GET /identitygovernance/termsofuse/agreements/{id}":58,"GET /identitygovernance/termsofuse/agreements/{id}/acceptances":59,"GET /identityprotection/riskdetections":405,"GET /identityprotection/riskdetections/{id}":405,"GET /identityprotection/riskyserviceprincipals":404,"GET /identityprotection/riskyserviceprincipals/{id}":404,"GET /identityprotection/riskyserviceprincipals/{id}/history":404,"GET /identityprotection/riskyusers":574,"GET /identityprotection/riskyusers/{id}":574,"GET /identityprotection/riskyusers/{id}/history":575,"GET /identityprotection/serviceprincipalriskdetections":405,"GET /identityprotection/serviceprincipalriskdetections/{id}":405,"GET /identityproviders":392,"GET /identityproviders/availableprovidertypes":392,"GET /identityproviders/{id}":392,"GET /informationprotection/bitlocker/recoverykeys":125,"GET /informationprotection/bitlocker/recoverykeys/{id}":125,"GET /informationprotection/threatassessmentrequests":408,"GET /informationprotection/threatassessmentrequests/{id}":408,"GET /me":702,"GET /me/activities":555,"GET /me/activities/recent":555,"GET /me/adhoccalls/{id}/recordings/{id}":155,"GET /me/adhoccalls/{id}/recordings/{id}/content":155,"GET /me/adhoccalls/{id}/transcripts/{id}":157,"GET /me/adhoccalls/{id}/transcripts/{id}/content":157,"GET /me/agreementacceptances":59,"GET /me/approleassignments":48,"GET /me/authentication/emailmethods":85,"GET /me/authentication/emailmethods/{id}":328,"GET /me/authentication/externalauthenticationmethods":86,"GET /me/authentication/externalauthenticationmethods/{id}":348,"GET /me/authentication/fido2methods":362,"GET /me/authentication/fido2methods/{id}":361,"GET /me/authentication/methods":86,"GET /me/authentication/methods/{id}":105,"GET /me/authentication/microsoftauthenticatormethods":463,"GET /me/authentication/microsoftauthenticatormethods/{id}":462,"GET /me/authentication/passwordmethods":87,"GET /me/authentication/passwordmethods/{id}":87,"GET /me/authentication/phonemethods":88,"GET /me/authentication/phonemethods/{id}":505,"GET /me/authentication/platformcredentialmethods":513,"GET /me/authentication/platformcredentialmethods/{id}":512,"GET /me/authentication/qrcodepinmethod/standardqrcode":558,"GET /me/authentication/qrcodepinmethod/temporaryqrcode":558,"GET /me/authentication/softwareoathmethods":90,"GET /me/authentication/softwareoathmethods/{id}":627,"GET /me/authentication/temporaryaccesspassmethods":91,"GET /me/authentication/temporaryaccesspassmethods/{id}":670,"GET /me/authentication/windowshelloforbusinessmethods":751,"GET /me/authentication/windowshelloforbusinessmethods/{id}":750,"GET /me/calendar/calendarview":145,"GET /me/calendar/events":145,"GET /me/calendar/events/{id}":146,"GET /me/calendar/events/{id}/attachments":342,"GET /me/calendar/events/{id}/instances":146,"GET /me/calendargroups":704,"GET /me/calendargroups/{id}":146,"GET /me/calendargroups/{id}/calendars":147,"GET /me/calendargroups/{id}/calendars/{id}/calendarview":145,"GET /me/calendargroups/{id}/calendars/{id}/events":145,"GET /me/calendargroups/{id}/calendars/{id}/events/{id}":146,"GET /me/calendargroups/{id}/calendars/{id}/events/{id}/attachments":342,"GET /me/calendargroups/{id}/calendars/{id}/events/{id}/instances":146,"GET /me/calendars":147,"GET /me/calendars/delta":144,"GET /me/calendars/{id}/calendarview":145,"GET /me/calendars/{id}/events":145,"GET /me/calendars/{id}/events/{id}":146,"GET /me/calendars/{id}/events/{id}/attachments":342,"GET /me/calendars/{id}/events/{id}/instances":146,"GET /me/calendarview/delta":144,"GET /me/chats":206,"GET /me/chats/{id}":197,"GET /me/chats/{id}/messages":202,"GET /me/chats/{id}/messages/{id}":217,"GET /me/cloudclipboard/items":224,"GET /me/cloudclipboard/items/{id}":224,"GET /me/cloudpcs":229,"GET /me/cloudpcs/{id}/retrievecloudpclaunchdetail":229,"GET /me/contactfolders":242,"GET /me/contactfolders/delta":242,"GET /me/contactfolders/{id}":242,"GET /me/contactfolders/{id}/childfolders":242,"GET /me/contactfolders/{id}/childfolders/{id}/.../contacts":242,"GET /me/contactfolders/{id}/childfolders/{id}/.../contacts/{id}":242,"GET /me/contactfolders/{id}/contacts":242,"GET /me/contactfolders/{id}/contacts/delta":242,"GET /me/contactfolders/{id}/contacts/{id}":242,"GET /me/contactfolders/{id}/contacts/{id}/photo":553,"GET /me/contactfolders/{id}/contacts/{id}/photo/$value":553,"GET /me/contacts":242,"GET /me/contacts/{id}":242,"GET /me/contacts/{id}/photo":553,"GET /me/contacts/{id}/photo/$value":553,"GET /me/createdobjects":705,"GET /me/directreports":706,"GET /me/drive":291,"GET /me/drive/following":292,"GET /me/drive/items/{id}":301,"GET /me/drive/items/{id}/children":300,"GET /me/drive/items/{id}/content":299,"GET /me/drive/items/{id}/permissions":293,"GET /me/drive/items/{id}/permissions/{id}":300,"GET /me/drive/items/{id}/thumbnails":293,"GET /me/drive/items/{id}/versions":293,"GET /me/drive/items/{id}/versions/{id}":293,"GET /me/drive/items/{id}/versions/{id}/content":293,"GET /me/drive/items/{id}/workbook/application":187,"GET /me/drive/items/{id}/workbook/comments":187,"GET /me/drive/items/{id}/workbook/comments/{id}":187,"GET /me/drive/items/{id}/workbook/comments/{id}/replies":187,"GET /me/drive/items/{id}/workbook/comments/{id}/replies/{id}":187,"GET /me/drive/items/{id}/workbook/names":187,"GET /me/drive/items/{id}/workbook/names/{id}":187,"GET /me/drive/items/{id}/workbook/names/{id}/range":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/boundingrect":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/cell":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/column":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/entirecolumn":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/entirerow":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/borders":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/borders/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/borders/{id}":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/fill":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/font":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/protection":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/intersection":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/lastcell":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/lastcolumn":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/lastrow":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/offsetrange":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/usedrange":187,"GET /me/drive/items/{id}/workbook/operations/{id}":187,"GET /me/drive/items/{id}/workbook/tablerowoperationresult(key={id})":187,"GET /me/drive/items/{id}/workbook/tables":752,"GET /me/drive/items/{id}/workbook/tables/{id}":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/databodyrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/headerrowrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/boundingrect":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/cell":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/column":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/entirecolumn":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/entirerow":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders/{id}":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/font":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/protection":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/intersection":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastcell":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastcolumn":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastrow":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/offsetrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/usedrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/totalrowrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/databodyrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/headerrowrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/range":187,"GET /me/drive/items/{id}/workbook/tables/{id}/rows":187,"GET /me/drive/items/{id}/workbook/tables/{id}/rows/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/tables/{id}/rows/itemat(index={id})/range":187,"GET /me/drive/items/{id}/workbook/tables/{id}/rows/{id}":187,"GET /me/drive/items/{id}/workbook/tables/{id}/sort":187,"GET /me/drive/items/{id}/workbook/tables/{id}/sort/fields/icon":187,"GET /me/drive/items/{id}/workbook/tables/{id}/totalrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/cell(row={id},column={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/datalabels":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width=640)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width=640,height=480)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width=640,height=480,fittingmode='fit')":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/names":760,"GET /me/drive/items/{id}/workbook/worksheets/{id}/pivottables":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/pivottables/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/protection":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range()/format/protection":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/boundingrect":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/cell":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/column":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/entirecolumn":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/fill":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/font":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/intersection":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/lastcell":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/lastcolumn":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/lastrow":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/offsetrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/usedrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address=''/entirerow":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address={id})/visibleview":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address={id})/visibleview/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address={id})/visibleview/range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address={id})/visibleview/rows":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range/columnsafter(count=n)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range/columnsbefore(count=n)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range/rowsabove(count=n)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range/rowsbelow(count=n)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/databodyrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/headerrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/totalrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/databodyrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/headerrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={id})range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/fields/icon":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/totalrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/usedrange":187,"GET /me/drive/recent":290,"GET /me/drive/root/delta":293,"GET /me/drive/root/search(q='{id}')":293,"GET /me/drive/root/subscriptions/socketio":632,"GET /me/drive/root:/{id}":301,"GET /me/drive/root:/{id}:/content":299,"GET /me/drive/root:/{id}:/permissions":293,"GET /me/drive/root:/{id}:/workbook/application":187,"GET /me/drive/root:/{id}:/workbook/comments/{id}/replies":187,"GET /me/drive/root:/{id}:/workbook/comments/{id}/replies/{id}":187,"GET /me/drive/root:/{id}:/workbook/names":187,"GET /me/drive/root:/{id}:/workbook/names/{id}":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/boundingrect":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/cell":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/column":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/entirecolumn":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/entirerow":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders/{id}":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/fill":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/font":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/protection":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/intersection":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/lastcell":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/lastcolumn":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/lastrow":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/offsetrange":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/usedrange":187,"GET /me/drive/root:/{id}:/workbook/tablerowoperationresult(key={id})":187,"GET /me/drive/root:/{id}:/workbook/tables":752,"GET /me/drive/root:/{id}:/workbook/tables/{id}":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/databodyrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/headerrowrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/boundingrect":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/cell":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/column":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/entirecolumn":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/entirerow":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders/{id}":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/font":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/protection":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/intersection":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastcell":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastcolumn":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastrow":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/offsetrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/usedrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/totalrowrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/databodyrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/headerrowrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/rows":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/rows/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/rows/itemat(index={id})/range":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/rows/{id}":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/sort":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/sort/fields/icon":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/totalrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/cell(row={id},column={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/datalabels":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width=640)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width=640,height=480)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width=640,height=480,fittingmode='fit')":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/names":760,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/protection":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range()/format/protection":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/boundingrect":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/cell":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/column":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/entirecolumn":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/fill":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/font":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/intersection":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/lastcell":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/lastcolumn":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/lastrow":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/offsetrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/usedrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address=''/entirerow":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={id})/visibleview":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={id})/visibleview/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={id})/visibleview/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={id})/visibleview/rows":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range/columnsafter(count=n)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range/columnsbefore(count=n)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range/rowsabove(count=n)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range/rowsbelow(count=n)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/databodyrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/headerrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/totalrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/databodyrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/headerrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={id})/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/fields/icon":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/totalrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/usedrange":187,"GET /me/drive/sharedwithme":294,"GET /me/drive/special/{id}":290,"GET /me/drives":293,"GET /me/employeeexperience/assignedroles":334,"GET /me/employeeexperience/learningcourseactivities":441,"GET /me/events":145,"GET /me/events/{id}":146,"GET /me/events/{id}/attachments":342,"GET /me/events/{id}/instances":146,"GET /me/followedsites":412,"GET /me/inferenceclassification/overrides":344,"GET /me/insights/shared":412,"GET /me/insights/shared/{id}/resource":412,"GET /me/insights/trending":412,"GET /me/insights/trending/{id}/resource":412,"GET /me/insights/used":412,"GET /me/insights/used/{id}/resource":412,"GET /me/joinedteams":707,"GET /me/licensedetails":708,"GET /me/mailboxsettings":701,"GET /me/mailboxsettings/automaticrepliessetting":701,"GET /me/mailboxsettings/dateformat":701,"GET /me/mailboxsettings/delegatemeetingmessagedeliveryoptions":701,"GET /me/mailboxsettings/language":701,"GET /me/mailboxsettings/timeformat":701,"GET /me/mailboxsettings/timezone":701,"GET /me/mailboxsettings/userpurpose":701,"GET /me/mailboxsettings/workinghours":701,"GET /me/mailfolders":456,"GET /me/mailfolders/delta":455,"GET /me/mailfolders/inbox/messagerules":457,"GET /me/mailfolders/inbox/messagerules/{id}":457,"GET /me/mailfolders/{id}":456,"GET /me/mailfolders/{id}/childfolders":456,"GET /me/mailfolders/{id}/childfolders/{id}/.../messages/{id}/attachments/{id}":344,"GET /me/mailfolders/{id}/messages":456,"GET /me/mailfolders/{id}/messages/delta":455,"GET /me/mailfolders/{id}/messages/{id}":344,"GET /me/mailfolders/{id}/messages/{id}/$value":460,"GET /me/mailfolders/{id}/messages/{id}/attachments":344,"GET /me/manager":709,"GET /me/memberof":710,"GET /me/messages":456,"GET /me/messages/{id}":344,"GET /me/messages/{id}/$value":460,"GET /me/messages/{id}/attachments":344,"GET /me/notes":469,"GET /me/notes/delta":469,"GET /me/notes/{id}":469,"GET /me/notes/{id}/attachments":469,"GET /me/oauth2permissiongrants":711,"GET /me/onenote/notebooks":471,"GET /me/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={id})":471,"GET /me/onenote/notebooks/{id}":471,"GET /me/onenote/notebooks/{id}/sectiongroups":471,"GET /me/onenote/notebooks/{id}/sections":471,"GET /me/onenote/operations/{id}":471,"GET /me/onenote/pages":476,"GET /me/onenote/pages/{id}":492,"GET /me/onenote/resources/{id}/content":476,"GET /me/onenote/sectiongroups":471,"GET /me/onenote/sectiongroups/{id}":471,"GET /me/onenote/sectiongroups/{id}/sectiongroups":471,"GET /me/onenote/sectiongroups/{id}/sections":471,"GET /me/onenote/sections":471,"GET /me/onenote/sections/{id}":471,"GET /me/onenote/sections/{id}/pages":476,"GET /me/onlinemeetings":477,"GET /me/onlinemeetings/{id}":477,"GET /me/onlinemeetings/{id}/alternativerecording":477,"GET /me/onlinemeetings/{id}/attendancereports":82,"GET /me/onlinemeetings/{id}/attendancereports/{id}":82,"GET /me/onlinemeetings/{id}/attendancereports/{id}/attendancerecords":82,"GET /me/onlinemeetings/{id}/attendeereport":477,"GET /me/onlinemeetings/{id}/getvirtualappointmentjoinweburl":737,"GET /me/onlinemeetings/{id}/recording":477,"GET /me/onlinemeetings/{id}/recordings":478,"GET /me/onlinemeetings/{id}/recordings/{id}":155,"GET /me/onlinemeetings/{id}/recordings/{id}/content":155,"GET /me/onlinemeetings/{id}/transcripts":479,"GET /me/onlinemeetings/{id}/transcripts/{id}":157,"GET /me/onlinemeetings/{id}/transcripts/{id}/content":157,"GET /me/outlook/mastercategories":457,"GET /me/outlook/mastercategories/{id}":457,"GET /me/outlook/supportedlanguages":490,"GET /me/outlook/supportedtimezones":490,"GET /me/outlook/supportedtimezones(timezonestandard=microsoft.graph.timezonestandard'{id}')":490,"GET /me/owneddevices":712,"GET /me/ownedobjects":713,"GET /me/people":714,"GET /me/photo":553,"GET /me/photo/$value":553,"GET /me/photos":553,"GET /me/photos/{id}":553,"GET /me/planner/plans":510,"GET /me/planner/tasks":509,"GET /me/presence":518,"GET /me/print/recentprintershares":523,"GET /me/registereddevices":712,"GET /me/settings":729,"GET /me/settings/iteminsights":725,"GET /me/settings/windows":731,"GET /me/settings/windows/{id}":731,"GET /me/settings/windows/{id}/instances":731,"GET /me/settings/windows/{id}/instances/{id}":731,"GET /me/settings/workhoursandlocations":755,"GET /me/settings/workhoursandlocations/occurrencesview(startdatetime='{id}',enddatetime='{id}')":757,"GET /me/settings/workhoursandlocations/recurrences":756,"GET /me/sponsorof":716,"GET /me/todo/lists":223,"GET /me/todo/lists/delta":693,"GET /me/todo/lists/{id}":223,"GET /me/todo/lists/{id}/tasks":223,"GET /me/todo/lists/{id}/tasks/delta":691,"GET /me/todo/lists/{id}/tasks/{id}":223,"GET /me/todo/lists/{id}/tasks/{id}/attachments":223,"GET /me/todo/lists/{id}/tasks/{id}/attachments/{id}":223,"GET /me/todo/lists/{id}/tasks/{id}/attachments/{id}/$value":223,"GET /me/todo/lists/{id}/tasks/{id}/checklistitems":223,"GET /me/todo/lists/{id}/tasks/{id}/checklistitems/{id}":223,"GET /me/todo/lists/{id}/tasks/{id}/linkedresources":223,"GET /me/todo/lists/{id}/tasks/{id}/linkedresources/{id}":223,"GET /me/transitivememberof":717,"GET /oauth2permissiongrants":474,"GET /oauth2permissiongrants/delta":473,"GET /oauth2permissiongrants/{id}":474,"GET /organization":484,"GET /organization/{id}":484,"GET /organization/{id}/branding":486,"GET /organization/{id}/branding/localizations":486,"GET /organization/{id}/branding/localizations/{id}":486,"GET /organization/{id}/certificatebasedauthconfiguration":161,"GET /organization/{id}/certificatebasedauthconfiguration/{id}":161,"GET /places/{id}":142,"GET /places/{id}/building/map":142,"GET /places/{id}/building/map/footprints":142,"GET /places/{id}/building/map/levels":142,"GET /places/{id}/building/map/levels/{id}/fixtures":142,"GET /places/{id}/building/map/levels/{id}/sections":142,"GET /places/{id}/building/map/levels/{id}/units":142,"GET /places/{id}/checkins/{id}":221,"GET /places/{id}/descendants/{id}":506,"GET /places/{id}/roomlist/rooms":142,"GET /places/{id}/roomlist/workspaces":142,"GET /planner/buckets":507,"GET /planner/buckets/{id}":507,"GET /planner/buckets/{id}/tasks":509,"GET /planner/plans":507,"GET /planner/plans/{id}":507,"GET /planner/plans/{id}/buckets":509,"GET /planner/plans/{id}/details":507,"GET /planner/plans/{id}/tasks":509,"GET /planner/tasks":507,"GET /planner/tasks/{id}":507,"GET /planner/tasks/{id}/assignedtotaskboardformat":507,"GET /planner/tasks/{id}/buckettaskboardformat":507,"GET /planner/tasks/{id}/details":507,"GET /planner/tasks/{id}/progresstaskboardformat":507,"GET /policies/activitybasedtimeoutpolicies":10,"GET /policies/activitybasedtimeoutpolicies/{id}":10,"GET /policies/adminconsentrequestpolicy":13,"GET /policies/appmanagementpolicies":10,"GET /policies/appmanagementpolicies/{id}":10,"GET /policies/authenticationflowspolicy":103,"GET /policies/authenticationmethodspolicy":107,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/email":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/fido2":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/microsoftauthenticator":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/qrcodepin":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/sms":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/softwareoath":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/temporaryaccesspass":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/verifiablecredentials":349,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/voice":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/x509certificate":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/{id}":349,"GET /policies/authenticationstrengthpolicies":96,"GET /policies/authenticationstrengthpolicies/{id}":96,"GET /policies/authenticationstrengthpolicies/{id}/usage":96,"GET /policies/authorizationpolicy":111,"GET /policies/claimsmappingpolicies":10,"GET /policies/claimsmappingpolicies/{id}":10,"GET /policies/crosstenantaccesspolicy":255,"GET /policies/crosstenantaccesspolicy/default":255,"GET /policies/crosstenantaccesspolicy/default/m365capabilities":257,"GET /policies/crosstenantaccesspolicy/partners":255,"GET /policies/crosstenantaccesspolicy/partners/{id}":255,"GET /policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization":255,"GET /policies/crosstenantaccesspolicy/partners/{id}/m365capabilities":257,"GET /policies/crosstenantaccesspolicy/templates/multitenantorganizationidentitysynchronization":255,"GET /policies/crosstenantaccesspolicy/templates/multitenantorganizationpartnerconfiguration":255,"GET /policies/defaultappmanagementpolicy":10,"GET /policies/deviceregistrationpolicy":272,"GET /policies/featurerolloutpolicies":356,"GET /policies/featurerolloutpolicies/{id}":358,"GET /policies/homerealmdiscoverypolicies":10,"GET /policies/homerealmdiscoverypolicies/{id}":10,"GET /policies/identitysecuritydefaultsenforcementpolicy":236,"GET /policies/ownerlessgrouppolicy":374,"GET /policies/permissiongrantpolicies":501,"GET /policies/permissiongrantpolicies/{id}":501,"GET /policies/permissiongrantpolicies/{id}/excludes":502,"GET /policies/permissiongrantpolicies/{id}/includes":502,"GET /policies/rolemanagementpolicies":514,"GET /policies/rolemanagementpolicies/{id}":514,"GET /policies/rolemanagementpolicies/{id}/rules":514,"GET /policies/rolemanagementpolicies/{id}/rules/{id}":514,"GET /policies/rolemanagementpolicyassignments":514,"GET /policies/rolemanagementpolicyassignments/{id}":514,"GET /policies/tokenissuancepolicies/{id}":10,"GET /policies/tokenlifetimepolicies":10,"GET /policies/tokenlifetimepolicies/{id}":10,"GET /print/connectors":521,"GET /print/connectors/{id}":521,"GET /print/operations/{id}":531,"GET /print/printers":522,"GET /print/printers/{id}":534,"GET /print/printers/{id}/connectors":521,"GET /print/printers/{id}/jobs":535,"GET /print/printers/{id}/jobs/{id}":535,"GET /print/printers/{id}/jobs/{id}/documents/{id}/$value":530,"GET /print/printers/{id}/shares":523,"GET /print/printers/{id}/shares/{id}":523,"GET /print/printers/{id}/tasktriggers":536,"GET /print/printers/{id}/tasktriggers/{id}":536,"GET /print/services":524,"GET /print/services/{id}":524,"GET /print/services/{id}/endpoints":524,"GET /print/services/{id}/endpoints/{id}":524,"GET /print/settings":520,"GET /print/shares":525,"GET /print/shares/{id}":523,"GET /print/shares/{id}/allowedgroups":539,"GET /print/shares/{id}/allowedusers":539,"GET /print/shares/{id}/jobs":540,"GET /print/shares/{id}/jobs/{id}":535,"GET /print/shares/{id}/printer":534,"GET /print/taskdefinitions":519,"GET /print/taskdefinitions/{id}":519,"GET /print/taskdefinitions/{id}/tasks":519,"GET /print/taskdefinitions/{id}/tasks/{id}":519,"GET /privacy/subjectrightsrequests":628,"GET /privacy/subjectrightsrequests/4ef5e3e6-545b-4b5f-a8b4-ff4f9980d7a9/getfinalreport":628,"GET /privacy/subjectrightsrequests/{id}":628,"GET /privacy/subjectrightsrequests/{id}/getfinalattachment":628,"GET /privacy/subjectrightsrequests/{id}/notes":628,"GET /reports":420,"GET /reports/authenticationmethods/userregistrationdetails":109,"GET /reports/authenticationmethods/userregistrationdetails/{id}":109,"GET /reports/authenticationmethods/usersregisteredbyfeature":110,"GET /reports/authenticationmethods/usersregisteredbymethod":110,"GET /reports/dailyprintusagebyprinter":544,"GET /reports/dailyprintusagebyprinter/{id}":544,"GET /reports/dailyprintusagebyuser":544,"GET /reports/dailyprintusagebyuser/{id}":544,"GET /reports/deviceconfigurationdeviceactivity":420,"GET /reports/deviceconfigurationuseractivity":420,"GET /reports/getemailactivitycounts(period='{id}')":567,"GET /reports/getemailactivityusercounts(period='{id}')":567,"GET /reports/getemailactivityuserdetail(date={id})":567,"GET /reports/getemailactivityuserdetail(period='{id}')":567,"GET /reports/getemailappusageappsusercounts(period='{id}')":567,"GET /reports/getemailappusageusercounts(period='{id}')":567,"GET /reports/getemailappusageuserdetail(date={id})":567,"GET /reports/getemailappusageuserdetail(period='{id}')":567,"GET /reports/getemailappusageversionsusercounts(period='{id}')":567,"GET /reports/getgrouparchivedprintjobs(groupid='{id}',startdatetime='{id}',enddatetime='{id}')":544,"GET /reports/getm365appplatformusercounts(period='{id}')":567,"GET /reports/getm365appusercounts(period='{id}')":567,"GET /reports/getm365appuserdetail(date='{id}')":567,"GET /reports/getm365appuserdetail(period='{id}')":567,"GET /reports/getmailboxusagedetail(period='{id}')":567,"GET /reports/getmailboxusagemailboxcounts(period='{id}')":567,"GET /reports/getmailboxusagequotastatusmailboxcounts(period='{id}')":567,"GET /reports/getmailboxusagestorage(period='{id}')":567,"GET /reports/getoffice365activationcounts":567,"GET /reports/getoffice365activationsusercounts":567,"GET /reports/getoffice365activationsuserdetail":567,"GET /reports/getoffice365activeusercounts(period='{id}')":567,"GET /reports/getoffice365activeuserdetail(date={id})":567,"GET /reports/getoffice365activeuserdetail(period='{id}')":567,"GET /reports/getoffice365groupsactivitycounts(period='{id}')":567,"GET /reports/getoffice365groupsactivitydetail(date={id})":567,"GET /reports/getoffice365groupsactivitydetail(period='{id}')":567,"GET /reports/getoffice365groupsactivityfilecounts(period='{id}')":567,"GET /reports/getoffice365groupsactivitygroupcounts(period='{id}')":567,"GET /reports/getoffice365groupsactivitystorage(period='{id}')":567,"GET /reports/getoffice365servicesusercounts(period='{id}')":567,"GET /reports/getonedriveactivityfilecounts(period='{id}')":567,"GET /reports/getonedriveactivityusercounts(period='{id}')":567,"GET /reports/getonedriveactivityuserdetail(date={id})":567,"GET /reports/getonedriveactivityuserdetail(period='{id}')":567,"GET /reports/getonedriveusageaccountcounts(period='{id}')":567,"GET /reports/getonedriveusageaccountdetail(date={id})":567,"GET /reports/getonedriveusageaccountdetail(period='{id}')":567,"GET /reports/getonedriveusagefilecounts(period='{id}')":567,"GET /reports/getonedriveusagestorage(period='{id}')":567,"GET /reports/getprinterarchivedprintjobs(printerid='{id}',startdatetime='{id}',enddatetime='{id}')":544,"GET /reports/getrelyingpartydetailedsummary(period='parametervalue')":567,"GET /reports/getsharepointactivityfilecounts(period='{id}')":567,"GET /reports/getsharepointactivitypages(period='{id}')":567,"GET /reports/getsharepointactivityusercounts(period='{id}')":567,"GET /reports/getsharepointactivityuserdetail(date={id})":567,"GET /reports/getsharepointactivityuserdetail(period='{id}')":567,"GET /reports/getsharepointsiteusagedetail(date={id})":567,"GET /reports/getsharepointsiteusagedetail(period='{id}')":567,"GET /reports/getsharepointsiteusagefilecounts(period='{id}')":567,"GET /reports/getsharepointsiteusagepages(period='{id}')":567,"GET /reports/getsharepointsiteusagesitecounts(period='{id}')":567,"GET /reports/getsharepointsiteusagestorage(period='{id}')":567,"GET /reports/getskypeforbusinessactivitycounts(period='{id}')":567,"GET /reports/getskypeforbusinessactivityusercounts(period='{id}')":567,"GET /reports/getskypeforbusinessactivityuserdetail(date={id})":567,"GET /reports/getskypeforbusinessactivityuserdetail(period='{id}')":567,"GET /reports/getskypeforbusinessdeviceusagedistributionusercounts(period='{id}')":567,"GET /reports/getskypeforbusinessdeviceusageusercounts(period='{id}')":567,"GET /reports/getskypeforbusinessdeviceusageuserdetail(date={id})":567,"GET /reports/getskypeforbusinessdeviceusageuserdetail(period='{id}')":567,"GET /reports/getskypeforbusinessorganizeractivitycounts(period='{id}')":567,"GET /reports/getskypeforbusinessorganizeractivityminutecounts(period='{id}')":567,"GET /reports/getskypeforbusinessorganizeractivityusercounts(period='{id}')":567,"GET /reports/getskypeforbusinessparticipantactivitycounts(period='{id}')":567,"GET /reports/getskypeforbusinessparticipantactivityminutecounts(period='{id}')":567,"GET /reports/getskypeforbusinessparticipantactivityusercounts(period='{id}')":567,"GET /reports/getskypeforbusinesspeertopeeractivitycounts(period='{id}')":567,"GET /reports/getskypeforbusinesspeertopeeractivityminutecounts(period='{id}')":567,"GET /reports/getskypeforbusinesspeertopeeractivityusercounts(period='{id}')":567,"GET /reports/getteamsdeviceusagedistributionusercounts(period='{id}')":567,"GET /reports/getteamsdeviceusageusercounts(period='{id}')":567,"GET /reports/getteamsdeviceusageuserdetail(date='{id}')":567,"GET /reports/getteamsdeviceusageuserdetail(period='{id}')":567,"GET /reports/getteamsteamactivitycounts(period='{id}')":567,"GET /reports/getteamsteamactivitydetail(period='{id}')":567,"GET /reports/getteamsteamactivitydistributioncounts(period='{id}')":567,"GET /reports/getteamsteamcounts(period='{id}')":567,"GET /reports/getteamsuseractivitycounts(period='{id}')":567,"GET /reports/getteamsuseractivityusercounts(period='{id}')":567,"GET /reports/getteamsuseractivityuserdetail(date={id})":567,"GET /reports/getteamsuseractivityuserdetail(period='{id}')":567,"GET /reports/getuserarchivedprintjobs(userid='{id}',startdatetime='{id}',enddatetime='{id}')":544,"GET /reports/getyammeractivitycounts(period='{id}')":567,"GET /reports/getyammeractivityusercounts(period='{id}')":567,"GET /reports/getyammeractivityuserdetail(date={id})":567,"GET /reports/getyammeractivityuserdetail(period='{id}')":567,"GET /reports/getyammerdeviceusagedistributionusercounts(period='{id}')":567,"GET /reports/getyammerdeviceusageusercounts(period='{id}')":567,"GET /reports/getyammerdeviceusageuserdetail(date={id})":567,"GET /reports/getyammerdeviceusageuserdetail(period='{id}')":567,"GET /reports/getyammergroupsactivitycounts(period='{id}')":567,"GET /reports/getyammergroupsactivitydetail(date={id})":567,"GET /reports/getyammergroupsactivitydetail(period='{id}')":567,"GET /reports/getyammergroupsactivitygroupcounts(period='{id}')":567,"GET /reports/manageddeviceenrollmentfailuredetails":425,"GET /reports/manageddeviceenrollmenttopfailures":425,"GET /reports/monthlyprintusagebyprinter":544,"GET /reports/monthlyprintusagebyprinter/{id}":544,"GET /reports/monthlyprintusagebyuser":544,"GET /reports/monthlyprintusagebyuser/{id}":544,"GET /reports/partners/billing/manifests/{id}":495,"GET /reports/partners/billing/operations/{id}":495,"GET /reports/security/getattacksimulationrepeatoffenders":80,"GET /reports/security/getattacksimulationsimulationusercoverage":80,"GET /reports/security/getattacksimulationtrainingusercoverage":80,"GET /rolemanagement/directory/roleassignments":2,"GET /rolemanagement/directory/roleassignments/{id}":2,"GET /rolemanagement/directory/roleassignmentscheduleinstances":559,"GET /rolemanagement/directory/roleassignmentscheduleinstances/filterbycurrentuser(on=parametervalue)":559,"GET /rolemanagement/directory/roleassignmentscheduleinstances/{id}":559,"GET /rolemanagement/directory/roleassignmentschedulerequests":560,"GET /rolemanagement/directory/roleassignmentschedulerequests/filterbycurrentuser(on='parametervalue')":560,"GET /rolemanagement/directory/roleassignmentschedulerequests/{id}":560,"GET /rolemanagement/directory/roleassignmentschedules":559,"GET /rolemanagement/directory/roleassignmentschedules/filterbycurrentuser(on='parametervalue')":559,"GET /rolemanagement/directory/roleassignmentschedules/{id}":559,"GET /rolemanagement/directory/roledefinitions":2,"GET /rolemanagement/directory/roledefinitions/{id}":2,"GET /rolemanagement/directory/roleeligibilityscheduleinstances":561,"GET /rolemanagement/directory/roleeligibilityscheduleinstances/filterbycurrentuser(on='parametervalue')":561,"GET /rolemanagement/directory/roleeligibilityscheduleinstances/{id}":561,"GET /rolemanagement/directory/roleeligibilityschedulerequests":562,"GET /rolemanagement/directory/roleeligibilityschedulerequests/filterbycurrentuser(on='parametervalue')":562,"GET /rolemanagement/directory/roleeligibilityschedulerequests/{id}":562,"GET /rolemanagement/directory/roleeligibilityschedules":561,"GET /rolemanagement/directory/roleeligibilityschedules/filterbycurrentuser(on='parametervalue')":561,"GET /rolemanagement/directory/roleeligibilityschedules/{id}":561,"GET /rolemanagement/entitlementmanagement/roleassignments":2,"GET /rolemanagement/entitlementmanagement/roleassignments/{id}":2,"GET /rolemanagement/entitlementmanagement/roledefinitions":2,"GET /rolemanagement/entitlementmanagement/roledefinitions/{id}":2,"GET /schemaextensions":577,"GET /schemaextensions/{id}":577,"GET /search/acronyms":578,"GET /search/acronyms/{id}":578,"GET /search/bookmarks":578,"GET /search/bookmarks/{id}":578,"GET /search/qnas":578,"GET /search/qnas/{id}":578,"GET /security/alerts":61,"GET /security/alerts/{id}":61,"GET /security/alerts_v2":580,"GET /security/alerts_v2/{id}":580,"GET /security/attacksimulation/endusernotifications":80,"GET /security/attacksimulation/landingpages":80,"GET /security/attacksimulation/landingpages/{id}":80,"GET /security/attacksimulation/loginpages":80,"GET /security/attacksimulation/loginpages/{id}":80,"GET /security/attacksimulation/operations/{id}":80,"GET /security/attacksimulation/payloads":80,"GET /security/attacksimulation/payloads/{id}":80,"GET /security/attacksimulation/payloads/{id}/detail":496,"GET /security/attacksimulation/simulationautomations":80,"GET /security/attacksimulation/simulationautomations/{id}":80,"GET /security/attacksimulation/simulationautomations/{id}/runs":80,"GET /security/attacksimulation/simulations":80,"GET /security/attacksimulation/simulations/{id}":80,"GET /security/attacksimulation/simulations/{id}/landingpage":80,"GET /security/attacksimulation/simulations/{id}/loginpage":80,"GET /security/attacksimulation/simulations/{id}/payload":80,"GET /security/attacksimulation/simulations/{id}/report/overview":80,"GET /security/attacksimulation/simulations/{id}/report/simulationusers":80,"GET /security/attacksimulation/trainings":80,"GET /security/attacksimulation/trainings/{id}":80,"GET /security/attacksimulation/trainings/{id}/languagedetails/{id}":496,"GET /security/auditlog/queries":586,"GET /security/auditlog/queries/{id}/records":586,"GET /security/cases/ediscoverycases":591,"GET /security/cases/ediscoverycases/{id}":591,"GET /security/cases/ediscoverycases/{id}/casemembers":591,"GET /security/cases/ediscoverycases/{id}/custodians":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}/lastindexoperation":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}/sitesources":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}/unifiedgroupsources":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}/usersources":591,"GET /security/cases/ediscoverycases/{id}/legalholds":591,"GET /security/cases/ediscoverycases/{id}/legalholds/{id}":591,"GET /security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources":591,"GET /security/cases/ediscoverycases/{id}/legalholds/{id}/usersources":591,"GET /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}":591,"GET /security/cases/ediscoverycases/{id}/noncustodialsources/{id}/lastindexoperation":591,"GET /security/cases/ediscoverycases/{id}/operations":591,"GET /security/cases/ediscoverycases/{id}/operations/{id}":590,"GET /security/cases/ediscoverycases/{id}/reviewsets":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}/childtags/{id}":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}/parent":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}":591,"GET /security/cases/ediscoverycases/{id}/searches":591,"GET /security/cases/ediscoverycases/{id}/searches/{id}":591,"GET /security/cases/ediscoverycases/{id}/searches/{id}/additionalsources":590,"GET /security/cases/ediscoverycases/{id}/searches/{id}/custodiansources":590,"GET /security/cases/ediscoverycases/{id}/searches/{id}/lastestimatestatisticsoperation":591,"GET /security/cases/ediscoverycases/{id}/searches/{id}/noncustodialsources":590,"GET /security/cases/ediscoverycases/{id}/settings":591,"GET /security/cases/ediscoverycases/{id}/tags":591,"GET /security/cases/ediscoverycases/{id}/tags/ashierarchy":591,"GET /security/cases/ediscoverycases/{id}/tags/{id}":591,"GET /security/collaboration/analyzedemails":583,"GET /security/collaboration/analyzedemails/{id}":583,"GET /security/datasecurityandgovernance/sensitivitylabels":607,"GET /security/datasecurityandgovernance/sensitivitylabels/computeinheritance":606,"GET /security/datasecurityandgovernance/sensitivitylabels/{id}":607,"GET /security/datasecurityandgovernance/sensitivitylabels/{id}/rights":607,"GET /security/identities/healthissues":594,"GET /security/identities/healthissues/{id}":594,"GET /security/identities/identityaccounts":596,"GET /security/identities/identityaccounts/{id}":596,"GET /security/identities/sensorcandidateactivationconfiguration":598,"GET /security/identities/sensorcandidates":598,"GET /security/identities/sensors":599,"GET /security/identities/sensors/getdeploymentaccesskey":600,"GET /security/identities/sensors/getdeploymentpackageuri":599,"GET /security/identities/sensors/{id}":599,"GET /security/identities/settings/autoauditingconfiguration":588,"GET /security/incidents":601,"GET /security/incidents/{id}":601,"GET /security/labels/authorities":587,"GET /security/labels/authorities/{id}":587,"GET /security/labels/categories":587,"GET /security/labels/categories/{id}":587,"GET /security/labels/categories/{id}/subcategories":587,"GET /security/labels/categories/{id}/subcategories/{id}":587,"GET /security/labels/citations":587,"GET /security/labels/citations/{id}":587,"GET /security/labels/departments":587,"GET /security/labels/departments/{id}":587,"GET /security/labels/fileplanreferences":587,"GET /security/labels/fileplanreferences/{id}":587,"GET /security/labels/retentionlabels":603,"GET /security/labels/retentionlabels/{id}":603,"GET /security/labels/retentionlabels/{id}/descriptors/authoritytemplate":587,"GET /security/labels/retentionlabels/{id}/descriptors/categorytemplate":587,"GET /security/labels/retentionlabels/{id}/descriptors/citationtemplate":587,"GET /security/labels/retentionlabels/{id}/descriptors/departmenttemplate":587,"GET /security/labels/retentionlabels/{id}/descriptors/fileplanreferencetemplate":587,"GET /security/labels/retentionlabels/{id}/eventtype":587,"GET /security/securescorecontrolprofiles":61,"GET /security/securescorecontrolprofiles/{id}":61,"GET /security/securescores":61,"GET /security/securescores/{id}":61,"GET /security/subjectrightsrequests":628,"GET /security/subjectrightsrequests/4ef5e3e6-545b-4b5f-a8b4-ff4f9980d7a9/getfinalreport":628,"GET /security/subjectrightsrequests/{id}":628,"GET /security/subjectrightsrequests/{id}/getfinalattachment":628,"GET /security/subjectrightsrequests/{id}/notes":628,"GET /security/threatintelligence/articleindicators/{id}":585,"GET /security/threatintelligence/articles":585,"GET /security/threatintelligence/articles/{id}":585,"GET /security/threatintelligence/articles/{id}/indicators":585,"GET /security/threatintelligence/hostcomponents/{id}":585,"GET /security/threatintelligence/hostcookies/{id}":585,"GET /security/threatintelligence/hostpairs/{id}":585,"GET /security/threatintelligence/hostports/{id}":585,"GET /security/threatintelligence/hosts/{id}":585,"GET /security/threatintelligence/hosts/{id}/childhostpairs":585,"GET /security/threatintelligence/hosts/{id}/components":585,"GET /security/threatintelligence/hosts/{id}/cookies":585,"GET /security/threatintelligence/hosts/{id}/hostpairs":585,"GET /security/threatintelligence/hosts/{id}/parenthostpairs":585,"GET /security/threatintelligence/hosts/{id}/passivedns":585,"GET /security/threatintelligence/hosts/{id}/passivednsreverse":585,"GET /security/threatintelligence/hosts/{id}/ports":585,"GET /security/threatintelligence/hosts/{id}/reputation":585,"GET /security/threatintelligence/hosts/{id}/sslcertificates":585,"GET /security/threatintelligence/hosts/{id}/subdomains":585,"GET /security/threatintelligence/hosts/{id}/trackers":585,"GET /security/threatintelligence/hosts/{id}/whois":585,"GET /security/threatintelligence/hosts/{id}/whois/history":585,"GET /security/threatintelligence/hostsslcertificates/{id}":585,"GET /security/threatintelligence/hosttrackers/{id}":585,"GET /security/threatintelligence/intelligenceprofileindicators/{id}":585,"GET /security/threatintelligence/intelprofiles":585,"GET /security/threatintelligence/intelprofiles/{id}":585,"GET /security/threatintelligence/intelprofiles/{id}/indicators":585,"GET /security/threatintelligence/passivednsrecords/{id}":585,"GET /security/threatintelligence/sslcertificates":585,"GET /security/threatintelligence/sslcertificates/{id}":585,"GET /security/threatintelligence/subdomains/{id}":585,"GET /security/threatintelligence/vulnerabilities/{id}":585,"GET /security/threatintelligence/vulnerabilities/{id}/components":585,"GET /security/threatintelligence/vulnerabilities/{id}/components/{id}":585,"GET /security/threatintelligence/whoishistoryrecord/{id}":585,"GET /security/threatintelligence/whoisrecords":585,"GET /security/threatintelligence/whoisrecords/{id}":585,"GET /security/threatintelligence/whoisrecords/{id}/history":585,"GET /security/triggers/retentionevents":587,"GET /security/triggers/retentionevents/{id}":587,"GET /security/triggers/retentionevents/{id}/labels/{id}":603,"GET /security/triggers/retentionevents/{id}/retentioneventtype":587,"GET /security/triggertypes/retentioneventtypes":587,"GET /security/triggertypes/retentioneventtypes/{id}":587,"GET /serviceprincipals":613,"GET /serviceprincipals(appid='{id}')":70,"GET /serviceprincipals(appid='{id}')/agentidentityblueprintprincipal":39,"GET /serviceprincipals(appid='{id}')/approleassignedto":40,"GET /serviceprincipals(appid='{id}')/approleassignments":40,"GET /serviceprincipals(appid='{id}')/createdobjects":40,"GET /serviceprincipals(appid='{id}')/delegatedpermissionclassifications":611,"GET /serviceprincipals(appid='{id}')/memberof":40,"GET /serviceprincipals(appid='{id}')/oauth2permissiongrants":474,"GET /serviceprincipals(appid='{id}')/ownedobjects":40,"GET /serviceprincipals(appid='{id}')/owners":40,"GET /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration":76,"GET /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps":76,"GET /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps/{id}":76,"GET /serviceprincipals(appid='{id}')/transitivememberof":612,"GET /serviceprincipals/agentidentity":26,"GET /serviceprincipals/agentidentityblueprintprincipal":41,"GET /serviceprincipals/delta":69,"GET /serviceprincipals/{id}":70,"GET /serviceprincipals/{id}/agentidentity":25,"GET /serviceprincipals/{id}/agentidentity/memberof":25,"GET /serviceprincipals/{id}/agentidentity/ownedobjects":25,"GET /serviceprincipals/{id}/agentidentity/owners":25,"GET /serviceprincipals/{id}/agentidentity/sponsors":23,"GET /serviceprincipals/{id}/agentidentity/transitivememberof":25,"GET /serviceprincipals/{id}/agentidentityblueprintprincipal":39,"GET /serviceprincipals/{id}/agentidentityblueprintprincipal/memberof":39,"GET /serviceprincipals/{id}/agentidentityblueprintprincipal/ownedobjects":40,"GET /serviceprincipals/{id}/agentidentityblueprintprincipal/owners":39,"GET /serviceprincipals/{id}/approleassignedto":40,"GET /serviceprincipals/{id}/approleassignments":40,"GET /serviceprincipals/{id}/createdobjects":40,"GET /serviceprincipals/{id}/delegatedpermissionclassifications":611,"GET /serviceprincipals/{id}/memberof":40,"GET /serviceprincipals/{id}/oauth2permissiongrants":474,"GET /serviceprincipals/{id}/ownedobjects":40,"GET /serviceprincipals/{id}/owners":40,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration":76,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps":76,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}":76,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups":565,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}":76,"GET /serviceprincipals/{id}/synchronization/jobs":635,"GET /serviceprincipals/{id}/synchronization/jobs/{id}":635,"GET /serviceprincipals/{id}/synchronization/jobs/{id}/schema":638,"GET /serviceprincipals/{id}/synchronization/jobs/{id}/schema/filteroperators":634,"GET /serviceprincipals/{id}/synchronization/jobs/{id}/schema/functions":634,"GET /serviceprincipals/{id}/synchronization/templates/{id}/schema":638,"GET /serviceprincipals/{id}/synchronization/templates/{id}/schema/filteroperators":634,"GET /serviceprincipals/{id}/synchronization/templates/{id}/schema/functions":634,"GET /serviceprincipals/{id}/transitivememberof":612,"GET /shares/{id}":296,"GET /shares/{id}/driveitem/content":300,"GET /sites":124,"GET /sites/contoso.sharepoint.com":124,"GET /sites/delta":624,"GET /sites/getallsites":625,"GET /sites/root":124,"GET /sites/{id}/analytics/alltime":293,"GET /sites/{id}/analytics/lastsevendays":293,"GET /sites/{id}/columns":232,"GET /sites/{id}/columns/{id}":232,"GET /sites/{id}/contenttypes":232,"GET /sites/{id}/contenttypes/getcompatiblehubcontenttypes":231,"GET /sites/{id}/contenttypes/{id}":232,"GET /sites/{id}/contenttypes/{id}/columns":232,"GET /sites/{id}/contenttypes/{id}/columns/{id}":232,"GET /sites/{id}/contenttypes/{id}/ispublished":244,"GET /sites/{id}/drive":291,"GET /sites/{id}/drive/items/{id}":301,"GET /sites/{id}/drive/items/{id}/children":300,"GET /sites/{id}/drive/items/{id}/content":300,"GET /sites/{id}/drive/items/{id}/permissions":293,"GET /sites/{id}/drive/items/{id}/permissions/{id}":300,"GET /sites/{id}/drive/items/{id}/thumbnails":293,"GET /sites/{id}/drive/items/{id}/versions":293,"GET /sites/{id}/drive/items/{id}/versions/{id}":293,"GET /sites/{id}/drive/items/{id}/versions/{id}/content":293,"GET /sites/{id}/drive/root/delta":293,"GET /sites/{id}/drive/root/search(q='{id}')":293,"GET /sites/{id}/drive/root:/{id}":301,"GET /sites/{id}/drives":293,"GET /sites/{id}/getactivitiesbyinterval(startdatetime={id},enddatetime={id},interval={id})":300,"GET /sites/{id}/getapplicablecontenttypesforlist":444,"GET /sites/{id}/items/{id}/versions":124,"GET /sites/{id}/items/{id}/versions/{id}":124,"GET /sites/{id}/lists":124,"GET /sites/{id}/lists/{id}":124,"GET /sites/{id}/lists/{id}/activities":293,"GET /sites/{id}/lists/{id}/columns":232,"GET /sites/{id}/lists/{id}/columns/{id}":232,"GET /sites/{id}/lists/{id}/contenttypes":444,"GET /sites/{id}/lists/{id}/contenttypes/getcompatiblehubcontenttypes":231,"GET /sites/{id}/lists/{id}/contenttypes/{id}":232,"GET /sites/{id}/lists/{id}/contenttypes/{id}/columns":232,"GET /sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}":232,"GET /sites/{id}/lists/{id}/drive/root/subscriptions/socketio":632,"GET /sites/{id}/lists/{id}/items":124,"GET /sites/{id}/lists/{id}/items/delta":124,"GET /sites/{id}/lists/{id}/items/{id}":445,"GET /sites/{id}/lists/{id}/items/{id}/activities":293,"GET /sites/{id}/lists/{id}/items/{id}/analytics/alltime":293,"GET /sites/{id}/lists/{id}/items/{id}/analytics/lastsevendays":293,"GET /sites/{id}/lists/{id}/items/{id}/documentsetversions":283,"GET /sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}":283,"GET /sites/{id}/lists/{id}/items/{id}/driveitem":301,"GET /sites/{id}/lists/{id}/items/{id}/getactivitiesbyinterval(startdatetime={id},enddatetime={id},interval={id})":300,"GET /sites/{id}/lists/{id}/items/{id}/permissions":444,"GET /sites/{id}/lists/{id}/items/{id}/versions":124,"GET /sites/{id}/lists/{id}/items/{id}/versions/{id}":124,"GET /sites/{id}/lists/{id}/operations":444,"GET /sites/{id}/lists/{id}/operations/{id}":444,"GET /sites/{id}/lists/{id}/permissions":444,"GET /sites/{id}/onenote/notebooks":471,"GET /sites/{id}/onenote/notebooks/{id}":471,"GET /sites/{id}/onenote/notebooks/{id}/sectiongroups":471,"GET /sites/{id}/onenote/notebooks/{id}/sections":471,"GET /sites/{id}/onenote/operations/{id}":471,"GET /sites/{id}/onenote/pages":476,"GET /sites/{id}/onenote/pages/{id}":492,"GET /sites/{id}/onenote/resources/{id}/content":476,"GET /sites/{id}/onenote/sectiongroups":471,"GET /sites/{id}/onenote/sectiongroups/{id}":471,"GET /sites/{id}/onenote/sectiongroups/{id}/sectiongroups":471,"GET /sites/{id}/onenote/sectiongroups/{id}/sections":471,"GET /sites/{id}/onenote/sections":471,"GET /sites/{id}/onenote/sections/{id}":471,"GET /sites/{id}/onenote/sections/{id}/pages":476,"GET /sites/{id}/operations":444,"GET /sites/{id}/operations/{id}":444,"GET /sites/{id}/pages":124,"GET /sites/{id}/pages/sitepage":124,"GET /sites/{id}/pages/{id}":124,"GET /sites/{id}/pages/{id}/sitepage":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}/getpositionofwebpart":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts/{id}/getpositionofwebpart":124,"GET /sites/{id}/pages/{id}/sitepage/getwebpartsbyposition":124,"GET /sites/{id}/pages/{id}/sitepage/webparts":124,"GET /sites/{id}/pages/{id}/sitepage/webparts/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/webparts/{id}/getpositionofwebpart":124,"GET /sites/{id}/permissions":244,"GET /sites/{id}/permissions/{id}":623,"GET /sites/{id}/sites":124,"GET /sites/{id}/termstore":687,"GET /sites/{id}/termstore/groups":687,"GET /sites/{id}/termstore/groups/{id}":687,"GET /sites/{id}/termstore/groups/{id}/sets/{id}/terms/{id}":687,"GET /sites/{id}/termstore/sets/{id}":687,"GET /sites/{id}/termstore/sets/{id}/children":687,"GET /sites/{id}/termstore/sets/{id}/relations":687,"GET /sites/{id}/termstore/sets/{id}/terms/{id}":687,"GET /sites/{id}/termstore/sets/{id}/terms/{id}/children":687,"GET /sites/{id}/termstore/sets/{id}/terms/{id}/relations":687,"GET /sites/{id}:/{id}":124,"GET /solutions/backuprestore":116,"GET /solutions/backuprestore/browsesessions":117,"GET /solutions/backuprestore/emailnotificationssetting":116,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules":346,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}":346,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxprotectionunits":118,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxprotectionunitsbulkadditionjobs":118,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxprotectionunitsbulkadditionjobs/{id}":118,"GET /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifacts":307,"GET /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifactsbulkadditionrequests":307,"GET /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifactsbulkadditionrequests/{id}":307,"GET /solutions/backuprestore/onedriveforbusinessbrowsesessions":117,"GET /solutions/backuprestore/onedriveforbusinessbrowsesessions/{id}":117,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules":346,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}":346,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveprotectionunits":118,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveprotectionunitsbulkadditionjobs":118,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveprotectionunitsbulkadditionjobs/{id}":118,"GET /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifacts":307,"GET /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifactsbulkadditionrequests":307,"GET /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifactsbulkadditionrequests/{id}":307,"GET /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/granulardriverestoreartifacts":117,"GET /solutions/backuprestore/protectionpolicies":118,"GET /solutions/backuprestore/protectionpolicies/{id}":118,"GET /solutions/backuprestore/protectionunits/driveprotectionunit":118,"GET /solutions/backuprestore/protectionunits/mailboxprotectionunit":118,"GET /solutions/backuprestore/protectionunits/siteprotectionunit":118,"GET /solutions/backuprestore/protectionunits/{id}":118,"GET /solutions/backuprestore/restorepoints":119,"GET /solutions/backuprestore/restoresessions":120,"GET /solutions/backuprestore/restoresessions/{id}":307,"GET /solutions/backuprestore/serviceapps":121,"GET /solutions/backuprestore/serviceapps/{id}":116,"GET /solutions/backuprestore/sharepointbrowsesessions":117,"GET /solutions/backuprestore/sharepointbrowsesessions/{id}":117,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules":346,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules/{id}":346,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteprotectionunits":118,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteprotectionunitsbulkadditionjobs":118,"GET /solutions/backuprestore/sharepointrestoresessions/{id}/granularsiterestoreartifacts":117,"GET /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifacts":307,"GET /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifactsbulkadditionrequests":307,"GET /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifactsbulkadditionrequests/{id}":307,"GET /solutions/bookingbusinesses":134,"GET /solutions/bookingbusinesses/{id}":130,"GET /solutions/bookingbusinesses/{id}/appointments":128,"GET /solutions/bookingbusinesses/{id}/appointments/{id}":128,"GET /solutions/bookingbusinesses/{id}/calendarview":132,"GET /solutions/bookingbusinesses/{id}/customers":132,"GET /solutions/bookingbusinesses/{id}/customers/{id}":128,"GET /solutions/bookingbusinesses/{id}/customquestions":133,"GET /solutions/bookingbusinesses/{id}/customquestions/{id}":132,"GET /solutions/bookingbusinesses/{id}/services":130,"GET /solutions/bookingbusinesses/{id}/services/{id}":130,"GET /solutions/bookingbusinesses/{id}/staffmembers":130,"GET /solutions/bookingbusinesses/{id}/staffmembers/{id}":130,"GET /solutions/bookingcurrencies":138,"GET /solutions/bookingcurrencies/{id}":138,"GET /solutions/virtualevents/townhalls":745,"GET /solutions/virtualevents/townhalls/getbyuseridandrole(userid='{id}',role='{id}')":745,"GET /solutions/virtualevents/townhalls/getbyuserrole(role='{id}')":747,"GET /solutions/virtualevents/townhalls/{id}":746,"GET /solutions/virtualevents/townhalls/{id}/presenters":739,"GET /solutions/virtualevents/townhalls/{id}/presenters/{id}":739,"GET /solutions/virtualevents/townhalls/{id}/registrationconfiguration":739,"GET /solutions/virtualevents/townhalls/{id}/registrationconfiguration/questions":744,"GET /solutions/virtualevents/townhalls/{id}/registrations":743,"GET /solutions/virtualevents/townhalls/{id}/registrations/{id}":742,"GET /solutions/virtualevents/townhalls/{id}/registrations/{id}/sessions":743,"GET /solutions/virtualevents/townhalls/{id}/sessions":739,"GET /solutions/virtualevents/townhalls/{id}/sessions/{id}":739,"GET /solutions/virtualevents/townhalls/{id}/sessions/{id}/attendancereports":82,"GET /solutions/virtualevents/townhalls/{id}/sessions/{id}/attendancereports/{id}":82,"GET /solutions/virtualevents/townhalls/{id}/sessions/{id}/attendancereports/{id}/attendancerecords":82,"GET /solutions/virtualevents/webinars":745,"GET /solutions/virtualevents/webinars/getbyuseridandrole(userid='{id}',role='{id}')":746,"GET /solutions/virtualevents/webinars/getbyuserrole(role='{id}')":747,"GET /solutions/virtualevents/webinars/{id}":746,"GET /solutions/virtualevents/webinars/{id}/presenters":739,"GET /solutions/virtualevents/webinars/{id}/presenters/{id}":739,"GET /solutions/virtualevents/webinars/{id}/registrationconfiguration":739,"GET /solutions/virtualevents/webinars/{id}/registrationconfiguration/questions":744,"GET /solutions/virtualevents/webinars/{id}/registrations":743,"GET /solutions/virtualevents/webinars/{id}/registrations/{id}":742,"GET /solutions/virtualevents/webinars/{id}/registrations/{id}/sessions":743,"GET /solutions/virtualevents/webinars/{id}/sessions":739,"GET /solutions/virtualevents/webinars/{id}/sessions/{id}":739,"GET /solutions/virtualevents/webinars/{id}/sessions/{id}/attendancereports":82,"GET /solutions/virtualevents/webinars/{id}/sessions/{id}/attendancereports/{id}":82,"GET /solutions/virtualevents/webinars/{id}/sessions/{id}/attendancereports/{id}/attendancerecords":82,"GET /storage/filestorage/containers":363,"GET /storage/filestorage/containers/{id}":363,"GET /storage/filestorage/containers/{id}/columns":366,"GET /storage/filestorage/containers/{id}/columns/{id}":366,"GET /storage/filestorage/containers/{id}/customproperties":366,"GET /storage/filestorage/containers/{id}/customproperties/{id}":366,"GET /storage/filestorage/containers/{id}/drive":366,"GET /storage/filestorage/containers/{id}/migrationjobs/{id}/progressevents":366,"GET /storage/filestorage/containers/{id}/permissions":363,"GET /storage/filestorage/containers/{id}/permissions/{id}":363,"GET /storage/filestorage/containers/{id}/recyclebin/items":366,"GET /storage/filestorage/containers/{id}/sharepointgroups":367,"GET /storage/filestorage/containers/{id}/sharepointgroups/{id}":367,"GET /storage/filestorage/containers/{id}/sharepointgroups/{id}/members":367,"GET /storage/filestorage/containers/{id}/sharepointgroups/{id}/members/{id}":367,"GET /storage/filestorage/containertyperegistrations":364,"GET /storage/filestorage/containertyperegistrations/{id}":364,"GET /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants":364,"GET /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants/{id}":364,"GET /storage/filestorage/containertypes":365,"GET /storage/filestorage/containertypes/{id}":365,"GET /storage/filestorage/deletedcontainers":363,"GET /subscribedskus":631,"GET /subscribedskus/{id}":630,"GET /teams":78,"GET /teams/{id}":646,"GET /teams/{id}/allchannels":647,"GET /teams/{id}/channels":179,"GET /teams/{id}/channels/getallmessages":174,"GET /teams/{id}/channels/getallretainedmessages":174,"GET /teams/{id}/channels/{id}":173,"GET /teams/{id}/channels/{id}/allmembers":171,"GET /teams/{id}/channels/{id}/doesuserhaveaccess(userid='@userid',tenantid='@tenantid',userprincipalname='@userprincipalname')":169,"GET /teams/{id}/channels/{id}/enabledapps":175,"GET /teams/{id}/channels/{id}/enabledapps/{id}":659,"GET /teams/{id}/channels/{id}/filesfolder":170,"GET /teams/{id}/channels/{id}/members":176,"GET /teams/{id}/channels/{id}/members/{id}":171,"GET /teams/{id}/channels/{id}/messages":177,"GET /teams/{id}/channels/{id}/messages/{id}":217,"GET /teams/{id}/channels/{id}/messages/{id}/hostedcontents":217,"GET /teams/{id}/channels/{id}/messages/{id}/hostedcontents/{id}":217,"GET /teams/{id}/channels/{id}/messages/{id}/replies":177,"GET /teams/{id}/channels/{id}/messages/{id}/replies/{id}":217,"GET /teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents":217,"GET /teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents/{id}":217,"GET /teams/{id}/channels/{id}/sharedwithteams":171,"GET /teams/{id}/channels/{id}/sharedwithteams/{id}":171,"GET /teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers":171,"GET /teams/{id}/channels/{id}/tabs":178,"GET /teams/{id}/channels/{id}/tabs/{id}":172,"GET /teams/{id}/incomingchannels":647,"GET /teams/{id}/installedapps":648,"GET /teams/{id}/installedapps/{id}":643,"GET /teams/{id}/members":644,"GET /teams/{id}/members/{id}":644,"GET /teams/{id}/permissiongrants":649,"GET /teams/{id}/photo":553,"GET /teams/{id}/photo/$value":553,"GET /teams/{id}/primarychannel":645,"GET /teams/{id}/schedule":482,"GET /teams/{id}/schedule/daynotes":261,"GET /teams/{id}/schedule/daynotes/{id}":261,"GET /teams/{id}/schedule/offershiftrequests":162,"GET /teams/{id}/schedule/offershiftrequests/{id}":475,"GET /teams/{id}/schedule/openshiftchangerequests":482,"GET /teams/{id}/schedule/openshiftchangerequests/{id}":475,"GET /teams/{id}/schedule/openshifts":482,"GET /teams/{id}/schedule/openshifts/{id}":482,"GET /teams/{id}/schedule/schedulinggroups":482,"GET /teams/{id}/schedule/schedulinggroups/{id}":482,"GET /teams/{id}/schedule/shifts":482,"GET /teams/{id}/schedule/shifts/{id}":619,"GET /teams/{id}/schedule/swapshiftschangerequests":482,"GET /teams/{id}/schedule/timecards":261,"GET /teams/{id}/schedule/timecards/{id}":261,"GET /teams/{id}/schedule/timeoffreasons":482,"GET /teams/{id}/schedule/timeoffreasons/{id}":482,"GET /teams/{id}/schedule/timeoffrequests":482,"GET /teams/{id}/schedule/timeoffrequests/{id}":482,"GET /teams/{id}/schedule/timesoff":482,"GET /teams/{id}/schedule/timesoff/{id}":688,"GET /teams/{id}/tags":667,"GET /teams/{id}/tags/{id}":667,"GET /teams/{id}/tags/{id}/members":667,"GET /teams/{id}/tags/{id}/members/{id}":667,"GET /teamwork":662,"GET /teamwork/deletedchats/{id}":193,"GET /teamwork/deletedteams":663,"GET /teamwork/deletedteams/{id}/channels/getallmessages":174,"GET /teamwork/teamsappsettings":660,"GET /teamwork/workforceintegrations":754,"GET /teamwork/workforceintegrations/{id}":754,"GET /tenantrelationships/delegatedadmincustomers":264,"GET /tenantrelationships/delegatedadmincustomers/{id}":264,"GET /tenantrelationships/delegatedadmincustomers/{id}/servicemanagementdetails":264,"GET /tenantrelationships/delegatedadminrelationships":264,"GET /tenantrelationships/delegatedadminrelationships/{id}":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/accessassignments":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/accessassignments/{id}":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/operations":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/operations/{id}":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/requests":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/requests/{id}":264,"GET /tenantrelationships/findtenantinformationbydomainname(domainname='{id}')":685,"GET /tenantrelationships/findtenantinformationbytenantid(tenantid='{id}')":685,"GET /tenantrelationships/multitenantorganization":465,"GET /tenantrelationships/multitenantorganization/joinrequest":466,"GET /tenantrelationships/multitenantorganization/tenants":465,"GET /tenantrelationships/multitenantorganization/tenants/{id}":464,"GET /users":718,"GET /users/agentuser":55,"GET /users/agentuser/{id}":47,"GET /users/delta":698,"GET /users/{id}":702,"GET /users/{id}/adhoccalls/getallrecordings":11,"GET /users/{id}/adhoccalls/getalltranscripts":12,"GET /users/{id}/adhoccalls/{id}/recordings/{id}":155,"GET /users/{id}/adhoccalls/{id}/recordings/{id}/content":155,"GET /users/{id}/adhoccalls/{id}/transcripts/{id}":157,"GET /users/{id}/adhoccalls/{id}/transcripts/{id}/content":157,"GET /users/{id}/agreementacceptances":59,"GET /users/{id}/approleassignments":48,"GET /users/{id}/authentication/emailmethods":85,"GET /users/{id}/authentication/emailmethods/{id}":328,"GET /users/{id}/authentication/externalauthenticationmethods":86,"GET /users/{id}/authentication/externalauthenticationmethods/{id}":348,"GET /users/{id}/authentication/fido2methods":362,"GET /users/{id}/authentication/fido2methods/creationoptions":93,"GET /users/{id}/authentication/fido2methods/{id}":361,"GET /users/{id}/authentication/methods":86,"GET /users/{id}/authentication/methods/{id}":105,"GET /users/{id}/authentication/microsoftauthenticatormethods":463,"GET /users/{id}/authentication/microsoftauthenticatormethods/{id}":462,"GET /users/{id}/authentication/operations/{id}":446,"GET /users/{id}/authentication/passwordmethods":87,"GET /users/{id}/authentication/passwordmethods/{id}":87,"GET /users/{id}/authentication/phonemethods":88,"GET /users/{id}/authentication/phonemethods/{id}":505,"GET /users/{id}/authentication/platformcredentialmethods":513,"GET /users/{id}/authentication/platformcredentialmethods/{id}":512,"GET /users/{id}/authentication/qrcodepinmethod":558,"GET /users/{id}/authentication/qrcodepinmethod/standardqrcode":558,"GET /users/{id}/authentication/qrcodepinmethod/temporaryqrcode":558,"GET /users/{id}/authentication/resourceaccountkeyauthenticationmethods":89,"GET /users/{id}/authentication/resourceaccountkeyauthenticationmethods/{id}":89,"GET /users/{id}/authentication/softwareoathmethods":90,"GET /users/{id}/authentication/softwareoathmethods/{id}":627,"GET /users/{id}/authentication/temporaryaccesspassmethods":91,"GET /users/{id}/authentication/temporaryaccesspassmethods/{id}":670,"GET /users/{id}/authentication/windowshelloforbusinessmethods":751,"GET /users/{id}/authentication/windowshelloforbusinessmethods/{id}":750,"GET /users/{id}/calendar/calendarview":145,"GET /users/{id}/calendar/events":145,"GET /users/{id}/calendar/events/{id}":146,"GET /users/{id}/calendar/events/{id}/attachments":342,"GET /users/{id}/calendar/events/{id}/instances":146,"GET /users/{id}/calendargroups":704,"GET /users/{id}/calendargroups/{id}":146,"GET /users/{id}/calendargroups/{id}/calendars":147,"GET /users/{id}/calendargroups/{id}/calendars/{id}/calendarview":145,"GET /users/{id}/calendargroups/{id}/calendars/{id}/events":145,"GET /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}":146,"GET /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/attachments":342,"GET /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/instances":146,"GET /users/{id}/calendars":147,"GET /users/{id}/calendars/delta":144,"GET /users/{id}/calendars/{id}/calendarview":145,"GET /users/{id}/calendars/{id}/events":145,"GET /users/{id}/calendars/{id}/events/{id}":146,"GET /users/{id}/calendars/{id}/events/{id}/attachments":342,"GET /users/{id}/calendars/{id}/events/{id}/instances":146,"GET /users/{id}/calendarview":145,"GET /users/{id}/calendarview/delta":144,"GET /users/{id}/chats":206,"GET /users/{id}/chats/getallmessages":198,"GET /users/{id}/chats/getallmessages/delta":198,"GET /users/{id}/chats/getallretainedmessages":198,"GET /users/{id}/chats/{id}":197,"GET /users/{id}/chats/{id}/members":201,"GET /users/{id}/chats/{id}/members/{id}":195,"GET /users/{id}/chats/{id}/messages":202,"GET /users/{id}/chats/{id}/messages/{id}":217,"GET /users/{id}/chats/{id}/messages/{id}/hostedcontents":217,"GET /users/{id}/chats/{id}/messages/{id}/hostedcontents/{id}":217,"GET /users/{id}/cloudpcs/{id}/retrievecloudpclaunchdetail":229,"GET /users/{id}/contactfolders":242,"GET /users/{id}/contactfolders/delta":242,"GET /users/{id}/contactfolders/{id}":242,"GET /users/{id}/contactfolders/{id}/childfolders":242,"GET /users/{id}/contactfolders/{id}/childfolders/{id}/contacts":242,"GET /users/{id}/contactfolders/{id}/childfolders/{id}/contacts/{id}":242,"GET /users/{id}/contactfolders/{id}/contacts":242,"GET /users/{id}/contactfolders/{id}/contacts/delta":242,"GET /users/{id}/contactfolders/{id}/contacts/{id}":242,"GET /users/{id}/contactfolders/{id}/contacts/{id}/photo":553,"GET /users/{id}/contactfolders/{id}/contacts/{id}/photo/$value":553,"GET /users/{id}/contacts":242,"GET /users/{id}/contacts/{id}":242,"GET /users/{id}/contacts/{id}/photo":553,"GET /users/{id}/contacts/{id}/photo/$value":553,"GET /users/{id}/createdobjects":705,"GET /users/{id}/directreports":49,"GET /users/{id}/drive":291,"GET /users/{id}/drive/items/{id}":301,"GET /users/{id}/drive/items/{id}/children":300,"GET /users/{id}/drive/items/{id}/content":300,"GET /users/{id}/drive/items/{id}/permissions":293,"GET /users/{id}/drive/items/{id}/permissions/{id}":300,"GET /users/{id}/drive/items/{id}/thumbnails":293,"GET /users/{id}/drive/items/{id}/versions":293,"GET /users/{id}/drive/items/{id}/versions/{id}":293,"GET /users/{id}/drive/items/{id}/versions/{id}/content":293,"GET /users/{id}/drive/root/delta":293,"GET /users/{id}/drive/root/search(q='{id}')":293,"GET /users/{id}/drive/root:/{id}":301,"GET /users/{id}/drives":293,"GET /users/{id}/employeeexperience/assignedroles":334,"GET /users/{id}/employeeexperience/learningcourseactivities":441,"GET /users/{id}/events":145,"GET /users/{id}/events/{id}":146,"GET /users/{id}/events/{id}/attachments":342,"GET /users/{id}/events/{id}/instances":146,"GET /users/{id}/exportdeviceandappmanagementdata":430,"GET /users/{id}/getmanagedappdiagnosticstatuses":417,"GET /users/{id}/getmanagedapppolicies":417,"GET /users/{id}/getmanageddeviceswithappfailures":425,"GET /users/{id}/inferenceclassification/overrides":344,"GET /users/{id}/insights/shared":412,"GET /users/{id}/insights/trending":412,"GET /users/{id}/insights/trending/{id}/resource":412,"GET /users/{id}/insights/used":412,"GET /users/{id}/insights/used/{id}/resource":412,"GET /users/{id}/joinedgroups/{id}/photos":382,"GET /users/{id}/joinedteams":707,"GET /users/{id}/licensedetails":708,"GET /users/{id}/licensedetails/getteamslicensingdetails":442,"GET /users/{id}/mailboxsettings":701,"GET /users/{id}/mailboxsettings/automaticrepliessetting":701,"GET /users/{id}/mailboxsettings/dateformat":701,"GET /users/{id}/mailboxsettings/delegatemeetingmessagedeliveryoptions":701,"GET /users/{id}/mailboxsettings/language":701,"GET /users/{id}/mailboxsettings/timeformat":701,"GET /users/{id}/mailboxsettings/timezone":701,"GET /users/{id}/mailboxsettings/userpurpose":701,"GET /users/{id}/mailboxsettings/workinghours":701,"GET /users/{id}/mailfolders":456,"GET /users/{id}/mailfolders/delta":455,"GET /users/{id}/mailfolders/inbox/messagerules":457,"GET /users/{id}/mailfolders/inbox/messagerules/{id}":457,"GET /users/{id}/mailfolders/{id}":456,"GET /users/{id}/mailfolders/{id}/childfolders":456,"GET /users/{id}/mailfolders/{id}/childfolders/{id}/messages/{id}/attachments/{id}":344,"GET /users/{id}/mailfolders/{id}/messages":456,"GET /users/{id}/mailfolders/{id}/messages/delta":455,"GET /users/{id}/mailfolders/{id}/messages/{id}":344,"GET /users/{id}/mailfolders/{id}/messages/{id}/$value":460,"GET /users/{id}/mailfolders/{id}/messages/{id}/attachments":344,"GET /users/{id}/manager":50,"GET /users/{id}/memberof":51,"GET /users/{id}/messages":456,"GET /users/{id}/messages/{id}":344,"GET /users/{id}/messages/{id}/$value":460,"GET /users/{id}/messages/{id}/attachments":344,"GET /users/{id}/notes":469,"GET /users/{id}/notes/delta":469,"GET /users/{id}/notes/{id}":469,"GET /users/{id}/notes/{id}/attachments":469,"GET /users/{id}/oauth2permissiongrants":711,"GET /users/{id}/onenote/notebooks":471,"GET /users/{id}/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={id})":471,"GET /users/{id}/onenote/notebooks/{id}":471,"GET /users/{id}/onenote/notebooks/{id}/sectiongroups":471,"GET /users/{id}/onenote/notebooks/{id}/sections":471,"GET /users/{id}/onenote/operations/{id}":471,"GET /users/{id}/onenote/pages":476,"GET /users/{id}/onenote/pages/{id}":492,"GET /users/{id}/onenote/resources/{id}/content":476,"GET /users/{id}/onenote/sectiongroups":471,"GET /users/{id}/onenote/sectiongroups/{id}":471,"GET /users/{id}/onenote/sectiongroups/{id}/sectiongroups":471,"GET /users/{id}/onenote/sectiongroups/{id}/sections":471,"GET /users/{id}/onenote/sections":471,"GET /users/{id}/onenote/sections/{id}":471,"GET /users/{id}/onenote/sections/{id}/pages":476,"GET /users/{id}/onlinemeetings":477,"GET /users/{id}/onlinemeetings/getallrecordings(meetingorganizeruserid='{id}',startdatetime={id})/delta":155,"GET /users/{id}/onlinemeetings/getallrecordings(meetingorganizeruserid='{id}',startdatetime={id},enddatetime={id})":155,"GET /users/{id}/onlinemeetings/getalltranscripts(meetingorganizeruserid='{id}',startdatetime={id})/delta":157,"GET /users/{id}/onlinemeetings/getalltranscripts(meetingorganizeruserid='{id}',startdatetime={id},enddatetime={id})":157,"GET /users/{id}/onlinemeetings/{id}":477,"GET /users/{id}/onlinemeetings/{id}/alternativerecording":477,"GET /users/{id}/onlinemeetings/{id}/attendancereports":82,"GET /users/{id}/onlinemeetings/{id}/attendancereports/{id}":82,"GET /users/{id}/onlinemeetings/{id}/attendancereports/{id}/attendancerecords":82,"GET /users/{id}/onlinemeetings/{id}/attendeereport":477,"GET /users/{id}/onlinemeetings/{id}/getvirtualappointmentjoinweburl":737,"GET /users/{id}/onlinemeetings/{id}/recording":477,"GET /users/{id}/onlinemeetings/{id}/recordings":478,"GET /users/{id}/onlinemeetings/{id}/recordings/{id}":155,"GET /users/{id}/onlinemeetings/{id}/recordings/{id}/content":155,"GET /users/{id}/onlinemeetings/{id}/transcripts":479,"GET /users/{id}/onlinemeetings/{id}/transcripts/{id}":157,"GET /users/{id}/onlinemeetings/{id}/transcripts/{id}/content":157,"GET /users/{id}/outlook/mastercategories":457,"GET /users/{id}/outlook/mastercategories/{id}":457,"GET /users/{id}/outlook/supportedlanguages":490,"GET /users/{id}/outlook/supportedtimezones":490,"GET /users/{id}/outlook/supportedtimezones(timezonestandard=microsoft.graph.timezonestandard'{id}')":490,"GET /users/{id}/owneddevices":712,"GET /users/{id}/ownedobjects":49,"GET /users/{id}/people":714,"GET /users/{id}/permissiongrants":715,"GET /users/{id}/photo":553,"GET /users/{id}/photo/$value":553,"GET /users/{id}/photos/{id}":553,"GET /users/{id}/planner/plans":510,"GET /users/{id}/planner/tasks":509,"GET /users/{id}/presence":518,"GET /users/{id}/registereddevices":712,"GET /users/{id}/reminderview(startdatetime={id},enddatetime={id})":145,"GET /users/{id}/settings":729,"GET /users/{id}/settings/exchange":730,"GET /users/{id}/settings/iteminsights":725,"GET /users/{id}/settings/shiftpreferences":620,"GET /users/{id}/settings/workhoursandlocations":755,"GET /users/{id}/settings/workhoursandlocations/occurrencesview(startdatetime='{id}',enddatetime='{id}')":757,"GET /users/{id}/settings/workhoursandlocations/recurrences":756,"GET /users/{id}/solutions/schedule":759,"GET /users/{id}/sponsorof":716,"GET /users/{id}/sponsors":52,"GET /users/{id}/teamwork":735,"GET /users/{id}/teamwork/associatedteams":78,"GET /users/{id}/teamwork/getallretainedtargetedmessages":736,"GET /users/{id}/teamwork/getalltargetedmessages":736,"GET /users/{id}/teamwork/installedapps":734,"GET /users/{id}/teamwork/installedapps/{id}":734,"GET /users/{id}/teamwork/installedapps/{id}/chat":728,"GET /users/{id}/todo/lists":223,"GET /users/{id}/todo/lists/delta":693,"GET /users/{id}/todo/lists/{id}":223,"GET /users/{id}/todo/lists/{id}/tasks":223,"GET /users/{id}/todo/lists/{id}/tasks/delta":691,"GET /users/{id}/todo/lists/{id}/tasks/{id}":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/attachments":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}/$value":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}":223,"GET /users/{id}/transitivememberof":53,"GET /users/{id}/transitivereports/$count":54,"PATCH /admin/configurationmanagement/configurationmonitors/{id}":239,"PATCH /admin/edge/internetexplorermode/sitelists/{id}":140,"PATCH /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies/{id}":140,"PATCH /admin/edge/internetexplorermode/sitelists/{id}/sites/{id}":140,"PATCH /admin/exchange/mailboxes/{id}/folders/{id}":450,"PATCH /admin/exchange/mailboxes/{id}/folders/{id}/childfolders/{id}":450,"PATCH /admin/microsoft365apps/installationoptions":448,"PATCH /admin/people/iteminsights":413,"PATCH /admin/people/profilecardproperties/{id}":499,"PATCH /admin/people/profilepropertysettings/{id}":413,"PATCH /admin/people/profilesources(sourceid='{id}')":413,"PATCH /admin/people/pronouns":413,"PATCH /admin/reportsettings":21,"PATCH /admin/sharepoint/settings":618,"PATCH /app/calls/{id}/audioroutinggroups/{id}":83,"PATCH /applications(appid='{id}')":68,"PATCH /applications(appid='{id}')/federatedidentitycredentials(name='{id}')":68,"PATCH /applications(appid='{id}')/federatedidentitycredentials/{id}":68,"PATCH /applications(uniquename='{id}')":68,"PATCH /applications(uniquename='{id}')/agentidentityblueprint":30,"PATCH /applications/{id}":68,"PATCH /applications/{id}/agentidentityblueprint":36,"PATCH /applications/{id}/agentidentityblueprint/inheritablepermissions/{id}":411,"PATCH /applications/{id}/federatedidentitycredentials(name='{id}')":68,"PATCH /applications/{id}/federatedidentitycredentials/{id}":68,"PATCH /chats/{id}":208,"PATCH /chats/{id}/messages/{id}":220,"PATCH /chats/{id}/tabs/{id}":207,"PATCH /communications/calls/{id}/audioroutinggroups/{id}":83,"PATCH /deviceappmanagement":418,"PATCH /deviceappmanagement/androidmanagedappprotections/{id}":415,"PATCH /deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}":415,"PATCH /deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/androidmanagedappprotections/{id}/deploymentsummary":415,"PATCH /deviceappmanagement/defaultmanagedappprotections/{id}":415,"PATCH /deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}":415,"PATCH /deviceappmanagement/defaultmanagedappprotections/{id}/deploymentsummary":415,"PATCH /deviceappmanagement/enterprisecodesigningcertificates/{id}":415,"PATCH /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/iosmanagedappprotections/{id}":415,"PATCH /deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}":415,"PATCH /deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/iosmanagedappprotections/{id}/deploymentsummary":415,"PATCH /deviceappmanagement/managedappregistrations/{id}/operations/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}/devicestates/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}/installsummary":415,"PATCH /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates/{id}":415,"PATCH /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}":415,"PATCH /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":415,"PATCH /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":415,"PATCH /deviceappmanagement/mobileappcategories/{id}":418,"PATCH /deviceappmanagement/mobileappconfigurations/{id}":415,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses/{id}":418,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/devicestatussummary":418,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/userstatuses/{id}":418,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/userstatussummary":418,"PATCH /deviceappmanagement/mobileapps/{id}":415,"PATCH /deviceappmanagement/mobileapps/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/categories/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/contentversions/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps/{id}":418,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}":415,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}":415,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}/deploymentsummary":415,"PATCH /deviceappmanagement/vpptokens/{id}":431,"PATCH /deviceappmanagement/wdacsupplementalpolicies/{id}":415,"PATCH /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/windowsinformationprotectionpolicies/{id}":415,"PATCH /deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":415,"PATCH /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":415,"PATCH /devicemanagement/applepushnotificationcertificate":422,"PATCH /devicemanagement/auditevents/{id}":415,"PATCH /devicemanagement/compliancemanagementpartners/{id}":427,"PATCH /devicemanagement/conditionalaccesssettings":427,"PATCH /devicemanagement/detectedapps/{id}":424,"PATCH /devicemanagement/detectedapps/{id}/manageddevices/{id}":424,"PATCH /devicemanagement/detectedapps/{id}/manageddevices/{id}/devicecategory":424,"PATCH /devicemanagement/detectedapps/{id}/manageddevices/{id}/logcollectionrequests/{id}":424,"PATCH /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}":424,"PATCH /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}":424,"PATCH /devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate":424,"PATCH /devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate/detectedmalwarestate/{id}":424,"PATCH /devicemanagement/devicecategories/{id}":429,"PATCH /devicemanagement/devicecompliancepolicies/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/assignments/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/devicestatuses/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/devicestatusoverview":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/userstatuses/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/userstatusoverview":419,"PATCH /devicemanagement/devicecompliancepolicydevicestatesummary":419,"PATCH /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}":419,"PATCH /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates/{id}":419,"PATCH /devicemanagement/deviceconfigurationdevicestatesummaries":419,"PATCH /devicemanagement/deviceconfigurations/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/assignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/devicestatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/devicestatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/userstatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/userstatusoverview":419,"PATCH /devicemanagement/deviceenrollmentconfigurations/{id}":427,"PATCH /devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}":427,"PATCH /devicemanagement/devicemanagementpartners/{id}":427,"PATCH /devicemanagement/exchangeconnectors/{id}":427,"PATCH /devicemanagement/iosupdatestatuses/{id}":419,"PATCH /devicemanagement/manageddeviceoverview":424,"PATCH /devicemanagement/manageddevices/{id}":424,"PATCH /devicemanagement/mobileapptroubleshootingevents/{id}":424,"PATCH /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}":424,"PATCH /devicemanagement/mobilethreatdefenseconnectors/{id}":422,"PATCH /devicemanagement/notificationmessagetemplates/{id}":419,"PATCH /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages/{id}":419,"PATCH /devicemanagement/remoteassistancepartners/{id}":422,"PATCH /devicemanagement/reports":435,"PATCH /devicemanagement/reports/exportjobs/{id}":435,"PATCH /devicemanagement/resourceoperations/{id}":433,"PATCH /devicemanagement/roleassignments/{id}":433,"PATCH /devicemanagement/roledefinitions/{id}":433,"PATCH /devicemanagement/roledefinitions/{id}/roleassignments/{id}":433,"PATCH /devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition":433,"PATCH /devicemanagement/softwareupdatestatussummary":419,"PATCH /devicemanagement/termsandconditions/{id}":422,"PATCH /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}":422,"PATCH /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}/termsandconditions":422,"PATCH /devicemanagement/termsandconditions/{id}/assignments/{id}":422,"PATCH /devicemanagement/troubleshootingevents/{id}":424,"PATCH /devicemanagement/virtualendpoint/onpremisesconnections/{id}":230,"PATCH /devicemanagement/virtualendpoint/provisioningpolicies/{id}":227,"PATCH /devicemanagement/virtualendpoint/usersettings/{id}":227,"PATCH /devicemanagement/windowsinformationprotectionapplearningsummaries/{id}":415,"PATCH /devicemanagement/windowsinformationprotectionnetworklearningsummaries/{id}":415,"PATCH /devicemanagement/windowsmalwareinformation/{id}":424,"PATCH /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}":424,"PATCH /devices(deviceid='{id}')":270,"PATCH /devices/{id}":270,"PATCH /directory/administrativeunits/{id}":15,"PATCH /directory/attributesets/{id}":64,"PATCH /directory/customsecurityattributedefinitions/{id}":64,"PATCH /directory/customsecurityattributedefinitions/{id}/allowedvalues/{id}":64,"PATCH /directory/onpremisessynchronization/{id}":481,"PATCH /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}":159,"PATCH /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities/{id}":159,"PATCH /directory/tenantgovernance/governancepolicytemplates/default":672,"PATCH /directory/tenantgovernance/governancepolicytemplates/{id}":672,"PATCH /directory/tenantgovernance/governancerelationships/{id}":677,"PATCH /directory/tenantgovernance/governancerequests/{id}":679,"PATCH /directory/tenantgovernance/settings":682,"PATCH /domains/{id}":284,"PATCH /domains/{id}/federationconfiguration/{id}":289,"PATCH /drives/{id}/items/{id}":296,"PATCH /drives/{id}/items/{id}/permissions/{id}":296,"PATCH /drives/{id}/items/{id}/retentionlabel":295,"PATCH /education/classes/{id}":314,"PATCH /education/classes/{id}/assignmentdefaults":308,"PATCH /education/classes/{id}/assignments/{id}":309,"PATCH /education/classes/{id}/assignments/{id}/rubric":308,"PATCH /education/classes/{id}/assignments/{id}/submissions/{id}/outcomes/{id}":312,"PATCH /education/classes/{id}/assignmentsettings":308,"PATCH /education/classes/{id}/assignmentsettings/gradingcategories/{id}":308,"PATCH /education/classes/{id}/assignmentsettings/gradingschemes/{id}":308,"PATCH /education/classes/{id}/modules/{id}":321,"PATCH /education/classes/{id}/modules/{id}/resources/{id}":321,"PATCH /education/me":314,"PATCH /education/me/rubrics/{id}":308,"PATCH /education/schools/{id}":314,"PATCH /education/users/{id}":314,"PATCH /employeeexperience/communities/{id}":233,"PATCH /employeeexperience/learningproviders/{id}":331,"PATCH /employeeexperience/learningproviders/{id}/learningcontents(externalid='{id}')":439,"PATCH /employeeexperience/learningproviders/{id}/learningcontents/{id}":439,"PATCH /employeeexperience/learningproviders/{id}/learningcourseactivities/{id}":335,"PATCH /external/connections/{id}":351,"PATCH /external/connections/{id}/groups/{id}":352,"PATCH /external/connections/{id}/schema":351,"PATCH /grouplifecyclepolicies/{id}":19,"PATCH /groups(uniquename='uniquename')":372,"PATCH /groups/{id}":388,"PATCH /groups/{id}/calendar/events/{id}":253,"PATCH /groups/{id}/conversations/{id}/threads/{id}":254,"PATCH /groups/{id}/drive/items/{id}":296,"PATCH /groups/{id}/drive/items/{id}/permissions/{id}":296,"PATCH /groups/{id}/events/{id}":253,"PATCH /groups/{id}/onenote/pages/{id}/content":491,"PATCH /groups/{id}/photo/$value":554,"PATCH /groups/{id}/settings/{id}":389,"PATCH /groups/{id}/threads/{id}":254,"PATCH /groupsettings/{id}":389,"PATCH /identity/apiconnectors/{id}":391,"PATCH /identity/authenticationeventlisteners/{id}":98,"PATCH /identity/authenticationeventsflows/{id}":98,"PATCH /identity/b2xuserflows/{id}/userattributeassignments/{id}":113,"PATCH /identity/conditionalaccess/authenticationcontextclassreferences/{id}":102,"PATCH /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}":97,"PATCH /identity/customauthenticationextensions/{id}":259,"PATCH /identity/identityproviders/{id}":393,"PATCH /identity/riskprevention/fraudprotectionproviders/{id}":369,"PATCH /identity/riskprevention/webapplicationfirewallproviders/{id}":369,"PATCH /identity/userflowattributes/{id}":113,"PATCH /identity/verifiedid/profiles/{id}":406,"PATCH /identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/{id}":6,"PATCH /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}":5,"PATCH /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}":6,"PATCH /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages/{id}":75,"PATCH /identitygovernance/entitlementmanagement/accesspackages/{id}":0,"PATCH /identitygovernance/entitlementmanagement/catalogs/{id}":0,"PATCH /identitygovernance/entitlementmanagement/catalogs/{id}/resources/{id}/uploadsessions/{id}":0,"PATCH /identitygovernance/entitlementmanagement/connectedorganizations/{id}":0,"PATCH /identitygovernance/entitlementmanagement/externaloriginresourceconnectors/{id}":0,"PATCH /identitygovernance/entitlementmanagement/settings":0,"PATCH /identitygovernance/entitlementmanagement/subjects(objectid='{id}')":0,"PATCH /identitygovernance/lifecycleworkflows/customtaskextensions/{id}":394,"PATCH /identitygovernance/lifecycleworkflows/settings":399,"PATCH /identitygovernance/lifecycleworkflows/workflows/{id}":396,"PATCH /identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}":396,"PATCH /identitygovernance/privilegedaccess/group/assignmentapprovals/{id}/stages/{id}":75,"PATCH /identitygovernance/termsofuse/agreements/{id}":57,"PATCH /identityproviders/{id}":393,"PATCH /me":723,"PATCH /me/authentication/qrcodepinmethod/pin":557,"PATCH /me/authentication/qrcodepinmethod/pin/updatepin":265,"PATCH /me/authentication/qrcodepinmethod/standardqrcode":557,"PATCH /me/authentication/qrcodepinmethod/temporaryqrcode":557,"PATCH /me/calendar/events/{id}":143,"PATCH /me/calendargroups/{id}":143,"PATCH /me/calendargroups/{id}/calendars/{id}/events/{id}":143,"PATCH /me/calendars/{id}/events/{id}":143,"PATCH /me/contactfolders/{id}":241,"PATCH /me/contactfolders/{id}/childfolders/{id}/.../contacts/{id}":241,"PATCH /me/contactfolders/{id}/contacts/{id}":241,"PATCH /me/contactfolders/{id}/contacts/{id}/photo/$value":554,"PATCH /me/contacts/{id}":241,"PATCH /me/contacts/{id}/photo/$value":554,"PATCH /me/drive/items/{id}":296,"PATCH /me/drive/items/{id}/permissions/{id}":296,"PATCH /me/drive/items/{id}/workbook/names/{id}":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format/borders/{id}":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format/fill":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format/font":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format/protection":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders/{id}":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/font":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/protection":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/rows/{id}":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/sort/fields/icon":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/datalabels":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range()/format/protection":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/fill":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/font":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/fields/icon":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format/fill":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format/protection":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/protection":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/rows/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/sort/fields/icon":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/datalabels":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range()/format/protection":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/fill":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/fields/icon":187,"PATCH /me/events/{id}":143,"PATCH /me/inferenceclassification/overrides/{id}":343,"PATCH /me/mailboxsettings":458,"PATCH /me/mailfolders/inbox/messagerules/{id}":458,"PATCH /me/mailfolders/{id}":343,"PATCH /me/mailfolders/{id}/messages/{id}":343,"PATCH /me/messages/{id}":343,"PATCH /me/notes/{id}":468,"PATCH /me/onenote/pages/{id}/content":491,"PATCH /me/onlinemeetings/{id}":74,"PATCH /me/outlook/mastercategories/{id}":458,"PATCH /me/photo/$value":554,"PATCH /me/settings":732,"PATCH /me/settings/iteminsights":726,"PATCH /me/settings/workhoursandlocations":758,"PATCH /me/todo/lists/{id}":222,"PATCH /me/todo/lists/{id}/tasks/{id}":222,"PATCH /me/todo/lists/{id}/tasks/{id}/checklistitems/{id}":222,"PATCH /me/todo/lists/{id}/tasks/{id}/linkedresources/{id}":222,"PATCH /oauth2permissiongrants/{id}":472,"PATCH /organization/{id}":160,"PATCH /organization/{id}/branding":487,"PATCH /organization/{id}/branding/localizations/{id}":487,"PATCH /places/{id}":141,"PATCH /places/{id}/building/map/levels/{id}/fixtures/{id}":141,"PATCH /places/{id}/building/map/levels/{id}/sections/{id}":141,"PATCH /places/{id}/building/map/levels/{id}/units/{id}":141,"PATCH /planner/buckets/{id}":508,"PATCH /planner/plans/{id}":508,"PATCH /planner/plans/{id}/details":508,"PATCH /planner/tasks/{id}":508,"PATCH /planner/tasks/{id}/assignedtotaskboardformat":508,"PATCH /planner/tasks/{id}/buckettaskboardformat":508,"PATCH /planner/tasks/{id}/details":508,"PATCH /planner/tasks/{id}/progresstaskboardformat":508,"PATCH /policies/activitybasedtimeoutpolicies/{id}":9,"PATCH /policies/appmanagementpolicies/{id}":9,"PATCH /policies/authenticationflowspolicy":104,"PATCH /policies/authenticationmethodspolicy":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/email":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/fido2":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/microsoftauthenticator":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/qrcodepin":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/sms":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/softwareoath":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/temporaryaccesspass":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/verifiablecredentials":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/voice":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/x509certificate":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/{id}":108,"PATCH /policies/authenticationstrengthpolicies/{id}":97,"PATCH /policies/authorizationpolicy":112,"PATCH /policies/claimsmappingpolicies/{id}":9,"PATCH /policies/crosstenantaccesspolicy":256,"PATCH /policies/crosstenantaccesspolicy/default":256,"PATCH /policies/crosstenantaccesspolicy/default/m365capabilities/{id}":258,"PATCH /policies/crosstenantaccesspolicy/partners/{id}":256,"PATCH /policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization":256,"PATCH /policies/crosstenantaccesspolicy/partners/{id}/m365capabilities/{id}":258,"PATCH /policies/crosstenantaccesspolicy/templates/multitenantorganizationidentitysynchronization":256,"PATCH /policies/crosstenantaccesspolicy/templates/multitenantorganizationpartnerconfiguration":256,"PATCH /policies/defaultappmanagementpolicy":9,"PATCH /policies/featurerolloutpolicies/{id}":358,"PATCH /policies/homerealmdiscoverypolicies/{id}":9,"PATCH /policies/identitysecuritydefaultsenforcementpolicy":236,"PATCH /policies/ownerlessgrouppolicy":253,"PATCH /policies/permissiongrantpolicies/{id}":500,"PATCH /policies/rolemanagementpolicies/{id}":694,"PATCH /policies/rolemanagementpolicies/{id}/rules/{id}":694,"PATCH /policies/tokenissuancepolicies/{id}":9,"PATCH /policies/tokenlifetimepolicies/{id}":9,"PATCH /print/connectors/{id}":528,"PATCH /print/printers/{id}":538,"PATCH /print/printers/{id}/jobs/{id}":542,"PATCH /print/settings":527,"PATCH /print/shares/{id}":526,"PATCH /print/taskdefinitions/{id}":519,"PATCH /print/taskdefinitions/{id}/tasks/{id}":519,"PATCH /privacy/subjectrightsrequests/{id}":629,"PATCH /reports":419,"PATCH /rolemanagement/directory/roledefinitions/{id}":564,"PATCH /schemaextensions/{id}":35,"PATCH /search/acronyms/{id}":578,"PATCH /search/bookmarks/{id}":578,"PATCH /search/qnas/{id}":578,"PATCH /security/alerts/{id}":62,"PATCH /security/alerts_v2/{id}":582,"PATCH /security/attacksimulation/simulations/{id}":81,"PATCH /security/cases/ediscoverycases/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/legalholds/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/reviewsets/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/searches/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/settings":590,"PATCH /security/cases/ediscoverycases/{id}/tags/{id}":591,"PATCH /security/identities/healthissues/{id}":595,"PATCH /security/identities/sensors/{id}":600,"PATCH /security/identities/settings/autoauditingconfiguration":589,"PATCH /security/incidents/{id}":602,"PATCH /security/labels/retentionlabels/{id}":604,"PATCH /security/labels/retentionlabels/{id}/eventtype":592,"PATCH /security/securescorecontrolprofiles/{id}":62,"PATCH /security/subjectrightsrequests/{id}":629,"PATCH /security/triggers/retentionevents/{id}/retentioneventtype":592,"PATCH /security/triggertypes/retentioneventtypes/{id}":592,"PATCH /serviceprincipals(appid='appid')":67,"PATCH /serviceprincipals(appid='{id}')":615,"PATCH /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps/{id}":77,"PATCH /serviceprincipals/{id}":615,"PATCH /serviceprincipals/{id}/agentidentity":28,"PATCH /serviceprincipals/{id}/agentidentityblueprintprincipal":43,"PATCH /serviceprincipals/{id}/remotedesktopsecurityconfiguration":566,"PATCH /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}":77,"PATCH /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}":77,"PATCH /sites/{id}/columns/{id}":231,"PATCH /sites/{id}/contenttypes/{id}":231,"PATCH /sites/{id}/contenttypes/{id}/columns/{id}":231,"PATCH /sites/{id}/drive/items/{id}":296,"PATCH /sites/{id}/drive/items/{id}/permissions/{id}":296,"PATCH /sites/{id}/lists/{id}/columns/{id}":231,"PATCH /sites/{id}/lists/{id}/contenttypes/{id}":231,"PATCH /sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}":231,"PATCH /sites/{id}/lists/{id}/items/{id}":123,"PATCH /sites/{id}/lists/{id}/items/{id}/fields":123,"PATCH /sites/{id}/onenote/pages/{id}/content":491,"PATCH /sites/{id}/pages/{id}/sitepage":123,"PATCH /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}":123,"PATCH /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}":123,"PATCH /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection":123,"PATCH /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts/{id}":123,"PATCH /sites/{id}/pages/{id}/sitepage/webparts/{id}":123,"PATCH /sites/{id}/permissions/{id}":623,"PATCH /sites/{id}/termstore/sets/{id}":686,"PATCH /sites/{id}/termstore/sets/{id}/terms/{id}":686,"PATCH /solutions/backuprestore/emailnotificationssetting":330,"PATCH /solutions/backuprestore/exchangeprotectionpolicies/{id}":122,"PATCH /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}":122,"PATCH /solutions/backuprestore/exchangerestoresessions/{id}":117,"PATCH /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}":122,"PATCH /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}":122,"PATCH /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}":117,"PATCH /solutions/backuprestore/sharepointprotectionpolicies/{id}":122,"PATCH /solutions/backuprestore/sharepointrestoresessions/{id}":117,"PATCH /solutions/bookingbusinesses/{id}":136,"PATCH /solutions/bookingbusinesses/{id}/appointments/{id}":127,"PATCH /solutions/bookingbusinesses/{id}/customers/{id}":127,"PATCH /solutions/bookingbusinesses/{id}/customquestions/{id}":126,"PATCH /solutions/bookingbusinesses/{id}/services/{id}":136,"PATCH /solutions/bookingbusinesses/{id}/staffmembers/{id}":136,"PATCH /solutions/virtualevents/townhalls/{id}":740,"PATCH /solutions/virtualevents/webinars/{id}":740,"PATCH /solutions/virtualevents/webinars/{id}/presenters/{id}":740,"PATCH /storage/filestorage/containers/{id}":363,"PATCH /storage/filestorage/containers/{id}/columns":363,"PATCH /storage/filestorage/containers/{id}/columns/{id}":366,"PATCH /storage/filestorage/containers/{id}/customproperties":366,"PATCH /storage/filestorage/containers/{id}/permissions":363,"PATCH /storage/filestorage/containers/{id}/permissions/{id}":363,"PATCH /storage/filestorage/containers/{id}/recyclebin/settings":366,"PATCH /storage/filestorage/containers/{id}/sharepointgroups/{id}":367,"PATCH /storage/filestorage/containertyperegistrations/{id}":364,"PATCH /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants/{id}":364,"PATCH /storage/filestorage/containertypes/{id}":365,"PATCH /teams/(team-id)/channels/{id}/messages/{id}":220,"PATCH /teams/(team-id)/channels/{id}/messages/{id}/replies/{id}":220,"PATCH /teams/{id}":639,"PATCH /teams/{id}/channels/{id}":181,"PATCH /teams/{id}/channels/{id}/members/{id}":186,"PATCH /teams/{id}/channels/{id}/tabs/{id}":180,"PATCH /teams/{id}/members/{id}":252,"PATCH /teams/{id}/tags/{id}":666,"PATCH /teamwork/teamsappsettings":661,"PATCH /teamwork/workforceintegrations/{id}":753,"PATCH /tenantrelationships/delegatedadminrelationships/{id}":263,"PATCH /tenantrelationships/delegatedadminrelationships/{id}/accessassignments/{id}":263,"PATCH /tenantrelationships/multitenantorganization":464,"PATCH /tenantrelationships/multitenantorganization/joinrequest":464,"PATCH /tenantrelationships/multitenantorganization/tenants/{id}":464,"PATCH /users/agentuser/{id}":44,"PATCH /users/{id}":723,"PATCH /users/{id}/authentication/emailmethods/{id}":327,"PATCH /users/{id}/authentication/phonemethods/{id}":503,"PATCH /users/{id}/authentication/qrcodepinmethod/pin":557,"PATCH /users/{id}/authentication/qrcodepinmethod/pin/updatepin":265,"PATCH /users/{id}/authentication/qrcodepinmethod/standardqrcode":557,"PATCH /users/{id}/authentication/qrcodepinmethod/temporaryqrcode":557,"PATCH /users/{id}/calendar/events/{id}":143,"PATCH /users/{id}/calendargroups/{id}":143,"PATCH /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}":143,"PATCH /users/{id}/calendars/{id}/events/{id}":143,"PATCH /users/{id}/contactfolders/{id}":241,"PATCH /users/{id}/contactfolders/{id}/childfolders/{id}/contacts/{id}":241,"PATCH /users/{id}/contactfolders/{id}/contacts/{id}":241,"PATCH /users/{id}/contactfolders/{id}/contacts/{id}/photo/$value":554,"PATCH /users/{id}/contacts/{id}":241,"PATCH /users/{id}/contacts/{id}/photo/$value":554,"PATCH /users/{id}/drive/items/{id}":296,"PATCH /users/{id}/drive/items/{id}/permissions/{id}":296,"PATCH /users/{id}/events/{id}":143,"PATCH /users/{id}/inferenceclassification/overrides/{id}":343,"PATCH /users/{id}/mailboxsettings":458,"PATCH /users/{id}/mailfolders/inbox/messagerules/{id}":458,"PATCH /users/{id}/mailfolders/{id}":343,"PATCH /users/{id}/mailfolders/{id}/messages/{id}":343,"PATCH /users/{id}/messages/{id}":343,"PATCH /users/{id}/notes/{id}":468,"PATCH /users/{id}/onenote/pages/{id}/content":491,"PATCH /users/{id}/onlinemeetings/{id}":74,"PATCH /users/{id}/outlook/mastercategories/{id}":458,"PATCH /users/{id}/photo/$value":554,"PATCH /users/{id}/settings":732,"PATCH /users/{id}/settings/iteminsights":726,"PATCH /users/{id}/settings/shiftpreferences":621,"PATCH /users/{id}/settings/workhoursandlocations":758,"PATCH /users/{id}/todo/lists/{id}/tasks":222,"PATCH /users/{id}/todo/lists/{id}/tasks/{id}":222,"PATCH /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}":222,"PATCH /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}":222,"POST /admin/configurationmanagement/configurationmonitors":239,"POST /admin/configurationmanagement/configurationsnapshots/createsnapshot":239,"POST /admin/edge/internetexplorermode/sitelists":140,"POST /admin/edge/internetexplorermode/sitelists/{id}/publish":140,"POST /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies":140,"POST /admin/edge/internetexplorermode/sitelists/{id}/sites":140,"POST /admin/exchange/mailboxes/{id}/createimportsession":449,"POST /admin/exchange/mailboxes/{id}/exportitems":451,"POST /admin/exchange/mailboxes/{id}/folders":450,"POST /admin/exchange/mailboxes/{id}/folders/inbox/childfolders":450,"POST /admin/people/profilecardproperties":499,"POST /admin/people/profilepropertysettings":413,"POST /admin/people/profilesources":413,"POST /admin/serviceannouncement/messages/archive":616,"POST /admin/serviceannouncement/messages/favorite":616,"POST /admin/serviceannouncement/messages/markread":616,"POST /admin/serviceannouncement/messages/markunread":616,"POST /admin/serviceannouncement/messages/unarchive":616,"POST /admin/serviceannouncement/messages/unfavorite":616,"POST /admin/teams/policy/userassignments/assign":657,"POST /admin/teams/policy/userassignments/unassign":657,"POST /admin/teams/telephonenumbermanagement/numberassignments/assignnumber":654,"POST /admin/teams/telephonenumbermanagement/numberassignments/unassignnumber":654,"POST /admin/teams/telephonenumbermanagement/numberassignments/updatenumber":654,"POST /agreements/{id}/files":57,"POST /app/calls/{id}/addlargegalleryview":148,"POST /app/calls/{id}/audioroutinggroups":83,"POST /app/calls/{id}/senddtmftones":150,"POST /appcatalogs/teamsapps":658,"POST /appcatalogs/teamsapps/{id}/appdefinitions":658,"POST /applications":72,"POST /applications(appid='{id}')/addkey":67,"POST /applications(appid='{id}')/addpassword":67,"POST /applications(appid='{id}')/extensionproperties":67,"POST /applications(appid='{id}')/federatedidentitycredentials":68,"POST /applications(appid='{id}')/removekey":67,"POST /applications(appid='{id}')/removepassword":67,"POST /applications(appid='{id}')/setverifiedpublisher":35,"POST /applications(appid='{id}')/unsetverifiedpublisher":35,"POST /applications/agentidentityblueprint":34,"POST /applications/{id}/addkey":67,"POST /applications/{id}/addpassword":67,"POST /applications/{id}/agentidentityblueprint/addkey":29,"POST /applications/{id}/agentidentityblueprint/addpassword":29,"POST /applications/{id}/agentidentityblueprint/inheritablepermissions":34,"POST /applications/{id}/agentidentityblueprint/owners/$ref":30,"POST /applications/{id}/agentidentityblueprint/removekey":29,"POST /applications/{id}/agentidentityblueprint/removepassword":29,"POST /applications/{id}/agentidentityblueprint/unsetverifiedpublisher":31,"POST /applications/{id}/extensionproperties":67,"POST /applications/{id}/federatedidentitycredentials":68,"POST /applications/{id}/removekey":67,"POST /applications/{id}/removepassword":67,"POST /applications/{id}/setverifiedpublisher":35,"POST /applications/{id}/synchronization/acquireaccesstoken":634,"POST /applications/{id}/unsetverifiedpublisher":35,"POST /applicationtemplates/{id}/instantiate":67,"POST /auditlogs/signins/confirmcompromised":622,"POST /auditlogs/signins/confirmsafe":622,"POST /auditlogs/signins/dismiss":622,"POST /chats":214,"POST /chats/{id}/completemigration":164,"POST /chats/{id}/hideforuser":199,"POST /chats/{id}/installedapps":209,"POST /chats/{id}/installedapps/{id}/upgrade":209,"POST /chats/{id}/markchatreadforuser":199,"POST /chats/{id}/markchatunreadforuser":199,"POST /chats/{id}/members":210,"POST /chats/{id}/messages":211,"POST /chats/{id}/messages/replywithquote":218,"POST /chats/{id}/messages/{id}/setreaction":219,"POST /chats/{id}/messages/{id}/unsetreaction":219,"POST /chats/{id}/pinnedmessages":212,"POST /chats/{id}/removeallaccessforuser":215,"POST /chats/{id}/sendactivitynotification":216,"POST /chats/{id}/startmigration":164,"POST /chats/{id}/tabs":213,"POST /chats/{id}/unhideforuser":199,"POST /communications/calls":73,"POST /communications/calls/logteleconferencedevicequality":151,"POST /communications/calls/{id}/addlargegalleryview":148,"POST /communications/calls/{id}/answer":149,"POST /communications/calls/{id}/audioroutinggroups":83,"POST /communications/calls/{id}/cancelmediaprocessing":150,"POST /communications/calls/{id}/changescreensharingrole":151,"POST /communications/calls/{id}/keepalive":150,"POST /communications/calls/{id}/mute":150,"POST /communications/calls/{id}/participants/invite":493,"POST /communications/calls/{id}/participants/{id}/mute":149,"POST /communications/calls/{id}/participants/{id}/startholdmusic":494,"POST /communications/calls/{id}/participants/{id}/stopholdmusic":494,"POST /communications/calls/{id}/playprompt":150,"POST /communications/calls/{id}/recordresponse":151,"POST /communications/calls/{id}/redirect":153,"POST /communications/calls/{id}/senddtmftones":150,"POST /communications/calls/{id}/subscribetotone":151,"POST /communications/calls/{id}/transfer":153,"POST /communications/calls/{id}/unmute":150,"POST /communications/calls/{id}/updaterecordingstatus":154,"POST /communications/getpresencesbyuserid":226,"POST /contacts/{id}/checkmembergroups":277,"POST /contacts/{id}/checkmemberobjects":277,"POST /contacts/{id}/getmembergroups":279,"POST /contacts/{id}/getmemberobjects":277,"POST /contacts/{id}/retryserviceprovisioning":488,"POST /deviceappmanagement/androidmanagedappprotections":415,"POST /deviceappmanagement/androidmanagedappprotections/{id}/apps":415,"POST /deviceappmanagement/defaultmanagedappprotections":415,"POST /deviceappmanagement/defaultmanagedappprotections/{id}/apps":415,"POST /deviceappmanagement/enterprisecodesigningcertificates":419,"POST /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments":415,"POST /deviceappmanagement/iosmanagedappprotections":415,"POST /deviceappmanagement/iosmanagedappprotections/{id}/apps":415,"POST /deviceappmanagement/managedapppolicies/{id}/assign":415,"POST /deviceappmanagement/managedapppolicies/{id}/targetapps":415,"POST /deviceappmanagement/managedappregistrations":415,"POST /deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}/assign":415,"POST /deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}/targetapps":415,"POST /deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}/assign":415,"POST /deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}/targetapps":415,"POST /deviceappmanagement/managedappregistrations/{id}/operations":415,"POST /deviceappmanagement/managedebooks":415,"POST /deviceappmanagement/managedebooks/{id}/assign":415,"POST /deviceappmanagement/managedebooks/{id}/assignments":415,"POST /deviceappmanagement/managedebooks/{id}/devicestates":415,"POST /deviceappmanagement/managedebooks/{id}/userstatesummary":415,"POST /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates":415,"POST /deviceappmanagement/mdmwindowsinformationprotectionpolicies":415,"POST /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles":415,"POST /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles":415,"POST /deviceappmanagement/mobileappcategories":418,"POST /deviceappmanagement/mobileappconfigurations":418,"POST /deviceappmanagement/mobileappconfigurations/{id}/assign":418,"POST /deviceappmanagement/mobileappconfigurations/{id}/assignments":418,"POST /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses":418,"POST /deviceappmanagement/mobileappconfigurations/{id}/userstatuses":418,"POST /deviceappmanagement/mobileapps":415,"POST /deviceappmanagement/mobileapps/{id}/assign":418,"POST /deviceappmanagement/mobileapps/{id}/assignments":418,"POST /deviceappmanagement/mobileapps/{id}/categories":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}/commit":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}/renewupload":418,"POST /deviceappmanagement/mobileapps/{id}/enableapplicablearchitectures":421,"POST /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions":418,"POST /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions":418,"POST /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps":418,"POST /deviceappmanagement/syncmicrosoftstoreforbusinessapps":418,"POST /deviceappmanagement/targetedmanagedappconfigurations":415,"POST /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps":415,"POST /deviceappmanagement/targetedmanagedappconfigurations/{id}/assign":415,"POST /deviceappmanagement/targetedmanagedappconfigurations/{id}/targetapps":415,"POST /deviceappmanagement/vpptokens":431,"POST /deviceappmanagement/vpptokens/{id}/synclicenses":431,"POST /deviceappmanagement/wdacsupplementalpolicies":415,"POST /deviceappmanagement/wdacsupplementalpolicies/{id}/assign":415,"POST /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments":415,"POST /deviceappmanagement/windowsinformationprotectionpolicies":415,"POST /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles":415,"POST /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles":415,"POST /devicemanagement/auditevents":415,"POST /devicemanagement/compliancemanagementpartners":427,"POST /devicemanagement/detectedapps":424,"POST /devicemanagement/detectedapps/{id}/manageddevices":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/bypassactivationlock":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/cleanwindowsdevice":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/createdevicelogcollectionrequest":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/deleteuserfromsharedappledevice":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/disablelostmode":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/locatedevice":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/logcollectionrequests":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/logcollectionrequests/{id}/createdownloadurl":425,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/rebootnow":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/recoverpasscode":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/remotelock":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/requestremoteassistance":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/resetpasscode":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/retire":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/shutdown":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/syncdevice":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/updatewindowsdeviceaccount":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/bypassactivationlock":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/cleanwindowsdevice":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/createdevicelogcollectionrequest":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/deleteuserfromsharedappledevice":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/disablelostmode":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/locatedevice":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/rebootnow":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/recoverpasscode":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/remotelock":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/requestremoteassistance":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/resetpasscode":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/retire":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/shutdown":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/syncdevice":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/updatewindowsdeviceaccount":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/windowsdefenderscan":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/windowsdefenderupdatesignatures":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/wipe":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/removealldevicesfrommanagement":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsdefenderscan":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsdefenderupdatesignatures":426,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate/detectedmalwarestate":424,"POST /devicemanagement/detectedapps/{id}/manageddevices/{id}/wipe":426,"POST /devicemanagement/devicecategories":424,"POST /devicemanagement/devicecompliancepolicies":419,"POST /devicemanagement/devicecompliancepolicies/{id}/assign":419,"POST /devicemanagement/devicecompliancepolicies/{id}/assignments":419,"POST /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries":419,"POST /devicemanagement/devicecompliancepolicies/{id}/devicestatuses":419,"POST /devicemanagement/devicecompliancepolicies/{id}/scheduleactionsforrules":419,"POST /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule":419,"POST /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations":419,"POST /devicemanagement/devicecompliancepolicies/{id}/userstatuses":419,"POST /devicemanagement/devicecompliancepolicysettingstatesummaries":419,"POST /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates":419,"POST /devicemanagement/deviceconfigurations":419,"POST /devicemanagement/deviceconfigurations/{id}/assign":419,"POST /devicemanagement/deviceconfigurations/{id}/assignments":419,"POST /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries":419,"POST /devicemanagement/deviceconfigurations/{id}/devicestatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/userstatuses":419,"POST /devicemanagement/deviceenrollmentconfigurations":422,"POST /devicemanagement/deviceenrollmentconfigurations/{id}/assign":427,"POST /devicemanagement/deviceenrollmentconfigurations/{id}/assignments":427,"POST /devicemanagement/deviceenrollmentconfigurations/{id}/setpriority":427,"POST /devicemanagement/devicemanagementpartners":427,"POST /devicemanagement/devicemanagementpartners/{id}/terminate":428,"POST /devicemanagement/exchangeconnectors":427,"POST /devicemanagement/exchangeconnectors/{id}/sync":422,"POST /devicemanagement/importedwindowsautopilotdeviceidentities":422,"POST /devicemanagement/importedwindowsautopilotdeviceidentities/import":422,"POST /devicemanagement/iosupdatestatuses":419,"POST /devicemanagement/manageddevices":424,"POST /devicemanagement/manageddevices/{id}/bypassactivationlock":424,"POST /devicemanagement/manageddevices/{id}/cleanwindowsdevice":426,"POST /devicemanagement/manageddevices/{id}/createdevicelogcollectionrequest":424,"POST /devicemanagement/manageddevices/{id}/deleteuserfromsharedappledevice":426,"POST /devicemanagement/manageddevices/{id}/disablelostmode":426,"POST /devicemanagement/manageddevices/{id}/locatedevice":424,"POST /devicemanagement/manageddevices/{id}/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/manageddevices/{id}/rebootnow":426,"POST /devicemanagement/manageddevices/{id}/recoverpasscode":426,"POST /devicemanagement/manageddevices/{id}/remotelock":426,"POST /devicemanagement/manageddevices/{id}/requestremoteassistance":424,"POST /devicemanagement/manageddevices/{id}/resetpasscode":426,"POST /devicemanagement/manageddevices/{id}/retire":426,"POST /devicemanagement/manageddevices/{id}/shutdown":426,"POST /devicemanagement/manageddevices/{id}/syncdevice":426,"POST /devicemanagement/manageddevices/{id}/updatewindowsdeviceaccount":426,"POST /devicemanagement/manageddevices/{id}/windowsdefenderscan":426,"POST /devicemanagement/manageddevices/{id}/windowsdefenderupdatesignatures":426,"POST /devicemanagement/manageddevices/{id}/wipe":426,"POST /devicemanagement/mobileapptroubleshootingevents":424,"POST /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests":424,"POST /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}/createdownloadurl":425,"POST /devicemanagement/mobilethreatdefenseconnectors":422,"POST /devicemanagement/notificationmessagetemplates":419,"POST /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages":419,"POST /devicemanagement/notificationmessagetemplates/{id}/sendtestmessage":419,"POST /devicemanagement/remoteassistancepartners":422,"POST /devicemanagement/remoteassistancepartners/{id}/beginonboarding":422,"POST /devicemanagement/remoteassistancepartners/{id}/disconnect":422,"POST /devicemanagement/reports/exportjobs":435,"POST /devicemanagement/reports/getcachedreport":436,"POST /devicemanagement/reports/getcompliancepolicynoncompliancereport":436,"POST /devicemanagement/reports/getcompliancepolicynoncompliancesummaryreport":436,"POST /devicemanagement/reports/getcompliancesettingnoncompliancereport":436,"POST /devicemanagement/reports/getconfigurationpolicynoncompliancereport":436,"POST /devicemanagement/reports/getconfigurationpolicynoncompliancesummaryreport":436,"POST /devicemanagement/reports/getconfigurationsettingnoncompliancereport":436,"POST /devicemanagement/reports/getdevicemanagementintentpersettingcontributingprofiles":436,"POST /devicemanagement/reports/getdevicemanagementintentsettingsreport":436,"POST /devicemanagement/reports/getdevicenoncompliancereport":436,"POST /devicemanagement/reports/getdevicepoliciescompliancereport":436,"POST /devicemanagement/reports/getdevicepolicysettingscompliancereport":436,"POST /devicemanagement/reports/getdevicesstatusbypolicyplatformcompliancereport":436,"POST /devicemanagement/reports/getdevicesstatusbysettingreport":436,"POST /devicemanagement/reports/getdevicestatusbycompliacepolicyreport":436,"POST /devicemanagement/reports/getdevicestatusbycompliancepolicysettingreport":436,"POST /devicemanagement/reports/getdevicestatussummarybycompliacepolicyreport":436,"POST /devicemanagement/reports/getdevicestatussummarybycompliancepolicysettingsreport":436,"POST /devicemanagement/reports/getdeviceswithoutcompliancepolicyreport":436,"POST /devicemanagement/reports/gethistoricalreport":436,"POST /devicemanagement/reports/getnoncompliantdevicesandsettingsreport":436,"POST /devicemanagement/reports/getpolicynoncompliancemetadata":436,"POST /devicemanagement/reports/getpolicynoncompliancereport":436,"POST /devicemanagement/reports/getpolicynoncompliancesummaryreport":436,"POST /devicemanagement/reports/getreportfilters":436,"POST /devicemanagement/reports/getsettingnoncompliancereport":436,"POST /devicemanagement/resourceoperations":433,"POST /devicemanagement/roleassignments":433,"POST /devicemanagement/roledefinitions":433,"POST /devicemanagement/roledefinitions/{id}/roleassignments":433,"POST /devicemanagement/termsandconditions":422,"POST /devicemanagement/termsandconditions/{id}/acceptancestatuses":422,"POST /devicemanagement/termsandconditions/{id}/assignments":422,"POST /devicemanagement/troubleshootingevents":424,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/endgraceperiod":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/reboot":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/rename":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/reprovision":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/resize":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/restore":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/troubleshoot":227,"POST /devicemanagement/virtualendpoint/deviceimages":227,"POST /devicemanagement/virtualendpoint/onpremisesconnections":230,"POST /devicemanagement/virtualendpoint/onpremisesconnections/{id}/runhealthchecks":230,"POST /devicemanagement/virtualendpoint/onpremisesconnections/{id}/updateaddomainpassword":227,"POST /devicemanagement/virtualendpoint/provisioningpolicies":227,"POST /devicemanagement/virtualendpoint/provisioningpolicies/{id}/assign":227,"POST /devicemanagement/virtualendpoint/report/retrievecloudpcrecommendationreports":227,"POST /devicemanagement/virtualendpoint/usersettings":227,"POST /devicemanagement/virtualendpoint/usersettings/{id}/assign":227,"POST /devicemanagement/windowsautopilotdeviceidentities":427,"POST /devicemanagement/windowsautopilotdeviceidentities/deletedevices":428,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/assignusertodevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/unassignuserfromdevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/updatedeviceproperties":422,"POST /devicemanagement/windowsinformationprotectionapplearningsummaries":415,"POST /devicemanagement/windowsinformationprotectionnetworklearningsummaries":415,"POST /devicemanagement/windowsmalwareinformation":424,"POST /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates":424,"POST /devices":265,"POST /devices(deviceid='{id}')/registeredowners/$ref":265,"POST /devices(deviceid='{id}')/registeredusers/$ref":265,"POST /devices/provision":269,"POST /devices/{id}/checkmembergroups":277,"POST /devices/{id}/checkmemberobjects":277,"POST /devices/{id}/getmembergroups":279,"POST /devices/{id}/getmemberobjects":277,"POST /devices/{id}/registeredowners/$ref":265,"POST /devices/{id}/registeredusers/$ref":265,"POST /directory/administrativeunits":15,"POST /directory/administrativeunits/{id}/members":19,"POST /directory/administrativeunits/{id}/members/$ref":19,"POST /directory/administrativeunits/{id}/scopedrolemembers":16,"POST /directory/attributesets":64,"POST /directory/customsecurityattributedefinitions":64,"POST /directory/customsecurityattributedefinitions/{id}/allowedvalues":64,"POST /directory/deleteditems/getuserownedobjects":274,"POST /directory/federationconfigurations/samlorwsfedexternaldomainfederation":393,"POST /directory/federationconfigurations/{id}/samlorwsfedexternaldomainfederation/domains":393,"POST /directory/publickeyinfrastructure/certificatebasedauthconfigurations":159,"POST /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities":159,"POST /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/upload":159,"POST /directory/recovery/snapshots/{id}/recoveryjobs":340,"POST /directory/recovery/snapshots/{id}/recoverypreviewjobs":341,"POST /directory/tenantgovernance/governanceinvitations":673,"POST /directory/tenantgovernance/governancepolicytemplates":672,"POST /directory/tenantgovernance/governancerequests":679,"POST /directory/tenantgovernance/relatedtenants/refresh":681,"POST /directory/tenantgovernance/settings/enablerelatedtenants":682,"POST /directoryobjects/getavailableextensionproperties":278,"POST /directoryobjects/getbyids":278,"POST /directoryobjects/validateproperties":280,"POST /directoryobjects/{id}/checkmembergroups":277,"POST /directoryobjects/{id}/checkmemberobjects":277,"POST /directoryobjects/{id}/getmembergroups":279,"POST /directoryobjects/{id}/getmemberobjects":277,"POST /directoryroles":16,"POST /directoryroles/roletemplateid={id}/members/$ref":16,"POST /directoryroles/{id}/members/$ref":16,"POST /domains":284,"POST /domains/{id}/federationconfiguration":289,"POST /domains/{id}/forcedelete":284,"POST /domains/{id}/promote":284,"POST /domains/{id}/verify":284,"POST /drives/{id}/items/{id}/assignsensitivitylabel":295,"POST /drives/{id}/items/{id}/checkin":296,"POST /drives/{id}/items/{id}/checkout":296,"POST /drives/{id}/items/{id}/children":296,"POST /drives/{id}/items/{id}/copy":296,"POST /drives/{id}/items/{id}/createlink":296,"POST /drives/{id}/items/{id}/createuploadsession":297,"POST /drives/{id}/items/{id}/discardcheckout":296,"POST /drives/{id}/items/{id}/extractsensitivitylabels":298,"POST /drives/{id}/items/{id}/follow":293,"POST /drives/{id}/items/{id}/invite":296,"POST /drives/{id}/items/{id}/permanentdelete":296,"POST /drives/{id}/items/{id}/permissions":303,"POST /drives/{id}/items/{id}/permissions/{id}/revokegrants":296,"POST /drives/{id}/items/{id}/preview":293,"POST /drives/{id}/items/{id}/versions/{id}/restoreversion":296,"POST /drives/{id}/items/{id}:/{id}:/createuploadsession":297,"POST /drives/{id}/root:/{id}:/assignsensitivitylabel":295,"POST /drives/{id}/root:/{id}:/extractsensitivitylabels":298,"POST /education/classes":314,"POST /education/classes/{id}/assignmentcategories":308,"POST /education/classes/{id}/assignments":309,"POST /education/classes/{id}/assignments/{id}/activate":308,"POST /education/classes/{id}/assignments/{id}/categories/$ref":308,"POST /education/classes/{id}/assignments/{id}/deactivate":308,"POST /education/classes/{id}/assignments/{id}/publish":309,"POST /education/classes/{id}/assignments/{id}/resources":309,"POST /education/classes/{id}/assignments/{id}/setupfeedbackresourcesfolder":311,"POST /education/classes/{id}/assignments/{id}/setupresourcesfolder":312,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/excuse":312,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/outcomes":312,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/reassign":326,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/resources":308,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/return":312,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/setupresourcesfolder":311,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/submit":326,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/unsubmit":326,"POST /education/classes/{id}/assignmentsettings/gradingschemes":308,"POST /education/classes/{id}/members/$ref":320,"POST /education/classes/{id}/modules":321,"POST /education/classes/{id}/modules/{id}/pin":321,"POST /education/classes/{id}/modules/{id}/publish":321,"POST /education/classes/{id}/modules/{id}/resources":321,"POST /education/classes/{id}/modules/{id}/setupresourcesfolder":321,"POST /education/classes/{id}/modules/{id}/unpin":321,"POST /education/classes/{id}/teachers/$ref":314,"POST /education/me/rubrics":308,"POST /education/schools":314,"POST /education/schools/{id}/classes/$ref":314,"POST /education/schools/{id}/users/$ref":314,"POST /education/users":314,"POST /employeeexperience/communities":233,"POST /employeeexperience/learningproviders":331,"POST /employeeexperience/learningproviders/{id}/learningcourseactivities":335,"POST /employeeexperience/roles/{id}/members":337,"POST /external/connections":351,"POST /external/connections/{id}/groups":352,"POST /external/connections/{id}/groups/{id}/members":352,"POST /grouplifecyclepolicies":19,"POST /grouplifecyclepolicies/{id}/addgroup":19,"POST /grouplifecyclepolicies/{id}/removegroup":19,"POST /groups":386,"POST /groups/{id}/acceptedsenders/$ref":253,"POST /groups/{id}/addfavorite":253,"POST /groups/{id}/assignlicense":370,"POST /groups/{id}/calendar/events":253,"POST /groups/{id}/calendar/events/{id}/attachments":143,"POST /groups/{id}/calendar/events/{id}/cancel":143,"POST /groups/{id}/calendar/events/{id}/forward":342,"POST /groups/{id}/calendarview/{id}/permanentdelete":143,"POST /groups/{id}/checkmembergroups":277,"POST /groups/{id}/checkmemberobjects":277,"POST /groups/{id}/conversations":253,"POST /groups/{id}/conversations/{id}/threads":249,"POST /groups/{id}/conversations/{id}/threads/{id}/posts/{id}/forward":254,"POST /groups/{id}/conversations/{id}/threads/{id}/posts/{id}/reply":246,"POST /groups/{id}/conversations/{id}/threads/{id}/reply":253,"POST /groups/{id}/drive/items/{id}/assignsensitivitylabel":295,"POST /groups/{id}/drive/items/{id}/checkin":296,"POST /groups/{id}/drive/items/{id}/checkout":296,"POST /groups/{id}/drive/items/{id}/children":296,"POST /groups/{id}/drive/items/{id}/copy":296,"POST /groups/{id}/drive/items/{id}/createlink":296,"POST /groups/{id}/drive/items/{id}/createuploadsession":297,"POST /groups/{id}/drive/items/{id}/discardcheckout":296,"POST /groups/{id}/drive/items/{id}/extractsensitivitylabels":298,"POST /groups/{id}/drive/items/{id}/follow":293,"POST /groups/{id}/drive/items/{id}/invite":296,"POST /groups/{id}/drive/items/{id}/permissions":303,"POST /groups/{id}/drive/items/{id}/permissions/{id}/revokegrants":296,"POST /groups/{id}/drive/items/{id}/preview":293,"POST /groups/{id}/drive/items/{id}/versions/{id}/restoreversion":296,"POST /groups/{id}/drive/items/{id}:/{id}:/createuploadsession":297,"POST /groups/{id}/drive/root:/{id}:/assignsensitivitylabel":295,"POST /groups/{id}/drive/root:/{id}:/extractsensitivitylabels":298,"POST /groups/{id}/events":253,"POST /groups/{id}/events/{id}/attachments":143,"POST /groups/{id}/events/{id}/cancel":143,"POST /groups/{id}/events/{id}/forward":342,"POST /groups/{id}/events/{id}/permanentdelete":143,"POST /groups/{id}/getmembergroups":279,"POST /groups/{id}/getmemberobjects":277,"POST /groups/{id}/onenote/notebooks":470,"POST /groups/{id}/onenote/notebooks/getnotebookfromweburl":471,"POST /groups/{id}/onenote/notebooks/{id}/copynotebook":470,"POST /groups/{id}/onenote/notebooks/{id}/sectiongroups":470,"POST /groups/{id}/onenote/notebooks/{id}/sections":470,"POST /groups/{id}/onenote/pages":470,"POST /groups/{id}/onenote/pages/{id}/copytosection":470,"POST /groups/{id}/onenote/sectiongroups/{id}/sectiongroups":470,"POST /groups/{id}/onenote/sectiongroups/{id}/sections":470,"POST /groups/{id}/onenote/sections/{id}/copytonotebook":470,"POST /groups/{id}/onenote/sections/{id}/copytosectiongroup":470,"POST /groups/{id}/onenote/sections/{id}/pages":470,"POST /groups/{id}/owners/$ref":372,"POST /groups/{id}/rejectedsenders/$ref":253,"POST /groups/{id}/removefavorite":253,"POST /groups/{id}/renew":372,"POST /groups/{id}/resetunseencount":253,"POST /groups/{id}/retryserviceprovisioning":372,"POST /groups/{id}/settings":387,"POST /groups/{id}/subscribebymail":253,"POST /groups/{id}/team/channels/{id}/archive":163,"POST /groups/{id}/team/channels/{id}/unarchive":163,"POST /groups/{id}/threads":253,"POST /groups/{id}/threads/{id}/posts/{id}/forward":254,"POST /groups/{id}/threads/{id}/posts/{id}/reply":246,"POST /groups/{id}/threads/{id}/reply":253,"POST /groups/{id}/unsubscribebymail":246,"POST /groups/{id}/validateproperties":274,"POST /groupsettings":387,"POST /identity/apiconnectors":391,"POST /identity/apiconnectors/{id}/uploadclientcertificate":391,"POST /identity/authenticationeventlisteners":98,"POST /identity/authenticationeventsflows":98,"POST /identity/authenticationeventsflows/{id}/conditions/applications/includeapplications":98,"POST /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onattributecollection/onattributecollectionexternalusersselfservicesignup/attributes/$ref":98,"POST /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onauthenticationmethodloadstart/onauthenticationmethodloadstartexternalusersselfservicesignup/identityproviders/$ref":98,"POST /identity/b2xuserflows":113,"POST /identity/b2xuserflows/{id}/identityproviders/$ref":113,"POST /identity/b2xuserflows/{id}/userattributeassignments":113,"POST /identity/b2xuserflows/{id}/userattributeassignments/setorder":113,"POST /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations":97,"POST /identity/conditionalaccess/evaluate":237,"POST /identity/customauthenticationextensions":259,"POST /identity/customauthenticationextensions/validateauthenticationconfiguration":260,"POST /identity/customauthenticationextensions/{id}/validateauthenticationconfiguration":260,"POST /identity/identityproviders":393,"POST /identity/riskprevention/fraudprotectionproviders":369,"POST /identity/riskprevention/webapplicationfirewallproviders":369,"POST /identity/riskprevention/webapplicationfirewallproviders/{id}/verify":369,"POST /identity/userflowattributes":113,"POST /identity/verifiedid/profiles":406,"POST /identitygovernance/accessreviews/definitions":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/acceptrecommendations":6,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/applydecisions":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/batchrecorddecisions":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/resetdecisions":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/sendreminder":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/acceptrecommendations":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/batchrecorddecisions":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/stop":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stop":5,"POST /identitygovernance/accessreviews/historydefinitions":5,"POST /identitygovernance/accessreviews/historydefinitions/{id}/instances/{id}/generatedownloaduri":5,"POST /identitygovernance/accessreviews/unified/definitions":5,"POST /identitygovernance/accessreviews/unified/instances/{id}/batchapplycustomdataprovidedresourcedecisions":5,"POST /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackageresources/{id}/refresh":0,"POST /identitygovernance/entitlementmanagement/accesspackages":0,"POST /identitygovernance/entitlementmanagement/accesspackages/{id}/getapplicablepolicyrequirements":1,"POST /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatibleaccesspackages/$ref":0,"POST /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatiblegroups/$ref":0,"POST /identitygovernance/entitlementmanagement/accesspackages/{id}/resourcerolescopes":0,"POST /identitygovernance/entitlementmanagement/assignmentpolicies":0,"POST /identitygovernance/entitlementmanagement/assignmentrequests":338,"POST /identitygovernance/entitlementmanagement/assignmentrequests/{id}/cancel":3,"POST /identitygovernance/entitlementmanagement/assignmentrequests/{id}/reprocess":0,"POST /identitygovernance/entitlementmanagement/assignmentrequests/{id}/resume":0,"POST /identitygovernance/entitlementmanagement/assignments/{id}/reprocess":0,"POST /identitygovernance/entitlementmanagement/catalogs":0,"POST /identitygovernance/entitlementmanagement/catalogs/{id}/customworkflowextensions":0,"POST /identitygovernance/entitlementmanagement/catalogs/{id}/resources/{id}/uploadsessions":0,"POST /identitygovernance/entitlementmanagement/catalogs/{id}/resources/{id}/uploadsessions/{id}/uploadfile":0,"POST /identitygovernance/entitlementmanagement/connectedorganizations":0,"POST /identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors/$ref":0,"POST /identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors/$ref":0,"POST /identitygovernance/entitlementmanagement/externaloriginresourceconnectors":0,"POST /identitygovernance/entitlementmanagement/resourcerequests":0,"POST /identitygovernance/lifecycleworkflows/customtaskextensions":394,"POST /identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}/restore":396,"POST /identitygovernance/lifecycleworkflows/workflows":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/activate":403,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/activateandwait":403,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/cancelprocessing":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/createnewversion":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/previewtaskfailures":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/previewworkflow":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}/taskprocessingresults/{id}/resume":399,"POST /identitygovernance/privilegedaccess/group/assignmentschedulerequests":548,"POST /identitygovernance/privilegedaccess/group/assignmentschedulerequests/{id}/cancel":546,"POST /identitygovernance/privilegedaccess/group/eligibilityschedulerequests":549,"POST /identitygovernance/privilegedaccess/group/eligibilityschedulerequests/{id}/cancel":550,"POST /identitygovernance/termsofuse/agreements":57,"POST /identityprotection/riskyserviceprincipals/confirmcompromised":572,"POST /identityprotection/riskyserviceprincipals/dismiss":572,"POST /identityprotection/riskyusers/confirmcompromised":573,"POST /identityprotection/riskyusers/confirmsafe":573,"POST /identityprotection/riskyusers/dismiss":573,"POST /identityproviders":393,"POST /informationprotection/threatassessmentrequests":409,"POST /invitations":437,"POST /me/authentication/fido2methods":93,"POST /me/authentication/phonemethods/{id}/disablesmssignin":504,"POST /me/authentication/phonemethods/{id}/enablesmssignin":504,"POST /me/calendar/events":143,"POST /me/calendar/events/{id}/accept":143,"POST /me/calendar/events/{id}/attachments":143,"POST /me/calendar/events/{id}/cancel":143,"POST /me/calendar/events/{id}/decline":143,"POST /me/calendar/events/{id}/dismissreminder":143,"POST /me/calendar/events/{id}/forward":342,"POST /me/calendar/events/{id}/snoozereminder":143,"POST /me/calendar/events/{id}/tentativelyaccept":143,"POST /me/calendar/getschedule":145,"POST /me/calendargroups":143,"POST /me/calendargroups/{id}/calendars":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/accept":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/attachments":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/cancel":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/decline":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/dismissreminder":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/forward":342,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/snoozereminder":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/tentativelyaccept":143,"POST /me/calendars":143,"POST /me/calendars/{id}/events":143,"POST /me/calendars/{id}/events/{id}/accept":143,"POST /me/calendars/{id}/events/{id}/attachments":143,"POST /me/calendars/{id}/events/{id}/cancel":143,"POST /me/calendars/{id}/events/{id}/decline":143,"POST /me/calendars/{id}/events/{id}/dismissreminder":143,"POST /me/calendars/{id}/events/{id}/forward":342,"POST /me/calendars/{id}/events/{id}/snoozereminder":143,"POST /me/calendars/{id}/events/{id}/tentativelyaccept":143,"POST /me/changepassword":696,"POST /me/checkmembergroups":277,"POST /me/checkmemberobjects":277,"POST /me/cloudpcs/{id}/reprovision":227,"POST /me/contactfolders":241,"POST /me/contactfolders/{id}/childfolders":241,"POST /me/contactfolders/{id}/contacts":241,"POST /me/contacts":241,"POST /me/datasecurityandgovernance/activities/contentactivities":8,"POST /me/datasecurityandgovernance/processcontent":724,"POST /me/datasecurityandgovernance/protectionscopes/compute":727,"POST /me/drive/items/{id}/assignsensitivitylabel":295,"POST /me/drive/items/{id}/checkin":296,"POST /me/drive/items/{id}/checkout":296,"POST /me/drive/items/{id}/children":296,"POST /me/drive/items/{id}/copy":296,"POST /me/drive/items/{id}/createlink":296,"POST /me/drive/items/{id}/createuploadsession":297,"POST /me/drive/items/{id}/discardcheckout":296,"POST /me/drive/items/{id}/extractsensitivitylabels":298,"POST /me/drive/items/{id}/follow":293,"POST /me/drive/items/{id}/invite":296,"POST /me/drive/items/{id}/permissions":303,"POST /me/drive/items/{id}/permissions/{id}/revokegrants":296,"POST /me/drive/items/{id}/preview":293,"POST /me/drive/items/{id}/restore":305,"POST /me/drive/items/{id}/unfollow":293,"POST /me/drive/items/{id}/versions/{id}/restoreversion":296,"POST /me/drive/items/{id}/workbook/application/calculate":187,"POST /me/drive/items/{id}/workbook/closesession":187,"POST /me/drive/items/{id}/workbook/comments/{id}/replies":187,"POST /me/drive/items/{id}/workbook/createsession":187,"POST /me/drive/items/{id}/workbook/names/add":467,"POST /me/drive/items/{id}/workbook/names/{id}/range/clear":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/delete":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/format/autofitcolumns":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/format/autofitrows":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/format/borders":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/insert":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/merge":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/row":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/sort/apply":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/unmerge":187,"POST /me/drive/items/{id}/workbook/refreshsession":187,"POST /me/drive/items/{id}/workbook/tables/add":187,"POST /me/drive/items/{id}/workbook/tables/{id}/clearfilters":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/add":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/filter/apply":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/filter/clear":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/clear":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/delete":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/autofitcolumns":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/autofitrows":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/insert":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/merge":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/row":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/sort/apply":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/unmerge":187,"POST /me/drive/items/{id}/workbook/tables/{id}/converttorange":187,"POST /me/drive/items/{id}/workbook/tables/{id}/reapplyfilters":187,"POST /me/drive/items/{id}/workbook/tables/{id}/rows":187,"POST /me/drive/items/{id}/workbook/tables/{id}/rows/add":187,"POST /me/drive/items/{id}/workbook/tables/{id}/sort/apply":187,"POST /me/drive/items/{id}/workbook/tables/{id}/sort/clear":187,"POST /me/drive/items/{id}/workbook/tables/{id}/sort/reapply":187,"POST /me/drive/items/{id}/workbook/worksheets/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/format/fill/setsolidcolor":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend/format/fill/setsolidcolor":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/setdata":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/setposition":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title/format/fill/setsolidcolor":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/names/add":467,"POST /me/drive/items/{id}/workbook/worksheets/{id}/pivottables/refreshall":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/pivottables/{id}/refresh":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/protection/protect":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/protection/unprotect":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/delete":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/autofitcolumns":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/autofitrows":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/insert":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/merge":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/row":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/sort/apply":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/unmerge":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range/resizedrange(deltarows={id},deltacolumns={id})":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/clearfilters":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/apply":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/converttorange":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/reapplyfilters":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/apply":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/reapply":187,"POST /me/drive/items/{id}:/{id}:/createuploadsession":297,"POST /me/drive/root:/{id}:/assignsensitivitylabel":295,"POST /me/drive/root:/{id}:/extractsensitivitylabels":298,"POST /me/drive/root:/{id}:/workbook/application/calculate":187,"POST /me/drive/root:/{id}:/workbook/closesession":187,"POST /me/drive/root:/{id}:/workbook/comments/{id}/replies":187,"POST /me/drive/root:/{id}:/workbook/createsession":187,"POST /me/drive/root:/{id}:/workbook/names/add":467,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/clear":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/delete":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/format/autofitcolumns":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/format/autofitrows":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/insert":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/merge":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/row":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/unmerge":187,"POST /me/drive/root:/{id}:/workbook/refreshsession":187,"POST /me/drive/root:/{id}:/workbook/tables/add":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/clearfilters":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/add":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/filter/apply":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/filter/clear":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/clear":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/delete":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/autofitcolumns":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/autofitrows":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/insert":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/merge":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/row":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/unmerge":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/converttorange":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/reapplyfilters":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/rows":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/rows/add":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/sort/clear":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/sort/reapply":187,"POST /me/drive/root:/{id}:/workbook/worksheets/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/format/fill/setsolidcolor":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend/format/fill/setsolidcolor":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/setdata":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/setposition":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title/format/fill/setsolidcolor":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/names/add":467,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/refreshall":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/{id}/refresh":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/protection/protect":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/protection/unprotect":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/delete":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/autofitcolumns":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/autofitrows":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/insert":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/merge":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/row":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/unmerge":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range/resizedrange(deltarows={id},deltacolumns={id})":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/clearfilters":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/apply":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/converttorange":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/reapplyfilters":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/reapply":187,"POST /me/events":143,"POST /me/events/{id}/accept":143,"POST /me/events/{id}/attachments":143,"POST /me/events/{id}/attachments/createuploadsession":79,"POST /me/events/{id}/cancel":143,"POST /me/events/{id}/decline":143,"POST /me/events/{id}/dismissreminder":143,"POST /me/events/{id}/forward":342,"POST /me/events/{id}/snoozereminder":143,"POST /me/events/{id}/tentativelyaccept":143,"POST /me/findmeetingtimes":700,"POST /me/getmailtips":703,"POST /me/getmembergroups":279,"POST /me/getmemberobjects":277,"POST /me/inferenceclassification/overrides":343,"POST /me/mailfolders":343,"POST /me/mailfolders/inbox/messagerules":458,"POST /me/mailfolders/{id}/childfolders":343,"POST /me/mailfolders/{id}/childfolders/{id}/.../messages/{id}/attachments/{id}":343,"POST /me/mailfolders/{id}/copy":343,"POST /me/mailfolders/{id}/messages":343,"POST /me/mailfolders/{id}/messages/{id}/attachments":343,"POST /me/mailfolders/{id}/messages/{id}/copy":343,"POST /me/mailfolders/{id}/messages/{id}/createforward":343,"POST /me/mailfolders/{id}/messages/{id}/createreply":343,"POST /me/mailfolders/{id}/messages/{id}/createreplyall":343,"POST /me/mailfolders/{id}/messages/{id}/forward":459,"POST /me/mailfolders/{id}/messages/{id}/move":343,"POST /me/mailfolders/{id}/messages/{id}/permanentdelete":343,"POST /me/mailfolders/{id}/messages/{id}/reply":459,"POST /me/mailfolders/{id}/messages/{id}/replyall":459,"POST /me/mailfolders/{id}/move":343,"POST /me/mailfolders/{id}/permanentdelete":343,"POST /me/messages":343,"POST /me/messages/{id}/attachments":343,"POST /me/messages/{id}/attachments/createuploadsession":79,"POST /me/messages/{id}/copy":343,"POST /me/messages/{id}/createforward":343,"POST /me/messages/{id}/createreply":343,"POST /me/messages/{id}/createreplyall":343,"POST /me/messages/{id}/forward":459,"POST /me/messages/{id}/move":343,"POST /me/messages/{id}/permanentdelete":343,"POST /me/messages/{id}/reply":459,"POST /me/messages/{id}/replyall":459,"POST /me/messages/{id}/send":459,"POST /me/notes":468,"POST /me/notes/{id}/attachments":468,"POST /me/onenote/notebooks":470,"POST /me/onenote/notebooks/getnotebookfromweburl":471,"POST /me/onenote/notebooks/{id}/copynotebook":470,"POST /me/onenote/notebooks/{id}/sectiongroups":470,"POST /me/onenote/notebooks/{id}/sections":470,"POST /me/onenote/pages":470,"POST /me/onenote/pages/{id}/copytosection":470,"POST /me/onenote/sectiongroups/{id}/sectiongroups":470,"POST /me/onenote/sectiongroups/{id}/sections":470,"POST /me/onenote/sections/{id}/copytonotebook":470,"POST /me/onenote/sections/{id}/copytosectiongroup":470,"POST /me/onenote/sections/{id}/pages":470,"POST /me/onlinemeetings":74,"POST /me/onlinemeetings/createorget":74,"POST /me/onlinemeetings/{id}/sendvirtualappointmentremindersms":738,"POST /me/onlinemeetings/{id}/sendvirtualappointmentsms":738,"POST /me/outlook/mastercategories":458,"POST /me/presence/clearautomaticlocation":516,"POST /me/presence/clearlocation":516,"POST /me/presence/setautomaticlocation":516,"POST /me/presence/setmanuallocation":516,"POST /me/revokesigninsessions":721,"POST /me/sendmail":459,"POST /me/settings/workhoursandlocations/occurrences":221,"POST /me/settings/workhoursandlocations/occurrences/setcurrentlocation":221,"POST /me/settings/workhoursandlocations/recurrences":221,"POST /me/todo/lists":690,"POST /me/todo/lists/{id}/tasks":222,"POST /me/todo/lists/{id}/tasks/{id}/attachments":222,"POST /me/todo/lists/{id}/tasks/{id}/attachments/createuploadsession":222,"POST /me/todo/lists/{id}/tasks/{id}/checklistitems":222,"POST /me/todo/lists/{id}/tasks/{id}/linkedresources":222,"POST /me/translateexchangeids":722,"POST /oauth2permissiongrants":472,"POST /organization/{id}/branding/localizations":487,"POST /organization/{id}/certificatebasedauthconfiguration":160,"POST /organization/{id}/setmobiledevicemanagementauthority":427,"POST /places":141,"POST /places/{id}/building/ingestmapfile":141,"POST /places/{id}/checkins":221,"POST /planner/buckets":508,"POST /planner/plans":508,"POST /planner/tasks":508,"POST /policies/activitybasedtimeoutpolicies":9,"POST /policies/appmanagementpolicies":9,"POST /policies/authenticationstrengthpolicies":97,"POST /policies/authenticationstrengthpolicies/{id}/updateallowedcombinations":97,"POST /policies/claimsmappingpolicies":9,"POST /policies/crosstenantaccesspolicy/default/m365capabilities":258,"POST /policies/crosstenantaccesspolicy/default/resettosystemdefault":256,"POST /policies/crosstenantaccesspolicy/partners":256,"POST /policies/crosstenantaccesspolicy/partners/{id}/m365capabilities":258,"POST /policies/crosstenantaccesspolicy/templates/multitenantorganizationidentitysynchronization/resettodefaultsettings":256,"POST /policies/crosstenantaccesspolicy/templates/multitenantorganizationpartnerconfiguration/resettodefaultsettings":256,"POST /policies/featurerolloutpolicies":357,"POST /policies/featurerolloutpolicies/{id}/appliesto/$ref":358,"POST /policies/homerealmdiscoverypolicies":9,"POST /policies/permissiongrantpolicies":500,"POST /policies/permissiongrantpolicies/{id}/excludes":500,"POST /policies/permissiongrantpolicies/{id}/includes":500,"POST /print/printers/create":531,"POST /print/printers/{id}/jobs":537,"POST /print/printers/{id}/jobs/{id}/abort":542,"POST /print/printers/{id}/jobs/{id}/cancel":541,"POST /print/printers/{id}/jobs/{id}/documents/{id}/createuploadsession":529,"POST /print/printers/{id}/jobs/{id}/redirect":543,"POST /print/printers/{id}/restorefactorydefaults":532,"POST /print/printers/{id}/shares/{id}/allowedgroups/$ref":526,"POST /print/printers/{id}/tasktriggers":532,"POST /print/shares":526,"POST /print/shares/{id}/allowedusers/$ref":526,"POST /print/shares/{id}/jobs":541,"POST /print/shares/{id}/jobs/{id}/documents/{id}/createuploadsession":529,"POST /print/shares/{id}/jobs/{id}/start":537,"POST /print/taskdefinitions":519,"POST /privacy/subjectrightsrequests":629,"POST /privacy/subjectrightsrequests/{id}/notes":629,"POST /reports/partners/billing/reconciliation/billed/export":495,"POST /reports/partners/billing/reconciliation/unbilled/export":495,"POST /reports/partners/billing/usage/billed/export":495,"POST /reports/partners/billing/usage/unbilled/export":495,"POST /rolemanagement/directory/roleassignments":0,"POST /rolemanagement/directory/roleassignmentschedulerequests":563,"POST /rolemanagement/directory/roleassignmentschedulerequests/{id}/cancel":560,"POST /rolemanagement/directory/roledefinitions":564,"POST /rolemanagement/directory/roleeligibilityschedulerequests":562,"POST /rolemanagement/directory/roleeligibilityschedulerequests/{id}/cancel":562,"POST /rolemanagement/entitlementmanagement/roleassignments":0,"POST /schemaextensions":35,"POST /search/acronyms":578,"POST /search/bookmarks":578,"POST /search/qnas":578,"POST /search/query":579,"POST /security/alerts_v2/movealerts":581,"POST /security/alerts_v2/{id}/comments":582,"POST /security/attacksimulation/simulations":81,"POST /security/auditlog/queries":586,"POST /security/cases/ediscoverycases":591,"POST /security/cases/ediscoverycases/{id}/casemembers":591,"POST /security/cases/ediscoverycases/{id}/close":591,"POST /security/cases/ediscoverycases/{id}/custodians":591,"POST /security/cases/ediscoverycases/{id}/custodians/applyhold":591,"POST /security/cases/ediscoverycases/{id}/custodians/removehold":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/activate":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/applyhold":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/release":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/removehold":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/sitesources":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/unifiedgroupsources":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/updateindex":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/usersources":591,"POST /security/cases/ediscoverycases/{id}/legalholds":591,"POST /security/cases/ediscoverycases/{id}/legalholds/{id}/retrypolicy":590,"POST /security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources":591,"POST /security/cases/ediscoverycases/{id}/legalholds/{id}/usersources":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/applyhold":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/removehold":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/applyhold":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/release":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/removehold":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/updateindex":591,"POST /security/cases/ediscoverycases/{id}/reopen":591,"POST /security/cases/ediscoverycases/{id}/reviewsets":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/addtoreviewset":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/export":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/applytags":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/export":591,"POST /security/cases/ediscoverycases/{id}/searches":591,"POST /security/cases/ediscoverycases/{id}/searches/{id}/additionalsources":590,"POST /security/cases/ediscoverycases/{id}/searches/{id}/custodiansources/$ref":590,"POST /security/cases/ediscoverycases/{id}/searches/{id}/estimatestatistics":591,"POST /security/cases/ediscoverycases/{id}/searches/{id}/exportreport":591,"POST /security/cases/ediscoverycases/{id}/searches/{id}/exportresult":591,"POST /security/cases/ediscoverycases/{id}/searches/{id}/noncustodialsources/$ref":590,"POST /security/cases/ediscoverycases/{id}/searches/{id}/purgedata":590,"POST /security/cases/ediscoverycases/{id}/settings/resettodefault":590,"POST /security/cases/ediscoverycases/{id}/tags":591,"POST /security/collaboration/analyzedemails/remediate":584,"POST /security/datasecurityandgovernance/processcontentasync":671,"POST /security/datasecurityandgovernance/protectionscopes/compute":684,"POST /security/datasecurityandgovernance/sensitivitylabels/computerightsandinheritance":606,"POST /security/identities/identityaccounts/{id}/invokeaction":597,"POST /security/identities/sensorcandidateactivationconfigurations":600,"POST /security/identities/sensorcandidates/activate":600,"POST /security/identities/sensors/regeneratedeploymentaccesskey":600,"POST /security/incidents/mergeincidents":581,"POST /security/incidents/{id}/comments":602,"POST /security/labels/authorities":592,"POST /security/labels/categories":592,"POST /security/labels/categories/{id}/subcategories":592,"POST /security/labels/citations":592,"POST /security/labels/departments":592,"POST /security/labels/fileplanreferences":592,"POST /security/labels/retentionlabels":604,"POST /security/runhuntingquery":605,"POST /security/subjectrightsrequests":629,"POST /security/subjectrightsrequests/{id}/notes":629,"POST /security/triggers/retentionevents":592,"POST /security/triggertypes/retentioneventtypes":592,"POST /serviceprincipals":67,"POST /serviceprincipals(appid='{id}')/addkey":67,"POST /serviceprincipals(appid='{id}')/addpassword":67,"POST /serviceprincipals(appid='{id}')/addtokensigningcertificate":67,"POST /serviceprincipals(appid='{id}')/agentidentityblueprintprincipal/owners/$ref":30,"POST /serviceprincipals(appid='{id}')/delegatedpermissionclassifications":500,"POST /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps":77,"POST /serviceprincipals(appid='{id}')/removekey":67,"POST /serviceprincipals(appid='{id}')/removepassword":67,"POST /serviceprincipals/agentidentity":27,"POST /serviceprincipals/agentidentityblueprintprincipal":42,"POST /serviceprincipals/{id}/addkey":67,"POST /serviceprincipals/{id}/addpassword":67,"POST /serviceprincipals/{id}/addtokensigningcertificate":67,"POST /serviceprincipals/{id}/agentidentity/owners/$ref":22,"POST /serviceprincipals/{id}/agentidentity/sponsors/$ref":23,"POST /serviceprincipals/{id}/agentidentityblueprintprincipal/owners/$ref":30,"POST /serviceprincipals/{id}/checkmembergroups":277,"POST /serviceprincipals/{id}/checkmemberobjects":277,"POST /serviceprincipals/{id}/delegatedpermissionclassifications":500,"POST /serviceprincipals/{id}/getmembergroups":279,"POST /serviceprincipals/{id}/getmemberobjects":277,"POST /serviceprincipals/{id}/remotedesktopsecurityconfiguration":614,"POST /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps":77,"POST /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups":77,"POST /serviceprincipals/{id}/removekey":67,"POST /serviceprincipals/{id}/removepassword":67,"POST /serviceprincipals/{id}/synchronization/acquireaccesstoken":634,"POST /serviceprincipals/{id}/synchronization/jobs":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/bulkupload":636,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/pause":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/provisionondemand":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/restart":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/schema/directories/{id}/discover":633,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/schema/parseexpression":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/start":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/validatecredentials":634,"POST /serviceprincipals/{id}/synchronization/templates/{id}/schema/parseexpression":634,"POST /shares/{id}/driveitem/preview":293,"POST /shares/{id}/permission/grant":296,"POST /sites/{id}/columns":231,"POST /sites/{id}/contenttypes":231,"POST /sites/{id}/contenttypes/addcopyfromcontenttypehub":231,"POST /sites/{id}/contenttypes/{id}/associatewithhubsites":231,"POST /sites/{id}/contenttypes/{id}/columns":231,"POST /sites/{id}/contenttypes/{id}/copytodefaultcontentlocation":243,"POST /sites/{id}/contenttypes/{id}/publish":244,"POST /sites/{id}/contenttypes/{id}/unpublish":244,"POST /sites/{id}/drive/items/{id}/assignsensitivitylabel":295,"POST /sites/{id}/drive/items/{id}/checkin":296,"POST /sites/{id}/drive/items/{id}/checkout":296,"POST /sites/{id}/drive/items/{id}/children":296,"POST /sites/{id}/drive/items/{id}/copy":296,"POST /sites/{id}/drive/items/{id}/createlink":296,"POST /sites/{id}/drive/items/{id}/createuploadsession":297,"POST /sites/{id}/drive/items/{id}/discardcheckout":296,"POST /sites/{id}/drive/items/{id}/extractsensitivitylabels":298,"POST /sites/{id}/drive/items/{id}/follow":293,"POST /sites/{id}/drive/items/{id}/invite":296,"POST /sites/{id}/drive/items/{id}/permissions":303,"POST /sites/{id}/drive/items/{id}/permissions/{id}/revokegrants":296,"POST /sites/{id}/drive/items/{id}/preview":293,"POST /sites/{id}/drive/items/{id}/versions/{id}/restoreversion":296,"POST /sites/{id}/drive/items/{id}:/{id}:/createuploadsession":297,"POST /sites/{id}/drive/root:/{id}:/assignsensitivitylabel":295,"POST /sites/{id}/drive/root:/{id}:/extractsensitivitylabels":298,"POST /sites/{id}/items/{id}/versions/{id}/restoreversion":243,"POST /sites/{id}/lists":443,"POST /sites/{id}/lists/{id}/columns":231,"POST /sites/{id}/lists/{id}/contenttypes/addcopy":231,"POST /sites/{id}/lists/{id}/contenttypes/addcopyfromcontenttypehub":231,"POST /sites/{id}/lists/{id}/contenttypes/{id}/columns":231,"POST /sites/{id}/lists/{id}/items":123,"POST /sites/{id}/lists/{id}/items/{id}/documentsetversions":282,"POST /sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}/restore":282,"POST /sites/{id}/lists/{id}/items/{id}/driveitem/permissions/{id}/revokegrants":296,"POST /sites/{id}/lists/{id}/items/{id}/permissions":243,"POST /sites/{id}/lists/{id}/items/{id}/versions/{id}/restoreversion":243,"POST /sites/{id}/lists/{id}/permissions":243,"POST /sites/{id}/onenote/notebooks":470,"POST /sites/{id}/onenote/notebooks/getnotebookfromweburl":471,"POST /sites/{id}/onenote/notebooks/{id}/sectiongroups":470,"POST /sites/{id}/onenote/notebooks/{id}/sections":470,"POST /sites/{id}/onenote/pages":470,"POST /sites/{id}/onenote/sectiongroups/{id}/sectiongroups":470,"POST /sites/{id}/onenote/sectiongroups/{id}/sections":470,"POST /sites/{id}/onenote/sections/{id}/pages":470,"POST /sites/{id}/pages":123,"POST /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections":123,"POST /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts":123,"POST /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts":123,"POST /sites/{id}/pages/{id}/sitepage/publish":296,"POST /sites/{id}/permissions":244,"POST /sites/{id}/termstore/groups":686,"POST /sites/{id}/termstore/sets":686,"POST /sites/{id}/termstore/sets/{id}/children":686,"POST /sites/{id}/termstore/sets/{id}/terms/{id}/children":686,"POST /sites/{id}/termstore/sets/{id}/terms/{id}/relations":686,"POST /solutions/backuprestore/enable":115,"POST /solutions/backuprestore/exchangeprotectionpolicies":122,"POST /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules":122,"POST /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}/deleteandunprotect":122,"POST /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}/run":122,"POST /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxprotectionunitsbulkadditionjobs":118,"POST /solutions/backuprestore/exchangerestoresessions":117,"POST /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifactsbulkadditionrequests":117,"POST /solutions/backuprestore/onedriveforbusinessbrowsesessions":117,"POST /solutions/backuprestore/onedriveforbusinessbrowsesessions/{id}/browse":117,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies":122,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules":122,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}/deleteandunprotect":122,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}/run":122,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveprotectionunitsbulkadditionjobs":118,"POST /solutions/backuprestore/onedriveforbusinessrestoresessions":117,"POST /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifactsbulkadditionrequests":117,"POST /solutions/backuprestore/protectionpolicies/{id}/activate":122,"POST /solutions/backuprestore/protectionpolicies/{id}/deactivate":122,"POST /solutions/backuprestore/protectionunits/{id}/canceloffboard":556,"POST /solutions/backuprestore/protectionunits/{id}/offboard":556,"POST /solutions/backuprestore/restorepoints/search":119,"POST /solutions/backuprestore/restoresessions/{id}/activate":117,"POST /solutions/backuprestore/serviceapps":115,"POST /solutions/backuprestore/serviceapps/{id}/activate":330,"POST /solutions/backuprestore/serviceapps/{id}/deactivate":330,"POST /solutions/backuprestore/sharepointbrowsesessions":117,"POST /solutions/backuprestore/sharepointbrowsesessions/{id}/browse":117,"POST /solutions/backuprestore/sharepointprotectionpolicies":122,"POST /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules":122,"POST /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules/{id}/run":122,"POST /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteprotectionunitsbulkadditionjobs":118,"POST /solutions/backuprestore/sharepointrestoresessions":117,"POST /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifactsbulkadditionrequests":117,"POST /solutions/bookingbusinesses":129,"POST /solutions/bookingbusinesses/{id}/appointments":127,"POST /solutions/bookingbusinesses/{id}/appointments/{id}/cancel":126,"POST /solutions/bookingbusinesses/{id}/customers":135,"POST /solutions/bookingbusinesses/{id}/customquestions":126,"POST /solutions/bookingbusinesses/{id}/getstaffavailability":131,"POST /solutions/bookingbusinesses/{id}/publish":137,"POST /solutions/bookingbusinesses/{id}/services":136,"POST /solutions/bookingbusinesses/{id}/staffmembers":136,"POST /solutions/bookingbusinesses/{id}/unpublish":137,"POST /solutions/virtualevents/townhalls":740,"POST /solutions/virtualevents/townhalls/{id}/cancel":740,"POST /solutions/virtualevents/townhalls/{id}/presenters":740,"POST /solutions/virtualevents/townhalls/{id}/publish":740,"POST /solutions/virtualevents/townhalls/{id}/registrationconfiguration/questions":740,"POST /solutions/virtualevents/townhalls/{id}/registrations":748,"POST /solutions/virtualevents/townhalls/{id}/registrations/{id}/cancel":741,"POST /solutions/virtualevents/townhalls/{id}/setexternaleventinformation":740,"POST /solutions/virtualevents/webinars":740,"POST /solutions/virtualevents/webinars/{id}/cancel":740,"POST /solutions/virtualevents/webinars/{id}/presenters":740,"POST /solutions/virtualevents/webinars/{id}/publish":740,"POST /solutions/virtualevents/webinars/{id}/registrationconfiguration/questions":740,"POST /solutions/virtualevents/webinars/{id}/registrations":748,"POST /solutions/virtualevents/webinars/{id}/registrations/{id}/cancel":741,"POST /solutions/virtualevents/webinars/{id}/setexternaleventinformation":740,"POST /storage/filestorage/containers":366,"POST /storage/filestorage/containers/{id}/activate":366,"POST /storage/filestorage/containers/{id}/columns":366,"POST /storage/filestorage/containers/{id}/lock":363,"POST /storage/filestorage/containers/{id}/migrationjobs":366,"POST /storage/filestorage/containers/{id}/permanentdelete":363,"POST /storage/filestorage/containers/{id}/permissions":363,"POST /storage/filestorage/containers/{id}/provisionmigrationcontainers":366,"POST /storage/filestorage/containers/{id}/recyclebin/items/delete":366,"POST /storage/filestorage/containers/{id}/recyclebin/items/restore":366,"POST /storage/filestorage/containers/{id}/sharepointgroups":367,"POST /storage/filestorage/containers/{id}/sharepointgroups/{id}/members":367,"POST /storage/filestorage/containers/{id}/unlock":363,"POST /storage/filestorage/containertypes":365,"POST /storage/filestorage/deletedcontainers/{id}/restore":363,"POST /teams":651,"POST /teams/{id}/archive":639,"POST /teams/{id}/channels":184,"POST /teams/{id}/channels/{id}/archive":163,"POST /teams/{id}/channels/{id}/completemigration":164,"POST /teams/{id}/channels/{id}/enabledapps/$ref":165,"POST /teams/{id}/channels/{id}/members":166,"POST /teams/{id}/channels/{id}/messages":182,"POST /teams/{id}/channels/{id}/messages/{id}/replies":182,"POST /teams/{id}/channels/{id}/messages/{id}/replies/{id}/setreaction":219,"POST /teams/{id}/channels/{id}/messages/{id}/replies/{id}/softdelete":199,"POST /teams/{id}/channels/{id}/messages/{id}/replies/{id}/undosoftdelete":199,"POST /teams/{id}/channels/{id}/messages/{id}/replies/{id}/unsetreaction":219,"POST /teams/{id}/channels/{id}/messages/{id}/setreaction":219,"POST /teams/{id}/channels/{id}/messages/{id}/softdelete":199,"POST /teams/{id}/channels/{id}/messages/{id}/undosoftdelete":199,"POST /teams/{id}/channels/{id}/messages/{id}/unsetreaction":219,"POST /teams/{id}/channels/{id}/provisionemail":185,"POST /teams/{id}/channels/{id}/removeemail":185,"POST /teams/{id}/channels/{id}/startmigration":164,"POST /teams/{id}/channels/{id}/tabs":183,"POST /teams/{id}/channels/{id}/unarchive":163,"POST /teams/{id}/clone":640,"POST /teams/{id}/completemigration":164,"POST /teams/{id}/installedapps":650,"POST /teams/{id}/installedapps/{id}/upgrade":653,"POST /teams/{id}/members":252,"POST /teams/{id}/members/add":252,"POST /teams/{id}/members/remove":251,"POST /teams/{id}/schedule/daynotes":262,"POST /teams/{id}/schedule/offershiftrequests":162,"POST /teams/{id}/schedule/offershiftrequests/{id}/approve":162,"POST /teams/{id}/schedule/offershiftrequests/{id}/decline":162,"POST /teams/{id}/schedule/openshiftchangerequests":162,"POST /teams/{id}/schedule/openshiftchangerequests/{id}/approve":162,"POST /teams/{id}/schedule/openshiftchangerequests/{id}/decline":162,"POST /teams/{id}/schedule/openshifts":483,"POST /teams/{id}/schedule/openshifts/{id}/stagefordeletion":162,"POST /teams/{id}/schedule/schedulinggroups":162,"POST /teams/{id}/schedule/share":162,"POST /teams/{id}/schedule/shifts":162,"POST /teams/{id}/schedule/shifts/{id}/stagefordeletion":162,"POST /teams/{id}/schedule/swapshiftschangerequests":162,"POST /teams/{id}/schedule/swapshiftschangerequests/{id}/approve":162,"POST /teams/{id}/schedule/swapshiftschangerequests/{id}/decline":162,"POST /teams/{id}/schedule/timecards":262,"POST /teams/{id}/schedule/timecards/clockin":262,"POST /teams/{id}/schedule/timecards/{id}/clockout":262,"POST /teams/{id}/schedule/timecards/{id}/confirm":262,"POST /teams/{id}/schedule/timecards/{id}/endbreak":262,"POST /teams/{id}/schedule/timecards/{id}/startbreak":262,"POST /teams/{id}/schedule/timeoffreasons":162,"POST /teams/{id}/schedule/timeoffrequests":262,"POST /teams/{id}/schedule/timeoffrequests/{id}/approve":162,"POST /teams/{id}/schedule/timeoffrequests/{id}/decline":162,"POST /teams/{id}/schedule/timesoff":162,"POST /teams/{id}/schedule/timesoff/{id}/stagefordeletion":162,"POST /teams/{id}/sendactivitynotification":652,"POST /teams/{id}/tags":666,"POST /teams/{id}/tags/{id}/members":668,"POST /teams/{id}/unarchive":639,"POST /teamwork/deletedchats/{id}/undodelete":193,"POST /teamwork/sendactivitynotificationtorecipients":664,"POST /teamwork/workforceintegrations":753,"POST /tenantrelationships/delegatedadminrelationships":263,"POST /tenantrelationships/delegatedadminrelationships/{id}/accessassignments":263,"POST /tenantrelationships/delegatedadminrelationships/{id}/requests":263,"POST /tenantrelationships/multitenantorganization/tenants":464,"POST /users":719,"POST /users/agentuser":44,"POST /users/{id}/approleassignments":56,"POST /users/{id}/assignlicense":695,"POST /users/{id}/authentication/emailmethods":92,"POST /users/{id}/authentication/externalauthenticationmethods":84,"POST /users/{id}/authentication/fido2methods":93,"POST /users/{id}/authentication/methods/{id}/resetpassword":106,"POST /users/{id}/authentication/phonemethods":94,"POST /users/{id}/authentication/phonemethods/{id}/disablesmssignin":504,"POST /users/{id}/authentication/phonemethods/{id}/enablesmssignin":504,"POST /users/{id}/authentication/temporaryaccesspassmethods":91,"POST /users/{id}/calendar/events":143,"POST /users/{id}/calendar/events/{id}/accept":143,"POST /users/{id}/calendar/events/{id}/attachments":143,"POST /users/{id}/calendar/events/{id}/cancel":143,"POST /users/{id}/calendar/events/{id}/decline":143,"POST /users/{id}/calendar/events/{id}/dismissreminder":143,"POST /users/{id}/calendar/events/{id}/forward":342,"POST /users/{id}/calendar/events/{id}/snoozereminder":143,"POST /users/{id}/calendar/events/{id}/tentativelyaccept":143,"POST /users/{id}/calendar/getschedule":145,"POST /users/{id}/calendargroups":143,"POST /users/{id}/calendargroups/{id}/calendars":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/accept":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/attachments":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/cancel":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/decline":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/dismissreminder":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/forward":342,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/snoozereminder":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/tentativelyaccept":143,"POST /users/{id}/calendars":143,"POST /users/{id}/calendars/{id}/events":143,"POST /users/{id}/calendars/{id}/events/{id}/accept":143,"POST /users/{id}/calendars/{id}/events/{id}/attachments":143,"POST /users/{id}/calendars/{id}/events/{id}/cancel":143,"POST /users/{id}/calendars/{id}/events/{id}/decline":143,"POST /users/{id}/calendars/{id}/events/{id}/dismissreminder":143,"POST /users/{id}/calendars/{id}/events/{id}/forward":342,"POST /users/{id}/calendars/{id}/events/{id}/snoozereminder":143,"POST /users/{id}/calendars/{id}/events/{id}/tentativelyaccept":143,"POST /users/{id}/calendars/{id}/permanentdelete":143,"POST /users/{id}/calendarview/{id}/permanentdelete":143,"POST /users/{id}/chats/{id}/messages/{id}/softdelete":199,"POST /users/{id}/chats/{id}/messages/{id}/undosoftdelete":199,"POST /users/{id}/checkmembergroups":277,"POST /users/{id}/checkmemberobjects":277,"POST /users/{id}/cloudpcs/{id}/reprovision":227,"POST /users/{id}/contactfolders":241,"POST /users/{id}/contactfolders/{id}/childfolders":241,"POST /users/{id}/contactfolders/{id}/childfolders/{id}/permanentdelete":241,"POST /users/{id}/contactfolders/{id}/contacts":241,"POST /users/{id}/contactfolders/{id}/contacts/{id}/permanentdelete":241,"POST /users/{id}/contactfolders/{id}/permanentdelete":241,"POST /users/{id}/contacts":241,"POST /users/{id}/contacts/{id}/permanentdelete":241,"POST /users/{id}/datasecurityandgovernance/activities/contentactivities":8,"POST /users/{id}/datasecurityandgovernance/processcontent":724,"POST /users/{id}/datasecurityandgovernance/protectionscopes/compute":727,"POST /users/{id}/drive/items/{id}/assignsensitivitylabel":295,"POST /users/{id}/drive/items/{id}/checkin":296,"POST /users/{id}/drive/items/{id}/checkout":296,"POST /users/{id}/drive/items/{id}/children":296,"POST /users/{id}/drive/items/{id}/copy":296,"POST /users/{id}/drive/items/{id}/createlink":296,"POST /users/{id}/drive/items/{id}/createuploadsession":297,"POST /users/{id}/drive/items/{id}/discardcheckout":296,"POST /users/{id}/drive/items/{id}/extractsensitivitylabels":298,"POST /users/{id}/drive/items/{id}/follow":293,"POST /users/{id}/drive/items/{id}/invite":296,"POST /users/{id}/drive/items/{id}/permissions":303,"POST /users/{id}/drive/items/{id}/permissions/{id}/revokegrants":296,"POST /users/{id}/drive/items/{id}/preview":293,"POST /users/{id}/drive/items/{id}/unfollow":293,"POST /users/{id}/drive/items/{id}/versions/{id}/restoreversion":296,"POST /users/{id}/drive/items/{id}:/{id}:/createuploadsession":297,"POST /users/{id}/drive/root:/{id}:/assignsensitivitylabel":295,"POST /users/{id}/drive/root:/{id}:/extractsensitivitylabels":298,"POST /users/{id}/events":143,"POST /users/{id}/events/{id}/accept":143,"POST /users/{id}/events/{id}/attachments":143,"POST /users/{id}/events/{id}/attachments/createuploadsession":79,"POST /users/{id}/events/{id}/cancel":143,"POST /users/{id}/events/{id}/decline":143,"POST /users/{id}/events/{id}/dismissreminder":143,"POST /users/{id}/events/{id}/forward":342,"POST /users/{id}/events/{id}/permanentdelete":143,"POST /users/{id}/events/{id}/snoozereminder":143,"POST /users/{id}/events/{id}/tentativelyaccept":143,"POST /users/{id}/exportpersonaldata":699,"POST /users/{id}/findmeetingtimes":700,"POST /users/{id}/followedsites/add":123,"POST /users/{id}/followedsites/remove":123,"POST /users/{id}/getmailtips":703,"POST /users/{id}/getmembergroups":279,"POST /users/{id}/getmemberobjects":277,"POST /users/{id}/inferenceclassification/overrides":343,"POST /users/{id}/mailfolders":343,"POST /users/{id}/mailfolders/inbox/messagerules":458,"POST /users/{id}/mailfolders/{id}/childfolders":343,"POST /users/{id}/mailfolders/{id}/childfolders/{id}/messages/{id}/attachments/{id}":343,"POST /users/{id}/mailfolders/{id}/childfolders/{id}/permanentdelete":343,"POST /users/{id}/mailfolders/{id}/copy":343,"POST /users/{id}/mailfolders/{id}/messages":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/attachments":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/copy":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/createforward":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/createreply":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/createreplyall":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/forward":459,"POST /users/{id}/mailfolders/{id}/messages/{id}/move":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/permanentdelete":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/reply":459,"POST /users/{id}/mailfolders/{id}/messages/{id}/replyall":459,"POST /users/{id}/mailfolders/{id}/move":343,"POST /users/{id}/mailfolders/{id}/permanentdelete":343,"POST /users/{id}/manager/$ref":44,"POST /users/{id}/messages":343,"POST /users/{id}/messages/{id}/attachments":343,"POST /users/{id}/messages/{id}/attachments/createuploadsession":79,"POST /users/{id}/messages/{id}/copy":343,"POST /users/{id}/messages/{id}/createforward":343,"POST /users/{id}/messages/{id}/createreply":343,"POST /users/{id}/messages/{id}/createreplyall":343,"POST /users/{id}/messages/{id}/event/calendar/calendarview/{id}/permanentdelete":143,"POST /users/{id}/messages/{id}/event/calendar/events/{id}/permanentdelete":143,"POST /users/{id}/messages/{id}/event/exceptionoccurrences/{id}/permanentdelete":143,"POST /users/{id}/messages/{id}/event/instances/{id}/permanentdelete":143,"POST /users/{id}/messages/{id}/event/permanentdelete":143,"POST /users/{id}/messages/{id}/forward":459,"POST /users/{id}/messages/{id}/move":343,"POST /users/{id}/messages/{id}/permanentdelete":343,"POST /users/{id}/messages/{id}/reply":459,"POST /users/{id}/messages/{id}/replyall":459,"POST /users/{id}/messages/{id}/send":459,"POST /users/{id}/notes":468,"POST /users/{id}/notes/{id}/attachments":468,"POST /users/{id}/onenote/notebooks":470,"POST /users/{id}/onenote/notebooks/getnotebookfromweburl":471,"POST /users/{id}/onenote/notebooks/{id}/copynotebook":470,"POST /users/{id}/onenote/notebooks/{id}/sectiongroups":470,"POST /users/{id}/onenote/notebooks/{id}/sections":470,"POST /users/{id}/onenote/pages":470,"POST /users/{id}/onenote/pages/{id}/copytosection":470,"POST /users/{id}/onenote/sectiongroups/{id}/sectiongroups":470,"POST /users/{id}/onenote/sectiongroups/{id}/sections":470,"POST /users/{id}/onenote/sections/{id}/copytonotebook":470,"POST /users/{id}/onenote/sections/{id}/copytosectiongroup":470,"POST /users/{id}/onenote/sections/{id}/pages":470,"POST /users/{id}/onlinemeetings":74,"POST /users/{id}/onlinemeetings/createorget":74,"POST /users/{id}/onlinemeetings/{id}/sendvirtualappointmentremindersms":738,"POST /users/{id}/onlinemeetings/{id}/sendvirtualappointmentsms":738,"POST /users/{id}/outlook/mastercategories":458,"POST /users/{id}/presence/clearpresence":517,"POST /users/{id}/presence/clearuserpreferredpresence":517,"POST /users/{id}/presence/setpresence":517,"POST /users/{id}/presence/setstatusmessage":517,"POST /users/{id}/presence/setuserpreferredpresence":517,"POST /users/{id}/reprocesslicenseassignment":45,"POST /users/{id}/retryserviceprovisioning":720,"POST /users/{id}/revokesigninsessions":721,"POST /users/{id}/sendmail":459,"POST /users/{id}/settings/workhoursandlocations/occurrences":221,"POST /users/{id}/settings/workhoursandlocations/occurrences/setcurrentlocation":221,"POST /users/{id}/settings/workhoursandlocations/recurrences":221,"POST /users/{id}/solutions/workingtimeschedule/endworkingtime":759,"POST /users/{id}/solutions/workingtimeschedule/startworkingtime":759,"POST /users/{id}/sponsors/$ref":45,"POST /users/{id}/teamwork/deletetargetedmessage":192,"POST /users/{id}/teamwork/installedapps":733,"POST /users/{id}/teamwork/installedapps/{id}/upgrade":733,"POST /users/{id}/teamwork/sendactivitynotification":664,"POST /users/{id}/todo/lists":690,"POST /users/{id}/todo/lists/{id}/tasks":222,"POST /users/{id}/todo/lists/{id}/tasks/{id}/attachments":222,"POST /users/{id}/todo/lists/{id}/tasks/{id}/attachments/createuploadsession":222,"POST /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems":222,"POST /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources":222,"POST /users/{id}/translateexchangeids":722,"POST /users/{id}/wipemanagedappregistrationsbydevicetag":415,"PUT /applications(appid='{id}')/logo":68,"PUT /applications/{id}/logo":68,"PUT /applications/{id}/synchronization/templates/{id}/schema":637,"PUT /drives/{id}/items/{id}/content":296,"PUT /drives/{id}/items/{id}:/{id}:/content":296,"PUT /education/classes/{id}/assignments/{id}/gradingcategory/$ref":308,"PUT /education/classes/{id}/assignments/{id}/gradingscheme/$ref":308,"PUT /education/classes/{id}/assignments/{id}/rubric/$ref":308,"PUT /education/classes/{id}/assignmentsettings/defaultgradingscheme/$ref":308,"PUT /external/connections/{id}/items/{id}":352,"PUT /groups/{id}/drive/items/{id}/content":296,"PUT /groups/{id}/drive/items/{id}:/{id}:/content":296,"PUT /groups/{id}/photo/$value":554,"PUT /groups/{id}/team":372,"PUT /identity/b2xuserflows/{id}/apiconnectorconfiguration/{id}/$ref":113,"PUT /identity/b2xuserflows/{id}/languages/{id}/overridespages/{id}/$value":113,"PUT /identitygovernance/accessreviews/definitions/{id}":5,"PUT /identitygovernance/accessreviews/definitions/{id}/instances/{id}":5,"PUT /identitygovernance/entitlementmanagement/assignmentpolicies/{id}":0,"PUT /identitygovernance/entitlementmanagement/catalogs/{id}/customworkflowextensions/{id}":0,"PUT /identitygovernance/entitlementmanagement/controlconfigurations/endusersettings":0,"PUT /me/activities/{id}":555,"PUT /me/activities/{id}/historyitems/{id}":555,"PUT /me/authentication/qrcodepinmethod":95,"PUT /me/contactfolders/{id}/contacts/{id}/photo/$value":554,"PUT /me/contacts/{id}/photo/$value":554,"PUT /me/drive/items/{id}/content":296,"PUT /me/drive/items/{id}:/{id}:/content":296,"PUT /me/photo/$value":554,"PUT /me/settings/workhoursandlocations/occurrences/{id}":221,"PUT /me/settings/workhoursandlocations/recurrences/{id}":221,"PUT /organization/{id}/branding/localizations/{id}/{id}":487,"PUT /policies/adminconsentrequestpolicy":14,"PUT /policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization":256,"PUT /policies/deviceregistrationpolicy":273,"PUT /serviceprincipals/{id}/synchronization/jobs/{id}/schema":637,"PUT /serviceprincipals/{id}/synchronization/secrets":634,"PUT /sites/{id}/drive/items/{id}/content":296,"PUT /sites/{id}/drive/items/{id}:/{id}:/content":296,"PUT /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection":123,"PUT /storage/filestorage/containertyperegistrations/{id}":364,"PUT /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants/{id}":364,"PUT /teams/{id}/photo/$value":554,"PUT /teams/{id}/schedule":162,"PUT /teams/{id}/schedule/daynotes/{id}":262,"PUT /teams/{id}/schedule/openshifts/{id}":162,"PUT /teams/{id}/schedule/schedulinggroups/{id}":162,"PUT /teams/{id}/schedule/shifts/{id}":162,"PUT /teams/{id}/schedule/timecards/{id}":262,"PUT /teams/{id}/schedule/timeoffreasons/{id}":162,"PUT /teams/{id}/schedule/timesoff/{id}":689,"PUT /tenantrelationships/multitenantorganization":464,"PUT /users/{id}/authentication/qrcodepinmethod":95,"PUT /users/{id}/contactfolders/{id}/contacts/{id}/photo/$value":554,"PUT /users/{id}/contacts/{id}/photo/$value":554,"PUT /users/{id}/drive/items/{id}/content":296,"PUT /users/{id}/drive/items/{id}:/{id}:/content":296,"PUT /users/{id}/manager/$ref":45,"PUT /users/{id}/photo/$value":554,"PUT /users/{id}/settings/workhoursandlocations/occurrences/{id}":221,"PUT /users/{id}/settings/workhoursandlocations/recurrences/{id}":221},"beta":{"DELETE /accessreviews/{id}":763,"DELETE /accessreviews/{id}/reviewers/{id}":763,"DELETE /admin/cloudlicensing/allotments/{id}/assignments/{id}":828,"DELETE /admin/cloudlicensing/assignments/{id}":828,"DELETE /admin/configurationmanagement/configurationmonitors/{id}":239,"DELETE /admin/configurationmanagement/configurationsnapshotjobs/{id}":239,"DELETE /admin/edge/internetexplorermode/sitelists/{id}":140,"DELETE /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies/{id}":140,"DELETE /admin/edge/internetexplorermode/sitelists/{id}/sites/{id}":140,"DELETE /admin/exchange/mailboxes/{id}/folders/{id}/$ref":450,"DELETE /admin/exchange/mailboxes/{id}/folders/{id}/childfolders/{id}/$ref":450,"DELETE /admin/exchange/mailboxes/{id}/folders/{id}/items/{id}":453,"DELETE /admin/people/profilecardproperties/{id}":499,"DELETE /admin/people/profilepropertysettings/{id}":413,"DELETE /admin/people/profilesources(sourceid='{id}')":413,"DELETE /admin/windows/updates/deploymentaudiences/{id}":781,"DELETE /admin/windows/updates/deployments/{id}":781,"DELETE /admin/windows/updates/policies/{id}":781,"DELETE /admin/windows/updates/policies/{id}/approvals/{id}":781,"DELETE /admin/windows/updates/policies/{id}/rings/{id}":781,"DELETE /admin/windows/updates/resourceconnections/{id}":781,"DELETE /admin/windows/updates/updatableassets/{id}":781,"DELETE /admin/windows/updates/updatepolicies/{id}":781,"DELETE /admin/windows/updates/updatepolicies/{id}/compliancechanges/{id}":781,"DELETE /administrativeunits/{id}":15,"DELETE /administrativeunits/{id}/members/{id}/$ref":15,"DELETE /administrativeunits/{id}/scopedrolemembers/{id}":16,"DELETE /agentregistry/agentcollections/{id}":791,"DELETE /agentregistry/agentinstances/{id}":790,"DELETE /agentregistry/agentinstances/{id}/collections/{id}/members/{id}/$ref":784,"DELETE /app/calls/{id}":150,"DELETE /app/calls/{id}/audioroutinggroups/{id}":83,"DELETE /app/calls/{id}/participants/{id}":149,"DELETE /appcatalogs/teamsapps/{id}":658,"DELETE /applications(appid='{id}')":68,"DELETE /applications(appid='{id}')/extensionproperties/{id}":67,"DELETE /applications(appid='{id}')/federatedidentitycredentials/{id}":68,"DELETE /applications(appid='{id}')/owners/{id}/$ref":67,"DELETE /applications/{id}":68,"DELETE /applications/{id}/agentidentityblueprint":31,"DELETE /applications/{id}/agentidentityblueprint/federatedidentitycredentials/{id}":68,"DELETE /applications/{id}/agentidentityblueprint/inheritablepermissions/{id}":30,"DELETE /applications/{id}/agentidentityblueprint/owners/{id}/$ref":30,"DELETE /applications/{id}/extensionproperties/{id}":67,"DELETE /applications/{id}/federatedidentitycredentials/{id}":68,"DELETE /applications/{id}/onpremisespublishing/segmentsconfiguration/ipsegmentconfiguration/applicationsegments/{id}":935,"DELETE /applications/{id}/owners/{id}/$ref":67,"DELETE /applications/{id}/synchronization/templates/{id}/schema":637,"DELETE /chats/{id}":193,"DELETE /chats/{id}/installedapps/{id}":188,"DELETE /chats/{id}/members/{id}":189,"DELETE /chats/{id}/pinnedmessages/{id}":190,"DELETE /chats/{id}/tabs/{id}":191,"DELETE /communications/calls/{id}":150,"DELETE /communications/calls/{id}/audioroutinggroups/{id}":83,"DELETE /communications/calls/{id}/participants/{id}":149,"DELETE /compliance/ediscovery/cases/{id}":591,"DELETE /compliance/ediscovery/cases/{id}/custodians/{id}/sitesources/{id}":591,"DELETE /compliance/ediscovery/cases/{id}/custodians/{id}/unifiedgroupsources/{id}":865,"DELETE /compliance/ediscovery/cases/{id}/custodians/{id}/usersources/{id}":591,"DELETE /compliance/ediscovery/cases/{id}/legalholds/{id}":591,"DELETE /compliance/ediscovery/cases/{id}/reviewsets/{id}/queries/{id}":591,"DELETE /compliance/ediscovery/cases/{id}/sourcecollections/{id}":591,"DELETE /compliance/ediscovery/cases/{id}/tags/{id}":591,"DELETE /deviceappmanagement/androidmanagedappprotections/{id}":418,"DELETE /deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}":418,"DELETE /deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}":418,"DELETE /deviceappmanagement/defaultmanagedappprotections/{id}":418,"DELETE /deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}":418,"DELETE /deviceappmanagement/deviceappmanagementtasks/{id}":415,"DELETE /deviceappmanagement/enterprisecodesigningcertificates/{id}":418,"DELETE /deviceappmanagement/ioslobappprovisioningconfigurations/{id}":415,"DELETE /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/devicestatuses/{id}":418,"DELETE /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/groupassignments/{id}":415,"DELETE /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/userstatuses/{id}":418,"DELETE /deviceappmanagement/iosmanagedappprotections/{id}":418,"DELETE /deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}":418,"DELETE /deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}":418,"DELETE /deviceappmanagement/managedappregistrations/{id}":418,"DELETE /deviceappmanagement/managedappregistrations/{id}/managedapplogcollectionrequests/{id}":418,"DELETE /deviceappmanagement/managedappregistrations/{id}/operations/{id}":415,"DELETE /deviceappmanagement/managedebookcategories/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}/categories/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}/devicestates/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}":415,"DELETE /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates/{id}":415,"DELETE /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}":415,"DELETE /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}":418,"DELETE /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":415,"DELETE /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":415,"DELETE /deviceappmanagement/mobileappcategories/{id}":415,"DELETE /deviceappmanagement/mobileappconfigurations/{id}":415,"DELETE /deviceappmanagement/mobileappconfigurations/{id}/assignments/{id}":418,"DELETE /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses/{id}":418,"DELETE /deviceappmanagement/mobileappconfigurations/{id}/userstatuses/{id}":418,"DELETE /deviceappmanagement/mobileapprelationships/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}":415,"DELETE /deviceappmanagement/mobileapps/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/mobileapps/{id}/categories/{id}":415,"DELETE /deviceappmanagement/mobileapps/{id}/contentversions/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/contentversions/{id}/scripts/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/devicestatuses/{id}":415,"DELETE /deviceappmanagement/mobileapps/{id}/iosvppapp/assignedlicenses/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/macosvppapp/assignedlicenses/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/microsoftstoreforbusinessapp/containedapps/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/relationships/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/targetassignments/{id}":418,"DELETE /deviceappmanagement/mobileapps/{id}/userstatuses/{id}":415,"DELETE /deviceappmanagement/mobileapps/{id}/userstatuses/{id}/devicestatuses/{id}":415,"DELETE /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps/{id}":418,"DELETE /deviceappmanagement/policysets/{id}":419,"DELETE /deviceappmanagement/policysets/{id}/assignments/{id}":419,"DELETE /deviceappmanagement/policysets/{id}/items/{id}":419,"DELETE /deviceappmanagement/sideloadingkeys/{id}":427,"DELETE /deviceappmanagement/targetedmanagedappconfigurations/{id}":418,"DELETE /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}":418,"DELETE /deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}":418,"DELETE /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}":418,"DELETE /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions/{id}":418,"DELETE /deviceappmanagement/vpptokens/{id}":431,"DELETE /deviceappmanagement/wdacsupplementalpolicies/{id}":415,"DELETE /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments/{id}":415,"DELETE /deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}":415,"DELETE /deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}/policy":415,"DELETE /deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}":418,"DELETE /deviceappmanagement/windowsinformationprotectionpolicies/{id}":415,"DELETE /deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}":418,"DELETE /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":415,"DELETE /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":415,"DELETE /deviceappmanagement/windowsinformationprotectionwipeactions/{id}":415,"DELETE /deviceappmanagement/windowsmanagedappprotections/{id}":418,"DELETE /deviceappmanagement/windowsmanagedappprotections/{id}/apps/{id}":418,"DELETE /deviceappmanagement/windowsmanagedappprotections/{id}/assignments/{id}":418,"DELETE /deviceappmanagement/windowsmanagementapp/healthstates/{id}":429,"DELETE /devicemanagement/advancedthreatprotectiononboardingstatesummary/advancedthreatprotectiononboardingdevicesettingstates/{id}":419,"DELETE /devicemanagement/androiddeviceownerenrollmentprofiles/{id}":419,"DELETE /devicemanagement/androidforworkappconfigurationschemas/{id}":419,"DELETE /devicemanagement/androidforworkenrollmentprofiles/{id}":419,"DELETE /devicemanagement/androidmanagedstoreappconfigurationschemas/{id}":419,"DELETE /devicemanagement/appleuserinitiatedenrollmentprofiles/{id}":422,"DELETE /devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/assignments/{id}":422,"DELETE /devicemanagement/assignmentfilters/{id}":419,"DELETE /devicemanagement/auditevents/{id}":415,"DELETE /devicemanagement/auditpolicies/{id}/settings/{id}":419,"DELETE /devicemanagement/autopilotevents/{id}":429,"DELETE /devicemanagement/autopilotevents/{id}/policystatusdetails/{id}":424,"DELETE /devicemanagement/carttoclassassociations/{id}":422,"DELETE /devicemanagement/categories/{id}":419,"DELETE /devicemanagement/categories/{id}/settingdefinitions/{id}":419,"DELETE /devicemanagement/certificateconnectordetails/{id}":419,"DELETE /devicemanagement/chromeosonboardingsettings/{id}":419,"DELETE /devicemanagement/cloudcertificationauthority/{id}":419,"DELETE /devicemanagement/cloudcertificationauthority/{id}/cloudcertificationauthorityleafcertificate/{id}":419,"DELETE /devicemanagement/cloudcertificationauthorityleafcertificate/{id}":419,"DELETE /devicemanagement/cloudpcconnectivityissues/{id}":429,"DELETE /devicemanagement/comanageddevices/{id}":424,"DELETE /devicemanagement/comanagementeligibledevices/{id}":429,"DELETE /devicemanagement/compliancecategories/{id}":419,"DELETE /devicemanagement/compliancemanagementpartners/{id}":427,"DELETE /devicemanagement/compliancepolicies/{id}":419,"DELETE /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}":419,"DELETE /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}":419,"DELETE /devicemanagement/compliancepolicies/{id}/settings/{id}":419,"DELETE /devicemanagement/compliancesettings/{id}":419,"DELETE /devicemanagement/configmanagercollections/{id}":415,"DELETE /devicemanagement/configurationcategories/{id}":419,"DELETE /devicemanagement/configurationpolicies/{id}":921,"DELETE /devicemanagement/configurationpolicies/{id}/settings/{id}":419,"DELETE /devicemanagement/configurationpolicies/{id}/settings/{id}/settingdefinitions/{id}":419,"DELETE /devicemanagement/configurationpolicytemplates/{id}":419,"DELETE /devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}":419,"DELETE /devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}/settingdefinitions/{id}":419,"DELETE /devicemanagement/configurationsettings/{id}":419,"DELETE /devicemanagement/datasharingconsents/{id}":427,"DELETE /devicemanagement/deploymentplans/{id}":419,"DELETE /devicemanagement/deployments/{id}":419,"DELETE /devicemanagement/deployments/{id}/rings/{id}":419,"DELETE /devicemanagement/deployments/{id}/rings/{id}/assignmentconfigurations/{id}":419,"DELETE /devicemanagement/deponboardingsettings/{id}":422,"DELETE /devicemanagement/deponboardingsettings/{id}/defaultiosenrollmentprofile":427,"DELETE /devicemanagement/deponboardingsettings/{id}/defaultmacosenrollmentprofile":427,"DELETE /devicemanagement/deponboardingsettings/{id}/defaulttvosenrollmentprofile":427,"DELETE /devicemanagement/deponboardingsettings/{id}/defaultvisionosenrollmentprofile":427,"DELETE /devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}":422,"DELETE /devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities/{id}":422,"DELETE /devicemanagement/derivedcredentials/{id}":422,"DELETE /devicemanagement/detectedapps/{id}":429,"DELETE /devicemanagement/devicecategories/{id}":429,"DELETE /devicemanagement/devicecompliancepolicies/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/assignments/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/devicestatuses/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}":419,"DELETE /devicemanagement/devicecompliancepolicies/{id}/userstatuses/{id}":419,"DELETE /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}":419,"DELETE /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates/{id}":419,"DELETE /devicemanagement/devicecompliancescripts/{id}":926,"DELETE /devicemanagement/devicecompliancescripts/{id}/assignments/{id}":420,"DELETE /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}":429,"DELETE /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice":424,"DELETE /devicemanagement/deviceconfigurationconflictsummary/{id}":419,"DELETE /devicemanagement/deviceconfigurationrestrictedappsviolations/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidcertificateprofilebase/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androiddeviceownercertificateprofilebase/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/rootcertificateforservervalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/rootcertificatesforservervalidation/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androiddeviceownerimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androiddeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androiddeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidenterprisewificonfiguration/rootcertificateforservervalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidforworkcertificateprofilebase/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidforworkenterprisewificonfiguration/rootcertificateforservervalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidforworkimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidforworkpkcscertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidforworkscepcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidpkcscertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidscepcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidworkprofilecertificateprofilebase/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidworkprofileenterprisewificonfiguration/rootcertificateforservervalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidworkprofilepkcscertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/androidworkprofilescepcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/aospdeviceownercertificateprofilebase/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/aospdeviceownerenterprisewificonfiguration/rootcertificateforservervalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/aospdeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/aospdeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/assignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/devicestatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iospkcscertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/assignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicestatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/groupassignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/userstatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/ioswirednetworkconfiguration/rootcertificateforservervalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/ioswirednetworkconfiguration/rootcertificatesforservervalidation/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosenterprisewificonfiguration/rootcertificateforservervalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macospkcscertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/assignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicestatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/groupassignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/userstatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macoswirednetworkconfiguration/rootcertificateforservervalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/macoswirednetworkconfiguration/rootcertificatesforservervalidation/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/rootcertificate/assignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/rootcertificate/groupassignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/userstatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windows10generalconfiguration/privacyaccesscontrols/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/assignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicestatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/groupassignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/userstatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/assignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/groupassignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10importedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10pkcscertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows81scepcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows81scepcertificateprofile/rootcertificate":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windowsphone81importedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificateforclientvalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/assignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/groupassignments/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatuses/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/rootcertificateforclientvalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/rootcertificatesforservervalidation/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/secondaryrootcertificateforclientvalidation":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforclientvalidation/{id}":419,"DELETE /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforservervalidation/{id}":419,"DELETE /devicemanagement/deviceconfigurationsallmanageddevicecertificatestates/{id}":419,"DELETE /devicemanagement/devicecustomattributeshellscripts/{id}":926,"DELETE /devicemanagement/devicecustomattributeshellscripts/{id}/assignments/{id}":429,"DELETE /devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates/{id}":429,"DELETE /devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments/{id}":429,"DELETE /devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates/{id}":429,"DELETE /devicemanagement/deviceenrollmentconfigurations/{id}":427,"DELETE /devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}":427,"DELETE /devicemanagement/devicehealthscripts/{id}":926,"DELETE /devicemanagement/devicehealthscripts/{id}/assignments/{id}":420,"DELETE /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}":420,"DELETE /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice":424,"DELETE /devicemanagement/devicemanagementpartners/{id}":427,"DELETE /devicemanagement/devicemanagementscripts/{id}":926,"DELETE /devicemanagement/devicemanagementscripts/{id}/assignments/{id}":429,"DELETE /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}":429,"DELETE /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice":424,"DELETE /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}":429,"DELETE /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}":424,"DELETE /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicehealthscriptstates/{id}":420,"DELETE /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}":429,"DELETE /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}":429,"DELETE /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}":424,"DELETE /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate/{id}":429,"DELETE /devicemanagement/devicemanagementscripts/{id}/groupassignments/{id}":429,"DELETE /devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}":429,"DELETE /devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates/{id}":429,"DELETE /devicemanagement/deviceshellscripts/{id}":926,"DELETE /devicemanagement/deviceshellscripts/{id}/assignments/{id}":429,"DELETE /devicemanagement/deviceshellscripts/{id}/devicerunstates/{id}":429,"DELETE /devicemanagement/deviceshellscripts/{id}/groupassignments/{id}":429,"DELETE /devicemanagement/deviceshellscripts/{id}/userrunstates/{id}":429,"DELETE /devicemanagement/domainjoinconnectors/{id}":419,"DELETE /devicemanagement/elevationrequests/{id}":419,"DELETE /devicemanagement/embeddedsimactivationcodepools/{id}":419,"DELETE /devicemanagement/embeddedsimactivationcodepools/{id}/assignments/{id}":419,"DELETE /devicemanagement/embeddedsimactivationcodepools/{id}/devicestates/{id}":419,"DELETE /devicemanagement/exchangeconnectors/{id}":427,"DELETE /devicemanagement/grouppolicycategories/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/assignments/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/definition":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/definitionvalue":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/children/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitions/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/parent":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/definitions/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/grouppolicyuploadeddefinitionfile/grouppolicyoperations/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/nextversiondefinition":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/presentations/{id}":419,"DELETE /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/previousversiondefinition":419,"DELETE /devicemanagement/grouppolicydefinitions/{id}":419,"DELETE /devicemanagement/grouppolicymigrationreports/{id}":419,"DELETE /devicemanagement/grouppolicymigrationreports/{id}/grouppolicysettingmappings/{id}":419,"DELETE /devicemanagement/grouppolicymigrationreports/{id}/unsupportedgrouppolicyextensions/{id}":419,"DELETE /devicemanagement/grouppolicyobjectfiles/{id}":419,"DELETE /devicemanagement/grouppolicyuploadeddefinitionfiles/{id}":419,"DELETE /devicemanagement/hardwareconfigurations/{id}":419,"DELETE /devicemanagement/hardwareconfigurations/{id}/assignments/{id}":419,"DELETE /devicemanagement/hardwareconfigurations/{id}/devicerunstates/{id}":419,"DELETE /devicemanagement/hardwareconfigurations/{id}/userrunstates/{id}":419,"DELETE /devicemanagement/hardwarepassworddetails/{id}":426,"DELETE /devicemanagement/hardwarepasswordinfo/{id}":419,"DELETE /devicemanagement/importeddeviceidentities/{id}":422,"DELETE /devicemanagement/importedwindowsautopilotdeviceidentities/{id}":422,"DELETE /devicemanagement/intents/{id}":419,"DELETE /devicemanagement/intents/{id}/assignments/{id}":419,"DELETE /devicemanagement/intents/{id}/categories/{id}":419,"DELETE /devicemanagement/intents/{id}/categories/{id}/settingdefinitions/{id}":419,"DELETE /devicemanagement/intents/{id}/categories/{id}/settings/{id}":419,"DELETE /devicemanagement/intents/{id}/devicesettingstatesummaries/{id}":419,"DELETE /devicemanagement/intents/{id}/devicestates/{id}":419,"DELETE /devicemanagement/intents/{id}/settings/{id}":419,"DELETE /devicemanagement/intents/{id}/userstates/{id}":419,"DELETE /devicemanagement/intunebrandingprofiles/{id}":422,"DELETE /devicemanagement/intunebrandingprofiles/{id}/assignments/{id}":415,"DELETE /devicemanagement/inventorycategories/{id}":419,"DELETE /devicemanagement/inventorypolicies/{id}/settings/{id}":419,"DELETE /devicemanagement/inventorysettings/{id}":419,"DELETE /devicemanagement/iosupdatestatuses/{id}":419,"DELETE /devicemanagement/macossoftwareupdateaccountsummaries/{id}":419,"DELETE /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}":419,"DELETE /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}/updatestatesummaries/{id}":419,"DELETE /devicemanagement/manageddevicecleanuprules/{id}":424,"DELETE /devicemanagement/manageddeviceencryptionstates/{id}":419,"DELETE /devicemanagement/manageddevices/{id}":424,"DELETE /devicemanagement/microsofttunnelconfigurations/{id}":419,"DELETE /devicemanagement/microsofttunnelhealththresholds/{id}":419,"DELETE /devicemanagement/microsofttunnelserverlogcollectionresponses/{id}":419,"DELETE /devicemanagement/microsofttunnelsites/{id}":419,"DELETE /devicemanagement/microsofttunnelsites/{id}/microsofttunnelconfiguration":419,"DELETE /devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}":419,"DELETE /devicemanagement/mobileapptroubleshootingevents/{id}":429,"DELETE /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}":429,"DELETE /devicemanagement/mobilethreatdefenseconnectors/{id}":422,"DELETE /devicemanagement/ndesconnectors/{id}":422,"DELETE /devicemanagement/notificationmessagetemplates/{id}":419,"DELETE /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages/{id}":419,"DELETE /devicemanagement/operationapprovalpolicies/{id}":434,"DELETE /devicemanagement/operationapprovalrequests/{id}":931,"DELETE /devicemanagement/privilegemanagementelevations/{id}":429,"DELETE /devicemanagement/remoteactionaudits/{id}":429,"DELETE /devicemanagement/remoteassistancepartners/{id}":427,"DELETE /devicemanagement/reports/cachedreportconfigurations/{id}":435,"DELETE /devicemanagement/reports/exportjobs/{id}":435,"DELETE /devicemanagement/reports/reportschedules/{id}":435,"DELETE /devicemanagement/resourceaccessprofiles/{id}":422,"DELETE /devicemanagement/resourceaccessprofiles/{id}/assignments/{id}":422,"DELETE /devicemanagement/resourceoperations/{id}":931,"DELETE /devicemanagement/reusablepolicysettings/{id}":921,"DELETE /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}":921,"DELETE /devicemanagement/reusablesettings/{id}":419,"DELETE /devicemanagement/roleassignments/{id}":433,"DELETE /devicemanagement/roledefinitions/{id}":433,"DELETE /devicemanagement/roledefinitions/{id}/roleassignments/{id}":433,"DELETE /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/{id}":433,"DELETE /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/{id}/assignments/{id}":433,"DELETE /devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition":433,"DELETE /devicemanagement/rolescopetags/{id}":433,"DELETE /devicemanagement/settingdefinitions/{id}":419,"DELETE /devicemanagement/targetpayloadassignments/{id}":419,"DELETE /devicemanagement/templateinsights/{id}":419,"DELETE /devicemanagement/templates/{id}":419,"DELETE /devicemanagement/templates/{id}/categories/{id}":419,"DELETE /devicemanagement/templates/{id}/categories/{id}/recommendedsettings/{id}":419,"DELETE /devicemanagement/templates/{id}/categories/{id}/settingdefinitions/{id}":419,"DELETE /devicemanagement/templates/{id}/migratableto/{id}":419,"DELETE /devicemanagement/templates/{id}/securitybaselinetemplate/categorydevicestatesummaries/{id}":419,"DELETE /devicemanagement/templates/{id}/securitybaselinetemplate/devicestates/{id}":419,"DELETE /devicemanagement/templates/{id}/settings/{id}":419,"DELETE /devicemanagement/templatesettings/{id}":419,"DELETE /devicemanagement/termsandconditions/{id}":422,"DELETE /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}":422,"DELETE /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}/termsandconditions":422,"DELETE /devicemanagement/termsandconditions/{id}/assignments/{id}":422,"DELETE /devicemanagement/termsandconditions/{id}/groupassignments/{id}":422,"DELETE /devicemanagement/termsandconditions/{id}/groupassignments/{id}/termsandconditions":422,"DELETE /devicemanagement/troubleshootingevents/{id}":429,"DELETE /devicemanagement/userpfxcertificates/{id}":419,"DELETE /devicemanagement/virtualendpoint/cloudapps/{id}":227,"DELETE /devicemanagement/virtualendpoint/cloudpcpools/{id}":227,"DELETE /devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments/{id}":227,"DELETE /devicemanagement/virtualendpoint/deviceimages/{id}":227,"DELETE /devicemanagement/virtualendpoint/onpremisesconnections/{id}":230,"DELETE /devicemanagement/virtualendpoint/provisioningpolicies/{id}":227,"DELETE /devicemanagement/virtualendpoint/usersettings/{id}":227,"DELETE /devicemanagement/windowsautopilotdeploymentprofiles/{id}":422,"DELETE /devicemanagement/windowsautopilotdeviceidentities/{id}":422,"DELETE /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile":422,"DELETE /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}":422,"DELETE /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assignments/{id}":427,"DELETE /devicemanagement/windowsautopilotdeviceidentities/{id}/intendeddeploymentprofile":422,"DELETE /devicemanagement/windowsdriverupdateprofiles/{id}":419,"DELETE /devicemanagement/windowsdriverupdateprofiles/{id}/assignments/{id}":419,"DELETE /devicemanagement/windowsdriverupdateprofiles/{id}/driverinventories/{id}":419,"DELETE /devicemanagement/windowsfeatureupdateprofiles/{id}":419,"DELETE /devicemanagement/windowsfeatureupdateprofiles/{id}/assignments/{id}":419,"DELETE /devicemanagement/windowsinformationprotectionapplearningsummaries/{id}":415,"DELETE /devicemanagement/windowsinformationprotectionnetworklearningsummaries/{id}":415,"DELETE /devicemanagement/windowsmalwareinformation/{id}":429,"DELETE /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}":429,"DELETE /devicemanagement/windowsqualityupdatepolicies/{id}":419,"DELETE /devicemanagement/windowsqualityupdatepolicies/{id}/assignments/{id}":419,"DELETE /devicemanagement/windowsqualityupdateprofiles/{id}":419,"DELETE /devicemanagement/windowsqualityupdateprofiles/{id}/assignments/{id}":419,"DELETE /devicemanagement/windowsupdatecatalogitems/{id}":419,"DELETE /devicemanagement/zebrafotaartifacts/{id}":419,"DELETE /devices(deviceid='{id}')":266,"DELETE /devices/{id}":266,"DELETE /devices/{id}/registeredowners/{id}/$ref":265,"DELETE /devices/{id}/registeredusers/{id}/$ref":265,"DELETE /directory/authenticationmethoddevices/hardwareoathdevices/{id}":108,"DELETE /directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}":816,"DELETE /directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}":816,"DELETE /directory/certificateauthorities/mutualtlsoauthconfigurations/{id}":819,"DELETE /directory/externaluserprofiles/{id}":854,"DELETE /directory/pendingexternaluserprofiles/{id}":855,"DELETE /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}":159,"DELETE /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities/{id}":159,"DELETE /directory/templates/devicetemplates/{id}":852,"DELETE /directory/templates/devicetemplates/{id}/owners/{id}/$ref":851,"DELETE /directory/tenantgovernance/governanceinvitations/{id}":673,"DELETE /directory/tenantgovernance/governancepolicytemplates/{id}":672,"DELETE /directoryroles(roletemplateid='{id}')/members/{id}/$ref":16,"DELETE /directoryroles/{id}/members/{id}/$ref":16,"DELETE /domains/{id}":284,"DELETE /domains/{id}/federationconfiguration/{id}":289,"DELETE /drives/{id}/items/{id}":296,"DELETE /drives/{id}/items/{id}/permissions/{id}":296,"DELETE /drives/{id}/items/{id}/retentionlabel":304,"DELETE /education/classes/{id}":314,"DELETE /education/classes/{id}/assignmentcategories/{id}":308,"DELETE /education/classes/{id}/assignments/{id}":309,"DELETE /education/classes/{id}/assignments/{id}/categories/{id}/$ref":308,"DELETE /education/classes/{id}/assignments/{id}/gradingcategory/$ref":308,"DELETE /education/classes/{id}/assignments/{id}/resources/{id}":309,"DELETE /education/classes/{id}/assignments/{id}/rubric/$ref":308,"DELETE /education/classes/{id}/assignments/{id}/submissions/{id}/outcomes/{id}":311,"DELETE /education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}":308,"DELETE /education/classes/{id}/assignmentsettings/gradingschemes/{id}":308,"DELETE /education/classes/{id}/members/{id}/$ref":314,"DELETE /education/classes/{id}/modules/{id}":321,"DELETE /education/classes/{id}/modules/{id}/resources/{id}":321,"DELETE /education/classes/{id}/teachers/{id}/$ref":314,"DELETE /education/me/rubrics/{id}":308,"DELETE /education/schools/{id}":314,"DELETE /education/schools/{id}/classes/{id}/$ref":314,"DELETE /education/schools/{id}/users/{id}/$ref":314,"DELETE /education/users/{id}":314,"DELETE /employeeexperience/communities/{id}":233,"DELETE /employeeexperience/learningproviders/{id}/$ref":331,"DELETE /employeeexperience/learningproviders/{id}/learningcontents(externalid='{id}')/$ref":439,"DELETE /employeeexperience/learningproviders/{id}/learningcontents/{id}/$ref":439,"DELETE /employeeexperience/learningproviders/{id}/learningcourseactivities/{id}":335,"DELETE /employeeexperience/roles/{id}/members/{id}":337,"DELETE /external/connections/{id}":351,"DELETE /external/connections/{id}/groups/{id}":352,"DELETE /external/connections/{id}/groups/{id}/members/{id}":352,"DELETE /external/connections/{id}/items/{id}":352,"DELETE /external/industrydata/dataconnectors/{id}":898,"DELETE /external/industrydata/inboundflows/{id}":900,"DELETE /external/industrydata/outboundprovisioningflowsets/{id}":903,"DELETE /external/industrydata/outboundprovisioningflowsets/{id}/provisioningflows/{id}":895,"DELETE /external/industrydata/referencedefinitions/{id}":907,"DELETE /external/industrydata/sourcesystems/{id}":911,"DELETE /external/industrydata/years/{id}":913,"DELETE /financials/companies/{id}/countriesregions/{id}":864,"DELETE /financials/companies/{id}/currencies/{id}":864,"DELETE /financials/companies/{id}/customerpaymentjournals/{id}":864,"DELETE /financials/companies/{id}/customerpaymentjournals/{id}/customerpayments/{id}":864,"DELETE /financials/companies/{id}/customers/{id}":864,"DELETE /financials/companies/{id}/employees/{id}":864,"DELETE /financials/companies/{id}/itemcategories/{id}":864,"DELETE /financials/companies/{id}/items/{id}":864,"DELETE /financials/companies/{id}/journals/{id}":864,"DELETE /financials/companies/{id}/journals/{id}/journallines/{id}":864,"DELETE /financials/companies/{id}/paymentmethods/{id}":864,"DELETE /financials/companies/{id}/paymentterms/{id}":864,"DELETE /financials/companies/{id}/shipmentmethods/{id}":864,"DELETE /financials/companies/{id}/taxareas/{id}":864,"DELETE /financials/companies/{id}/taxgroups/{id}":864,"DELETE /financials/companies/{id}/unitsofmeasure/{id}":864,"DELETE /financials/companies/{id}/vendors/{id}":864,"DELETE /grouplifecyclepolicies/{id}":19,"DELETE /groups/{id}":246,"DELETE /groups/{id}/acceptedsenders/$ref":253,"DELETE /groups/{id}/calendar/calendarpermissions/{id}":143,"DELETE /groups/{id}/calendar/events/{id}":253,"DELETE /groups/{id}/cloudlicensing/assignments/{id}":828,"DELETE /groups/{id}/conversations/{id}":246,"DELETE /groups/{id}/conversations/{id}/threads/{id}":246,"DELETE /groups/{id}/drive/items/{id}":296,"DELETE /groups/{id}/drive/items/{id}/permissions/{id}":296,"DELETE /groups/{id}/drive/items/{id}/retentionlabel":304,"DELETE /groups/{id}/events/{id}":253,"DELETE /groups/{id}/members/{id}/$ref":371,"DELETE /groups/{id}/onenote/pages/{id}":491,"DELETE /groups/{id}/owners/{id}/$ref":372,"DELETE /groups/{id}/photo/$value":552,"DELETE /groups/{id}/rejectedsenders/$ref":253,"DELETE /groups/{id}/settings/{id}":389,"DELETE /groups/{id}/threads/{id}":253,"DELETE /identity/apiconnectors/{id}":391,"DELETE /identity/authenticationeventlisteners/{id}":98,"DELETE /identity/authenticationeventsflows/{id}":98,"DELETE /identity/authenticationeventsflows/{id}/conditions/applications/includeapplications/{id}":98,"DELETE /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onattributecollection/onattributecollectionexternalusersselfservicesignup/attributes/{id}/$ref":98,"DELETE /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onauthenticationmethodloadstart/onauthenticationmethodloadstartexternalusersselfservicesignup/identityproviders/$ref":98,"DELETE /identity/b2cuserflows/{id}":113,"DELETE /identity/b2cuserflows/{id}/identityproviders/{id}/$ref":113,"DELETE /identity/b2cuserflows/{id}/languages/{id}":113,"DELETE /identity/b2cuserflows/{id}/languages/{id}/overridespages/$value":113,"DELETE /identity/b2cuserflows/{id}/userattributeassignments/{id}":113,"DELETE /identity/b2cuserflows/{id}/userflowidentityproviders/{id}/$ref":113,"DELETE /identity/b2xuserflows/{id}":113,"DELETE /identity/b2xuserflows/{id}/identityproviders/{id}/$ref":113,"DELETE /identity/b2xuserflows/{id}/languages/{id}/overridespages/$value":113,"DELETE /identity/b2xuserflows/{id}/userattributeassignments/{id}":113,"DELETE /identity/b2xuserflows/{id}/userflowidentityproviders/{id}/$ref":113,"DELETE /identity/conditionalaccess/authenticationcontextclassreferences/{id}":100,"DELETE /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}":97,"DELETE /identity/customauthenticationextensions/{id}":259,"DELETE /identity/events/onsignupstart/{id}":9,"DELETE /identity/identityproviders/{id}":393,"DELETE /identity/riskprevention/fraudprotectionproviders/{id}":369,"DELETE /identity/riskprevention/webapplicationfirewallproviders/{id}":369,"DELETE /identity/riskprevention/webapplicationfirewallverifications/{id}":369,"DELETE /identity/signinidentifiers/{id}":1035,"DELETE /identity/userflowattributes/{id}":113,"DELETE /identity/userflows/{id}":113,"DELETE /identity/verifiedid/profiles/{id}":406,"DELETE /identitygovernance/accessreviews/definitions/{id}":5,"DELETE /identitygovernance/catalogs/{id}/accesspackageresources/{id}/uploadsessions/{id}":0,"DELETE /identitygovernance/entitlementmanagement/accesspackageassignmentpolicies/{id}":0,"DELETE /identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}":0,"DELETE /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}":0,"DELETE /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions/{id}":0,"DELETE /identitygovernance/entitlementmanagement/accesspackages/{id}":0,"DELETE /identitygovernance/entitlementmanagement/accesspackages/{id}/accesspackageresourcerolescopes/{id}":0,"DELETE /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatibleaccesspackages/{id}/$ref":0,"DELETE /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatiblegroups/{id}/$ref":0,"DELETE /identitygovernance/entitlementmanagement/assignmentrequests/{id}":0,"DELETE /identitygovernance/entitlementmanagement/connectedorganizations/{id}":0,"DELETE /identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors/{id}/$ref":0,"DELETE /identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors/{id}/$ref":0,"DELETE /identitygovernance/entitlementmanagement/externaloriginresourceconnectors/{id}":0,"DELETE /identitygovernance/lifecycleworkflows/customtaskextensions/{id}":394,"DELETE /identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}":396,"DELETE /identitygovernance/lifecycleworkflows/lifecyclepolicies/{id}":888,"DELETE /identitygovernance/lifecycleworkflows/workflows/{id}":396,"DELETE /identitygovernance/termsofuse/agreements/{id}":57,"DELETE /identityproviders/{id}":393,"DELETE /me/activities/{id}":555,"DELETE /me/activities/{id}/historyitems/{id}":555,"DELETE /me/authentication/emailmethods/{id}":327,"DELETE /me/authentication/fido2methods/{id}":360,"DELETE /me/authentication/hardwareoathmethods/{id}":796,"DELETE /me/authentication/microsoftauthenticatormethods/{id}":461,"DELETE /me/authentication/passwordlessmicrosoftauthenticatormethods/{id}":978,"DELETE /me/authentication/phonemethods/{id}":503,"DELETE /me/authentication/platformcredentialmethods/{id}":511,"DELETE /me/authentication/qrcodepinmethod":557,"DELETE /me/authentication/qrcodepinmethod/standardqrcode":557,"DELETE /me/authentication/qrcodepinmethod/temporaryqrcode":557,"DELETE /me/authentication/softwareoathmethods/{id}":626,"DELETE /me/authentication/temporaryaccesspassmethods/{id}":669,"DELETE /me/authentication/windowshelloforbusinessmethods/{id}":749,"DELETE /me/calendar/events/{id}":143,"DELETE /me/calendargroups/{id}":143,"DELETE /me/calendargroups/{id}/calendars/{id}":143,"DELETE /me/calendargroups/{id}/calendars/{id}/events/{id}":143,"DELETE /me/calendars/{id}":143,"DELETE /me/calendars/{id}/events/{id}":143,"DELETE /me/cloudlicensing/assignments/{id}":828,"DELETE /me/contactfolders/{id}":241,"DELETE /me/contactfolders/{id}/childfolders/{id}/.../contacts/{id}":241,"DELETE /me/contactfolders/{id}/contacts/{id}":241,"DELETE /me/contacts/{id}":241,"DELETE /me/distributionlists/{id}":241,"DELETE /me/drive/following/{id}":293,"DELETE /me/drive/items/{id}":296,"DELETE /me/drive/items/{id}/permissions/{id}":296,"DELETE /me/drive/items/{id}/retentionlabel":304,"DELETE /me/drive/items/{id}/workbook/names/{id}":951,"DELETE /me/drive/items/{id}/workbook/tables/{id}":187,"DELETE /me/drive/items/{id}/workbook/tables/{id}/columns/{id}":187,"DELETE /me/drive/items/{id}/workbook/tables/{id}/rows/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}/names/{id}":951,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"DELETE /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/names/{id}":951,"DELETE /me/drive/root:/{id}:/workbook/tables/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/tables/{id}/rows/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}":951,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"DELETE /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"DELETE /me/events/{id}":143,"DELETE /me/inferenceclassification/overrides/{id}":343,"DELETE /me/mailfolders/inbox/messagerules/{id}":458,"DELETE /me/mailfolders/{id}":343,"DELETE /me/mailfolders/{id}/messages/{id}":343,"DELETE /me/mailfolders/{id}/messages/{id}/mentions/{id}":343,"DELETE /me/mailfolders/{id}/userconfigurations/{id}":938,"DELETE /me/messages/{id}":343,"DELETE /me/messages/{id}/mentions/{id}":343,"DELETE /me/notes/{id}":468,"DELETE /me/onenote/pages/{id}":491,"DELETE /me/onlinemeetings/{id}":74,"DELETE /me/onlinemeetings/{id}/registration":74,"DELETE /me/onlinemeetings/{id}/registration/customquestions/{id}":74,"DELETE /me/onlinemeetings/{id}/registration/registrants/{id}":74,"DELETE /me/onlinemeetings/{id}/virtualappointment":74,"DELETE /me/outlook/mastercategories/{id}":458,"DELETE /me/outlook/taskfolders/{id}":222,"DELETE /me/outlook/taskgroups/{id}":222,"DELETE /me/outlook/taskgroups/{id}/taskfolders/{id}":222,"DELETE /me/outlook/tasks/{id}":222,"DELETE /me/photo/$value":552,"DELETE /me/profile":732,"DELETE /me/profile/account/{id}":732,"DELETE /me/profile/addresses/{id}":732,"DELETE /me/profile/anniversaries/{id}":732,"DELETE /me/profile/awards/{id}":732,"DELETE /me/profile/certifications/{id}":732,"DELETE /me/profile/educationalactivities/{id}":732,"DELETE /me/profile/emails/{id}":732,"DELETE /me/profile/interests/{id}":732,"DELETE /me/profile/languages/{id}":732,"DELETE /me/profile/names/{id}":732,"DELETE /me/profile/notes/{id}":982,"DELETE /me/profile/patents/{id}":732,"DELETE /me/profile/phones/{id}":732,"DELETE /me/profile/positions/{id}":732,"DELETE /me/profile/projects/{id}":732,"DELETE /me/profile/publications/{id}":732,"DELETE /me/profile/skills/{id}":732,"DELETE /me/profile/webaccounts/{id}":732,"DELETE /me/profile/websites/{id}":732,"DELETE /me/responsibilities/{id}":982,"DELETE /me/settings/workhoursandlocations/occurrences/{id}":221,"DELETE /me/settings/workhoursandlocations/recurrences/{id}":221,"DELETE /me/tasks/alltasks/{id}":222,"DELETE /me/tasks/lists/{id}":222,"DELETE /me/tasks/lists/{id}/tasks/{id}":222,"DELETE /me/tasks/lists/{id}/tasks/{id}/checklistitems/{id}":222,"DELETE /me/tasks/lists/{id}/tasks/{id}/linkedresources/{id}":807,"DELETE /me/todo/lists/{id}":692,"DELETE /me/todo/lists/{id}/tasks/{id}":222,"DELETE /me/todo/lists/{id}/tasks/{id}/attachments/{id}":222,"DELETE /me/todo/lists/{id}/tasks/{id}/checklistitems/{id}":222,"DELETE /me/todo/lists/{id}/tasks/{id}/linkedresources/{id}":222,"DELETE /networkaccess/cloudfirewallpolicies/{id}":955,"DELETE /networkaccess/cloudfirewallpolicies/{id}/policyrules/{id}":955,"DELETE /networkaccess/connectivity/branches/{id}":955,"DELETE /networkaccess/connectivity/branches/{id}/devicelinks/{id}":955,"DELETE /networkaccess/connectivity/remotenetworks/{id}/devicelinks/{id}":955,"DELETE /networkaccess/filteringpolicies/{id}":957,"DELETE /networkaccess/filteringpolicies/{id}/policyrules/{id}":955,"DELETE /networkaccess/filteringprofiles/{id}/policies/{id}":955,"DELETE /networkaccess/forwardingprofiles/{id}/policies/{id}":955,"DELETE /networkaccess/threatintelligencepolicies/{id}":955,"DELETE /networkaccess/tls/externalcertificateauthoritycertificates/{id}":955,"DELETE /networkaccess/tlsinspectionpolicies/{id}":955,"DELETE /networkaccess/tlsinspectionpolicies/{id}/policyrules/{id}":961,"DELETE /oauth2permissiongrants/{id}":472,"DELETE /onpremencryptedpayloads/{id}":419,"DELETE /onpremisespublishingprofiles/applicationproxy/connectorgroups/{id}":842,"DELETE /onpremisespublishingprofiles/{id}/agents/{id}":842,"DELETE /onpremisespublishingprofiles/{id}/agents/{id}/agentgroups/{id}/$ref":358,"DELETE /onpremisespublishingprofiles/{id}/publishedresources/{id}/agentgroups/{id}/$ref":967,"DELETE /organization/{id}/branding":485,"DELETE /organization/{id}/branding/localizations/{id}":487,"DELETE /organization/{id}/branding/themes/{id}":968,"DELETE /organization/{id}/branding/themes/{id}/localizations/{id}":968,"DELETE /organization/{id}/certificatebasedauthconfiguration/{id}":160,"DELETE /pfxrecryptionrequests/{id}":419,"DELETE /pfxusercertificates/{id}":419,"DELETE /places/{id}":141,"DELETE /places/{id}/building/map":141,"DELETE /places/{id}/building/map/levels/{id}/fixtures/{id}":141,"DELETE /places/{id}/building/map/levels/{id}/sections/{id}":141,"DELETE /places/{id}/building/map/levels/{id}/units/{id}":141,"DELETE /planner/buckets/{id}":508,"DELETE /planner/plans/{id}":508,"DELETE /planner/rosters/{id}":690,"DELETE /planner/rosters/{id}/members/{id}":690,"DELETE /planner/tasks/{id}":508,"DELETE /planner/tasks/{id}/messages/{id}":222,"DELETE /policies/activitybasedtimeoutpolicies/{id}":9,"DELETE /policies/appmanagementpolicies/{id}":9,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/email":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/fido2":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/hardwareoath":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/microsoftauthenticator":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/qrcodepin":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/sms":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/softwareoath":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/temporaryaccesspass":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/verifiablecredentials/{id}":329,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/voice":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/x509certificate":108,"DELETE /policies/authenticationmethodspolicy/authenticationmethodconfigurations/{id}":108,"DELETE /policies/authenticationstrengthpolicies/{id}":97,"DELETE /policies/b2bmanagementpolicies/{id}":804,"DELETE /policies/claimsmappingpolicies/{id}":9,"DELETE /policies/crosstenantaccesspolicy/partners/{id}":256,"DELETE /policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization":256,"DELETE /policies/crosstenantaccesspolicy/partners/{id}/m365capabilities/{id}":258,"DELETE /policies/featurerolloutpolicies/{id}":358,"DELETE /policies/featurerolloutpolicies/{id}/appliesto/{id}/$ref":358,"DELETE /policies/homerealmdiscoverypolicies/{id}":9,"DELETE /policies/mobileappmanagementpolicies/{id}":948,"DELETE /policies/mobileappmanagementpolicies/{id}/includedgroups/{id}/$ref":948,"DELETE /policies/mobiledevicemanagementpolicies/{id}":948,"DELETE /policies/mobiledevicemanagementpolicies/{id}/includedgroups/{id}/$ref":948,"DELETE /policies/onpremauthenticationpolicies/{id}":963,"DELETE /policies/onpremauthenticationpolicies/{id}/appliesto/{id}/$ref":963,"DELETE /policies/permissiongrantpolicies/{id}":500,"DELETE /policies/permissiongrantpolicies/{id}/excludes/{id}":500,"DELETE /policies/permissiongrantpolicies/{id}/includes/{id}":500,"DELETE /policies/permissiongrantpreapprovalpolicies/{id}":500,"DELETE /policies/tokenissuancepolicies/{id}":9,"DELETE /policies/tokenlifetimepolicies/{id}":9,"DELETE /print/connectors/{id}":528,"DELETE /print/printers/{id}":533,"DELETE /print/printers/{id}/share":526,"DELETE /print/printers/{id}/tasktriggers/{id}":532,"DELETE /print/printershares/{id}/allowedusers/{id}/$ref":526,"DELETE /print/shares/{id}":526,"DELETE /print/shares/{id}/allowedgroups/{id}/$ref":526,"DELETE /print/taskdefinitions/{id}":519,"DELETE /programcontrols/{id}":990,"DELETE /programs/{id}":988,"DELETE /rolemanagement/cloudpc/roleassignments/{id}":1060,"DELETE /rolemanagement/cloudpc/roledefinitions/{id}":991,"DELETE /rolemanagement/defender/roleassignments/{id}":1060,"DELETE /rolemanagement/defender/roledefinitions/{id}":991,"DELETE /rolemanagement/devicemanagement/roleassignments/{id}":1060,"DELETE /rolemanagement/devicemanagement/roledefinitions/{id}":991,"DELETE /rolemanagement/directory/deleteditems/roledefinitions/{id}":991,"DELETE /rolemanagement/directory/roleassignments/{id}":847,"DELETE /rolemanagement/directory/roledefinitions/{id}":991,"DELETE /rolemanagement/entitlementmanagement/roleassignments/{id}":847,"DELETE /rolemanagement/exchange/customappscopes/{id}":847,"DELETE /rolemanagement/exchange/roleassignments/{id}":847,"DELETE /schemaextensions/{id}":35,"DELETE /search/acronyms/{id}":578,"DELETE /search/bookmarks/{id}":578,"DELETE /search/qnas/{id}":578,"DELETE /security/attacksimulation/simulations/{id}":81,"DELETE /security/attacksimulation/trainingcampaigns/{id}/$ref":81,"DELETE /security/casemanagement/cases/{id}":1003,"DELETE /security/casemanagement/cases/{id}/activities/{id}":1003,"DELETE /security/casemanagement/cases/{id}/relations/{id}":1003,"DELETE /security/casemanagement/cases/{id}/tasks/{id}":1003,"DELETE /security/cases/ediscoverycases/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/custodians/{id}/sitesources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/custodians/{id}/unifiedgroupsources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/custodians/{id}/usersources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/legalholds/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/legalholds/{id}/usersources/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}":590,"DELETE /security/cases/ediscoverycases/{id}/searches/{id}":591,"DELETE /security/cases/ediscoverycases/{id}/searches/{id}/custodiansources/{id}/$ref":590,"DELETE /security/cases/ediscoverycases/{id}/searches/{id}/noncustodialsources/{id}/$ref":590,"DELETE /security/cases/ediscoverycases/{id}/tags/{id}":591,"DELETE /security/identities/sensors/{id}":600,"DELETE /security/labels/authorities/{id}":592,"DELETE /security/labels/categories/{id}":592,"DELETE /security/labels/categories/{id}/subcategories/{id}/$ref":592,"DELETE /security/labels/citations/{id}":592,"DELETE /security/labels/departments/{id}":592,"DELETE /security/labels/fileplanreferences/{id}":592,"DELETE /security/labels/retentionlabels/{id}":604,"DELETE /security/labels/retentionlabels/{id}/descriptors/authoritytemplate":592,"DELETE /security/labels/retentionlabels/{id}/descriptors/categorytemplate":592,"DELETE /security/labels/retentionlabels/{id}/descriptors/citationtemplate":592,"DELETE /security/labels/retentionlabels/{id}/descriptors/departmenttemplate":592,"DELETE /security/labels/retentionlabels/{id}/descriptors/fileplanreferencetemplate":592,"DELETE /security/labels/retentionlabels/{id}/eventtype/$ref":592,"DELETE /security/rules/detectionrules/{id}":1008,"DELETE /security/threatsubmission/emailthreatsubmissionpolicies/{id}":1013,"DELETE /security/tiindicators/{id}":1054,"DELETE /security/triggers/retentionevents/{id}":592,"DELETE /security/triggers/retentionevents/{id}/retentioneventtype/$ref":592,"DELETE /security/triggertypes/retentioneventtypes/{id}/$ref":592,"DELETE /security/workbooks/{id}":1006,"DELETE /security/zones/{id}":1016,"DELETE /security/zones/{id}/environments/{id}":1016,"DELETE /serviceprincipals(appid='{id}')":67,"DELETE /serviceprincipals(appid='{id}')/agentidentityblueprintprincipal":38,"DELETE /serviceprincipals(appid='{id}')/delegatedpermissionclassifications/{id}":500,"DELETE /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/$ref":566,"DELETE /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps/{id}":77,"DELETE /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/targetdevicegroups/{id}/$ref":77,"DELETE /serviceprincipals/{id}":67,"DELETE /serviceprincipals/{id}/agentidentity":24,"DELETE /serviceprincipals/{id}/agentidentity/owners/{id}/$ref":22,"DELETE /serviceprincipals/{id}/agentidentity/sponsors/{id}/$ref":23,"DELETE /serviceprincipals/{id}/agentidentityblueprintprincipal":38,"DELETE /serviceprincipals/{id}/agentidentityblueprintprincipal/owners/{id}/$ref":37,"DELETE /serviceprincipals/{id}/approleassignedto/{id}":610,"DELETE /serviceprincipals/{id}/approleassignments/{id}":610,"DELETE /serviceprincipals/{id}/delegatedpermissionclassifications/{id}":500,"DELETE /serviceprincipals/{id}/owners/{id}/$ref":67,"DELETE /serviceprincipals/{id}/remotedesktopsecurityconfiguration/$ref":566,"DELETE /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}":77,"DELETE /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}/$ref":77,"DELETE /serviceprincipals/{id}/synchronization/jobs/{id}":634,"DELETE /serviceprincipals/{id}/synchronization/jobs/{id}/schema":637,"DELETE /settings/{id}":389,"DELETE /sites/{id}/columns/{id}":231,"DELETE /sites/{id}/contenttypes/{id}":231,"DELETE /sites/{id}/contenttypes/{id}/columns/{id}":231,"DELETE /sites/{id}/drive/items/{id}":296,"DELETE /sites/{id}/drive/items/{id}/permissions/{id}":296,"DELETE /sites/{id}/lists/{id}/columns/{id}":231,"DELETE /sites/{id}/lists/{id}/contenttypes/{id}":231,"DELETE /sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}":231,"DELETE /sites/{id}/lists/{id}/items/{id}":123,"DELETE /sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}":282,"DELETE /sites/{id}/lists/{id}/items/{id}/{id}":936,"DELETE /sites/{id}/lists/{id}/permissions/{id}":243,"DELETE /sites/{id}/onenote/pages/{id}":491,"DELETE /sites/{id}/pages/{id}":123,"DELETE /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}":123,"DELETE /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}":124,"DELETE /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection":123,"DELETE /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts/{id}":124,"DELETE /sites/{id}/pages/{id}/sitepage/webparts/{id}":124,"DELETE /sites/{id}/pagetemplates/{id}/pagetemplate":123,"DELETE /sites/{id}/permissions/{id}":623,"DELETE /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}":122,"DELETE /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifactsbulkadditionrequests/{id}":117,"DELETE /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}":122,"DELETE /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifactsbulkadditionrequests/{id}":117,"DELETE /solutions/backuprestore/protectionpolicies/{id}":122,"DELETE /solutions/backuprestore/restoresessions/{id}":117,"DELETE /solutions/backuprestore/serviceapps/{id}":115,"DELETE /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules/{id}":122,"DELETE /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifactsbulkadditionrequests/{id}":117,"DELETE /solutions/bookingbusinesses/{id}":129,"DELETE /solutions/bookingbusinesses/{id}/appointments/{id}":127,"DELETE /solutions/bookingbusinesses/{id}/customers/{id}":127,"DELETE /solutions/bookingbusinesses/{id}/customquestions/{id}":126,"DELETE /solutions/bookingbusinesses/{id}/services/{id}":136,"DELETE /solutions/bookingbusinesses/{id}/staffmembers/{id}":136,"DELETE /solutions/businessscenarios/{id}":809,"DELETE /solutions/businessscenarios/{id}/planner/tasks/{id}":811,"DELETE /solutions/virtualevents/townhalls/{id}/presenters/{id}":740,"DELETE /solutions/virtualevents/townhalls/{id}/registrationconfiguration/questions/{id}":740,"DELETE /solutions/virtualevents/webinars/{id}/presenters/{id}":740,"DELETE /solutions/virtualevents/webinars/{id}/registrationconfiguration/questions/{id}":740,"DELETE /storage/filestorage/containers/{id}":363,"DELETE /storage/filestorage/containers/{id}/columns/{id}":366,"DELETE /storage/filestorage/containers/{id}/migrationjobs/{id}":366,"DELETE /storage/filestorage/containers/{id}/permissions(email='{id}')":363,"DELETE /storage/filestorage/containers/{id}/permissions(userprincipalname='{id}')":363,"DELETE /storage/filestorage/containers/{id}/permissions/{id}":363,"DELETE /storage/filestorage/containers/{id}/sharepointgroups/{id}":367,"DELETE /storage/filestorage/containers/{id}/sharepointgroups/{id}/members/{id}":367,"DELETE /storage/filestorage/containertyperegistrations/{id}":364,"DELETE /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants/{id}":364,"DELETE /storage/filestorage/containertypes/{id}":365,"DELETE /storage/filestorage/containertypes/{id}/permissions/{id}":365,"DELETE /storage/filestorage/deletedcontainers/{id}":363,"DELETE /teams/{id}/channels/{id}":168,"DELETE /teams/{id}/channels/{id}/enabledapps/{id}/$ref":165,"DELETE /teams/{id}/channels/{id}/members/{id}":166,"DELETE /teams/{id}/channels/{id}/sharedwithteams/{id}":166,"DELETE /teams/{id}/channels/{id}/tabs/{id}":167,"DELETE /teams/{id}/incomingchannels/{id}/$ref":641,"DELETE /teams/{id}/installedapps/{id}":642,"DELETE /teams/{id}/members/{id}":252,"DELETE /teams/{id}/schedule/daynotes/{id}":262,"DELETE /teams/{id}/schedule/openshifts/{id}":162,"DELETE /teams/{id}/schedule/schedulinggroups/{id}":162,"DELETE /teams/{id}/schedule/shifts/{id}":162,"DELETE /teams/{id}/schedule/timecards/{id}":262,"DELETE /teams/{id}/schedule/timeoffreasons/{id}":162,"DELETE /teams/{id}/schedule/timeoffrequests/{id}":162,"DELETE /teams/{id}/schedule/timesoff/{id}":162,"DELETE /teams/{id}/tags/{id}":666,"DELETE /teams/{id}/tags/{id}/members/{id}":666,"DELETE /teamwork/workforceintegrations/{id}":753,"DELETE /tenantrelationships/delegatedadminrelationships/{id}":263,"DELETE /tenantrelationships/delegatedadminrelationships/{id}/accessassignments/{id}":263,"DELETE /tenantrelationships/managedtenants/tenanttags/{id}":944,"DELETE /tenantrelationships/multitenantorganization/tenants/{id}":464,"DELETE /termstore/groups/{id}":686,"DELETE /termstore/sets/{id}":686,"DELETE /termstore/sets/{id}/terms/{id}":686,"DELETE /trustframework/keysets/{id}":1057,"DELETE /trustframework/policies/{id}":1058,"DELETE /users/agentuser/{id}":46,"DELETE /users/{id}":697,"DELETE /users/{id}/approleassignments/{id}":56,"DELETE /users/{id}/authentication/emailmethods/{id}":327,"DELETE /users/{id}/authentication/externalauthenticationmethods/{id}/$ref":84,"DELETE /users/{id}/authentication/fido2methods/{id}":360,"DELETE /users/{id}/authentication/hardwareoathmethods/{id}":796,"DELETE /users/{id}/authentication/microsoftauthenticatormethods/{id}":461,"DELETE /users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}":978,"DELETE /users/{id}/authentication/phonemethods/{id}":503,"DELETE /users/{id}/authentication/platformcredentialmethods/{id}":511,"DELETE /users/{id}/authentication/qrcodepinmethod":557,"DELETE /users/{id}/authentication/qrcodepinmethod/standardqrcode":557,"DELETE /users/{id}/authentication/qrcodepinmethod/temporaryqrcode":557,"DELETE /users/{id}/authentication/resourceaccountkeyauthenticationmethods/{id}":570,"DELETE /users/{id}/authentication/softwareoathmethods/{id}":626,"DELETE /users/{id}/authentication/temporaryaccesspassmethods/{id}":669,"DELETE /users/{id}/authentication/windowshelloforbusinessmethods/{id}":749,"DELETE /users/{id}/calendar/calendarpermissions/{id}":143,"DELETE /users/{id}/calendar/events/{id}":143,"DELETE /users/{id}/calendargroups/{id}":143,"DELETE /users/{id}/calendargroups/{id}/calendars/{id}":143,"DELETE /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}":143,"DELETE /users/{id}/calendars/{id}":143,"DELETE /users/{id}/calendars/{id}/events/{id}":143,"DELETE /users/{id}/chats/{id}/targetedmessages/{id}":192,"DELETE /users/{id}/cloudlicensing/assignments/{id}":828,"DELETE /users/{id}/contactfolders/{id}":241,"DELETE /users/{id}/contactfolders/{id}/childfolders/{id}/contacts/{id}":241,"DELETE /users/{id}/contactfolders/{id}/contacts/{id}":241,"DELETE /users/{id}/contacts/{id}":241,"DELETE /users/{id}/distributionlists/{id}":241,"DELETE /users/{id}/drive/following/{id}":293,"DELETE /users/{id}/drive/items/{id}":296,"DELETE /users/{id}/drive/items/{id}/permissions/{id}":296,"DELETE /users/{id}/drive/items/{id}/retentionlabel":304,"DELETE /users/{id}/events/{id}":143,"DELETE /users/{id}/events/{id}/calendar/calendarpermissions/{id}":143,"DELETE /users/{id}/inferenceclassification/overrides/{id}":343,"DELETE /users/{id}/mailfolders/inbox/messagerules/{id}":458,"DELETE /users/{id}/mailfolders/{id}":343,"DELETE /users/{id}/mailfolders/{id}/messages/{id}":343,"DELETE /users/{id}/mailfolders/{id}/messages/{id}/mentions/{id}":343,"DELETE /users/{id}/mailfolders/{id}/userconfigurations/{id}":938,"DELETE /users/{id}/manager/$ref":45,"DELETE /users/{id}/manager/{id}/$ref":44,"DELETE /users/{id}/messages/{id}":343,"DELETE /users/{id}/messages/{id}/mentions/{id}":343,"DELETE /users/{id}/mobileappintentandstates/{id}":429,"DELETE /users/{id}/mobileapptroubleshootingevents/{id}":429,"DELETE /users/{id}/notes/{id}":468,"DELETE /users/{id}/onenote/pages/{id}":491,"DELETE /users/{id}/onlinemeetings/{id}":74,"DELETE /users/{id}/onlinemeetings/{id}/registration":74,"DELETE /users/{id}/onlinemeetings/{id}/registration/registrants/{id}":945,"DELETE /users/{id}/onlinemeetings/{id}/virtualappointment":74,"DELETE /users/{id}/outlook/mastercategories/{id}":458,"DELETE /users/{id}/outlook/taskfolders/{id}":222,"DELETE /users/{id}/outlook/taskgroups/{id}":222,"DELETE /users/{id}/outlook/taskgroups/{id}/taskfolders/{id}":222,"DELETE /users/{id}/outlook/tasks/{id}":222,"DELETE /users/{id}/photo/$value":552,"DELETE /users/{id}/profile":732,"DELETE /users/{id}/profile/account/{id}":732,"DELETE /users/{id}/profile/addresses/{id}":732,"DELETE /users/{id}/profile/anniversaries/{id}":732,"DELETE /users/{id}/profile/awards/{id}":732,"DELETE /users/{id}/profile/certifications/{id}":732,"DELETE /users/{id}/profile/educationalactivities/{id}":732,"DELETE /users/{id}/profile/emails/{id}":732,"DELETE /users/{id}/profile/interests/{id}":732,"DELETE /users/{id}/profile/languages/{id}":732,"DELETE /users/{id}/profile/names/{id}":732,"DELETE /users/{id}/profile/notes/{id}":982,"DELETE /users/{id}/profile/patents/{id}":732,"DELETE /users/{id}/profile/phones/{id}":732,"DELETE /users/{id}/profile/positions/{id}":732,"DELETE /users/{id}/profile/projects/{id}":732,"DELETE /users/{id}/profile/publications/{id}":732,"DELETE /users/{id}/profile/skills/{id}":732,"DELETE /users/{id}/profile/webaccounts/{id}":732,"DELETE /users/{id}/profile/websites/{id}":732,"DELETE /users/{id}/responsibilities/{id}":982,"DELETE /users/{id}/settings/workhoursandlocations/occurrences/{id}":221,"DELETE /users/{id}/settings/workhoursandlocations/recurrences/{id}":221,"DELETE /users/{id}/sponsors/{id}/$ref":45,"DELETE /users/{id}/tasks/alltasks/{id}":222,"DELETE /users/{id}/tasks/lists/{id}":222,"DELETE /users/{id}/tasks/lists/{id}/tasks/{id}":222,"DELETE /users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems/{id}":222,"DELETE /users/{id}/tasks/lists/{id}/tasks/{id}/linkedresources/{id}":807,"DELETE /users/{id}/teamwork/installedapps/{id}":733,"DELETE /users/{id}/teamwork/sections/{id}":1050,"DELETE /users/{id}/teamwork/sections/{id}/items/{id}":1050,"DELETE /users/{id}/todo/lists/{id}":692,"DELETE /users/{id}/todo/lists/{id}/tasks/{id}":222,"DELETE /users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}":222,"DELETE /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}":222,"DELETE /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}":222,"DELETE /users/{id}@{id}/settings/windows":1080,"DELETE /workplace/sensordevices/{id}":1083,"GET /accessreviews":764,"GET /accessreviews/{id}":764,"GET /accessreviews/{id}/decisions":765,"GET /accessreviews/{id}/mydecisions":766,"GET /accessreviews/{id}/reviewers":764,"GET /admin//windows/updates/deploymentaudiences/{id}/exclusions":780,"GET /admin//windows/updates/deploymentaudiences/{id}/members":780,"GET /admin/appsandservices":772,"GET /admin/cloudlicensing/allotments":822,"GET /admin/cloudlicensing/allotments/{id}":825,"GET /admin/cloudlicensing/allotments/{id}/assignments":826,"GET /admin/cloudlicensing/allotments/{id}/assignments/{id}":822,"GET /admin/cloudlicensing/allotments/{id}/waitingmembers":827,"GET /admin/cloudlicensing/allotments/{id}/waitingmembers/{id}":827,"GET /admin/cloudlicensing/assignmenterrors":823,"GET /admin/cloudlicensing/assignmenterrors/{id}":827,"GET /admin/cloudlicensing/assignmenterrors/{id}/assignedto":822,"GET /admin/cloudlicensing/assignmenterrors/{id}/usageright":822,"GET /admin/cloudlicensing/assignments":822,"GET /admin/cloudlicensing/assignments/{id}":822,"GET /admin/cloudlicensing/assignments/{id}/allotment":822,"GET /admin/cloudlicensing/assignments/{id}/assignedto":827,"GET /admin/configurationmanagement/configurationdrifts":240,"GET /admin/configurationmanagement/configurationdrifts/{id}":240,"GET /admin/configurationmanagement/configurationmonitoringresults":240,"GET /admin/configurationmanagement/configurationmonitoringresults/{id}":240,"GET /admin/configurationmanagement/configurationmonitors":240,"GET /admin/configurationmanagement/configurationmonitors/{id}":240,"GET /admin/configurationmanagement/configurationmonitors/{id}/baseline":240,"GET /admin/configurationmanagement/configurationsnapshotjobs":240,"GET /admin/configurationmanagement/configurationsnapshotjobs/{id}":240,"GET /admin/configurationmanagement/configurationsnapshots":240,"GET /admin/dynamics":774,"GET /admin/edge/internetexplorermode/sitelists":139,"GET /admin/edge/internetexplorermode/sitelists/{id}":139,"GET /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies":139,"GET /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies/{id}":139,"GET /admin/edge/internetexplorermode/sitelists/{id}/sites":139,"GET /admin/edge/internetexplorermode/sitelists/{id}/sites/{id}":139,"GET /admin/exchange/mailboxes/{id}/folders":452,"GET /admin/exchange/mailboxes/{id}/folders/delta":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}/childfolders":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}/childfolders/delta":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}/childfolders/{id}":452,"GET /admin/exchange/mailboxes/{id}/folders/{id}/items":454,"GET /admin/exchange/mailboxes/{id}/folders/{id}/items/delta":454,"GET /admin/exchange/mailboxes/{id}/folders/{id}/items/{id}":454,"GET /admin/exchange/tracing/messagetraces":345,"GET /admin/exchange/tracing/messagetraces/{id}/getdetailsbyrecipient(recipientaddress='parametervalue')":345,"GET /admin/forms":776,"GET /admin/microsoft365apps/installationoptions":447,"GET /admin/people":497,"GET /admin/people/iteminsights":498,"GET /admin/people/namepronunciation":497,"GET /admin/people/photoupdatesettings":497,"GET /admin/people/profilecardproperties":497,"GET /admin/people/profilecardproperties/{id}":551,"GET /admin/people/profilepropertysettings":497,"GET /admin/people/profilepropertysettings/{id}":497,"GET /admin/people/profilesources":497,"GET /admin/people/profilesources(sourceid='{id}')":497,"GET /admin/people/pronouns":497,"GET /admin/reportsettings":20,"GET /admin/reportsettings/sharepoint/apiusagereportmetrics":1031,"GET /admin/serviceannouncement/healthoverviews":608,"GET /admin/serviceannouncement/healthoverviews/{id}":608,"GET /admin/serviceannouncement/issues":608,"GET /admin/serviceannouncement/issues/{id}":608,"GET /admin/serviceannouncement/issues/{id}/incidentreport":608,"GET /admin/serviceannouncement/messages":609,"GET /admin/serviceannouncement/messages/{id}":609,"GET /admin/serviceannouncement/messages/{id}/attachments":609,"GET /admin/serviceannouncement/messages/{id}/attachments/{id}":609,"GET /admin/sharepoint/settings":617,"GET /admin/teams/policy/getpolicyid(type='{id}',name='{id}')":657,"GET /admin/teams/telephonenumbermanagement/numberassignments":655,"GET /admin/teams/telephonenumbermanagement/numberassignments/{id}":655,"GET /admin/teams/telephonenumbermanagement/operations/{id}":655,"GET /admin/teams/userconfigurations":656,"GET /admin/teams/userconfigurations/{id}":656,"GET /admin/todo":778,"GET /admin/windows/updates/catalog/entries":780,"GET /admin/windows/updates/deploymentaudiences":780,"GET /admin/windows/updates/deploymentaudiences/{id}":780,"GET /admin/windows/updates/deployments":780,"GET /admin/windows/updates/deployments/{id}":780,"GET /admin/windows/updates/policies":780,"GET /admin/windows/updates/policies/{id}":780,"GET /admin/windows/updates/policies/{id}/applicablecontent":780,"GET /admin/windows/updates/policies/{id}/approvals":780,"GET /admin/windows/updates/policies/{id}/approvals/{id}":780,"GET /admin/windows/updates/policies/{id}/rings/{id}":780,"GET /admin/windows/updates/products/findbycatalogid(catalogid='catalogid')":780,"GET /admin/windows/updates/products/findbykbnumber(kbnumber={id})":780,"GET /admin/windows/updates/products/{id}/getknownissuesbytimerange(daysinpast={id},includeallactive={id})":781,"GET /admin/windows/updates/resourceconnections":780,"GET /admin/windows/updates/resourceconnections/windowsupdates.operationalinsightsconnection":780,"GET /admin/windows/updates/resourceconnections/{id}":780,"GET /admin/windows/updates/updatableassets":780,"GET /admin/windows/updates/updatableassets/windowsupdates.azureaddevice":780,"GET /admin/windows/updates/updatableassets/windowsupdates.updatableassetgroup":780,"GET /admin/windows/updates/updatableassets/{id}":780,"GET /admin/windows/updates/updatableassets/{id}/windowsupdates.updatableassetgroup/members":780,"GET /admin/windows/updates/updatepolicies":780,"GET /admin/windows/updates/updatepolicies/{id}":780,"GET /admin/windows/updates/updatepolicies/{id}/compliancechanges":780,"GET /admin/windows/updates/updatepolicies/{id}/compliancechanges/windowsupdates.contentapproval":780,"GET /admin/windows/updates/updatepolicies/{id}/compliancechanges/{id}":780,"GET /administrativeunits":17,"GET /administrativeunits/delta":17,"GET /administrativeunits/{id}":17,"GET /administrativeunits/{id}/members":17,"GET /administrativeunits/{id}/members/$ref":17,"GET /administrativeunits/{id}/members/{id}":17,"GET /administrativeunits/{id}/scopedrolemembers":18,"GET /administrativeunits/{id}/scopedrolemembers/{id}":18,"GET /agentregistry/agentcardmanifests":782,"GET /agentregistry/agentcardmanifests/{id}":782,"GET /agentregistry/agentcollections":786,"GET /agentregistry/agentcollections/{id}":785,"GET /agentregistry/agentinstances":789,"GET /agentregistry/agentinstances/{id}":789,"GET /agentregistry/agentinstances/{id}/collections":789,"GET /agentregistry/agentinstances/{id}/collections/{id}/members":786,"GET /agreements/{id}":58,"GET /agreements/{id}/file":60,"GET /agreements/{id}/file/localizations":60,"GET /app/calls/{id}":150,"GET /app/calls/{id}/audioroutinggroups":83,"GET /app/calls/{id}/audioroutinggroups/{id}":83,"GET /app/calls/{id}/participants":150,"GET /app/calls/{id}/participants/{id}":149,"GET /app/onlinemeetings":477,"GET /appcatalogs/teamsapps":65,"GET /appcatalogs/teamsapps/{id}/appdefinitions/{id}/bot":665,"GET /appcatalogs/teamsapps/{id}/appdefinitions/{id}/coloricon":665,"GET /appcatalogs/teamsapps/{id}/appdefinitions/{id}/coloricon/hostedcontent":665,"GET /appcatalogs/teamsapps/{id}/appdefinitions/{id}/coloricon/hostedcontent/$value":665,"GET /appcatalogs/teamsapps/{id}/appdefinitions/{id}/outlineicon":665,"GET /appcatalogs/teamsapps/{id}/appdefinitions/{id}/outlineicon/hostedcontent":665,"GET /appcatalogs/teamsapps/{id}/appdefinitions/{id}/outlineicon/hostedcontent/$value":665,"GET /applications":71,"GET /applications(appid='{id}')":70,"GET /applications(appid='{id}')/extensionproperties":70,"GET /applications(appid='{id}')/extensionproperties/{id}":347,"GET /applications(appid='{id}')/federatedidentitycredentials":359,"GET /applications(appid='{id}')/federatedidentitycredentials/{id}":68,"GET /applications(appid='{id}')/owners":70,"GET /applications/agentidentityblueprint":33,"GET /applications/delta":69,"GET /applications/{id}":70,"GET /applications/{id}/agentidentityblueprint":32,"GET /applications/{id}/agentidentityblueprint/communicationconfiguration":788,"GET /applications/{id}/agentidentityblueprint/federatedidentitycredentials":359,"GET /applications/{id}/agentidentityblueprint/federatedidentitycredentials/{id}":68,"GET /applications/{id}/agentidentityblueprint/inheritablepermissions":32,"GET /applications/{id}/agentidentityblueprint/inheritablepermissions/{id}":410,"GET /applications/{id}/agentidentityblueprint/owners":32,"GET /applications/{id}/extensionproperties":70,"GET /applications/{id}/extensionproperties/{id}":347,"GET /applications/{id}/federatedidentitycredentials":359,"GET /applications/{id}/federatedidentitycredentials/{id}":68,"GET /applications/{id}/onpremisespublishing/segmentsconfiguration/ipsegmentconfiguration/applicationsegments":934,"GET /applications/{id}/onpremisespublishing/segmentsconfiguration/ipsegmentconfiguration/applicationsegments/{id}":934,"GET /applications/{id}/owners":70,"GET /applications/{id}/synchronization/templates":635,"GET /applications/{id}/synchronization/templates/{id}":635,"GET /applications/{id}/synchronization/templates/{id}/schema":638,"GET /applications/{id}/synchronization/templates/{id}/schema/filteroperators":634,"GET /applications/{id}/synchronization/templates/{id}/schema/functions":634,"GET /auditlogs/auditactivitytypes":109,"GET /auditlogs/customsecurityattributeaudits":795,"GET /auditlogs/customsecurityattributeaudits/{id}":795,"GET /auditlogs/directoryaudits":276,"GET /auditlogs/getsummarizedmsisignins(aggregationwindow='{id}')":109,"GET /auditlogs/getsummarizednoninteractivesignins(aggregationwindow='{id}')":109,"GET /auditlogs/getsummarizedserviceprincipalsignins(aggregationwindow='{id}')":109,"GET /auditlogs/signineventsappsummary":109,"GET /auditlogs/signineventssummary":109,"GET /auditlogs/signins":109,"GET /auditlogs/signins/{id}":109,"GET /auditlogs/signups":109,"GET /auditlogs/signups/{id}":109,"GET /certificateauthorities/mutualtlsoauthconfigurations":818,"GET /chats":206,"GET /chats/{id}":197,"GET /chats/{id}/installedapps":200,"GET /chats/{id}/installedapps/{id}":194,"GET /chats/{id}/members":201,"GET /chats/{id}/members/{id}":195,"GET /chats/{id}/messages":202,"GET /chats/{id}/messages/{id}":202,"GET /chats/{id}/messages/{id}/hostedcontents":202,"GET /chats/{id}/messages/{id}/hostedcontents/{id}":202,"GET /chats/{id}/operations":820,"GET /chats/{id}/operations/{id}":820,"GET /chats/{id}/permissiongrants":821,"GET /chats/{id}/pinnedmessages":204,"GET /chats/{id}/tabs":205,"GET /chats/{id}/tabs/{id}":196,"GET /communications/callrecords":156,"GET /communications/callrecords/getdirectroutingcalls(fromdatetime={id},todatetime={id})":156,"GET /communications/callrecords/getpstnblockeduserslog(fromdatetime={id},todatetime={id})":156,"GET /communications/callrecords/getpstncalls(fromdatetime={id},todatetime={id})":156,"GET /communications/callrecords/getpstnonlinemeetingdialoutreport(fromdatetime={id},todatetime={id})":156,"GET /communications/callrecords/getsmslog(fromdatetime={id},todatetime={id})":156,"GET /communications/callrecords/{id}":156,"GET /communications/callrecords/{id}/participants_v2":156,"GET /communications/callrecords/{id}/sessions":156,"GET /communications/calls/{id}":150,"GET /communications/calls/{id}/audioroutinggroups":83,"GET /communications/calls/{id}/audioroutinggroups/{id}":83,"GET /communications/calls/{id}/contentsharingsessions":152,"GET /communications/calls/{id}/contentsharingsessions/{id}":152,"GET /communications/calls/{id}/participants":150,"GET /communications/calls/{id}/participants/{id}":149,"GET /communications/getallonlinemeetingmessages":225,"GET /communications/onlinemeetingconversations/{id}/messages/{id}/reactions":867,"GET /communications/onlinemeetings":477,"GET /communications/presences/{id}":518,"GET /compliance/ediscovery/cases":591,"GET /compliance/ediscovery/cases/{id}":591,"GET /compliance/ediscovery/cases/{id}/custodians":591,"GET /compliance/ediscovery/cases/{id}/custodians/{id}":591,"GET /compliance/ediscovery/cases/{id}/custodians/{id}/sitesources":591,"GET /compliance/ediscovery/cases/{id}/custodians/{id}/sitesources/{id}":591,"GET /compliance/ediscovery/cases/{id}/custodians/{id}/unifiedgroupsources":591,"GET /compliance/ediscovery/cases/{id}/custodians/{id}/unifiedgroupsources/{id}":591,"GET /compliance/ediscovery/cases/{id}/custodians/{id}/usersources":591,"GET /compliance/ediscovery/cases/{id}/custodians/{id}/usersources/{id}":591,"GET /compliance/ediscovery/cases/{id}/legalholds":865,"GET /compliance/ediscovery/cases/{id}/legalholds/{id}":591,"GET /compliance/ediscovery/cases/{id}/legalholds/{id}/sitesources":591,"GET /compliance/ediscovery/cases/{id}/legalholds/{id}/usersources":591,"GET /compliance/ediscovery/cases/{id}/noncustodialdatasources":591,"GET /compliance/ediscovery/cases/{id}/noncustodialdatasources/{id}":591,"GET /compliance/ediscovery/cases/{id}/noncustodialdatasources/{id}/datasource":591,"GET /compliance/ediscovery/cases/{id}/operations":865,"GET /compliance/ediscovery/cases/{id}/operations/{id}/ediscovery.caseexportoperation/getdownloadurl":591,"GET /compliance/ediscovery/cases/{id}/reviewsets":865,"GET /compliance/ediscovery/cases/{id}/reviewsets/{id}":591,"GET /compliance/ediscovery/cases/{id}/reviewsets/{id}/queries":591,"GET /compliance/ediscovery/cases/{id}/reviewsets/{id}/queries/{id}":591,"GET /compliance/ediscovery/cases/{id}/settings":591,"GET /compliance/ediscovery/cases/{id}/sourcecollections":591,"GET /compliance/ediscovery/cases/{id}/sourcecollections/{id}":591,"GET /compliance/ediscovery/cases/{id}/sourcecollections/{id}/additionalsources":591,"GET /compliance/ediscovery/cases/{id}/sourcecollections/{id}/addtoreviewsetoperation":591,"GET /compliance/ediscovery/cases/{id}/sourcecollections/{id}/custodiansources":591,"GET /compliance/ediscovery/cases/{id}/sourcecollections/{id}/lastestimatestatisticsoperation":591,"GET /compliance/ediscovery/cases/{id}/sourcecollections/{id}/noncustodialsources":591,"GET /compliance/ediscovery/cases/{id}/tags":591,"GET /compliance/ediscovery/cases/{id}/tags/ashierarchy":591,"GET /compliance/ediscovery/cases/{id}/tags/{id}":591,"GET /compliance/ediscovery/cases/{id}/tags/{id}/childtags":591,"GET /contacts":488,"GET /contacts/delta":488,"GET /contacts/{id}":488,"GET /contacts/{id}/directreports":489,"GET /contacts/{id}/manager":489,"GET /contacts/{id}/memberof":489,"GET /contacts/{id}/transitivereports/$count":972,"GET /contracts":245,"GET /contracts/{id}":245,"GET /copilot/settings/people/enhancedpersonalization":497,"GET /deviceappmanagement":416,"GET /deviceappmanagement/androidmanagedappprotections":417,"GET /deviceappmanagement/androidmanagedappprotections/{id}":416,"GET /deviceappmanagement/androidmanagedappprotections/{id}/apps":416,"GET /deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}":416,"GET /deviceappmanagement/androidmanagedappprotections/{id}/assignments":416,"GET /deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}":416,"GET /deviceappmanagement/androidmanagedappprotections/{id}/deploymentsummary":416,"GET /deviceappmanagement/defaultmanagedappprotections":417,"GET /deviceappmanagement/defaultmanagedappprotections/{id}":416,"GET /deviceappmanagement/defaultmanagedappprotections/{id}/apps":416,"GET /deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}":416,"GET /deviceappmanagement/defaultmanagedappprotections/{id}/deploymentsummary":416,"GET /deviceappmanagement/deviceappmanagementtasks":417,"GET /deviceappmanagement/deviceappmanagementtasks/{id}":417,"GET /deviceappmanagement/enterprisecodesigningcertificates":420,"GET /deviceappmanagement/enterprisecodesigningcertificates/{id}":420,"GET /deviceappmanagement/ioslobappprovisioningconfigurations":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments/{id}":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/devicestatuses":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/devicestatuses/{id}":416,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/groupassignments":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/groupassignments/{id}":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/userstatuses":417,"GET /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/userstatuses/{id}":416,"GET /deviceappmanagement/iosmanagedappprotections":417,"GET /deviceappmanagement/iosmanagedappprotections/{id}":416,"GET /deviceappmanagement/iosmanagedappprotections/{id}/apps":416,"GET /deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}":416,"GET /deviceappmanagement/iosmanagedappprotections/{id}/assignments":416,"GET /deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}":416,"GET /deviceappmanagement/iosmanagedappprotections/{id}/deploymentsummary":416,"GET /deviceappmanagement/managedapppolicies":417,"GET /deviceappmanagement/managedapppolicies/{id}":417,"GET /deviceappmanagement/managedappregistrations":417,"GET /deviceappmanagement/managedappregistrations/getuseridswithflaggedappregistration":417,"GET /deviceappmanagement/managedappregistrations/{id}":417,"GET /deviceappmanagement/managedappregistrations/{id}/appliedpolicies":417,"GET /deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}":417,"GET /deviceappmanagement/managedappregistrations/{id}/intendedpolicies":417,"GET /deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}":417,"GET /deviceappmanagement/managedappregistrations/{id}/managedapplogcollectionrequests":417,"GET /deviceappmanagement/managedappregistrations/{id}/managedapplogcollectionrequests/{id}":417,"GET /deviceappmanagement/managedappregistrations/{id}/operations":416,"GET /deviceappmanagement/managedappregistrations/{id}/operations/{id}":416,"GET /deviceappmanagement/managedappstatuses":417,"GET /deviceappmanagement/managedappstatuses/{id}":417,"GET /deviceappmanagement/managedebookcategories":918,"GET /deviceappmanagement/managedebookcategories/{id}":918,"GET /deviceappmanagement/managedebooks":918,"GET /deviceappmanagement/managedebooks/{id}":918,"GET /deviceappmanagement/managedebooks/{id}/assignments":918,"GET /deviceappmanagement/managedebooks/{id}/assignments/{id}":918,"GET /deviceappmanagement/managedebooks/{id}/categories":918,"GET /deviceappmanagement/managedebooks/{id}/categories/{id}":918,"GET /deviceappmanagement/managedebooks/{id}/devicestates":918,"GET /deviceappmanagement/managedebooks/{id}/devicestates/{id}":417,"GET /deviceappmanagement/managedebooks/{id}/installsummary":918,"GET /deviceappmanagement/managedebooks/{id}/userstatesummary":918,"GET /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}":918,"GET /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates":918,"GET /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates/{id}":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}":417,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments":416,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}":416,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles":416,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":416,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles":416,"GET /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":416,"GET /deviceappmanagement/mobileappcategories":417,"GET /deviceappmanagement/mobileappcategories/{id}":417,"GET /deviceappmanagement/mobileappconfigurations":417,"GET /deviceappmanagement/mobileappconfigurations/{id}":417,"GET /deviceappmanagement/mobileappconfigurations/{id}/assignments":417,"GET /deviceappmanagement/mobileappconfigurations/{id}/assignments/{id}":417,"GET /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses":417,"GET /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses/{id}":416,"GET /deviceappmanagement/mobileappconfigurations/{id}/devicestatussummary":417,"GET /deviceappmanagement/mobileappconfigurations/{id}/userstatuses":417,"GET /deviceappmanagement/mobileappconfigurations/{id}/userstatuses/{id}":416,"GET /deviceappmanagement/mobileappconfigurations/{id}/userstatussummary":417,"GET /deviceappmanagement/mobileapprelationships":417,"GET /deviceappmanagement/mobileapprelationships/{id}":416,"GET /deviceappmanagement/mobileapps":417,"GET /deviceappmanagement/mobileapps/getpublishingconstraints":417,"GET /deviceappmanagement/mobileapps/{id}":417,"GET /deviceappmanagement/mobileapps/{id}/assignments":417,"GET /deviceappmanagement/mobileapps/{id}/assignments/{id}":417,"GET /deviceappmanagement/mobileapps/{id}/categories":417,"GET /deviceappmanagement/mobileapps/{id}/categories/{id}":417,"GET /deviceappmanagement/mobileapps/{id}/contentversions":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/scripts":416,"GET /deviceappmanagement/mobileapps/{id}/contentversions/{id}/scripts/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/devicestatuses":417,"GET /deviceappmanagement/mobileapps/{id}/devicestatuses/{id}":417,"GET /deviceappmanagement/mobileapps/{id}/devicestatuses/{id}/app":417,"GET /deviceappmanagement/mobileapps/{id}/installsummary":417,"GET /deviceappmanagement/mobileapps/{id}/iosvppapp/assignedlicenses":416,"GET /deviceappmanagement/mobileapps/{id}/iosvppapp/assignedlicenses/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/macosvppapp/assignedlicenses":416,"GET /deviceappmanagement/mobileapps/{id}/macosvppapp/assignedlicenses/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions":416,"GET /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/microsoftstoreforbusinessapp/containedapps":416,"GET /deviceappmanagement/mobileapps/{id}/microsoftstoreforbusinessapp/containedapps/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions":416,"GET /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/relationships":417,"GET /deviceappmanagement/mobileapps/{id}/relationships/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/targetassignments":417,"GET /deviceappmanagement/mobileapps/{id}/targetassignments/{id}":416,"GET /deviceappmanagement/mobileapps/{id}/userstatuses":417,"GET /deviceappmanagement/mobileapps/{id}/userstatuses/{id}":417,"GET /deviceappmanagement/mobileapps/{id}/userstatuses/{id}/app":417,"GET /deviceappmanagement/mobileapps/{id}/userstatuses/{id}/devicestatuses":417,"GET /deviceappmanagement/mobileapps/{id}/userstatuses/{id}/devicestatuses/{id}":417,"GET /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps":416,"GET /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps/{id}":416,"GET /deviceappmanagement/policysets":420,"GET /deviceappmanagement/policysets/{id}":420,"GET /deviceappmanagement/policysets/{id}/assignments":420,"GET /deviceappmanagement/policysets/{id}/assignments/{id}":420,"GET /deviceappmanagement/policysets/{id}/items":420,"GET /deviceappmanagement/policysets/{id}/items/{id}":420,"GET /deviceappmanagement/sideloadingkeys":430,"GET /deviceappmanagement/sideloadingkeys/{id}":430,"GET /deviceappmanagement/symanteccodesigningcertificate":420,"GET /deviceappmanagement/targetedmanagedappconfigurations":417,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}":416,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps":416,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}":416,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments":416,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}":416,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/deploymentsummary":416,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings":420,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}":416,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions":420,"GET /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions/{id}":416,"GET /deviceappmanagement/vpptokens":432,"GET /deviceappmanagement/vpptokens/getlicensesforapp":430,"GET /deviceappmanagement/vpptokens/{id}":432,"GET /deviceappmanagement/wdacsupplementalpolicies":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments/{id}":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}/deploysummary":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}":417,"GET /deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}/policy":417,"GET /deviceappmanagement/windowsinformationprotectiondeviceregistrations":417,"GET /deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}":416,"GET /deviceappmanagement/windowsinformationprotectionpolicies":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}":417,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments":416,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}":416,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles":416,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":416,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles":416,"GET /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":416,"GET /deviceappmanagement/windowsinformationprotectionwipeactions":417,"GET /deviceappmanagement/windowsinformationprotectionwipeactions/{id}":416,"GET /deviceappmanagement/windowsmanagedappprotections":417,"GET /deviceappmanagement/windowsmanagedappprotections/{id}":416,"GET /deviceappmanagement/windowsmanagedappprotections/{id}/apps":416,"GET /deviceappmanagement/windowsmanagedappprotections/{id}/apps/{id}":416,"GET /deviceappmanagement/windowsmanagedappprotections/{id}/assignments":416,"GET /deviceappmanagement/windowsmanagedappprotections/{id}/assignments/{id}":416,"GET /deviceappmanagement/windowsmanagedappprotections/{id}/deploymentsummary":416,"GET /deviceappmanagement/windowsmanagementapp":417,"GET /deviceappmanagement/windowsmanagementapp/healthstates":417,"GET /deviceappmanagement/windowsmanagementapp/healthstates/{id}":924,"GET /devicemanagement/advancedthreatprotectiononboardingstatesummary":420,"GET /devicemanagement/advancedthreatprotectiononboardingstatesummary/advancedthreatprotectiononboardingdevicesettingstates":420,"GET /devicemanagement/advancedthreatprotectiononboardingstatesummary/advancedthreatprotectiononboardingdevicesettingstates/{id}":420,"GET /devicemanagement/androidappconfigurationschema":420,"GET /devicemanagement/androiddeviceownerenrollmentprofiles":420,"GET /devicemanagement/androiddeviceownerenrollmentprofiles/{id}":420,"GET /devicemanagement/androidforworkappconfigurationschemas":420,"GET /devicemanagement/androidforworkappconfigurationschemas/{id}":420,"GET /devicemanagement/androidforworkenrollmentprofiles":420,"GET /devicemanagement/androidforworkenrollmentprofiles/{id}":420,"GET /devicemanagement/androidforworksettings":420,"GET /devicemanagement/androidmanagedstoreaccountenterprisesettings":420,"GET /devicemanagement/androidmanagedstoreaccountenterprisesettings/retrievestorelayout":420,"GET /devicemanagement/androidmanagedstoreappconfigurationschemas":420,"GET /devicemanagement/androidmanagedstoreappconfigurationschemas/{id}":420,"GET /devicemanagement/applepushnotificationcertificate":423,"GET /devicemanagement/applepushnotificationcertificate/downloadapplepushnotificationcertificatesigningrequest":422,"GET /devicemanagement/appleuserinitiatedenrollmentprofiles":423,"GET /devicemanagement/appleuserinitiatedenrollmentprofiles/{id}":423,"GET /devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/assignments":423,"GET /devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/assignments/{id}":430,"GET /devicemanagement/assignmentfilters":420,"GET /devicemanagement/assignmentfilters/getplatformsupportedproperties":420,"GET /devicemanagement/assignmentfilters/getstate":419,"GET /devicemanagement/assignmentfilters/{id}":420,"GET /devicemanagement/assignmentfilters/{id}/getsupportedproperties":419,"GET /devicemanagement/auditevents":417,"GET /devicemanagement/auditevents/getauditactivitytypes":417,"GET /devicemanagement/auditevents/getauditcategories":417,"GET /devicemanagement/auditevents/{id}":417,"GET /devicemanagement/auditpolicies/{id}/settings":420,"GET /devicemanagement/auditpolicies/{id}/settings/{id}":420,"GET /devicemanagement/autopilotevents":425,"GET /devicemanagement/autopilotevents/{id}":425,"GET /devicemanagement/autopilotevents/{id}/policystatusdetails":425,"GET /devicemanagement/autopilotevents/{id}/policystatusdetails/{id}":425,"GET /devicemanagement/carttoclassassociations":420,"GET /devicemanagement/carttoclassassociations/{id}":420,"GET /devicemanagement/categories":420,"GET /devicemanagement/categories/{id}":420,"GET /devicemanagement/categories/{id}/settingdefinitions":420,"GET /devicemanagement/categories/{id}/settingdefinitions/{id}":420,"GET /devicemanagement/certificateconnectordetails":420,"GET /devicemanagement/certificateconnectordetails/{id}":420,"GET /devicemanagement/chromeosonboardingsettings":420,"GET /devicemanagement/chromeosonboardingsettings/{id}":420,"GET /devicemanagement/cloudcertificationauthority":920,"GET /devicemanagement/cloudcertificationauthority/{id}":919,"GET /devicemanagement/cloudcertificationauthority/{id}/cloudcertificationauthorityleafcertificate":420,"GET /devicemanagement/cloudcertificationauthority/{id}/cloudcertificationauthorityleafcertificate/{id}":420,"GET /devicemanagement/cloudcertificationauthorityleafcertificate":420,"GET /devicemanagement/cloudcertificationauthorityleafcertificate/{id}":420,"GET /devicemanagement/cloudpcconnectivityissues":425,"GET /devicemanagement/cloudpcconnectivityissues/{id}":924,"GET /devicemanagement/comanageddevices":425,"GET /devicemanagement/comanageddevices/appdiagnostics":928,"GET /devicemanagement/comanageddevices/retrievepowerliftappdiagnosticsdetails":928,"GET /devicemanagement/comanageddevices/{id}":425,"GET /devicemanagement/comanageddevices/{id}/getfilevaultkey":426,"GET /devicemanagement/comanageddevices/{id}/retrievedevicelocaladminaccountdetail":425,"GET /devicemanagement/comanageddevices/{id}/retrievemacosmanageddevicelocaladminaccountdetail":426,"GET /devicemanagement/comanageddevices/{id}/retrieverecoverylockpasscode":426,"GET /devicemanagement/comanagementeligibledevices":425,"GET /devicemanagement/comanagementeligibledevices/{id}":924,"GET /devicemanagement/compliancecategories":420,"GET /devicemanagement/compliancecategories/{id}":420,"GET /devicemanagement/compliancemanagementpartners":423,"GET /devicemanagement/compliancemanagementpartners/{id}":423,"GET /devicemanagement/compliancepolicies":420,"GET /devicemanagement/compliancepolicies/{id}":420,"GET /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule":420,"GET /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}":420,"GET /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations":420,"GET /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}":420,"GET /devicemanagement/compliancepolicies/{id}/settings":420,"GET /devicemanagement/compliancepolicies/{id}/settings/{id}":420,"GET /devicemanagement/compliancesettings":420,"GET /devicemanagement/compliancesettings/{id}":420,"GET /devicemanagement/conditionalaccesssettings":423,"GET /devicemanagement/configmanagercollections":417,"GET /devicemanagement/configmanagercollections/getpolicysummary":417,"GET /devicemanagement/configmanagercollections/{id}":417,"GET /devicemanagement/configurationcategories":420,"GET /devicemanagement/configurationcategories/{id}":420,"GET /devicemanagement/configurationpolicies":922,"GET /devicemanagement/configurationpolicies/{id}":922,"GET /devicemanagement/configurationpolicies/{id}/retrievelatestupgradedefaultbaselinepolicy":922,"GET /devicemanagement/configurationpolicies/{id}/settings":420,"GET /devicemanagement/configurationpolicies/{id}/settings/{id}":420,"GET /devicemanagement/configurationpolicies/{id}/settings/{id}/settingdefinitions":420,"GET /devicemanagement/configurationpolicies/{id}/settings/{id}/settingdefinitions/{id}":420,"GET /devicemanagement/configurationpolicytemplates":923,"GET /devicemanagement/configurationpolicytemplates/{id}":923,"GET /devicemanagement/configurationpolicytemplates/{id}/settingtemplates":420,"GET /devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}":420,"GET /devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}/settingdefinitions":420,"GET /devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}/settingdefinitions/{id}":420,"GET /devicemanagement/configurationsettings":420,"GET /devicemanagement/configurationsettings/{id}":420,"GET /devicemanagement/datasharingconsents":925,"GET /devicemanagement/datasharingconsents/{id}":423,"GET /devicemanagement/deploymentplans":420,"GET /devicemanagement/deploymentplans/{id}":420,"GET /devicemanagement/deployments":420,"GET /devicemanagement/deployments/{id}":420,"GET /devicemanagement/deployments/{id}/rings":420,"GET /devicemanagement/deployments/{id}/rings/{id}":420,"GET /devicemanagement/deployments/{id}/rings/{id}/assignmentconfigurations":420,"GET /devicemanagement/deployments/{id}/rings/{id}/assignmentconfigurations/{id}":420,"GET /devicemanagement/deponboardingsettings":423,"GET /devicemanagement/deponboardingsettings/getexpiringvpptokencount":430,"GET /devicemanagement/deponboardingsettings/{id}":423,"GET /devicemanagement/deponboardingsettings/{id}/defaultiosenrollmentprofile":430,"GET /devicemanagement/deponboardingsettings/{id}/defaultmacosenrollmentprofile":430,"GET /devicemanagement/deponboardingsettings/{id}/defaulttvosenrollmentprofile":430,"GET /devicemanagement/deponboardingsettings/{id}/defaultvisionosenrollmentprofile":430,"GET /devicemanagement/deponboardingsettings/{id}/enrollmentprofiles":423,"GET /devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}":423,"GET /devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}/exportmobileconfig":423,"GET /devicemanagement/deponboardingsettings/{id}/getencryptionpublickey":430,"GET /devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities":423,"GET /devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities/{id}":423,"GET /devicemanagement/derivedcredentials":423,"GET /devicemanagement/derivedcredentials/{id}":423,"GET /devicemanagement/detectedapps":425,"GET /devicemanagement/detectedapps/{id}":425,"GET /devicemanagement/devicecategories":425,"GET /devicemanagement/devicecategories/{id}":425,"GET /devicemanagement/devicecompliancepolicies":420,"GET /devicemanagement/devicecompliancepolicies/getdevicesscheduledtoretire":419,"GET /devicemanagement/devicecompliancepolicies/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/assignments":420,"GET /devicemanagement/devicecompliancepolicies/{id}/assignments/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicestatuses":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicestatuses/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/devicestatusoverview":420,"GET /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule":420,"GET /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations":420,"GET /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/userstatuses":420,"GET /devicemanagement/devicecompliancepolicies/{id}/userstatuses/{id}":420,"GET /devicemanagement/devicecompliancepolicies/{id}/userstatusoverview":420,"GET /devicemanagement/devicecompliancepolicydevicestatesummary":420,"GET /devicemanagement/devicecompliancepolicysettingstatesummaries":420,"GET /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}":420,"GET /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates":420,"GET /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates/{id}":420,"GET /devicemanagement/devicecompliancescripts":927,"GET /devicemanagement/devicecompliancescripts/{id}":927,"GET /devicemanagement/devicecompliancescripts/{id}/assignments":927,"GET /devicemanagement/devicecompliancescripts/{id}/assignments/{id}":420,"GET /devicemanagement/devicecompliancescripts/{id}/devicerunstates":924,"GET /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}":924,"GET /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice":425,"GET /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey":426,"GET /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/retrievedevicelocaladminaccountdetail":425,"GET /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/retrievemacosmanageddevicelocaladminaccountdetail":426,"GET /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/retrieverecoverylockpasscode":426,"GET /devicemanagement/devicecompliancescripts/{id}/runsummary":924,"GET /devicemanagement/deviceconfigurationconflictsummary":420,"GET /devicemanagement/deviceconfigurationconflictsummary/{id}":420,"GET /devicemanagement/deviceconfigurationdevicestatesummaries":420,"GET /devicemanagement/deviceconfigurationrestrictedappsviolations":420,"GET /devicemanagement/deviceconfigurationrestrictedappsviolations/{id}":420,"GET /devicemanagement/deviceconfigurations":420,"GET /devicemanagement/deviceconfigurations/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androidcertificateprofilebase/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownercertificateprofilebase/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerderivedcredentialauthenticationconfiguration/derivedcredentialsettings":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/derivedcredentialsettings":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/rootcertificateforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/rootcertificatesforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/rootcertificatesforservervalidation/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerimportedpfxcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerpkcscertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerscepcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownervpnconfiguration/derivedcredentialsettings":420,"GET /devicemanagement/deviceconfigurations/{id}/androiddeviceownervpnconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androideasemailprofileconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androideasemailprofileconfiguration/smimesigningcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androidenterprisewificonfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/androidenterprisewificonfiguration/rootcertificateforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkcertificateprofilebase/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkeasemailprofilebase/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkenterprisewificonfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkenterprisewificonfiguration/rootcertificateforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkimportedpfxcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkpkcscertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkpkcscertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkscepcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkscepcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androidforworkvpnconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androidimportedpfxcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androidimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androidpkcscertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androidpkcscertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androidscepcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androidscepcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androidvpnconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androidworkprofilecertificateprofilebase/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androidworkprofileeasemailprofilebase/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/androidworkprofileenterprisewificonfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/androidworkprofileenterprisewificonfiguration/rootcertificateforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/androidworkprofilepkcscertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androidworkprofilepkcscertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androidworkprofilescepcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/androidworkprofilescepcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/androidworkprofilevpnconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/aospdeviceownercertificateprofilebase/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/aospdeviceownerenterprisewificonfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/aospdeviceownerenterprisewificonfiguration/rootcertificateforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/aospdeviceownerpkcscertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/aospdeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/aospdeviceownerscepcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/aospdeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/assignments":420,"GET /devicemanagement/deviceconfigurations/{id}/assignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/derivedcredentialsettings":420,"GET /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries":420,"GET /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/devicestatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/devicestatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/devicestatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/getomasettingplaintextvalue":420,"GET /devicemanagement/deviceconfigurations/{id}/groupassignments":420,"GET /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration":420,"GET /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/getomasettingplaintextvalue":420,"GET /devicemanagement/deviceconfigurations/{id}/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/iosderivedcredentialauthenticationconfiguration/derivedcredentialsettings":420,"GET /devicemanagement/deviceconfigurations/{id}/iosdevicefeaturesconfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/iosdevicefeaturesconfiguration/singlesignonextensionpkinitcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/ioseasemailprofileconfiguration/derivedcredentialsettings":420,"GET /devicemanagement/deviceconfigurations/{id}/ioseasemailprofileconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/ioseasemailprofileconfiguration/smimeencryptioncertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/ioseasemailprofileconfiguration/smimesigningcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/iosenterprisewificonfiguration/derivedcredentialsettings":420,"GET /devicemanagement/deviceconfigurations/{id}/iosenterprisewificonfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/iosenterprisewificonfiguration/rootcertificatesforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/iosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/iosimportedpfxcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/iosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/iospkcscertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/iospkcscertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/assignments":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/assignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicesettingstatesummaries":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicestatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicestatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicestatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/groupassignments":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/groupassignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/userstatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/userstatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/userstatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/iosvpnconfiguration/derivedcredentialsettings":420,"GET /devicemanagement/deviceconfigurations/{id}/iosvpnconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/ioswirednetworkconfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/ioswirednetworkconfiguration/rootcertificateforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/ioswirednetworkconfiguration/rootcertificatesforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/ioswirednetworkconfiguration/rootcertificatesforservervalidation/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macosdevicefeaturesconfiguration/singlesignonextensionpkinitcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/macosenterprisewificonfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/macosenterprisewificonfiguration/rootcertificateforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/macosenterprisewificonfiguration/rootcertificatesforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/macosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macosimportedpfxcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/macosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macospkcscertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/macospkcscertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/assignments":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/assignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicesettingstatesummaries":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicestatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicestatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicestatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/groupassignments":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/groupassignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/userstatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/userstatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/userstatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/macosvpnconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/macoswirednetworkconfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/macoswirednetworkconfiguration/rootcertificateforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/macoswirednetworkconfiguration/rootcertificatesforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/macoswirednetworkconfiguration/rootcertificatesforservervalidation/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/assignments":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/assignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicesettingstatesummaries":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/groupassignments":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/groupassignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/userstatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/userstatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/userstatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/windows10generalconfiguration/privacyaccesscontrols":420,"GET /devicemanagement/deviceconfigurations/{id}/windows10generalconfiguration/privacyaccesscontrols/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windows10vpnconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/getomasettingplaintextvalue":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/assignments":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/assignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicesettingstatesummaries":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicestatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicestatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicestatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/groupassignments":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/groupassignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/userstatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/userstatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/userstatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsphone81vpnconfiguration/identitycertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/assignments":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/assignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/groupassignments":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/groupassignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10importedpfxcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10importedpfxcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10pkcscertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10pkcscertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows81scepcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows81scepcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows81scepcertificateprofile/rootcertificate":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windowsphone81importedpfxcertificateprofile/manageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windowsphone81importedpfxcertificateprofile/manageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificateforclientvalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/assignments":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/assignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicesettingstatesummaries":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/groupassignments":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/groupassignments/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatuses":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatuses/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatusoverview":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/identitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/rootcertificateforclientvalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/rootcertificatesforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/rootcertificatesforservervalidation/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/secondaryidentitycertificateforclientauthentication":420,"GET /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/secondaryrootcertificateforclientvalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforclientvalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforclientvalidation/{id}":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforservervalidation":420,"GET /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforservervalidation/{id}":420,"GET /devicemanagement/deviceconfigurationsallmanageddevicecertificatestates":420,"GET /devicemanagement/deviceconfigurationsallmanageddevicecertificatestates/{id}":420,"GET /devicemanagement/deviceconfigurationuserstatesummaries":420,"GET /devicemanagement/devicecustomattributeshellscripts":927,"GET /devicemanagement/devicecustomattributeshellscripts/{id}":927,"GET /devicemanagement/devicecustomattributeshellscripts/{id}/assignments":924,"GET /devicemanagement/devicecustomattributeshellscripts/{id}/assignments/{id}":924,"GET /devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates":927,"GET /devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates/{id}":924,"GET /devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments":927,"GET /devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments/{id}":924,"GET /devicemanagement/devicecustomattributeshellscripts/{id}/runsummary":927,"GET /devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates":927,"GET /devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates/{id}":924,"GET /devicemanagement/deviceenrollmentconfigurations":423,"GET /devicemanagement/deviceenrollmentconfigurations/{id}":423,"GET /devicemanagement/deviceenrollmentconfigurations/{id}/assignments":423,"GET /devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}":430,"GET /devicemanagement/devicehealthscripts":927,"GET /devicemanagement/devicehealthscripts/areglobalscriptsavailable":927,"GET /devicemanagement/devicehealthscripts/getremediationsummary":927,"GET /devicemanagement/devicehealthscripts/{id}":927,"GET /devicemanagement/devicehealthscripts/{id}/assignments":927,"GET /devicemanagement/devicehealthscripts/{id}/assignments/{id}":420,"GET /devicemanagement/devicehealthscripts/{id}/devicerunstates":927,"GET /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}":420,"GET /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice":425,"GET /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey":426,"GET /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/retrievedevicelocaladminaccountdetail":425,"GET /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/retrievemacosmanageddevicelocaladminaccountdetail":426,"GET /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/retrieverecoverylockpasscode":426,"GET /devicemanagement/devicehealthscripts/{id}/getremediationhistory":927,"GET /devicemanagement/devicehealthscripts/{id}/runsummary":927,"GET /devicemanagement/devicemanagementpartners":423,"GET /devicemanagement/devicemanagementpartners/{id}":423,"GET /devicemanagement/devicemanagementscripts":927,"GET /devicemanagement/devicemanagementscripts/{id}":927,"GET /devicemanagement/devicemanagementscripts/{id}/assignments":924,"GET /devicemanagement/devicemanagementscripts/{id}/assignments/{id}":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates":927,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/appdiagnostics":928,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/retrievepowerliftappdiagnosticsdetails":928,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/getfilevaultkey":426,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/retrievedevicelocaladminaccountdetail":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/retrievemacosmanageddevicelocaladminaccountdetail":426,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/retrieverecoverylockpasscode":426,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicecategory":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicehealthscriptstates":420,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicehealthscriptstates/{id}":420,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey":426,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/retrievedevicelocaladminaccountdetail":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/retrievemacosmanageddevicelocaladminaccountdetail":426,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/retrieverecoverylockpasscode":426,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/getloggedonmanageddevices":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/appdiagnostics":928,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/retrievepowerliftappdiagnosticsdetails":928,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/getfilevaultkey":426,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/retrievedevicelocaladminaccountdetail":425,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/retrievemacosmanageddevicelocaladminaccountdetail":426,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/retrieverecoverylockpasscode":426,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate":924,"GET /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate/{id}":924,"GET /devicemanagement/devicemanagementscripts/{id}/groupassignments":927,"GET /devicemanagement/devicemanagementscripts/{id}/groupassignments/{id}":924,"GET /devicemanagement/devicemanagementscripts/{id}/runsummary":927,"GET /devicemanagement/devicemanagementscripts/{id}/userrunstates":927,"GET /devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}":924,"GET /devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates":927,"GET /devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates/{id}":924,"GET /devicemanagement/deviceshellscripts":927,"GET /devicemanagement/deviceshellscripts/{id}":927,"GET /devicemanagement/deviceshellscripts/{id}/assignments":924,"GET /devicemanagement/deviceshellscripts/{id}/assignments/{id}":924,"GET /devicemanagement/deviceshellscripts/{id}/devicerunstates":927,"GET /devicemanagement/deviceshellscripts/{id}/devicerunstates/{id}":924,"GET /devicemanagement/deviceshellscripts/{id}/groupassignments":927,"GET /devicemanagement/deviceshellscripts/{id}/groupassignments/{id}":924,"GET /devicemanagement/deviceshellscripts/{id}/runsummary":927,"GET /devicemanagement/deviceshellscripts/{id}/userrunstates":927,"GET /devicemanagement/deviceshellscripts/{id}/userrunstates/{id}":924,"GET /devicemanagement/domainjoinconnectors":420,"GET /devicemanagement/domainjoinconnectors/{id}":420,"GET /devicemanagement/elevationrequests":420,"GET /devicemanagement/elevationrequests/{id}":420,"GET /devicemanagement/embeddedsimactivationcodepools":420,"GET /devicemanagement/embeddedsimactivationcodepools/{id}":420,"GET /devicemanagement/embeddedsimactivationcodepools/{id}/assignments":420,"GET /devicemanagement/embeddedsimactivationcodepools/{id}/assignments/{id}":420,"GET /devicemanagement/embeddedsimactivationcodepools/{id}/devicestates":420,"GET /devicemanagement/embeddedsimactivationcodepools/{id}/devicestates/{id}":420,"GET /devicemanagement/endpointprivilegemanagementprovisioningstatus":420,"GET /devicemanagement/exchangeconnectors":423,"GET /devicemanagement/exchangeconnectors/{id}":423,"GET /devicemanagement/exchangeonpremisespolicies/{id}":423,"GET /devicemanagement/exchangeonpremisespolicy":423,"GET /devicemanagement/exchangeonpremisespolicy/conditionalaccesssettings":423,"GET /devicemanagement/getassignedroledetails":434,"GET /devicemanagement/getcomanageddevicessummary":425,"GET /devicemanagement/getcomanagementeligibledevicessummary":425,"GET /devicemanagement/geteffectivepermissions":434,"GET /devicemanagement/getrolescopetagsbyids":929,"GET /devicemanagement/getrolescopetagsbyresource":929,"GET /devicemanagement/getsuggestedenrollmentlimit":430,"GET /devicemanagement/grouppolicycategories":420,"GET /devicemanagement/grouppolicycategories/{id}":420,"GET /devicemanagement/grouppolicyconfigurations":420,"GET /devicemanagement/grouppolicyconfigurations/{id}":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/assignments":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/assignments/{id}":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/definition":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/definitionvalue":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/children":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/children/{id}":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitionfile":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitions":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitions/{id}":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/parent":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/definitions":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/definitions/{id}":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/grouppolicyuploadeddefinitionfile/grouppolicyoperations":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/grouppolicyuploadeddefinitionfile/grouppolicyoperations/{id}":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/nextversiondefinition":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/presentations":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/presentations/{id}":420,"GET /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/previousversiondefinition":420,"GET /devicemanagement/grouppolicydefinitionfiles/{id}":420,"GET /devicemanagement/grouppolicydefinitions":420,"GET /devicemanagement/grouppolicydefinitions/{id}":420,"GET /devicemanagement/grouppolicymigrationreports":420,"GET /devicemanagement/grouppolicymigrationreports/{id}":420,"GET /devicemanagement/grouppolicymigrationreports/{id}/grouppolicysettingmappings":420,"GET /devicemanagement/grouppolicymigrationreports/{id}/grouppolicysettingmappings/{id}":420,"GET /devicemanagement/grouppolicymigrationreports/{id}/unsupportedgrouppolicyextensions":420,"GET /devicemanagement/grouppolicymigrationreports/{id}/unsupportedgrouppolicyextensions/{id}":420,"GET /devicemanagement/grouppolicyobjectfiles":420,"GET /devicemanagement/grouppolicyobjectfiles/{id}":420,"GET /devicemanagement/grouppolicyuploadeddefinitionfiles":420,"GET /devicemanagement/grouppolicyuploadeddefinitionfiles/{id}":420,"GET /devicemanagement/hardwareconfigurations":420,"GET /devicemanagement/hardwareconfigurations/{id}":420,"GET /devicemanagement/hardwareconfigurations/{id}/assignments":420,"GET /devicemanagement/hardwareconfigurations/{id}/assignments/{id}":420,"GET /devicemanagement/hardwareconfigurations/{id}/devicerunstates":420,"GET /devicemanagement/hardwareconfigurations/{id}/devicerunstates/{id}":420,"GET /devicemanagement/hardwareconfigurations/{id}/runsummary":420,"GET /devicemanagement/hardwareconfigurations/{id}/userrunstates":420,"GET /devicemanagement/hardwareconfigurations/{id}/userrunstates/{id}":420,"GET /devicemanagement/hardwarepassworddetails":426,"GET /devicemanagement/hardwarepassworddetails/{id}":426,"GET /devicemanagement/hardwarepasswordinfo":420,"GET /devicemanagement/hardwarepasswordinfo/{id}":420,"GET /devicemanagement/importeddeviceidentities":423,"GET /devicemanagement/importeddeviceidentities/{id}":423,"GET /devicemanagement/importedwindowsautopilotdeviceidentities":423,"GET /devicemanagement/importedwindowsautopilotdeviceidentities/{id}":423,"GET /devicemanagement/intents":420,"GET /devicemanagement/intents/{id}":420,"GET /devicemanagement/intents/{id}/assignments":420,"GET /devicemanagement/intents/{id}/assignments/{id}":420,"GET /devicemanagement/intents/{id}/categories":420,"GET /devicemanagement/intents/{id}/categories/{id}":420,"GET /devicemanagement/intents/{id}/categories/{id}/settingdefinitions":420,"GET /devicemanagement/intents/{id}/categories/{id}/settingdefinitions/{id}":420,"GET /devicemanagement/intents/{id}/categories/{id}/settings":420,"GET /devicemanagement/intents/{id}/categories/{id}/settings/{id}":420,"GET /devicemanagement/intents/{id}/compare":420,"GET /devicemanagement/intents/{id}/devicesettingstatesummaries":420,"GET /devicemanagement/intents/{id}/devicesettingstatesummaries/{id}":420,"GET /devicemanagement/intents/{id}/devicestates":420,"GET /devicemanagement/intents/{id}/devicestates/{id}":420,"GET /devicemanagement/intents/{id}/devicestatesummary":420,"GET /devicemanagement/intents/{id}/getcustomizedsettings":420,"GET /devicemanagement/intents/{id}/settings":420,"GET /devicemanagement/intents/{id}/settings/{id}":420,"GET /devicemanagement/intents/{id}/userstates":420,"GET /devicemanagement/intents/{id}/userstates/{id}":420,"GET /devicemanagement/intents/{id}/userstatesummary":420,"GET /devicemanagement/intunebrandingprofiles":423,"GET /devicemanagement/intunebrandingprofiles/{id}":423,"GET /devicemanagement/intunebrandingprofiles/{id}/assignments":423,"GET /devicemanagement/intunebrandingprofiles/{id}/assignments/{id}":423,"GET /devicemanagement/inventorycategories":420,"GET /devicemanagement/inventorycategories/{id}":420,"GET /devicemanagement/inventorypolicies/{id}/settings":420,"GET /devicemanagement/inventorypolicies/{id}/settings/{id}":420,"GET /devicemanagement/inventorysettings":420,"GET /devicemanagement/inventorysettings/{id}":420,"GET /devicemanagement/iosupdatestatuses":420,"GET /devicemanagement/iosupdatestatuses/{id}":420,"GET /devicemanagement/macossoftwareupdateaccountsummaries":420,"GET /devicemanagement/macossoftwareupdateaccountsummaries/{id}":420,"GET /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries":420,"GET /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}":420,"GET /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}/updatestatesummaries":420,"GET /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}/updatestatesummaries/{id}":420,"GET /devicemanagement/manageddevicecleanuprules":425,"GET /devicemanagement/manageddevicecleanuprules/{id}":425,"GET /devicemanagement/manageddeviceencryptionstates":420,"GET /devicemanagement/manageddeviceencryptionstates/{id}":420,"GET /devicemanagement/manageddeviceoverview":425,"GET /devicemanagement/manageddevices":425,"GET /devicemanagement/manageddevices/appdiagnostics":928,"GET /devicemanagement/manageddevices/retrievepowerliftappdiagnosticsdetails":928,"GET /devicemanagement/manageddevices/{id}":425,"GET /devicemanagement/manageddevices/{id}/getfilevaultkey":426,"GET /devicemanagement/manageddevices/{id}/retrievedevicelocaladminaccountdetail":425,"GET /devicemanagement/manageddevices/{id}/retrievemacosmanageddevicelocaladminaccountdetail":426,"GET /devicemanagement/manageddevices/{id}/retrieverecoverylockpasscode":426,"GET /devicemanagement/microsofttunnelconfigurations":420,"GET /devicemanagement/microsofttunnelconfigurations/{id}":420,"GET /devicemanagement/microsofttunnelhealththresholds":420,"GET /devicemanagement/microsofttunnelhealththresholds/{id}":420,"GET /devicemanagement/microsofttunnelserverlogcollectionresponses":420,"GET /devicemanagement/microsofttunnelserverlogcollectionresponses/{id}":420,"GET /devicemanagement/microsofttunnelsites":420,"GET /devicemanagement/microsofttunnelsites/{id}":420,"GET /devicemanagement/microsofttunnelsites/{id}/microsofttunnelconfiguration":420,"GET /devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers":420,"GET /devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}":420,"GET /devicemanagement/mobileapptroubleshootingevents":924,"GET /devicemanagement/mobileapptroubleshootingevents/{id}":924,"GET /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests":924,"GET /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}":924,"GET /devicemanagement/mobilethreatdefenseconnectors":423,"GET /devicemanagement/mobilethreatdefenseconnectors/{id}":423,"GET /devicemanagement/monitoring/alertrecords":229,"GET /devicemanagement/monitoring/alertrecords/getportalnotifications":229,"GET /devicemanagement/monitoring/alertrecords/{id}":229,"GET /devicemanagement/monitoring/alertrules":229,"GET /devicemanagement/monitoring/alertrules/{id}":229,"GET /devicemanagement/ndesconnectors":420,"GET /devicemanagement/ndesconnectors/{id}":420,"GET /devicemanagement/notificationmessagetemplates":420,"GET /devicemanagement/notificationmessagetemplates/{id}":420,"GET /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages":420,"GET /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages/{id}":420,"GET /devicemanagement/operationapprovalpolicies":434,"GET /devicemanagement/operationapprovalpolicies/getapprovableoperations":929,"GET /devicemanagement/operationapprovalpolicies/getoperationsrequiringapproval":929,"GET /devicemanagement/operationapprovalpolicies/retrieveapprovableoperations":930,"GET /devicemanagement/operationapprovalpolicies/retrieveoperationsrequiringapproval":930,"GET /devicemanagement/operationapprovalpolicies/{id}":434,"GET /devicemanagement/operationapprovalrequests":929,"GET /devicemanagement/operationapprovalrequests/retrievemyrequestbyid":930,"GET /devicemanagement/operationapprovalrequests/retrievemyrequests":930,"GET /devicemanagement/operationapprovalrequests/{id}":929,"GET /devicemanagement/privilegemanagementelevations":425,"GET /devicemanagement/privilegemanagementelevations/{id}":924,"GET /devicemanagement/remoteactionaudits":425,"GET /devicemanagement/remoteactionaudits/{id}":924,"GET /devicemanagement/remoteassistancepartners":423,"GET /devicemanagement/remoteassistancepartners/{id}":423,"GET /devicemanagement/remoteassistancesettings":430,"GET /devicemanagement/reports":420,"GET /devicemanagement/reports/cachedreportconfigurations":436,"GET /devicemanagement/reports/cachedreportconfigurations/{id}":436,"GET /devicemanagement/reports/exportjobs":436,"GET /devicemanagement/reports/exportjobs/{id}":436,"GET /devicemanagement/reports/reportschedules":436,"GET /devicemanagement/reports/reportschedules/{id}":436,"GET /devicemanagement/resourceaccessprofiles":423,"GET /devicemanagement/resourceaccessprofiles/{id}":423,"GET /devicemanagement/resourceaccessprofiles/{id}/assignments":423,"GET /devicemanagement/resourceaccessprofiles/{id}/assignments/{id}":423,"GET /devicemanagement/resourceoperations":434,"GET /devicemanagement/resourceoperations/{id}":434,"GET /devicemanagement/resourceoperations/{id}/getscopesforuser":929,"GET /devicemanagement/retrieveprojectflightingstatuses":917,"GET /devicemanagement/retrievetenantandroidpersonalworkprofilewebenrollmentenablement":917,"GET /devicemanagement/retrievetenantperpermissionsscopetagsetting":422,"GET /devicemanagement/retrieveuserroledetail":930,"GET /devicemanagement/reusablepolicysettings":922,"GET /devicemanagement/reusablepolicysettings/{id}":922,"GET /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies":922,"GET /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}":922,"GET /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}/retrievelatestupgradedefaultbaselinepolicy":922,"GET /devicemanagement/reusablesettings":420,"GET /devicemanagement/reusablesettings/{id}":420,"GET /devicemanagement/roleassignments":434,"GET /devicemanagement/roleassignments/{id}":434,"GET /devicemanagement/roledefinitions":434,"GET /devicemanagement/roledefinitions/{id}":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments/{id}":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/hascustomrolescopetag":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/{id}":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/{id}/assignments":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/{id}/assignments/{id}":434,"GET /devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition":434,"GET /devicemanagement/rolescopetags":434,"GET /devicemanagement/rolescopetags/hascustomrolescopetag":434,"GET /devicemanagement/rolescopetags/{id}":434,"GET /devicemanagement/scopedforresource":929,"GET /devicemanagement/settingdefinitions":420,"GET /devicemanagement/settingdefinitions/{id}":420,"GET /devicemanagement/softwareupdatestatussummary":420,"GET /devicemanagement/targetpayloadassignments":420,"GET /devicemanagement/targetpayloadassignments/{id}":420,"GET /devicemanagement/targetpayloadassignments/{id}/assignments":917,"GET /devicemanagement/templateinsights":420,"GET /devicemanagement/templateinsights/{id}":420,"GET /devicemanagement/templates":420,"GET /devicemanagement/templates/{id}":420,"GET /devicemanagement/templates/{id}/categories":420,"GET /devicemanagement/templates/{id}/categories/{id}":420,"GET /devicemanagement/templates/{id}/categories/{id}/recommendedsettings":420,"GET /devicemanagement/templates/{id}/categories/{id}/recommendedsettings/{id}":420,"GET /devicemanagement/templates/{id}/categories/{id}/settingdefinitions":420,"GET /devicemanagement/templates/{id}/categories/{id}/settingdefinitions/{id}":420,"GET /devicemanagement/templates/{id}/compare":420,"GET /devicemanagement/templates/{id}/migratableto":420,"GET /devicemanagement/templates/{id}/migratableto/{id}":420,"GET /devicemanagement/templates/{id}/migratableto/{id}/compare":420,"GET /devicemanagement/templates/{id}/securitybaselinetemplate/categorydevicestatesummaries":420,"GET /devicemanagement/templates/{id}/securitybaselinetemplate/categorydevicestatesummaries/{id}":420,"GET /devicemanagement/templates/{id}/securitybaselinetemplate/devicestates":420,"GET /devicemanagement/templates/{id}/securitybaselinetemplate/devicestates/{id}":420,"GET /devicemanagement/templates/{id}/securitybaselinetemplate/devicestatesummary":420,"GET /devicemanagement/templates/{id}/settings":420,"GET /devicemanagement/templates/{id}/settings/{id}":420,"GET /devicemanagement/templatesettings":420,"GET /devicemanagement/templatesettings/{id}":420,"GET /devicemanagement/tenantattachrbac":924,"GET /devicemanagement/tenantattachrbac/getstate":434,"GET /devicemanagement/termsandconditions":423,"GET /devicemanagement/termsandconditions/{id}":423,"GET /devicemanagement/termsandconditions/{id}/acceptancestatuses":423,"GET /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}":423,"GET /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}/termsandconditions":423,"GET /devicemanagement/termsandconditions/{id}/assignments":423,"GET /devicemanagement/termsandconditions/{id}/assignments/{id}":423,"GET /devicemanagement/termsandconditions/{id}/groupassignments":423,"GET /devicemanagement/termsandconditions/{id}/groupassignments/{id}":423,"GET /devicemanagement/termsandconditions/{id}/groupassignments/{id}/termsandconditions":423,"GET /devicemanagement/troubleshootingevents":425,"GET /devicemanagement/troubleshootingevents/{id}":425,"GET /devicemanagement/userexperienceanalyticsanomaly":425,"GET /devicemanagement/userexperienceanalyticsanomaly/{id}":924,"GET /devicemanagement/userexperienceanalyticsanomalycorrelationgroupoverview":425,"GET /devicemanagement/userexperienceanalyticsanomalycorrelationgroupoverview/{id}":924,"GET /devicemanagement/userexperienceanalyticsanomalydevice":425,"GET /devicemanagement/userexperienceanalyticsanomalydevice/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformance":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformance/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion":425,"GET /devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance":425,"GET /devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthdeviceperformance":425,"GET /devicemanagement/userexperienceanalyticsapphealthdeviceperformance/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails":425,"GET /devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthosversionperformance":425,"GET /devicemanagement/userexperienceanalyticsapphealthosversionperformance/{id}":924,"GET /devicemanagement/userexperienceanalyticsapphealthoverview":425,"GET /devicemanagement/userexperienceanalyticsbaselines":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/apphealthmetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/batteryhealthmetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/bestpracticesmetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues":924,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues/{id}":924,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/rebootanalyticsmetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/resourceperformancemetrics":425,"GET /devicemanagement/userexperienceanalyticsbaselines/{id}/workfromanywheremetrics":425,"GET /devicemanagement/userexperienceanalyticsbatteryhealthappimpact":425,"GET /devicemanagement/userexperienceanalyticsbatteryhealthappimpact/{id}":924,"GET /devicemanagement/userexperienceanalyticsbatteryhealthcapacitydetails":425,"GET /devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact":425,"GET /devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact/{id}":924,"GET /devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance":425,"GET /devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance/{id}":425,"GET /devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory":425,"GET /devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory/{id}":924,"GET /devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance":425,"GET /devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance/{id}":924,"GET /devicemanagement/userexperienceanalyticsbatteryhealthosperformance":425,"GET /devicemanagement/userexperienceanalyticsbatteryhealthosperformance/{id}":924,"GET /devicemanagement/userexperienceanalyticsbatteryhealthruntimedetails":425,"GET /devicemanagement/userexperienceanalyticscategories/{id}":425,"GET /devicemanagement/userexperienceanalyticsdevicemetrichistory":425,"GET /devicemanagement/userexperienceanalyticsdevicemetrichistory/{id}":924,"GET /devicemanagement/userexperienceanalyticsdeviceperformance":425,"GET /devicemanagement/userexperienceanalyticsdeviceperformance/summarizedeviceperformancedevices":924,"GET /devicemanagement/userexperienceanalyticsdeviceperformance/{id}":425,"GET /devicemanagement/userexperienceanalyticsdevicescope":924,"GET /devicemanagement/userexperienceanalyticsdevicescopes":425,"GET /devicemanagement/userexperienceanalyticsdevicescopes/{id}":924,"GET /devicemanagement/userexperienceanalyticsdevicescores":425,"GET /devicemanagement/userexperienceanalyticsdevicescores/{id}":425,"GET /devicemanagement/userexperienceanalyticsdevicestartuphistory":425,"GET /devicemanagement/userexperienceanalyticsdevicestartuphistory/{id}":924,"GET /devicemanagement/userexperienceanalyticsdevicestartupprocesses":425,"GET /devicemanagement/userexperienceanalyticsdevicestartupprocesses/{id}":924,"GET /devicemanagement/userexperienceanalyticsdevicestartupprocessperformance":425,"GET /devicemanagement/userexperienceanalyticsdevicestartupprocessperformance/{id}":924,"GET /devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity":425,"GET /devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity/{id}":924,"GET /devicemanagement/userexperienceanalyticsdevicetimelineevents/{id}":924,"GET /devicemanagement/userexperienceanalyticsimpactingprocess":425,"GET /devicemanagement/userexperienceanalyticsimpactingprocess/{id}":924,"GET /devicemanagement/userexperienceanalyticsmetrichistory":425,"GET /devicemanagement/userexperienceanalyticsmetrichistory/{id}":924,"GET /devicemanagement/userexperienceanalyticsmetrichistory/{id}/userexperienceanalyticsmetric":924,"GET /devicemanagement/userexperienceanalyticsmodelscores":425,"GET /devicemanagement/userexperienceanalyticsmodelscores/{id}":924,"GET /devicemanagement/userexperienceanalyticsnotautopilotreadydevice":425,"GET /devicemanagement/userexperienceanalyticsnotautopilotreadydevice/{id}":924,"GET /devicemanagement/userexperienceanalyticsoverview":425,"GET /devicemanagement/userexperienceanalyticsregressionsummary":924,"GET /devicemanagement/userexperienceanalyticsregressionsummary/summarizedeviceregressionperformance":924,"GET /devicemanagement/userexperienceanalyticsremoteconnection":425,"GET /devicemanagement/userexperienceanalyticsremoteconnection/summarizedeviceremoteconnection":429,"GET /devicemanagement/userexperienceanalyticsremoteconnection/{id}":924,"GET /devicemanagement/userexperienceanalyticsresourceperformance":425,"GET /devicemanagement/userexperienceanalyticsresourceperformance/summarizedeviceresourceperformance":429,"GET /devicemanagement/userexperienceanalyticsresourceperformance/{id}":425,"GET /devicemanagement/userexperienceanalyticsscorehistory":425,"GET /devicemanagement/userexperienceanalyticsscorehistory/{id}":924,"GET /devicemanagement/userexperienceanalyticssummarizeddevicescopes":425,"GET /devicemanagement/userexperienceanalyticssummarizeworkfromanywheredevices":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywherehardwarereadinessmetric":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremetrics":924,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}":924,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices/{id}":924,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance":425,"GET /devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance/{id}":924,"GET /devicemanagement/userpfxcertificates":420,"GET /devicemanagement/userpfxcertificates/{id}":420,"GET /devicemanagement/verifywindowsenrollmentautodiscovery":427,"GET /devicemanagement/virtualendpoint/auditevents":228,"GET /devicemanagement/virtualendpoint/auditevents/getauditactivitytypes":228,"GET /devicemanagement/virtualendpoint/auditevents/{id}":228,"GET /devicemanagement/virtualendpoint/bulkactions":228,"GET /devicemanagement/virtualendpoint/bulkactions/{id}":228,"GET /devicemanagement/virtualendpoint/cloudapps":841,"GET /devicemanagement/virtualendpoint/cloudapps/retrievediscoveredapps(sourceid={id},provisioningpolicyid=@provisioningpolicyid)":228,"GET /devicemanagement/virtualendpoint/cloudapps/{id}":228,"GET /devicemanagement/virtualendpoint/cloudpcpools":228,"GET /devicemanagement/virtualendpoint/cloudpcpools/{id}":228,"GET /devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments":228,"GET /devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments/{id}":228,"GET /devicemanagement/virtualendpoint/cloudpcs":228,"GET /devicemanagement/virtualendpoint/cloudpcs/getprovisionedcloudpcs(groupid='{id}',serviceplanid='{id}')":228,"GET /devicemanagement/virtualendpoint/cloudpcs/retrievecloudpccountbystatus":228,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}":228,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}/getcloudpcconnectivityhistory":228,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}/getcloudpclaunchinfo":229,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}/getfrontlinecloudpcaccessstate":838,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}/getsupportedcloudpcremoteactions":839,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}/retrievecloudpcremoteactionresults":227,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}/retrievefrontlinecloudpcdetail":228,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}/retrievereviewstatus":228,"GET /devicemanagement/virtualendpoint/cloudpcs/{id}/retrievesnapshots":227,"GET /devicemanagement/virtualendpoint/crosscloudgovernmentorganizationmapping":229,"GET /devicemanagement/virtualendpoint/deviceimages":228,"GET /devicemanagement/virtualendpoint/deviceimages/getsourceimages":228,"GET /devicemanagement/virtualendpoint/deviceimages/{id}":228,"GET /devicemanagement/virtualendpoint/externalpartners":228,"GET /devicemanagement/virtualendpoint/externalpartners/{id}":228,"GET /devicemanagement/virtualendpoint/externalpartners/{id}/retrieveactionreports":228,"GET /devicemanagement/virtualendpoint/externalpartners/{id}/retrievedeployagentactionresults(activityid='{id}',cloudpcid='{id}')":228,"GET /devicemanagement/virtualendpoint/externalpartnersettings":228,"GET /devicemanagement/virtualendpoint/externalpartnersettings/{id}":228,"GET /devicemanagement/virtualendpoint/frontlineserviceplans":228,"GET /devicemanagement/virtualendpoint/frontlineserviceplans/{id}":228,"GET /devicemanagement/virtualendpoint/galleryimages":228,"GET /devicemanagement/virtualendpoint/galleryimages/{id}":228,"GET /devicemanagement/virtualendpoint/geteffectivepermissions":229,"GET /devicemanagement/virtualendpoint/managedlicenses":228,"GET /devicemanagement/virtualendpoint/onpremisesconnections":228,"GET /devicemanagement/virtualendpoint/onpremisesconnections/{id}":228,"GET /devicemanagement/virtualendpoint/organizationsettings":840,"GET /devicemanagement/virtualendpoint/provisioningpolicies":228,"GET /devicemanagement/virtualendpoint/provisioningpolicies/{id}":228,"GET /devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/cloudpcusersettingspersistence/retrieveusersettingspersistenceprofiles(configurationid='{id}')":841,"GET /devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/cloudpcusersettingspersistence/retrieveusersettingspersistenceprofileusage(configurationid='{id}')":841,"GET /devicemanagement/virtualendpoint/provisioningpolicies/{id}/retrievepolicyapplyactionresult":227,"GET /devicemanagement/virtualendpoint/provisioningpolicies/{id}/retrievepolicyapplyschedule":227,"GET /devicemanagement/virtualendpoint/provisioningpolicies/{id}/retrievepolicyupdatestatusresult":227,"GET /devicemanagement/virtualendpoint/reports/exportjobs/{id}":227,"GET /devicemanagement/virtualendpoint/reports/getrealtimeremoteconnectionlatency(cloudpcid='id')":228,"GET /devicemanagement/virtualendpoint/reports/getrealtimeremoteconnectionstatus(cloudpcid='id')":228,"GET /devicemanagement/virtualendpoint/retrieveorganizationactiondetail(actiontype='{id}')":230,"GET /devicemanagement/virtualendpoint/retrievescopedpermissions":229,"GET /devicemanagement/virtualendpoint/retrievetenantencryptionsetting":1079,"GET /devicemanagement/virtualendpoint/serviceplans":228,"GET /devicemanagement/virtualendpoint/snapshots/getstorageaccounts(subscriptionid='{id}')":228,"GET /devicemanagement/virtualendpoint/snapshots/getsubscriptions":228,"GET /devicemanagement/virtualendpoint/snapshots/retrievesnapshotimportresult(snapshotid='{id}')":228,"GET /devicemanagement/virtualendpoint/supportedregions":228,"GET /devicemanagement/virtualendpoint/usersettings":228,"GET /devicemanagement/virtualendpoint/usersettings/{id}":228,"GET /devicemanagement/windowsautopilotdeploymentprofiles":423,"GET /devicemanagement/windowsautopilotdeploymentprofiles/{id}":423,"GET /devicemanagement/windowsautopilotdeviceidentities":423,"GET /devicemanagement/windowsautopilotdeviceidentities/{id}":423,"GET /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile":423,"GET /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/activedirectorywindowsautopilotdeploymentprofile/domainjoinconfiguration":430,"GET /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices":423,"GET /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}":423,"GET /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assignments":430,"GET /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assignments/{id}":430,"GET /devicemanagement/windowsautopilotdeviceidentities/{id}/intendeddeploymentprofile":423,"GET /devicemanagement/windowsautopilotsettings":423,"GET /devicemanagement/windowsdriverupdateprofiles":420,"GET /devicemanagement/windowsdriverupdateprofiles/{id}":420,"GET /devicemanagement/windowsdriverupdateprofiles/{id}/assignments":420,"GET /devicemanagement/windowsdriverupdateprofiles/{id}/assignments/{id}":420,"GET /devicemanagement/windowsdriverupdateprofiles/{id}/driverinventories":420,"GET /devicemanagement/windowsdriverupdateprofiles/{id}/driverinventories/{id}":420,"GET /devicemanagement/windowsfeatureupdateprofiles":420,"GET /devicemanagement/windowsfeatureupdateprofiles/{id}":420,"GET /devicemanagement/windowsfeatureupdateprofiles/{id}/assignments":420,"GET /devicemanagement/windowsfeatureupdateprofiles/{id}/assignments/{id}":420,"GET /devicemanagement/windowsinformationprotectionapplearningsummaries":417,"GET /devicemanagement/windowsinformationprotectionapplearningsummaries/{id}":417,"GET /devicemanagement/windowsinformationprotectionnetworklearningsummaries":417,"GET /devicemanagement/windowsinformationprotectionnetworklearningsummaries/{id}":417,"GET /devicemanagement/windowsmalwareinformation":425,"GET /devicemanagement/windowsmalwareinformation/{id}":425,"GET /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates":924,"GET /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}":924,"GET /devicemanagement/windowsqualityupdatepolicies":420,"GET /devicemanagement/windowsqualityupdatepolicies/{id}":420,"GET /devicemanagement/windowsqualityupdatepolicies/{id}/assignments":420,"GET /devicemanagement/windowsqualityupdatepolicies/{id}/assignments/{id}":420,"GET /devicemanagement/windowsqualityupdatepolicies/{id}/retrievewindowsqualityupdatecatalogitemdetails":917,"GET /devicemanagement/windowsqualityupdateprofiles":420,"GET /devicemanagement/windowsqualityupdateprofiles/{id}":420,"GET /devicemanagement/windowsqualityupdateprofiles/{id}/assignments":420,"GET /devicemanagement/windowsqualityupdateprofiles/{id}/assignments/{id}":420,"GET /devicemanagement/windowsupdatecatalogitems":420,"GET /devicemanagement/windowsupdatecatalogitems/{id}":420,"GET /devicemanagement/windowsupdatecatalogitems/{id}/retrievewindowsqualityupdatecatalogitemdetails":917,"GET /devicemanagement/zebrafotaartifacts":420,"GET /devicemanagement/zebrafotaartifacts/{id}":420,"GET /devices":268,"GET /devices(deviceid='{id}')":268,"GET /devices(deviceid='{id}')/memberof":268,"GET /devices(deviceid='{id}')/registeredowners":268,"GET /devices(deviceid='{id}')/registeredusers":268,"GET /devices(deviceid='{id}')/transitivememberof":268,"GET /devices(deviceid='{id}')/usagerights":268,"GET /devices/delta":267,"GET /devices/{id}":268,"GET /devices/{id}/cloudlicensing/usagerights":830,"GET /devices/{id}/cloudlicensing/waitingmembers":831,"GET /devices/{id}/memberof":268,"GET /devices/{id}/registeredowners":268,"GET /devices/{id}/registeredusers":268,"GET /devices/{id}/transitivememberof":268,"GET /devices/{id}/usagerights":268,"GET /directory/administrativeunits":17,"GET /directory/administrativeunits/{id}":17,"GET /directory/attributesets":63,"GET /directory/attributesets/{id}":63,"GET /directory/authenticationmethoddevices/hardwareoathdevices":801,"GET /directory/authenticationmethoddevices/hardwareoathdevices/{id}":801,"GET /directory/certificateauthorities/certificatebasedapplicationconfigurations":817,"GET /directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}":817,"GET /directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities":817,"GET /directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}":817,"GET /directory/certificateauthorities/mutualtlsoauthconfigurations/{id}":950,"GET /directory/customsecurityattributedefinitions":63,"GET /directory/customsecurityattributedefinitions/{id}":63,"GET /directory/customsecurityattributedefinitions/{id}/allowedvalues":63,"GET /directory/customsecurityattributedefinitions/{id}/allowedvalues/{id}":63,"GET /directory/devicelocalcredentials":271,"GET /directory/devicelocalcredentials/{id}":271,"GET /directory/externaluserprofiles/{id}":856,"GET /directory/federationconfigurations/graph.samlorwsfedexternaldomainfederation":287,"GET /directory/federationconfigurations/samlorwsfedexternaldomainfederation/{id}/domains":392,"GET /directory/inboundshareduserprofiles":857,"GET /directory/inboundshareduserprofiles/{id}":858,"GET /directory/onpremisessynchronization":480,"GET /directory/outboundshareduserprofiles":858,"GET /directory/outboundshareduserprofiles/{id}":858,"GET /directory/outboundshareduserprofiles/{id}/tenants":858,"GET /directory/pendingexternaluserprofiles/{id}":859,"GET /directory/publickeyinfrastructure/certificatebasedauthconfigurations":158,"GET /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}":158,"GET /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities":158,"GET /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities/{id}":158,"GET /directory/recommendationconfiguration":996,"GET /directory/recommendations":860,"GET /directory/recommendations/tenantsecurescores":860,"GET /directory/recommendations/{id}":860,"GET /directory/recommendations/{id}/impactedresources":860,"GET /directory/recommendations/{id}/impactedresources/{id}":860,"GET /directory/recovery/snapshots":339,"GET /directory/recovery/snapshots/{id}":339,"GET /directory/recovery/snapshots/{id}/recoveryjobs/{id}/getfailedchanges":339,"GET /directory/recovery/snapshots/{id}/recoverypreviewjobs/{id}/getchanges":339,"GET /directory/remotetenantgroups":275,"GET /directory/remotetenantgroups/{id}":275,"GET /directory/subscriptions":235,"GET /directory/subscriptions(commercesubscriptionid='{id}')":235,"GET /directory/subscriptions/{id}":235,"GET /directory/templates/devicetemplates":1052,"GET /directory/templates/devicetemplates/{id}":853,"GET /directory/templates/devicetemplates/{id}/owners":853,"GET /directory/tenantgovernance/governanceinvitations":674,"GET /directory/tenantgovernance/governanceinvitations/{id}":674,"GET /directory/tenantgovernance/governancepolicytemplates":675,"GET /directory/tenantgovernance/governancepolicytemplates/default":675,"GET /directory/tenantgovernance/governancepolicytemplates/{id}":675,"GET /directory/tenantgovernance/governancerelationships":676,"GET /directory/tenantgovernance/governancerelationships/{id}":676,"GET /directory/tenantgovernance/governancerequests":678,"GET /directory/tenantgovernance/governancerequests/{id}":678,"GET /directory/tenantgovernance/relatedtenants":680,"GET /directory/tenantgovernance/relatedtenants/refreshstatus":680,"GET /directory/tenantgovernance/relatedtenants/{id}":680,"GET /directory/tenantgovernance/settings":683,"GET /directoryobjects/{id}":278,"GET /directoryroles":18,"GET /directoryroles(roletemplateid='{id}')":281,"GET /directoryroles(roletemplateid='{id}')/members":18,"GET /directoryroles(roletemplateid='{id}')/scopedmembers":281,"GET /directoryroles/delta":281,"GET /directoryroles/{id}":281,"GET /directoryroles/{id}/members":18,"GET /directoryroles/{id}/scopedmembers":281,"GET /directoryroletemplates":281,"GET /directoryroletemplates/{id}":281,"GET /directorysettingtemplates":390,"GET /directorysettingtemplates/{id}":390,"GET /domains":286,"GET /domains/contoso.com/rootdomain":285,"GET /domains/{id}":286,"GET /domains/{id}/domainnamereferences":287,"GET /domains/{id}/federationconfiguration":288,"GET /domains/{id}/federationconfiguration/{id}":414,"GET /domains/{id}/serviceconfigurationrecords":287,"GET /domains/{id}/verificationdnsrecords":287,"GET /drive/items/{id}/content":299,"GET /drive/items/{id}/workbook/comments/{id}/replies/{id}":187,"GET /drive/root/createdbyuser/planner/plans":510,"GET /drive/root/createdbyuser/trendingaround":1074,"GET /drive/root/lastmodifiedbyuser/trendingaround":1074,"GET /drive/root:/{id}:/content":299,"GET /drives/{id}":366,"GET /drives/{id}/activities":293,"GET /drives/{id}/items/{id}":301,"GET /drives/{id}/items/{id}/activities":293,"GET /drives/{id}/items/{id}/analytics":293,"GET /drives/{id}/items/{id}/children":300,"GET /drives/{id}/items/{id}/content":300,"GET /drives/{id}/items/{id}/contentstream":300,"GET /drives/{id}/items/{id}/getactivitiesbyinterval(startdatetime={id},enddatetime={id},interval={id})":300,"GET /drives/{id}/items/{id}/permissions":293,"GET /drives/{id}/items/{id}/permissions/{id}":300,"GET /drives/{id}/items/{id}/retentionlabel":302,"GET /drives/{id}/items/{id}/thumbnails":293,"GET /drives/{id}/items/{id}/versions":293,"GET /drives/{id}/items/{id}/versions/{id}":293,"GET /drives/{id}/items/{id}/versions/{id}/content":293,"GET /drives/{id}/list/subscriptions/socketio":632,"GET /drives/{id}/root/delta":293,"GET /drives/{id}/root/search(q='{id}')":293,"GET /drives/{id}/root/subscriptions/socketio":632,"GET /drives/{id}/root:/{id}":301,"GET /education/classes":316,"GET /education/classes/delta":315,"GET /education/classes/{id}":316,"GET /education/classes/{id}/assignmentcategories":310,"GET /education/classes/{id}/assignmentcategories/delta":310,"GET /education/classes/{id}/assignmentcategories/{id}":310,"GET /education/classes/{id}/assignmentdefaults":310,"GET /education/classes/{id}/assignments":310,"GET /education/classes/{id}/assignments/delta":310,"GET /education/classes/{id}/assignments/{id}":310,"GET /education/classes/{id}/assignments/{id}/categories":310,"GET /education/classes/{id}/assignments/{id}/categories/delta":310,"GET /education/classes/{id}/assignments/{id}/resources":310,"GET /education/classes/{id}/assignments/{id}/resources/{id}":310,"GET /education/classes/{id}/assignments/{id}/resources/{id}/dependentresources":313,"GET /education/classes/{id}/assignments/{id}/rubric":310,"GET /education/classes/{id}/assignments/{id}/submissions":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/outcomes":317,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/resources":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources":313,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources":310,"GET /education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}":310,"GET /education/classes/{id}/assignmentsettings":310,"GET /education/classes/{id}/assignmentsettings/gradingschemes/{id}":322,"GET /education/classes/{id}/getrecentlymodifiedsubmissions":317,"GET /education/classes/{id}/members":318,"GET /education/classes/{id}/modules":319,"GET /education/classes/{id}/modules/{id}":319,"GET /education/classes/{id}/modules/{id}/resources":319,"GET /education/classes/{id}/modules/{id}/resources/{id}":319,"GET /education/classes/{id}/schools":316,"GET /education/classes/{id}/teachers":316,"GET /education/me":316,"GET /education/me/assignments":310,"GET /education/me/classes":316,"GET /education/me/rubrics":322,"GET /education/me/rubrics/{id}":322,"GET /education/me/schools":316,"GET /education/reports/readingassignmentsubmissions":568,"GET /education/reports/readingcoachpassages":568,"GET /education/reports/reflectcheckinresponses":569,"GET /education/reports/speakerassignmentsubmissions":568,"GET /education/schools":316,"GET /education/schools/delta":323,"GET /education/schools/{id}/classes":316,"GET /education/schools/{id}/users":325,"GET /education/users":325,"GET /education/users/delta":323,"GET /education/users/schools":316,"GET /education/users/{id}":316,"GET /education/users/{id}/assignments":310,"GET /education/users/{id}/classes":316,"GET /education/users/{id}/schools":316,"GET /employeeexperience/communities":234,"GET /employeeexperience/communities/{id}":234,"GET /employeeexperience/engagementasyncoperations/{id}":336,"GET /employeeexperience/goals/exportjobs":874,"GET /employeeexperience/goals/exportjobs/{id}":874,"GET /employeeexperience/learningcourseactivities/{id}":440,"GET /employeeexperience/learningproviders":332,"GET /employeeexperience/learningproviders/{id}":332,"GET /employeeexperience/learningproviders/{id}/learningcontents":438,"GET /employeeexperience/learningproviders/{id}/learningcontents(externalid='{id}')":438,"GET /employeeexperience/learningproviders/{id}/learningcontents/{id}":438,"GET /employeeexperience/learningproviders/{id}/learningcourseactivities(externalcourseactivityid={id})":440,"GET /employeeexperience/roles":333,"GET /employeeexperience/roles/{id}/members":333,"GET /external/connections":350,"GET /external/connections/{id}":350,"GET /external/connections/{id}/items/{id}":355,"GET /external/connections/{id}/operations/{id}":350,"GET /external/connections/{id}/quota":869,"GET /external/connections/{id}/schema":350,"GET /external/industrydata/dataconnectors":902,"GET /external/industrydata/dataconnectors/{id}":902,"GET /external/industrydata/dataconnectors/{id}/industrydata.azuredatalakeconnector/getuploadsession":897,"GET /external/industrydata/inboundflows":901,"GET /external/industrydata/inboundflows/{id}":901,"GET /external/industrydata/inboundflows/{id}/dataconnector":902,"GET /external/industrydata/inboundflows/{id}/year":914,"GET /external/industrydata/operations":899,"GET /external/industrydata/operations/{id}":899,"GET /external/industrydata/outboundprovisioningflowsets":904,"GET /external/industrydata/outboundprovisioningflowsets/{id}":904,"GET /external/industrydata/outboundprovisioningflowsets/{id}/provisioningflows":896,"GET /external/industrydata/outboundprovisioningflowsets/{id}/provisioningflows/{id}":896,"GET /external/industrydata/referencedefinitions":909,"GET /external/industrydata/referencedefinitions/{id}":908,"GET /external/industrydata/rolegroups":899,"GET /external/industrydata/rolegroups/{id}":910,"GET /external/industrydata/runs":905,"GET /external/industrydata/runs/{id}":905,"GET /external/industrydata/runs/{id}/getstatistics":905,"GET /external/industrydata/sourcesystems":912,"GET /external/industrydata/sourcesystems/{id}":912,"GET /external/industrydata/sourcesystems/{id}/sourcesystem":912,"GET /external/industrydata/years":914,"GET /external/industrydata/years/{id}":914,"GET /filteringprofiles/{id}/policies":956,"GET /financials/companies":864,"GET /financials/companies/{id}/accounts/{id}":864,"GET /financials/companies/{id}/agedaccountspayable":864,"GET /financials/companies/{id}/agedaccountsreceivable":864,"GET /financials/companies/{id}/companyinformation/{id}":864,"GET /financials/companies/{id}/countriesregions/{id}":864,"GET /financials/companies/{id}/currencies/{id}":864,"GET /financials/companies/{id}/customerpaymentjournals/{id}":864,"GET /financials/companies/{id}/customerpaymentjournals/{id}/customerpayments/{id}":864,"GET /financials/companies/{id}/customers/{id}":864,"GET /financials/companies/{id}/dimensions/{id}":864,"GET /financials/companies/{id}/dimensions/{id}/dimensionvalues/{id}":864,"GET /financials/companies/{id}/employees/{id}":864,"GET /financials/companies/{id}/generalledgerentries/{id}":864,"GET /financials/companies/{id}/itemcategories/{id}":864,"GET /financials/companies/{id}/items/{id}":864,"GET /financials/companies/{id}/journals/{id}":864,"GET /financials/companies/{id}/journals/{id}/journallines/{id}":864,"GET /financials/companies/{id}/paymentmethods/{id}":864,"GET /financials/companies/{id}/paymentterms/{id}":864,"GET /financials/companies/{id}/shipmentmethods/{id}":864,"GET /financials/companies/{id}/taxareas/{id}":864,"GET /financials/companies/{id}/taxgroups/{id}":864,"GET /financials/companies/{id}/unitsofmeasure/{id}":864,"GET /financials/companies/{id}/vendors/{id}":864,"GET /grouplifecyclepolicies":245,"GET /grouplifecyclepolicies/{id}":245,"GET /groups":385,"GET /groups/delta":373,"GET /groups/{id}":375,"GET /groups/{id}/acceptedsenders":374,"GET /groups/{id}/approleassignments":376,"GET /groups/{id}/calendar/events":374,"GET /groups/{id}/calendar/events/delta":868,"GET /groups/{id}/calendar/events/{id}":374,"GET /groups/{id}/calendar/events/{id}/instances":146,"GET /groups/{id}/calendarview":377,"GET /groups/{id}/cloudlicensing/assignments":822,"GET /groups/{id}/cloudlicensing/assignments/{id}":822,"GET /groups/{id}/cloudlicensing/assignments/{id}/allotment":822,"GET /groups/{id}/cloudlicensing/usagerights":833,"GET /groups/{id}/cloudlicensing/usagerights/{id}":835,"GET /groups/{id}/cloudlicensing/usagerights/{id}/assignments":836,"GET /groups/{id}/conversations":248,"GET /groups/{id}/conversations/{id}":248,"GET /groups/{id}/conversations/{id}/threads":248,"GET /groups/{id}/conversations/{id}/threads/{id}":248,"GET /groups/{id}/conversations/{id}/threads/{id}/posts":248,"GET /groups/{id}/conversations/{id}/threads/{id}/posts/{id}":248,"GET /groups/{id}/conversations/{id}/threads/{id}/posts/{id}/attachments":515,"GET /groups/{id}/drive":291,"GET /groups/{id}/drive/items/{id}":301,"GET /groups/{id}/drive/items/{id}/children":300,"GET /groups/{id}/drive/items/{id}/content":300,"GET /groups/{id}/drive/items/{id}/contentstream":300,"GET /groups/{id}/drive/items/{id}/permissions":293,"GET /groups/{id}/drive/items/{id}/permissions/{id}":300,"GET /groups/{id}/drive/items/{id}/thumbnails":293,"GET /groups/{id}/drive/items/{id}/versions":293,"GET /groups/{id}/drive/items/{id}/versions/{id}":293,"GET /groups/{id}/drive/items/{id}/versions/{id}/content":293,"GET /groups/{id}/drive/root/delta":293,"GET /groups/{id}/drive/root/search(q='{id}')":293,"GET /groups/{id}/drive/root/subscriptions/socketio":632,"GET /groups/{id}/drive/root:/{id}":301,"GET /groups/{id}/drives":293,"GET /groups/{id}/endpoints":274,"GET /groups/{id}/endpoints/{id}":274,"GET /groups/{id}/events":374,"GET /groups/{id}/events/delta":868,"GET /groups/{id}/events/{id}":374,"GET /groups/{id}/events/{id}/attachments":342,"GET /groups/{id}/events/{id}/instances":146,"GET /groups/{id}/grouplifecyclepolicies":245,"GET /groups/{id}/memberof":378,"GET /groups/{id}/members":379,"GET /groups/{id}/onenote/notebooks":471,"GET /groups/{id}/onenote/notebooks/{id}":471,"GET /groups/{id}/onenote/notebooks/{id}/sectiongroups":471,"GET /groups/{id}/onenote/notebooks/{id}/sections":471,"GET /groups/{id}/onenote/operations/{id}":471,"GET /groups/{id}/onenote/pages":476,"GET /groups/{id}/onenote/pages/{id}":492,"GET /groups/{id}/onenote/resources/{id}/content":476,"GET /groups/{id}/onenote/sectiongroups":471,"GET /groups/{id}/onenote/sectiongroups/{id}":471,"GET /groups/{id}/onenote/sectiongroups/{id}/sectiongroups":471,"GET /groups/{id}/onenote/sectiongroups/{id}/sections":471,"GET /groups/{id}/onenote/sections":471,"GET /groups/{id}/onenote/sections/{id}":471,"GET /groups/{id}/onenote/sections/{id}/pages":476,"GET /groups/{id}/owners":380,"GET /groups/{id}/permissiongrants":381,"GET /groups/{id}/photo":553,"GET /groups/{id}/photo/$value":553,"GET /groups/{id}/photos":382,"GET /groups/{id}/photos/{id}":553,"GET /groups/{id}/planner/plans":509,"GET /groups/{id}/planner/plans/delta":984,"GET /groups/{id}/planner/plans_v2":983,"GET /groups/{id}/rejectedsenders":374,"GET /groups/{id}/settings":383,"GET /groups/{id}/settings/{id}":383,"GET /groups/{id}/sites/root":124,"GET /groups/{id}/threads":248,"GET /groups/{id}/threads/{id}":248,"GET /groups/{id}/threads/{id}/posts":248,"GET /groups/{id}/threads/{id}/posts/{id}":248,"GET /groups/{id}/threads/{id}/posts/{id}/attachments":515,"GET /groups/{id}/transitivememberof":384,"GET /groups/{id}/transitivemembers":379,"GET /identity/apiconnectors":391,"GET /identity/apiconnectors/{id}":391,"GET /identity/authenticationeventlisteners":99,"GET /identity/authenticationeventlisteners/{id}":99,"GET /identity/authenticationeventsflows":99,"GET /identity/authenticationeventsflows/{id}":99,"GET /identity/authenticationeventsflows/{id}/conditions/applications/includeapplications":99,"GET /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onattributecollection/onattributecollectionexternalusersselfservicesignup/attributes":99,"GET /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onauthenticationmethodloadstart/onauthenticationmethodloadstartexternalusersselfservicesignup/identityproviders":99,"GET /identity/b2cuserflows":114,"GET /identity/b2cuserflows/{id}":114,"GET /identity/b2cuserflows/{id}/identityproviders":113,"GET /identity/b2cuserflows/{id}/languages":114,"GET /identity/b2cuserflows/{id}/languages/{id}/defaultpages":114,"GET /identity/b2cuserflows/{id}/languages/{id}/defaultpages/{id}/$value":114,"GET /identity/b2cuserflows/{id}/languages/{id}/overridespages":114,"GET /identity/b2cuserflows/{id}/languages/{id}/overridespages/{id}/$value":114,"GET /identity/b2cuserflows/{id}/userattributeassignments":114,"GET /identity/b2cuserflows/{id}/userattributeassignments/getorder":114,"GET /identity/b2cuserflows/{id}/userattributeassignments/{id}":114,"GET /identity/b2cuserflows/{id}/userflowidentityproviders":113,"GET /identity/b2xuserflows":114,"GET /identity/b2xuserflows/{id}":114,"GET /identity/b2xuserflows/{id}/identityproviders":113,"GET /identity/b2xuserflows/{id}/languages":114,"GET /identity/b2xuserflows/{id}/languages/{id}/defaultpages":114,"GET /identity/b2xuserflows/{id}/languages/{id}/defaultpages/{id}/$value":114,"GET /identity/b2xuserflows/{id}/languages/{id}/overridespages":114,"GET /identity/b2xuserflows/{id}/languages/{id}/overridespages/{id}/$value":114,"GET /identity/b2xuserflows/{id}/userattributeassignments":114,"GET /identity/b2xuserflows/{id}/userattributeassignments/getorder":114,"GET /identity/b2xuserflows/{id}/userattributeassignments/{id}":114,"GET /identity/b2xuserflows/{id}/userflowidentityproviders":113,"GET /identity/conditionalaccess/authenticationcontextclassreferences":238,"GET /identity/conditionalaccess/authenticationcontextclassreferences/{id}":101,"GET /identity/conditionalaccess/authenticationstrength/authenticationmethodmodes":96,"GET /identity/conditionalaccess/authenticationstrength/authenticationmethodmodes/{id}":96,"GET /identity/conditionalaccess/authenticationstrength/combinations":96,"GET /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations":96,"GET /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}":96,"GET /identity/conditionalaccess/namedlocations":236,"GET /identity/conditionalaccess/namedlocations/{id}":236,"GET /identity/conditionalaccess/policies":236,"GET /identity/conditionalaccess/policies/{id}":236,"GET /identity/conditionalaccess/templates":236,"GET /identity/conditionalaccess/templates/{id}":236,"GET /identity/continuousaccessevaluationpolicy":236,"GET /identity/customauthenticationextensions":260,"GET /identity/customauthenticationextensions/{id}":260,"GET /identity/events/onsignupstart":10,"GET /identity/events/onsignupstart/{id}":10,"GET /identity/identityproviders":392,"GET /identity/identityproviders/availableprovidertypes":392,"GET /identity/identityproviders/{id}":392,"GET /identity/riskprevention/fraudprotectionproviders":368,"GET /identity/riskprevention/fraudprotectionproviders/{id}":368,"GET /identity/riskprevention/webapplicationfirewallproviders":368,"GET /identity/riskprevention/webapplicationfirewallproviders/{id}":368,"GET /identity/riskprevention/webapplicationfirewallverifications":571,"GET /identity/riskprevention/webapplicationfirewallverifications/{id}":368,"GET /identity/signinidentifiers/{id}":1036,"GET /identity/userflowattributes":114,"GET /identity/userflowattributes/{id}":114,"GET /identity/userflows":114,"GET /identity/userflows/{id}":114,"GET /identity/verifiedid/profiles":407,"GET /identity/verifiedid/profiles/{id}":407,"GET /identitygovernance/accessreviews/definitions":7,"GET /identitygovernance/accessreviews/definitions/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/contactedreviewers":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/{id}":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/filterbycurrentuser(on='reviewer')":7,"GET /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}":7,"GET /identitygovernance/accessreviews/historydefinitions":5,"GET /identitygovernance/accessreviews/historydefinitions/{id}":5,"GET /identitygovernance/accessreviews/historydefinitions/{id}/instances":5,"GET /identitygovernance/accessreviews/policy":769,"GET /identitygovernance/accessreviews/unified/definitions":7,"GET /identitygovernance/appconsent/appconsentrequests":66,"GET /identitygovernance/appconsent/appconsentrequests/filterbycurrentuser(on='parametervalue')":66,"GET /identitygovernance/appconsent/appconsentrequests/{id}":66,"GET /identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests":66,"GET /identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests/filterbycurrentuser(on='parametervalue')":66,"GET /identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests/{id}":66,"GET /identitygovernance/catalogs/{id}/accesspackageresources/{id}/uploadsessions":0,"GET /identitygovernance/catalogs/{id}/accesspackageresources/{id}/uploadsessions/{id}":0,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/filterbycurrentuser(on='approver')":75,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/steps":761,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/steps/{id}":761,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentpolicies":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentpolicies/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentrequests":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentrequests/filterbycurrentuser(on='parametervalue')":1,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentresourceroles":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignmentresourceroles/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignments":2,"GET /identitygovernance/entitlementmanagement/accesspackageassignments/additionalaccess(accesspackageid='parametervalue',incompatibleaccesspackageid='parametervalue')":761,"GET /identitygovernance/entitlementmanagement/accesspackageassignments/filterbycurrentuser(on='parametervalue')":1,"GET /identitygovernance/entitlementmanagement/accesspackagecatalogs":2,"GET /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackagecustomworkflowextensions":2,"GET /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackagecustomworkflowextensions/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackageresourceroles":2,"GET /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackageresources":2,"GET /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions":2,"GET /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackageresourceenvironments/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackageresourcerequests":2,"GET /identitygovernance/entitlementmanagement/accesspackages":2,"GET /identitygovernance/entitlementmanagement/accesspackages/filterbycurrentuser(on='allowedrequestor')":1,"GET /identitygovernance/entitlementmanagement/accesspackages/{id}":2,"GET /identitygovernance/entitlementmanagement/accesspackages/{id}/accesspackagesincompatiblewith":2,"GET /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatibleaccesspackages":2,"GET /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatiblegroups":2,"GET /identitygovernance/entitlementmanagement/accesspackagesuggestions/filterbycurrentuser(on={id})":4,"GET /identitygovernance/entitlementmanagement/assignmentrequests":2,"GET /identitygovernance/entitlementmanagement/assignmentrequests/filterbycurrentuser(on='parametervalue')":1,"GET /identitygovernance/entitlementmanagement/assignmentrequests/{id}":2,"GET /identitygovernance/entitlementmanagement/availableaccesspackages/{id}/resourcerolescopes":4,"GET /identitygovernance/entitlementmanagement/connectedorganizations":2,"GET /identitygovernance/entitlementmanagement/connectedorganizations/{id}":2,"GET /identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors":2,"GET /identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors":2,"GET /identitygovernance/entitlementmanagement/controlconfigurations/endusersettings":2,"GET /identitygovernance/entitlementmanagement/externaloriginresourceconnectors":2,"GET /identitygovernance/entitlementmanagement/settings":2,"GET /identitygovernance/entitlementmanagement/subjects(objectid='{id}')":0,"GET /identitygovernance/lifecycleworkflows/customtaskextensions":395,"GET /identitygovernance/lifecycleworkflows/customtaskextensions/{id}":395,"GET /identitygovernance/lifecycleworkflows/deleteditems/workflows":397,"GET /identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}":397,"GET /identitygovernance/lifecycleworkflows/insights/toptasksprocessedsummary(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/insights/topworkflowsprocessedsummary(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/insights/workflowsprocessedbycategory(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/insights/workflowsprocessedsummary(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/lifecyclepolicies":889,"GET /identitygovernance/lifecycleworkflows/lifecyclepolicies/{id}":889,"GET /identitygovernance/lifecycleworkflows/lifecyclepolicies/{id}/impact(startdatetime={id},enddatetime={id})":890,"GET /identitygovernance/lifecycleworkflows/lifecyclepolicies/{id}/report":889,"GET /identitygovernance/lifecycleworkflows/lifecyclepolicies/{id}/report/subjects":889,"GET /identitygovernance/lifecycleworkflows/lifecyclepolicies/{id}/rules":889,"GET /identitygovernance/lifecycleworkflows/lifecyclepolicies/{id}/rules/{id}":891,"GET /identitygovernance/lifecycleworkflows/lifecyclepolicypriorityconfigurations":891,"GET /identitygovernance/lifecycleworkflows/lifecyclepolicypriorityconfigurations/{id}":891,"GET /identitygovernance/lifecycleworkflows/settings":398,"GET /identitygovernance/lifecycleworkflows/taskdefinitions":398,"GET /identitygovernance/lifecycleworkflows/taskdefinitions/{id}":398,"GET /identitygovernance/lifecycleworkflows/workflows":400,"GET /identitygovernance/lifecycleworkflows/workflows/{id}":400,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/executionscope":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/summary(startdatetime={id},enddatetime={id})":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/summary(startdatetime={id},enddatetime={id})":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}/taskprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/taskreports":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/summary(startdatetime={id},enddatetime={id})":398,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/subjectprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/subjectprocessingresults/{id}":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/taskprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/tasks":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}":402,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults/{id}/taskprocessingresults":401,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/versions":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks":397,"GET /identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks/{id}":402,"GET /identitygovernance/lifecycleworkflows/workflowtemplates":398,"GET /identitygovernance/lifecycleworkflows/workflowtemplates/{id}":398,"GET /identitygovernance/permissionsanalytics/aws/findings/awsexternalsystemaccessfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/awsexternalsystemaccessrolefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/awsidentityaccessmanagementkeyagefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/awsidentityaccessmanagementkeyagefinding/aggregatedsummary(authorizationsystemids=['awsauthsystemid'])":802,"GET /identitygovernance/permissionsanalytics/aws/findings/awsidentityaccessmanagementkeyusagefinding/aggregatedsummary(authorizationsystemids=['awsauthsystemid'])":802,"GET /identitygovernance/permissionsanalytics/aws/findings/awsidentityacessmanagementkeyusagefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/encryptedawsstoragebucketfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/externallyaccessibleawsstoragebucketfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/inactiveawsresourcefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/inactiveawsrolefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/inactivegroupfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/inactiveserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/inactiveuserfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/openawssecuritygroupfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/overprovisionedawsresourcefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/overprovisionedawsrolefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/overprovisionedserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/overprovisioneduserfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/privilegeescalationawsresourcefindingd":802,"GET /identitygovernance/permissionsanalytics/aws/findings/privilegeescalationawsrolefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/privilegeescalationuserfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/raph.securitytoolawsresourceadministratorfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/raph.securitytoolawsserverlessfunctionadministratorfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/secretinformationaccessawsresourcefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/secretinformationaccessawsrolefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/secretinformationaccessawsserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/secretinformationaccessawsuserfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/securitytoolawsresourceadministratorfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/securitytoolawsroleadministratorfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/securitytoolawsserverlessfunctionadministratorfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/securitytoolawsuseradministratorfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/superawsresourcefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/superawsrolefinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/superserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/superuserfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/unenforcedmfaawsuserfinding":802,"GET /identitygovernance/permissionsanalytics/aws/findings/unenforcedmfaawsuserfinding/aggregatedsummary(authorizationsystemids=['awsauthsystemid'])":802,"GET /identitygovernance/permissionsanalytics/aws/findings/virtualmachinewithawsstoragebucketaccessfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/encryptedazurestorageaccountfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/externallyaccessibleazureblobcontainerfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/inactiveazureserviceprincipalfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/inactivegroupfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/inactiveserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/inactiveuserfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/opennetworkazuresecuritygroupfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/overprovisionedazureserviceprincipalfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/overprovisionedserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/overprovisioneduserfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/superazureserviceprincipalfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/superazureserviceprincipalfinding/aggregatedsummary(authorizationsystemids=['azureauthsystemid'])":802,"GET /identitygovernance/permissionsanalytics/azure/findings/superserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/azure/findings/superuserfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/encryptedgcpstoragebucketfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/externallyaccessiblegcpstoragebucketfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/inactivegcpserviceaccountfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/inactivegroupfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/inactiveserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/inactiveuserfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/overprovisionedgcpserviceaccountfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/overprovisionedserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/overprovisioneduserfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/privilegeescalationgcpserviceaccountfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/privilegeescalationuserfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/supergcpserviceaccountfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/superserverlessfunctionfinding":802,"GET /identitygovernance/permissionsanalytics/gcp/findings/superuserfinding":802,"GET /identitygovernance/privilegedaccess/group/assignmentapprovals/filterbycurrentuser(on='approver')":75,"GET /identitygovernance/privilegedaccess/group/assignmentapprovals/{id}":2,"GET /identitygovernance/privilegedaccess/group/assignmentapprovals/{id}/steps":761,"GET /identitygovernance/privilegedaccess/group/assignmentapprovals/{id}/steps/{id}":761,"GET /identitygovernance/privilegedaccess/group/assignmentscheduleinstances":545,"GET /identitygovernance/privilegedaccess/group/assignmentscheduleinstances/filterbycurrentuser(on=parametervalue)":545,"GET /identitygovernance/privilegedaccess/group/assignmentscheduleinstances/{id}":545,"GET /identitygovernance/privilegedaccess/group/assignmentschedulerequests":546,"GET /identitygovernance/privilegedaccess/group/assignmentschedulerequests/filterbycurrentuser(on='parametervalue')":546,"GET /identitygovernance/privilegedaccess/group/assignmentschedulerequests/{id}":546,"GET /identitygovernance/privilegedaccess/group/assignmentschedules":545,"GET /identitygovernance/privilegedaccess/group/assignmentschedules/filterbycurrentuser(on='parametervalue')":545,"GET /identitygovernance/privilegedaccess/group/assignmentschedules/{id}":545,"GET /identitygovernance/privilegedaccess/group/eligibilityscheduleinstances":547,"GET /identitygovernance/privilegedaccess/group/eligibilityscheduleinstances/filterbycurrentuser(on='parametervalue')":547,"GET /identitygovernance/privilegedaccess/group/eligibilityscheduleinstances/{id}":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedulerequests":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedulerequests/filterbycurrentuser(on='parametervalue')":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedulerequests/{id}":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedules":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedules/filterbycurrentuser(on='parametervalue')":547,"GET /identitygovernance/privilegedaccess/group/eligibilityschedules/{id}":547,"GET /identitygovernance/privilegedaccess/group/resources":880,"GET /identitygovernance/privilegedaccess/group/resources/{id}":880,"GET /identitygovernance/rolemanagementalerts/alertconfigurations":937,"GET /identitygovernance/rolemanagementalerts/alertconfigurations/{id}":937,"GET /identitygovernance/rolemanagementalerts/alertdefinitions":937,"GET /identitygovernance/rolemanagementalerts/alertdefinitions/{id}":937,"GET /identitygovernance/rolemanagementalerts/alerts":937,"GET /identitygovernance/rolemanagementalerts/alerts/{id}":937,"GET /identitygovernance/rolemanagementalerts/alerts/{id}/alertincidents":937,"GET /identitygovernance/rolemanagementalerts/alerts/{id}/alertincidents/{id}":937,"GET /identitygovernance/rolemanagementalerts/operations/{id}":937,"GET /identitygovernance/termsofuse/agreements":58,"GET /identitygovernance/termsofuse/agreements/{id}":58,"GET /identitygovernance/termsofuse/agreements/{id}/acceptances":59,"GET /identityprotection/agentriskdetections":405,"GET /identityprotection/agentriskdetections/{id}":405,"GET /identityprotection/riskdetections":405,"GET /identityprotection/riskdetections/{id}":405,"GET /identityprotection/riskyagents":1000,"GET /identityprotection/riskyagents/{id}":1000,"GET /identityprotection/riskyserviceprincipals":404,"GET /identityprotection/riskyserviceprincipals/{id}":404,"GET /identityprotection/riskyserviceprincipals/{id}/history":404,"GET /identityprotection/riskyusers":574,"GET /identityprotection/riskyusers/{id}":574,"GET /identityprotection/riskyusers/{id}/history":575,"GET /identityprotection/riskyusers/{id}/history/{id}":575,"GET /identityprotection/serviceprincipalriskdetections":405,"GET /identityprotection/serviceprincipalriskdetections/{id}":405,"GET /identityproviders":392,"GET /identityproviders/availableprovidertypes":392,"GET /identityproviders/{id}":392,"GET /informationprotection/bitlocker/recoverykeys":125,"GET /informationprotection/bitlocker/recoverykeys/{id}":125,"GET /informationprotection/policy/labels":915,"GET /informationprotection/policy/labels/{id}":915,"GET /informationprotection/threatassessmentrequests":408,"GET /informationprotection/threatassessmentrequests/{id}":408,"GET /me":702,"GET /me/activities":555,"GET /me/activities/recent":555,"GET /me/adhoccalls/{id}/recordings/{id}":155,"GET /me/adhoccalls/{id}/recordings/{id}/content":155,"GET /me/adhoccalls/{id}/transcripts/{id}":157,"GET /me/adhoccalls/{id}/transcripts/{id}/content":157,"GET /me/agreementacceptances":59,"GET /me/analytics/activitystatistics":771,"GET /me/analytics/settings":1076,"GET /me/approleassignedresources":1070,"GET /me/approleassignments":48,"GET /me/authentication/emailmethods":85,"GET /me/authentication/emailmethods/{id}":328,"GET /me/authentication/externalauthenticationmethods":86,"GET /me/authentication/externalauthenticationmethods/{id}":348,"GET /me/authentication/fido2methods":362,"GET /me/authentication/fido2methods/{id}":361,"GET /me/authentication/hardwareoathmethods":798,"GET /me/authentication/hardwareoathmethods/{id}":881,"GET /me/authentication/methods":86,"GET /me/authentication/methods/{id}":105,"GET /me/authentication/microsoftauthenticatormethods":463,"GET /me/authentication/microsoftauthenticatormethods/{id}":462,"GET /me/authentication/passwordlessmicrosoftauthenticatormethods":980,"GET /me/authentication/passwordlessmicrosoftauthenticatormethods/{id}":979,"GET /me/authentication/passwordmethods":87,"GET /me/authentication/passwordmethods/{id}":87,"GET /me/authentication/phonemethods":88,"GET /me/authentication/phonemethods/{id}":505,"GET /me/authentication/platformcredentialmethods":513,"GET /me/authentication/platformcredentialmethods/{id}":512,"GET /me/authentication/qrcodepinmethod":558,"GET /me/authentication/qrcodepinmethod/standardqrcode":558,"GET /me/authentication/qrcodepinmethod/temporaryqrcode":558,"GET /me/authentication/requirements":797,"GET /me/authentication/softwareoathmethods":90,"GET /me/authentication/softwareoathmethods/{id}":627,"GET /me/authentication/temporaryaccesspassmethods":91,"GET /me/authentication/temporaryaccesspassmethods/{id}":670,"GET /me/authentication/windowshelloforbusinessmethods":751,"GET /me/authentication/windowshelloforbusinessmethods/{id}":750,"GET /me/calendar/calendarview":145,"GET /me/calendar/events":145,"GET /me/calendar/events/delta":868,"GET /me/calendar/events/{id}":146,"GET /me/calendar/events/{id}/instances":146,"GET /me/calendargroups":704,"GET /me/calendargroups/{id}":146,"GET /me/calendargroups/{id}/calendars":147,"GET /me/calendargroups/{id}/calendars/{id}/calendarview":145,"GET /me/calendargroups/{id}/calendars/{id}/events":145,"GET /me/calendargroups/{id}/calendars/{id}/events/delta":868,"GET /me/calendargroups/{id}/calendars/{id}/events/{id}":146,"GET /me/calendargroups/{id}/calendars/{id}/events/{id}/instances":146,"GET /me/calendars":147,"GET /me/calendars/delta":144,"GET /me/calendars/{id}/calendarview":145,"GET /me/calendars/{id}/calendarview/delta":868,"GET /me/calendars/{id}/events":145,"GET /me/calendars/{id}/events/delta":868,"GET /me/calendars/{id}/events/{id}":146,"GET /me/calendars/{id}/events/{id}/instances":146,"GET /me/calendarview/delta":868,"GET /me/chats":206,"GET /me/chats/{id}":197,"GET /me/chats/{id}/messages":202,"GET /me/chats/{id}/messages/{id}":202,"GET /me/cloudclipboard/items":224,"GET /me/cloudclipboard/items/{id}":224,"GET /me/cloudlicensing/assignmenterrors":823,"GET /me/cloudlicensing/assignmenterrors/{id}":827,"GET /me/cloudlicensing/assignments/{id}":822,"GET /me/cloudlicensing/assignments/{id}/allotment":825,"GET /me/cloudlicensing/usagerights":835,"GET /me/cloudlicensing/usagerights/{id}":835,"GET /me/cloudlicensing/usagerights/{id}/assignments":836,"GET /me/cloudlicensing/waitingmembers":835,"GET /me/cloudlicensing/waitingmembers/{id}":827,"GET /me/cloudlicensing/waitingmembers/{id}/allotment":825,"GET /me/cloudpcpools":1067,"GET /me/cloudpcpools/{id}":1067,"GET /me/cloudpcs":229,"GET /me/cloudpcs/{id}":228,"GET /me/cloudpcs/{id}/getcloudpclaunchinfo":229,"GET /me/cloudpcs/{id}/getfrontlinecloudpcaccessstate":838,"GET /me/cloudpcs/{id}/retrievecloudpclaunchdetail":229,"GET /me/communications/callsettings/delegates":815,"GET /me/communications/callsettings/delegates/{id}":815,"GET /me/communications/callsettings/delegators":815,"GET /me/communications/callsettings/delegators/{id}":815,"GET /me/contactfolders":242,"GET /me/contactfolders/delta":242,"GET /me/contactfolders/{id}":242,"GET /me/contactfolders/{id}/childfolders":242,"GET /me/contactfolders/{id}/childfolders/{id}/.../contacts":242,"GET /me/contactfolders/{id}/childfolders/{id}/.../contacts/{id}":242,"GET /me/contactfolders/{id}/contacts":242,"GET /me/contactfolders/{id}/contacts/delta":242,"GET /me/contactfolders/{id}/contacts/{id}":242,"GET /me/contactfolders/{id}/contacts/{id}/photo":553,"GET /me/contactfolders/{id}/contacts/{id}/photo/$value":553,"GET /me/contacts":242,"GET /me/contacts/{id}":242,"GET /me/contacts/{id}/photo":553,"GET /me/contacts/{id}/photo/$value":553,"GET /me/createdobjects":705,"GET /me/directreports":706,"GET /me/distributionlists":242,"GET /me/distributionlists/{id}":242,"GET /me/drive":291,"GET /me/drive/following":292,"GET /me/drive/items/{id}":301,"GET /me/drive/items/{id}/children":300,"GET /me/drive/items/{id}/content":299,"GET /me/drive/items/{id}/contentstream":300,"GET /me/drive/items/{id}/permissions":293,"GET /me/drive/items/{id}/permissions/{id}":300,"GET /me/drive/items/{id}/thumbnails":293,"GET /me/drive/items/{id}/versions":293,"GET /me/drive/items/{id}/versions/{id}":293,"GET /me/drive/items/{id}/versions/{id}/content":293,"GET /me/drive/items/{id}/workbook/application":187,"GET /me/drive/items/{id}/workbook/comments":187,"GET /me/drive/items/{id}/workbook/comments/{id}":187,"GET /me/drive/items/{id}/workbook/comments/{id}/replies":187,"GET /me/drive/items/{id}/workbook/comments/{id}/task":187,"GET /me/drive/items/{id}/workbook/comments/{id}/task/changes":187,"GET /me/drive/items/{id}/workbook/comments/{id}/task/changes/{id}":187,"GET /me/drive/items/{id}/workbook/names":187,"GET /me/drive/items/{id}/workbook/names/{id}":187,"GET /me/drive/items/{id}/workbook/names/{id}/range":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/boundingrect":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/cell":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/column":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/entirecolumn":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/entirerow":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/borders":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/borders()":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/borders/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/fill":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/font":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/format/protection":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/intersection":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/lastcell":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/lastcolumn":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/lastrow":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/offsetrange":187,"GET /me/drive/items/{id}/workbook/names/{id}/range/usedrange":187,"GET /me/drive/items/{id}/workbook/operations/{id}":187,"GET /me/drive/items/{id}/workbook/tablerowoperationresult(key={id})":187,"GET /me/drive/items/{id}/workbook/tables":187,"GET /me/drive/items/{id}/workbook/tables/{id}":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/databodyrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/headerrowrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/boundingrect":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/cell":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/column":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/entirecolumn":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/entirerow":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders()":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/font":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/protection":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/intersection":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastcell":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastcolumn":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastrow":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/offsetrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/usedrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/totalrowrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/databodyrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/headerrowrange":187,"GET /me/drive/items/{id}/workbook/tables/{id}/range":187,"GET /me/drive/items/{id}/workbook/tables/{id}/rows":187,"GET /me/drive/items/{id}/workbook/tables/{id}/rows/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/tables/{id}/rows/{id}":187,"GET /me/drive/items/{id}/workbook/tables/{id}/rows/{id}/range":187,"GET /me/drive/items/{id}/workbook/tables/{id}/sort":187,"GET /me/drive/items/{id}/workbook/tables/{id}/sort/fields/icon":187,"GET /me/drive/items/{id}/workbook/tables/{id}/totalrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/cell(row={id},column={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/datalabels":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width=0,height=0,fittingmode='fit')":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/names":760,"GET /me/drive/items/{id}/workbook/worksheets/{id}/pivottables":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/pivottables/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/protection":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range()/format/protection":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/boundingrect":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/cell":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/column":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/entirecolumn":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/entirerow":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders()":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/fill":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/font":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/intersection":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/lastcell":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/lastcolumn":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/lastrow":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/offsetrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/usedrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address={id})/visibleview":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address={id})/visibleview/range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range(address={id})/visibleview/rows":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range/columnsafter(count=n)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range/columnsbefore(count=n)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range/rowsabove(count=n)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/range/rowsbelow(count=n)":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/databodyrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/headerrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/totalrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/databodyrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/headerrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={id})":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}/range":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/fields/icon":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/totalrowrange":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tasks":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tasks/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tasks/{id}/changes":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/tasks/{id}/changes/{id}":187,"GET /me/drive/items/{id}/workbook/worksheets/{id}/usedrange":187,"GET /me/drive/recent":290,"GET /me/drive/root/delta":293,"GET /me/drive/root/search(q='{id}')":293,"GET /me/drive/root/subscriptions/socketio":632,"GET /me/drive/root:/{id}":301,"GET /me/drive/root:/{id}:/content":299,"GET /me/drive/root:/{id}:/contentstream":300,"GET /me/drive/root:/{id}:/permissions":293,"GET /me/drive/root:/{id}:/workbook/application":187,"GET /me/drive/root:/{id}:/workbook/comments":187,"GET /me/drive/root:/{id}:/workbook/comments/{id}/replies":187,"GET /me/drive/root:/{id}:/workbook/names":187,"GET /me/drive/root:/{id}:/workbook/names/{id}":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/boundingrect":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/cell":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/column":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/entirecolumn":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/entirerow":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders()":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/fill":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/font":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/format/protection":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/intersection":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/lastcell":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/lastcolumn":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/lastrow":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/offsetrange":187,"GET /me/drive/root:/{id}:/workbook/names/{id}/range/usedrange":187,"GET /me/drive/root:/{id}:/workbook/tablerowoperationresult(key={id})":187,"GET /me/drive/root:/{id}:/workbook/tables":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/databodyrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/headerrowrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/boundingrect":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/cell":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/column":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/entirecolumn":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/entirerow":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders()":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/font":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/protection":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/intersection":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastcell":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastcolumn":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastrow":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/offsetrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/usedrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/totalrowrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/databodyrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/headerrowrange":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/rows":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/rows/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/rows/{id}":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/rows/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/sort":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/sort/fields/icon":187,"GET /me/drive/root:/{id}:/workbook/tables/{id}/totalrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/cell(row={id},column={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/datalabels":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width=0,height=0,fittingmode='fit')":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/names":760,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/protection":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range()/format/protection":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/boundingrect":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/cell":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/column":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/entirecolumn":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/entirerow":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders()":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/fill":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/font":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/intersection":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/lastcell":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/lastcolumn":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/lastrow":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/offsetrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/usedrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={id})/visibleview":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={id})/visibleview/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={id})/visibleview/rows":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range/columnsafter(count=n)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range/columnsbefore(count=n)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range/rowsabove(count=n)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/range/rowsbelow(count=n)":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/databodyrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/headerrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/totalrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/databodyrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/headerrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={id})":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}/range":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/fields/icon":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/totalrowrange":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/tasks":187,"GET /me/drive/root:/{id}:/workbook/worksheets/{id}/usedrange":187,"GET /me/drive/sharedwithme":294,"GET /me/drive/special/{id}":290,"GET /me/drives":293,"GET /me/employeeexperience/assignedroles":334,"GET /me/employeeexperience/learningcourseactivities":441,"GET /me/events":145,"GET /me/events/delta":868,"GET /me/events/{id}":146,"GET /me/events/{id}/attachments":342,"GET /me/events/{id}/instances":146,"GET /me/findroomlists":490,"GET /me/findrooms":490,"GET /me/findrooms(roomlist='{id}')":490,"GET /me/followedsites":412,"GET /me/inferenceclassification/overrides":344,"GET /me/informationprotection/policy/labels":915,"GET /me/informationprotection/policy/labels/{id}":915,"GET /me/insights/shared":412,"GET /me/insights/shared/{id}/resource":412,"GET /me/insights/trending":412,"GET /me/insights/trending/{id}/resource":412,"GET /me/insights/used":412,"GET /me/insights/used/{id}/resource":412,"GET /me/invitedby":1071,"GET /me/joinedteams":707,"GET /me/joinedteams/getopenshifts":261,"GET /me/joinedteams/getshifts":261,"GET /me/joinedteams/gettimesoff":261,"GET /me/licensedetails":708,"GET /me/mailboxsettings":701,"GET /me/mailboxsettings/automaticrepliessetting":701,"GET /me/mailboxsettings/dateformat":701,"GET /me/mailboxsettings/delegatemeetingmessagedeliveryoptions":701,"GET /me/mailboxsettings/language":701,"GET /me/mailboxsettings/timeformat":701,"GET /me/mailboxsettings/timezone":701,"GET /me/mailboxsettings/userpurpose":701,"GET /me/mailboxsettings/workinghours":701,"GET /me/mailfolders":456,"GET /me/mailfolders/delta":455,"GET /me/mailfolders/inbox/messagerules":457,"GET /me/mailfolders/inbox/messagerules/{id}":457,"GET /me/mailfolders/{id}":456,"GET /me/mailfolders/{id}/childfolders":456,"GET /me/mailfolders/{id}/childfolders/{id}/.../messages/{id}/attachments/{id}":344,"GET /me/mailfolders/{id}/messages":456,"GET /me/mailfolders/{id}/messages/delta":455,"GET /me/mailfolders/{id}/messages/{id}":344,"GET /me/mailfolders/{id}/messages/{id}/$value":460,"GET /me/mailfolders/{id}/messages/{id}/attachments":344,"GET /me/mailfolders/{id}/operations":344,"GET /me/mailfolders/{id}/operations/{id}":344,"GET /me/mailfolders/{id}/userconfigurations/{id}":1077,"GET /me/manager":709,"GET /me/memberof":710,"GET /me/messages":456,"GET /me/messages/{id}":344,"GET /me/messages/{id}/$value":460,"GET /me/messages/{id}/attachments":344,"GET /me/notes":469,"GET /me/notes/delta":469,"GET /me/notes/{id}":469,"GET /me/notes/{id}/attachments":469,"GET /me/oauth2permissiongrants":711,"GET /me/onenote/notebooks":471,"GET /me/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={id})":471,"GET /me/onenote/notebooks/{id}":471,"GET /me/onenote/notebooks/{id}/sectiongroups":471,"GET /me/onenote/notebooks/{id}/sections":471,"GET /me/onenote/operations/{id}":471,"GET /me/onenote/pages":476,"GET /me/onenote/pages/{id}":492,"GET /me/onenote/resources/{id}/content":476,"GET /me/onenote/sectiongroups":471,"GET /me/onenote/sectiongroups/{id}":471,"GET /me/onenote/sectiongroups/{id}/sectiongroups":471,"GET /me/onenote/sectiongroups/{id}/sections":471,"GET /me/onenote/sections":471,"GET /me/onenote/sections/{id}":471,"GET /me/onenote/sections/{id}/pages":476,"GET /me/onlinemeetings":477,"GET /me/onlinemeetings/{id}":477,"GET /me/onlinemeetings/{id}/alternativerecording":477,"GET /me/onlinemeetings/{id}/attendancereports":82,"GET /me/onlinemeetings/{id}/attendancereports/{id}":82,"GET /me/onlinemeetings/{id}/attendancereports/{id}/attendancerecords":82,"GET /me/onlinemeetings/{id}/attendeereport":477,"GET /me/onlinemeetings/{id}/getvirtualappointmentjoinweburl":737,"GET /me/onlinemeetings/{id}/meetingattendancereport":82,"GET /me/onlinemeetings/{id}/recording":477,"GET /me/onlinemeetings/{id}/recordings":478,"GET /me/onlinemeetings/{id}/recordings/{id}":155,"GET /me/onlinemeetings/{id}/recordings/{id}/content":155,"GET /me/onlinemeetings/{id}/registration":477,"GET /me/onlinemeetings/{id}/registration/customquestions/{id}":477,"GET /me/onlinemeetings/{id}/registration/meetingregistration/customquestions":477,"GET /me/onlinemeetings/{id}/registration/registrants":477,"GET /me/onlinemeetings/{id}/transcripts":479,"GET /me/onlinemeetings/{id}/transcripts/{id}":157,"GET /me/onlinemeetings/{id}/transcripts/{id}/content":157,"GET /me/onlinemeetings/{id}/virtualappointment":477,"GET /me/outlook/mastercategories":457,"GET /me/outlook/mastercategories/{id}":457,"GET /me/outlook/supportedlanguages":490,"GET /me/outlook/supportedtimezones":490,"GET /me/outlook/supportedtimezones(timezonestandard=microsoft.graph.timezonestandard'{id}')":490,"GET /me/outlook/taskfolders":808,"GET /me/outlook/taskfolders/{id}":808,"GET /me/outlook/taskfolders/{id}/tasks":808,"GET /me/outlook/taskgroups":808,"GET /me/outlook/taskgroups/{id}":808,"GET /me/outlook/taskgroups/{id}/taskfolders":808,"GET /me/outlook/taskgroups/{id}/taskfolders/{id}":808,"GET /me/outlook/taskgroups/{id}/taskfolders/{id}/tasks":808,"GET /me/outlook/tasks":808,"GET /me/outlook/tasks/{id}":808,"GET /me/outlook/tasks/{id}/attachments":808,"GET /me/ownedobjects":713,"GET /me/pendingaccessreviewinstances":767,"GET /me/pendingaccessreviewinstances/{id}/decisions":767,"GET /me/people":714,"GET /me/photo":553,"GET /me/photo/$value":553,"GET /me/photos":553,"GET /me/photos/{id}":553,"GET /me/planner":985,"GET /me/planner/all/delta":510,"GET /me/planner/favoriteplans":986,"GET /me/planner/mydaytasks":983,"GET /me/planner/plans":510,"GET /me/planner/plans_v2":984,"GET /me/planner/recentplans":986,"GET /me/planner/tasks":509,"GET /me/planner/tasks/delta":984,"GET /me/planner/tasks_v2":984,"GET /me/presence":518,"GET /me/print/recentprintershares":523,"GET /me/profile":866,"GET /me/profile/account":866,"GET /me/profile/account/{id}":866,"GET /me/profile/addresses":866,"GET /me/profile/addresses/{id}":866,"GET /me/profile/anniversaries":866,"GET /me/profile/anniversaries/{id}":866,"GET /me/profile/awards":866,"GET /me/profile/awards/{id}":866,"GET /me/profile/certifications":866,"GET /me/profile/certifications/{id}":866,"GET /me/profile/educationalactivities":866,"GET /me/profile/educationalactivities/{id}":866,"GET /me/profile/emails":866,"GET /me/profile/emails/{id}":866,"GET /me/profile/interests":866,"GET /me/profile/interests/{id}":866,"GET /me/profile/languages":866,"GET /me/profile/languages/{id}":866,"GET /me/profile/names":982,"GET /me/profile/names/{id}":866,"GET /me/profile/notes":866,"GET /me/profile/notes/{id}":982,"GET /me/profile/patents":866,"GET /me/profile/patents/{id}":866,"GET /me/profile/phones":866,"GET /me/profile/phones/{id}":866,"GET /me/profile/positions":866,"GET /me/profile/positions/{id}":866,"GET /me/profile/projects":866,"GET /me/profile/projects/{id}":866,"GET /me/profile/publications":866,"GET /me/profile/publications/{id}":866,"GET /me/profile/skills":866,"GET /me/profile/skills/{id}":866,"GET /me/profile/webaccounts":866,"GET /me/profile/webaccounts/{id}":866,"GET /me/profile/websites":866,"GET /me/profile/websites/{id}":866,"GET /me/registereddevices":712,"GET /me/responsibilities":866,"GET /me/responsibilities/{id}":982,"GET /me/scopedrolememberof":1073,"GET /me/security/informationprotection/labelpolicysettings":915,"GET /me/security/informationprotection/sensitivitylabels":915,"GET /me/security/informationprotection/sensitivitylabels/{id}":915,"GET /me/settings":729,"GET /me/settings/contactmergesuggestions":725,"GET /me/settings/iteminsights":725,"GET /me/settings/regionalandlanguagesettings":997,"GET /me/settings/windows":1078,"GET /me/settings/windows/{id}":1081,"GET /me/settings/windows/{id}/instances":1081,"GET /me/settings/windows/{id}/instances/{id}":1081,"GET /me/settings/workhoursandlocations":755,"GET /me/settings/workhoursandlocations/occurrencesview(startdatetime='{id}',enddatetime='{id}')":757,"GET /me/settings/workhoursandlocations/recurrences":756,"GET /me/sponsorof":716,"GET /me/tasks/alltasks/{id}":692,"GET /me/tasks/lists":692,"GET /me/tasks/lists/delta":692,"GET /me/tasks/lists/{id}":808,"GET /me/tasks/lists/{id}/tasks":692,"GET /me/tasks/lists/{id}/tasks/delta":692,"GET /me/tasks/lists/{id}/tasks/{id}":692,"GET /me/tasks/lists/{id}/tasks/{id}/checklistitems":806,"GET /me/tasks/lists/{id}/tasks/{id}/checklistitems/{id}":223,"GET /me/tasks/lists/{id}/tasks/{id}/linkedresources":806,"GET /me/tasks/lists/{id}/tasks/{id}/linkedresources/{id}":806,"GET /me/todo/lists":223,"GET /me/todo/lists/delta":693,"GET /me/todo/lists/{id}":223,"GET /me/todo/lists/{id}/tasks":223,"GET /me/todo/lists/{id}/tasks/delta":691,"GET /me/todo/lists/{id}/tasks/{id}":223,"GET /me/todo/lists/{id}/tasks/{id}/attachments":223,"GET /me/todo/lists/{id}/tasks/{id}/attachments/{id}":223,"GET /me/todo/lists/{id}/tasks/{id}/attachments/{id}/$value":223,"GET /me/todo/lists/{id}/tasks/{id}/checklistitems":223,"GET /me/todo/lists/{id}/tasks/{id}/checklistitems/{id}":223,"GET /me/todo/lists/{id}/tasks/{id}/linkedresources":223,"GET /me/todo/lists/{id}/tasks/{id}/linkedresources/{id}":223,"GET /me/transitivememberof":717,"GET /me/trendingaround":1074,"GET /networkaccess/alerts":958,"GET /networkaccess/cloudfirewallpolicies":954,"GET /networkaccess/cloudfirewallpolicies/{id}":954,"GET /networkaccess/cloudfirewallpolicies/{id}/policyrules":954,"GET /networkaccess/cloudfirewallpolicies/{id}/policyrules/{id}":954,"GET /networkaccess/connectivity/branches":954,"GET /networkaccess/connectivity/branches/{id}":954,"GET /networkaccess/connectivity/branches/{id}/connectivityconfiguration":954,"GET /networkaccess/connectivity/branches/{id}/devicelinks":954,"GET /networkaccess/connectivity/branches/{id}/devicelinks/{id}":954,"GET /networkaccess/connectivity/branches/{id}/forwardingprofiles":956,"GET /networkaccess/connectivity/getwebcategorybyurl(url='@url')":952,"GET /networkaccess/connectivity/remotenetworks/{id}/devicelinks/{id}":954,"GET /networkaccess/deployments":952,"GET /networkaccess/deployments('id')":958,"GET /networkaccess/filteringpolicies":954,"GET /networkaccess/filteringpolicies/{id}":956,"GET /networkaccess/filteringpolicies/{id}/policyrules/{id}":954,"GET /networkaccess/filteringprofiles":954,"GET /networkaccess/filteringprofiles/{id}":954,"GET /networkaccess/filteringprofiles/{id}/policies/{id}/policy":956,"GET /networkaccess/forwardingpolicies":954,"GET /networkaccess/forwardingpolicies/{id}":954,"GET /networkaccess/forwardingpolicies/{id}/policyrules":954,"GET /networkaccess/forwardingpolicies/{id}/policyrules/{id}":954,"GET /networkaccess/forwardingprofiles":954,"GET /networkaccess/forwardingprofiles/{id}":954,"GET /networkaccess/forwardingprofiles/{id}/policies":956,"GET /networkaccess/forwardingprofiles/{id}/policies/{id}":954,"GET /networkaccess/logs/connections":958,"GET /networkaccess/logs/connections/{id}":958,"GET /networkaccess/logs/generativeaiinsights":958,"GET /networkaccess/logs/remotenetworks":958,"GET /networkaccess/logs/traffic":958,"GET /networkaccess/logs/traffic/{id}":958,"GET /networkaccess/reports/entitiessummaries(startdatetime={id},enddatetime={id})":956,"GET /networkaccess/reports/getapplicationusageanalytics(startdatetime={id},enddatetime={id},aggregatedby={id})":959,"GET /networkaccess/reports/getcloudapplicationreport(startdatetime={id},enddatetime={id})":956,"GET /networkaccess/reports/getconnectionsummaries(startdatetime='{id}',enddatetime='{id}')":959,"GET /networkaccess/reports/getcrosstenantsummary(startdatetime={id},enddatetime={id},discoverypivotdatetime={id})":956,"GET /networkaccess/reports/getdestinationsummaries(startdatetime={id},enddatetime={id},aggregatedby={id})":956,"GET /networkaccess/reports/getdeviceusagesummary(startdatetime={id},enddatetime={id},activitypivotdatetime={id})":956,"GET /networkaccess/reports/getdiscoveredapplicationsegmentreport(startdatetime={id},enddatetime={id})":954,"GET /networkaccess/reports/getenterpriseapplicationreport(startdatetime={id},enddatetime={id})":959,"GET /networkaccess/reports/transactionsummaries(startdatetime={id},enddatetime={id})":960,"GET /networkaccess/reports/usageprofiling(startdatetime={id},enddatetime={id},aggregatedby={id})":954,"GET /networkaccess/settings/conditionalaccess":954,"GET /networkaccess/settings/crosstenantaccess":954,"GET /networkaccess/settings/customblockpage":954,"GET /networkaccess/settings/forwardingoptions":956,"GET /networkaccess/tenantstatus":956,"GET /networkaccess/threatintelligencepolicies":954,"GET /networkaccess/threatintelligencepolicies/{id}":954,"GET /networkaccess/tls/externalcertificateauthoritycertificates":952,"GET /networkaccess/tls/externalcertificateauthoritycertificates/{id}":954,"GET /networkaccess/tlsinspectionpolicies":954,"GET /networkaccess/tlsinspectionpolicies/{id}":954,"GET /networkaccess/tlsinspectionpolicies/{id}/policyrules":954,"GET /networkaccess/tlsinspectionpolicies/{id}/policyrules/{id}":954,"GET /networkaccessroot/alerts/getalertfrequencies(startdatetime={id},enddatetime={id})":952,"GET /networkaccessroot/alerts/getalertseveritysummaries(startdatetime={id},enddatetime={id})":953,"GET /networkaccessroot/alerts/getalertsummaries(startdatetime={id},enddatetime={id})":952,"GET /networkaccessroot/reports/crosstenantaccessreport(startdatetime={id},enddatetime={id})":956,"GET /networkaccessroot/reports/destinationreport(startdatetime={id},enddatetime={id})":956,"GET /networkaccessroot/reports/devicereport(startdatetime={id},enddatetime={id})":956,"GET /networkaccessroot/reports/userreport(startdatetime={id},enddatetime={id})":956,"GET /networkaccessroot/reports/webcategoryreport(startdatetime={id},enddatetime={id})":956,"GET /oauth2permissiongrants":474,"GET /oauth2permissiongrants/delta":473,"GET /oauth2permissiongrants/{id}":474,"GET /onpremencryptedpayloads":420,"GET /onpremencryptedpayloads/{id}":420,"GET /onpremisespublishingprofiles/applicationproxy/connectorgroups":842,"GET /onpremisespublishingprofiles/applicationproxy/connectorgroups/{id}":842,"GET /onpremisespublishingprofiles/applicationproxy/connectorgroups/{id}/applications":842,"GET /onpremisespublishingprofiles/applicationproxy/connectorgroups/{id}/members":842,"GET /onpremisespublishingprofiles/applicationproxy/connectors":842,"GET /onpremisespublishingprofiles/applicationproxy/connectors/{id}":842,"GET /onpremisespublishingprofiles/applicationproxy/connectors/{id}/memberof":842,"GET /onpremisespublishingprofiles/privateaccess/sensors":967,"GET /onpremisespublishingprofiles/privateaccess/sensors/{id}":967,"GET /onpremisespublishingprofiles/{id}":356,"GET /onpremisespublishingprofiles/{id}/agentgroups":966,"GET /onpremisespublishingprofiles/{id}/agents":356,"GET /onpremisespublishingprofiles/{id}/agents/{id}":356,"GET /onpremisespublishingprofiles/{id}/publishedresources":967,"GET /onpremisespublishingprofiles/{id}/publishedresources/{id}":967,"GET /organization":484,"GET /organization/{id}":484,"GET /organization/{id}/branding":486,"GET /organization/{id}/branding/localizations":486,"GET /organization/{id}/branding/localizations/{id}":486,"GET /organization/{id}/branding/themes":969,"GET /organization/{id}/branding/themes/{id}":970,"GET /organization/{id}/branding/themes/{id}/localizations":969,"GET /organization/{id}/branding/themes/{id}/localizations/{id}":970,"GET /organization/{id}/certificatebasedauthconfiguration":161,"GET /organization/{id}/certificatebasedauthconfiguration/{id}":161,"GET /organization/{id}/settings/contactinsights":161,"GET /organization/{id}/settings/iteminsights":971,"GET /organization/{id}/settings/microsoftapplicationdataaccess":161,"GET /organization/{id}/settings/peopleinsights":971,"GET /pfxrecryptionrequests":420,"GET /pfxrecryptionrequests/{id}":420,"GET /pfxusercertificates":420,"GET /pfxusercertificates/{id}":420,"GET /places/getoperation(id='{id}')":142,"GET /places/listoperations":142,"GET /places/{id}":142,"GET /places/{id}/building/map":142,"GET /places/{id}/building/map/footprints":142,"GET /places/{id}/building/map/levels":142,"GET /places/{id}/building/map/levels/{id}/fixtures":142,"GET /places/{id}/building/map/levels/{id}/sections":142,"GET /places/{id}/building/map/levels/{id}/units":142,"GET /places/{id}/checkins/{id}":221,"GET /places/{id}/descendants/{id}":506,"GET /places/{id}/roomlist/rooms":142,"GET /places/{id}/roomlist/workspaces":142,"GET /planner/buckets":507,"GET /planner/buckets/{id}":507,"GET /planner/buckets/{id}/tasks":509,"GET /planner/goals/{id}":983,"GET /planner/plans":507,"GET /planner/plans/{id}":507,"GET /planner/plans/{id}/buckets":509,"GET /planner/plans/{id}/buckets/delta":984,"GET /planner/plans/{id}/details":507,"GET /planner/plans/{id}/getusagerights":808,"GET /planner/plans/{id}/goals":983,"GET /planner/plans/{id}/historyitems":983,"GET /planner/plans/{id}/tasks":509,"GET /planner/plans_v2":984,"GET /planner/plans_v2/{id}":983,"GET /planner/rosters/{id}":983,"GET /planner/rosters/{id}/members":983,"GET /planner/rosters/{id}/members/{id}":983,"GET /planner/rosters/{id}/plans":983,"GET /planner/rosters/{id}/plans/delta":984,"GET /planner/tasks":507,"GET /planner/tasks/delta":984,"GET /planner/tasks/{id}":507,"GET /planner/tasks/{id}/assignedtotaskboardformat":507,"GET /planner/tasks/{id}/buckettaskboardformat":507,"GET /planner/tasks/{id}/details":507,"GET /planner/tasks/{id}/messages":808,"GET /planner/tasks/{id}/progresstaskboardformat":507,"GET /planner/tasks_v2":984,"GET /planner/tasks_v2/{id}":983,"GET /policies/accessreviewpolicy":769,"GET /policies/activitybasedtimeoutpolicies/{id}":10,"GET /policies/adminconsentrequestpolicy":13,"GET /policies/appmanagementpolicies":10,"GET /policies/appmanagementpolicies/{id}":10,"GET /policies/authenticationflowspolicy":103,"GET /policies/authenticationmethodspolicy":107,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/email":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/fido2":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/hardwareoath":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/microsoftauthenticator":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/qrcodepin":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/sms":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/softwareoath":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/temporaryaccesspass":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/verifiablecredentials":349,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/verifiablecredentials/{id}":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/voice":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/x509certificate":329,"GET /policies/authenticationmethodspolicy/authenticationmethodconfigurations/{id}":349,"GET /policies/authenticationstrengthpolicies":96,"GET /policies/authenticationstrengthpolicies/findbymethodmode(authenticationmethodmodes={id})":96,"GET /policies/authenticationstrengthpolicies/{id}":96,"GET /policies/authenticationstrengthpolicies/{id}/usage":96,"GET /policies/authorizationpolicy":111,"GET /policies/b2bmanagementpolicies":803,"GET /policies/b2bmanagementpolicies/{id}":803,"GET /policies/b2cauthenticationmethodspolicy":236,"GET /policies/claimsmappingpolicies":10,"GET /policies/claimsmappingpolicies/{id}":10,"GET /policies/crosstenantaccesspolicy":255,"GET /policies/crosstenantaccesspolicy/default":255,"GET /policies/crosstenantaccesspolicy/default/m365capabilities":257,"GET /policies/crosstenantaccesspolicy/partners":255,"GET /policies/crosstenantaccesspolicy/partners/{id}":255,"GET /policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization":255,"GET /policies/crosstenantaccesspolicy/partners/{id}/m365capabilities":257,"GET /policies/crosstenantaccesspolicy/templates/multitenantorganizationidentitysynchronization":255,"GET /policies/crosstenantaccesspolicy/templates/multitenantorganizationpartnerconfiguration":255,"GET /policies/defaultappmanagementpolicy":10,"GET /policies/deviceregistrationpolicy":272,"GET /policies/externalidentitiespolicy":870,"GET /policies/featurerolloutpolicies":356,"GET /policies/featurerolloutpolicies/{id}":358,"GET /policies/federatedtokenvalidationpolicy":872,"GET /policies/homerealmdiscoverypolicies":10,"GET /policies/homerealmdiscoverypolicies/{id}":10,"GET /policies/identitysecuritydefaultsenforcementpolicy":236,"GET /policies/mobileappmanagementpolicies":949,"GET /policies/mobileappmanagementpolicies/{id}":949,"GET /policies/mobileappmanagementpolicies/{id}/includedgroups":949,"GET /policies/mobiledevicemanagementpolicies":949,"GET /policies/mobiledevicemanagementpolicies/{id}":949,"GET /policies/mobiledevicemanagementpolicies/{id}/includedgroups":949,"GET /policies/onpremauthenticationpolicies":964,"GET /policies/onpremauthenticationpolicies/{id}":964,"GET /policies/onpremauthenticationpolicies/{id}/appliesto":965,"GET /policies/ownerlessgrouppolicy":374,"GET /policies/permissiongrantpolicies":501,"GET /policies/permissiongrantpolicies/{id}":501,"GET /policies/permissiongrantpolicies/{id}/excludes":502,"GET /policies/permissiongrantpolicies/{id}/includes":502,"GET /policies/permissiongrantpreapprovalpolicies":501,"GET /policies/permissiongrantpreapprovalpolicies/{id}":501,"GET /policies/rolemanagementpolicies":514,"GET /policies/rolemanagementpolicies/{id}":514,"GET /policies/rolemanagementpolicies/{id}/effectiverules":1064,"GET /policies/rolemanagementpolicies/{id}/rules":514,"GET /policies/rolemanagementpolicies/{id}/rules/{id}":514,"GET /policies/rolemanagementpolicyassignments":514,"GET /policies/rolemanagementpolicyassignments/{id}":514,"GET /policies/tokenissuancepolicies/{id}":10,"GET /policies/tokenlifetimepolicies/{id}":10,"GET /print/connectors":521,"GET /print/connectors/{id}":521,"GET /print/operations/{id}":531,"GET /print/printers":522,"GET /print/printers/{id}":534,"GET /print/printers/{id}/connectors":521,"GET /print/printers/{id}/getcapabilities":522,"GET /print/printers/{id}/jobs":535,"GET /print/printers/{id}/jobs/{id}":535,"GET /print/printers/{id}/jobs/{id}/documents/{id}/$value":530,"GET /print/printers/{id}/shares/{id}":523,"GET /print/printers/{id}/tasktriggers":536,"GET /print/printers/{id}/tasktriggers/{id}":536,"GET /print/reports/dailyprintusagebyprinter":544,"GET /print/reports/dailyprintusagebyprinter/{id}":544,"GET /print/reports/dailyprintusagebyuser":544,"GET /print/reports/dailyprintusagebyuser/{id}":544,"GET /print/reports/getgrouparchivedprintjobs(groupid='{id}',startdatetime='{id}',enddatetime='{id}')":544,"GET /print/reports/getprinterarchivedprintjobs(printerid='{id}',startdatetime='{id}',enddatetime='{id}')":544,"GET /print/reports/getuserarchivedprintjobs(userid='{id}',startdatetime='{id}',enddatetime='{id}')":544,"GET /print/reports/monthlyprintusagebyprinter":544,"GET /print/reports/monthlyprintusagebyprinter/{id}":544,"GET /print/reports/monthlyprintusagebyuser":544,"GET /print/reports/monthlyprintusagebyuser/{id}":544,"GET /print/services":524,"GET /print/services/{id}":524,"GET /print/services/{id}/endpoints":524,"GET /print/services/{id}/endpoints/{id}":524,"GET /print/settings":520,"GET /print/shares":525,"GET /print/shares/{id}":523,"GET /print/shares/{id}/allowedgroups":539,"GET /print/shares/{id}/allowedusers":539,"GET /print/shares/{id}/jobs":540,"GET /print/shares/{id}/jobs/{id}":535,"GET /print/shares/{id}/printer":534,"GET /print/taskdefinitions":519,"GET /print/taskdefinitions/{id}":519,"GET /print/taskdefinitions/{id}/tasks":519,"GET /print/taskdefinitions/{id}/tasks/{id}":519,"GET /privacy/subjectrightsrequests":628,"GET /privacy/subjectrightsrequests/{id}":628,"GET /privacy/subjectrightsrequests/{id}/getfinalattachment":628,"GET /privacy/subjectrightsrequests/{id}/getfinalreport":628,"GET /privacy/subjectrightsrequests/{id}/notes":628,"GET /privilegedaccess/azureresources/resources/{id}/roleassignmentrequests":877,"GET /privilegedaccess/azureresources/roleassignmentrequests":877,"GET /programcontrols":989,"GET /programcontroltypes":989,"GET /programs":989,"GET /programs/{id}/controls":989,"GET /reports":420,"GET /reports/appcredentialsigninactivities":276,"GET /reports/appcredentialsigninactivities/{id}":276,"GET /reports/applicationsignindetailedsummary":544,"GET /reports/applicationsignindetailedsummary/{id}":544,"GET /reports/authenticationmethods/usereventssummary":109,"GET /reports/authenticationmethods/usermfasigninsummary":109,"GET /reports/authenticationmethods/userpasswordresetsandchangessummary":109,"GET /reports/authenticationmethods/userregistrationactivity(period='{id}')":110,"GET /reports/authenticationmethods/userregistrationdetails":109,"GET /reports/authenticationmethods/userregistrationdetails/{id}":109,"GET /reports/authenticationmethods/usersigninsbyauthmethodsummary(period='{id}')":110,"GET /reports/authenticationmethods/usersregisteredbyfeature":110,"GET /reports/authenticationmethods/usersregisteredbymethod":110,"GET /reports/azureadpremiumlicenseinsight":567,"GET /reports/correlations":846,"GET /reports/correlations/{id}":846,"GET /reports/correlations/{id}/identities":846,"GET /reports/correlations/{id}/identities/{id}":846,"GET /reports/credentialuserregistrationdetails":567,"GET /reports/dailyprintusagebyprinter":544,"GET /reports/dailyprintusagebyprinter/{id}":544,"GET /reports/dailyprintusagebyuser":544,"GET /reports/dailyprintusagebyuser/{id}":544,"GET /reports/deviceconfigurationdeviceactivity":420,"GET /reports/deviceconfigurationuseractivity":420,"GET /reports/getapiusage(period={id},servicearea={id},appid={id})":544,"GET /reports/getattacksimulationrepeatoffenders":80,"GET /reports/getattacksimulationsimulationusercoverage":80,"GET /reports/getattacksimulationtrainingusercoverage":80,"GET /reports/getbrowserdistributionusercounts(period='{id}')":567,"GET /reports/getbrowserusercounts(period='{id}')":567,"GET /reports/getbrowseruserdetail(period='{id}')":567,"GET /reports/getcredentialusagesummary(period='{id}')":567,"GET /reports/getcredentialuserregistrationcount":567,"GET /reports/getemailactivitycounts(period='{id}')":567,"GET /reports/getemailactivityusercounts(period='{id}')":567,"GET /reports/getemailactivityuserdetail(date={id})":567,"GET /reports/getemailactivityuserdetail(period='{id}')":567,"GET /reports/getemailappusageappsusercounts(period='{id}')":567,"GET /reports/getemailappusageusercounts(period='{id}')":567,"GET /reports/getemailappusageuserdetail(date={id})":567,"GET /reports/getemailappusageuserdetail(period='{id}')":567,"GET /reports/getemailappusageversionsusercounts(period='{id}')":567,"GET /reports/getformsuseractivitycounts(period='{id}')":567,"GET /reports/getformsuseractivityuserdetail(period='{id}')":567,"GET /reports/getgrouparchivedprintjobs(groupid='{id}',startdatetime='{id}',enddatetime='{id}')":544,"GET /reports/getm365appplatformusercounts(period='{id}')":567,"GET /reports/getm365appusercounts(period='{id}')":567,"GET /reports/getm365appuserdetail(date='{id}')":567,"GET /reports/getm365appuserdetail(period='{id}')":567,"GET /reports/getmailboxusagedetail(period='{id}')":567,"GET /reports/getmailboxusagemailboxcounts(period='{id}')":567,"GET /reports/getmailboxusagequotastatusmailboxcounts(period='{id}')":567,"GET /reports/getmailboxusagestorage(period='{id}')":567,"GET /reports/getmicrosoft365copilotusageuserdetail(period='{id}')":567,"GET /reports/getmicrosoft365copilotusercountsummary(period='{id}')":567,"GET /reports/getmicrosoft365copilotusercounttrend(period='{id}')":567,"GET /reports/getoffice365activationcounts":567,"GET /reports/getoffice365activationsusercounts":567,"GET /reports/getoffice365activationsuserdetail":567,"GET /reports/getoffice365activeusercounts(period='{id}')":567,"GET /reports/getoffice365activeuserdetail(date={id})":567,"GET /reports/getoffice365activeuserdetail(period='{id}')":567,"GET /reports/getoffice365groupsactivitycounts(period='{id}')":567,"GET /reports/getoffice365groupsactivitydetail(date={id})":567,"GET /reports/getoffice365groupsactivitydetail(period='{id}')":567,"GET /reports/getoffice365groupsactivityfilecounts(period='{id}')":567,"GET /reports/getoffice365groupsactivitygroupcounts(period='{id}')":567,"GET /reports/getoffice365groupsactivitystorage(period='{id}')":567,"GET /reports/getoffice365servicesusercounts(period='{id}')":567,"GET /reports/getonedriveactivityfilecounts(period='{id}')":567,"GET /reports/getonedriveactivityusercounts(period='{id}')":567,"GET /reports/getonedriveactivityuserdetail(date={id})":567,"GET /reports/getonedriveactivityuserdetail(period='{id}')":567,"GET /reports/getonedriveusageaccountcounts(period='{id}')":567,"GET /reports/getonedriveusageaccountdetail(date={id})":567,"GET /reports/getonedriveusageaccountdetail(period='{id}')":567,"GET /reports/getonedriveusagefilecounts(period='{id}')":567,"GET /reports/getonedriveusagestorage(period='{id}')":567,"GET /reports/getprinterarchivedprintjobs(printerid='{id}',startdatetime='{id}',enddatetime='{id}')":544,"GET /reports/getrelyingpartydetailedsummary(period='parametervalue')":567,"GET /reports/getsharepointactivityfilecounts(period='{id}')":567,"GET /reports/getsharepointactivitypages(period='{id}')":567,"GET /reports/getsharepointactivityusercounts(period='{id}')":567,"GET /reports/getsharepointactivityuserdetail(date={id})":567,"GET /reports/getsharepointactivityuserdetail(period='{id}')":567,"GET /reports/getsharepointapiusage(date={id})":544,"GET /reports/getsharepointapiusage(date={id},appid='{id}')":544,"GET /reports/getsharepointapiusage(date={id},appid='{id}',reporttype='{id}')":544,"GET /reports/getsharepointapiusage(date={id},reporttype='{id}')":544,"GET /reports/getsharepointapiusage(period='{id}')":544,"GET /reports/getsharepointapiusage(period='{id}',appid='{id}')":544,"GET /reports/getsharepointapiusage(period='{id}',appid='{id}',reporttype='{id}')":544,"GET /reports/getsharepointapiusage(period='{id}',reporttype='{id}')":544,"GET /reports/getsharepointsiteusagedetail(date={id})":567,"GET /reports/getsharepointsiteusagedetail(period='{id}')":567,"GET /reports/getsharepointsiteusagefilecounts(period='{id}')":567,"GET /reports/getsharepointsiteusagepages(period='{id}')":567,"GET /reports/getsharepointsiteusagesitecounts(period='{id}')":567,"GET /reports/getsharepointsiteusagestorage(period='{id}')":567,"GET /reports/getskypeforbusinessactivitycounts(period='{id}')":567,"GET /reports/getskypeforbusinessactivityusercounts(period='{id}')":567,"GET /reports/getskypeforbusinessactivityuserdetail(date={id})":567,"GET /reports/getskypeforbusinessactivityuserdetail(period='{id}')":567,"GET /reports/getskypeforbusinessdeviceusagedistributionusercounts(period='{id}')":567,"GET /reports/getskypeforbusinessdeviceusageusercounts(period='{id}')":567,"GET /reports/getskypeforbusinessdeviceusageuserdetail(date={id})":567,"GET /reports/getskypeforbusinessdeviceusageuserdetail(period='{id}')":567,"GET /reports/getskypeforbusinessorganizeractivitycounts(period='{id}')":567,"GET /reports/getskypeforbusinessorganizeractivityminutecounts(period='{id}')":567,"GET /reports/getskypeforbusinessorganizeractivityusercounts(period='{id}')":567,"GET /reports/getskypeforbusinessparticipantactivitycounts(period='{id}')":567,"GET /reports/getskypeforbusinessparticipantactivityminutecounts(period='{id}')":567,"GET /reports/getskypeforbusinessparticipantactivityusercounts(period='{id}')":567,"GET /reports/getskypeforbusinesspeertopeeractivitycounts(period='{id}')":567,"GET /reports/getskypeforbusinesspeertopeeractivityminutecounts(period='{id}')":567,"GET /reports/getskypeforbusinesspeertopeeractivityusercounts(period='{id}')":567,"GET /reports/getteamsdeviceusagedistributiontotalusercounts(period='d7')":567,"GET /reports/getteamsdeviceusagedistributionusercounts(period='d7')":567,"GET /reports/getteamsdeviceusagetotalusercounts(period='d7')":567,"GET /reports/getteamsdeviceusageusercounts(period='d7')":567,"GET /reports/getteamsdeviceusageuserdetail(date='{id}')":567,"GET /reports/getteamsdeviceusageuserdetail(period='{id}')":567,"GET /reports/getteamsteamactivitycounts(period='{id}')":567,"GET /reports/getteamsteamactivitydetail(period='{id}')":567,"GET /reports/getteamsteamactivitydistributioncounts(period='{id}')":567,"GET /reports/getteamsteamcounts(period='{id}')":567,"GET /reports/getteamsuseractivitycounts(period='d7')":567,"GET /reports/getteamsuseractivitydistributiontotalusercounts(period='d7')":567,"GET /reports/getteamsuseractivitydistributionusercounts(period='d7')":567,"GET /reports/getteamsuseractivitytotalcounts(period='d7')":567,"GET /reports/getteamsuseractivitytotaldistributioncounts(period='{id}')":567,"GET /reports/getteamsuseractivitytotalusercounts(period='d7')":567,"GET /reports/getteamsuseractivityusercounts(period='d7')":567,"GET /reports/getteamsuseractivityuserdetail(date={id})":567,"GET /reports/getteamsuseractivityuserdetail(period='{id}')":567,"GET /reports/getuserarchivedprintjobs(userid='{id}',startdatetime='{id}',enddatetime='{id}')":544,"GET /reports/getyammeractivitycounts(period='{id}')":567,"GET /reports/getyammeractivityusercounts(period='{id}')":567,"GET /reports/getyammeractivityuserdetail(date={id})":567,"GET /reports/getyammeractivityuserdetail(period='{id}')":567,"GET /reports/getyammerdeviceusagedistributionusercounts(period='{id}')":567,"GET /reports/getyammerdeviceusageusercounts(period='{id}')":567,"GET /reports/getyammerdeviceusageuserdetail(date={id})":567,"GET /reports/getyammerdeviceusageuserdetail(period='{id}')":567,"GET /reports/getyammergroupsactivitycounts(period='{id}')":567,"GET /reports/getyammergroupsactivitydetail(date={id})":567,"GET /reports/getyammergroupsactivitydetail(period='{id}')":567,"GET /reports/getyammergroupsactivitygroupcounts(period='{id}')":567,"GET /reports/healthmonitoring/alertconfigurations":886,"GET /reports/healthmonitoring/alertconfigurations/{id}":884,"GET /reports/healthmonitoring/alerts":887,"GET /reports/healthmonitoring/alerts/{id}":882,"GET /reports/identityanalytics/groups":879,"GET /reports/identityanalytics/groups/{id}":879,"GET /reports/manageddeviceenrollmentabandonmentdetails":425,"GET /reports/manageddeviceenrollmentabandonmentsummary":425,"GET /reports/manageddeviceenrollmentfailuredetails":425,"GET /reports/manageddeviceenrollmentfailuretrends":425,"GET /reports/manageddeviceenrollmenttopfailures":425,"GET /reports/microsoftappsfilestoragecontainerusagesummary":544,"GET /reports/monthlyprintusagebyprinter":544,"GET /reports/monthlyprintusagebyprinter/{id}":544,"GET /reports/monthlyprintusagebyuser":544,"GET /reports/monthlyprintusagebyuser/{id}":544,"GET /reports/partners/billing/manifests/{id}":495,"GET /reports/partners/billing/operations/{id}":495,"GET /reports/security/getattacksimulationrepeatoffenders":80,"GET /reports/security/getattacksimulationsimulationusercoverage":80,"GET /reports/security/getattacksimulationtrainingusercoverage":80,"GET /reports/serviceactivity/getactiveusermetricsfordesktopmailbyreademail":1025,"GET /reports/serviceactivity/getactiveusermetricsforemailbymodernauthentication":1025,"GET /reports/serviceactivity/getactiveusermetricsforexcelweb":1026,"GET /reports/serviceactivity/getactiveusermetricsforiosorandroidmailbyreademail":1025,"GET /reports/serviceactivity/getactiveusermetricsforonenoteweb":1026,"GET /reports/serviceactivity/getactiveusermetricsforoutlookmacbyreademail":1025,"GET /reports/serviceactivity/getactiveusermetricsforoutlookmobilebyreademail":1025,"GET /reports/serviceactivity/getactiveusermetricsforoutlookwebbyappopening":1025,"GET /reports/serviceactivity/getactiveusermetricsforoutlookwebbyreademail":1025,"GET /reports/serviceactivity/getactiveusermetricsforpowerpointweb":1026,"GET /reports/serviceactivity/getactiveusermetricsforvisioweb":1026,"GET /reports/serviceactivity/getactiveusermetricsforwordweb":1026,"GET /reports/serviceactivity/getaudiostreamqoemetricsforteams":1027,"GET /reports/serviceactivity/getaudiostreamsoverudpmetricsforteams":1027,"GET /reports/serviceactivity/getconnectivitymetricsforexchange":1025,"GET /reports/serviceactivity/getmessagevolumemetricsforemaildelivery":1025,"GET /reports/serviceactivity/getmessagevolumemetricsforteamschat":1027,"GET /reports/serviceactivity/getmetricsforconditionalaccessblockedsignin(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsforconditionalaccesscompliantdevicessigninsuccess":567,"GET /reports/serviceactivity/getmetricsforconditionalaccessmanageddevicessigninsuccess":567,"GET /reports/serviceactivity/getmetricsformfasigninfailure":567,"GET /reports/serviceactivity/getmetricsformfasigninsuccess":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessinternetapppolicyallowedapps(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessinternetapppolicyallowedusers(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessinternetapppolicyblockedapps(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessinternetapppolicyblockedusers(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessprivateappsallowedbyconnector(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessprivateappsblockedbyconnector(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessprivateappusersallowedbyconnector(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessprivateappusersblockedbyconnector(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessremotenetworkbranchesalive(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessremotenetworkbranchesbgpconnected(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessremotenetworkbranchesbgpdisconnected(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessremotenetworkbranchestunnelconnected(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsfornetworkaccessremotenetworkbranchestunneldisconnected(inclusiveintervalstartdatetime={id},exclusiveintervalenddatetime={id})":567,"GET /reports/serviceactivity/getmetricsforsamlsigninsuccess":567,"GET /reports/serviceactivity/getusagemetricsforteamsbylaunch":1027,"GET /reports/serviceactivity/getusagemetricsforteamsbymeetingsjoined":1027,"GET /reports/serviceprincipalsigninactivities":276,"GET /reports/serviceprincipalsigninactivities/{id}":276,"GET /reports/sla/azureadauthentication":567,"GET /reports/usercredentialusagedetails":567,"GET /reports/userinsights/daily/activeusers":849,"GET /reports/userinsights/daily/authentications":849,"GET /reports/userinsights/daily/mfacompletions":849,"GET /reports/userinsights/daily/requests":849,"GET /reports/userinsights/daily/signups":849,"GET /reports/userinsights/daily/usercount":849,"GET /reports/userinsights/monthly/activeusers":849,"GET /reports/userinsights/monthly/authentications":849,"GET /reports/userinsights/monthly/mfacompletions":849,"GET /reports/userinsights/monthly/requests":849,"GET /reports/userinsights/monthly/signups":849,"GET /reports/userinsights/monthly/summary":849,"GET /riskdetections":405,"GET /riskdetections/{id}":405,"GET /riskyusers":574,"GET /riskyusers/{id}":574,"GET /riskyusers/{id}/history":575,"GET /riskyusers/{id}/history/{id}":575,"GET /rolemanagement":929,"GET /rolemanagement/cloudpc/roleassignments":994,"GET /rolemanagement/cloudpc/roleassignments/{id}":1061,"GET /rolemanagement/cloudpc/roledefinitions":848,"GET /rolemanagement/cloudpc/roledefinitions/{id}":848,"GET /rolemanagement/defender/customappscopes":1059,"GET /rolemanagement/defender/roleassignments":994,"GET /rolemanagement/defender/roledefinitions":848,"GET /rolemanagement/defender/roledefinitions/{id}":848,"GET /rolemanagement/devicemanagement":929,"GET /rolemanagement/devicemanagement/roleassignments":994,"GET /rolemanagement/devicemanagement/roleassignments/{id}":1061,"GET /rolemanagement/devicemanagement/roledefinitions":848,"GET /rolemanagement/devicemanagement/roledefinitions/{id}":848,"GET /rolemanagement/directory/deleteditems/roledefinitions":862,"GET /rolemanagement/directory/deleteditems/roledefinitions/{id}":848,"GET /rolemanagement/directory/resourcenamespaces":993,"GET /rolemanagement/directory/resourcenamespaces/{id}":993,"GET /rolemanagement/directory/resourcenamespaces/{id}/resourceactions":993,"GET /rolemanagement/directory/resourcenamespaces/{id}/resourceactions/{id}":993,"GET /rolemanagement/directory/roleassignmentapprovals/{id}":2,"GET /rolemanagement/directory/roleassignmentapprovals/{id}/steps":761,"GET /rolemanagement/directory/roleassignmentapprovals/{id}/steps/{id}":761,"GET /rolemanagement/directory/roleassignments":848,"GET /rolemanagement/directory/roleassignments/{id}":848,"GET /rolemanagement/directory/roleassignmentscheduleinstances":559,"GET /rolemanagement/directory/roleassignmentscheduleinstances/filterbycurrentuser(on='principal')":559,"GET /rolemanagement/directory/roleassignmentscheduleinstances/{id}":559,"GET /rolemanagement/directory/roleassignmentschedulerequests":560,"GET /rolemanagement/directory/roleassignmentschedulerequests/filterbycurrentuser(on='principal')":560,"GET /rolemanagement/directory/roleassignmentschedulerequests/{id}":560,"GET /rolemanagement/directory/roleassignmentschedules":559,"GET /rolemanagement/directory/roleassignmentschedules/filterbycurrentuser(on='principal')":559,"GET /rolemanagement/directory/roleassignmentschedules/{id}":559,"GET /rolemanagement/directory/roledefinitions":848,"GET /rolemanagement/directory/roledefinitions/{id}":848,"GET /rolemanagement/directory/roledefinitions/{id}/assignedprincipals(transitive=@transitive,directoryscopetype='@directoryscopetype',directoryscopeid='@directoryscopeid')":1062,"GET /rolemanagement/directory/roleeligibilityscheduleinstances":561,"GET /rolemanagement/directory/roleeligibilityscheduleinstances/filterbycurrentuser(on='principal')":561,"GET /rolemanagement/directory/roleeligibilityscheduleinstances/{id}":561,"GET /rolemanagement/directory/roleeligibilityschedulerequests":562,"GET /rolemanagement/directory/roleeligibilityschedulerequests/filterbycurrentuser(on='principal')":562,"GET /rolemanagement/directory/roleeligibilityschedulerequests/{id}":562,"GET /rolemanagement/directory/roleeligibilityschedules":561,"GET /rolemanagement/directory/roleeligibilityschedules/{id}":561,"GET /rolemanagement/directory/rolescheduleinstances(directoryscopeid='@directoryscopeid',appscopeid='@appscopeid',principalid='@principalid',roledefinitionid='@roledefinitionid')":992,"GET /rolemanagement/directory/roleschedules(directoryscopeid='@directoryscopeid',appscopeid='@appscopeid',principalid='@principalid',roledefinitionid='@roledefinitionid')":992,"GET /rolemanagement/directory/transitiveroleassignments":281,"GET /rolemanagement/entitlementmanagement/roleassignments":848,"GET /rolemanagement/entitlementmanagement/roleassignments/{id}":848,"GET /rolemanagement/entitlementmanagement/roledefinitions":848,"GET /rolemanagement/entitlementmanagement/roledefinitions/{id}":848,"GET /rolemanagement/exchange/customappscopes":848,"GET /rolemanagement/exchange/customappscopes/{id}":848,"GET /rolemanagement/exchange/roleassignments":848,"GET /rolemanagement/exchange/roleassignments/{id}":848,"GET /rolemanagement/exchange/roledefinitions":848,"GET /rolemanagement/exchange/roledefinitions/{id}":848,"GET /schemaextensions":577,"GET /schemaextensions/{id}":577,"GET /search/acronyms":578,"GET /search/acronyms/{id}":578,"GET /search/bookmarks":578,"GET /search/bookmarks/{id}":578,"GET /search/qnas":578,"GET /search/qnas/{id}":578,"GET /security/alerts":61,"GET /security/alerts/{id}":61,"GET /security/alerts_v2":580,"GET /security/alerts_v2/{id}":580,"GET /security/attacksimulation/endusernotifications":80,"GET /security/attacksimulation/landingpages":80,"GET /security/attacksimulation/landingpages/{id}":496,"GET /security/attacksimulation/loginpages":80,"GET /security/attacksimulation/loginpages/{id}":496,"GET /security/attacksimulation/operations/{id}":80,"GET /security/attacksimulation/payloads":80,"GET /security/attacksimulation/payloads/{id}":80,"GET /security/attacksimulation/payloads/{id}/detail":496,"GET /security/attacksimulation/simulationautomations":80,"GET /security/attacksimulation/simulationautomations/{id}":80,"GET /security/attacksimulation/simulationautomations/{id}/runs":80,"GET /security/attacksimulation/simulations":80,"GET /security/attacksimulation/simulations/{id}":80,"GET /security/attacksimulation/simulations/{id}/excludedaccounttarget":80,"GET /security/attacksimulation/simulations/{id}/includedaccounttarget":80,"GET /security/attacksimulation/simulations/{id}/landingpage":496,"GET /security/attacksimulation/simulations/{id}/loginpage":496,"GET /security/attacksimulation/simulations/{id}/payload":80,"GET /security/attacksimulation/simulations/{id}/report/overview":80,"GET /security/attacksimulation/simulations/{id}/report/simulationusers":80,"GET /security/attacksimulation/trainingcampaigns":80,"GET /security/attacksimulation/trainingcampaigns/{id}":80,"GET /security/attacksimulation/trainingcampaigns/{id}/report/campaignusers":80,"GET /security/attacksimulation/trainingcampaigns/{id}/report/overview":80,"GET /security/attacksimulation/trainings":80,"GET /security/attacksimulation/trainings/{id}":496,"GET /security/attacksimulation/trainings/{id}/languagedetails/{id}":496,"GET /security/casemanagement/cases":1004,"GET /security/casemanagement/cases/{id}":1004,"GET /security/casemanagement/cases/{id}/activities":1004,"GET /security/casemanagement/cases/{id}/activities/{id}":1004,"GET /security/casemanagement/cases/{id}/attachments":1004,"GET /security/casemanagement/cases/{id}/attachments/{id}":1004,"GET /security/casemanagement/cases/{id}/attachments/{id}/content":1004,"GET /security/casemanagement/cases/{id}/relations":1004,"GET /security/casemanagement/cases/{id}/relations/{id}":1004,"GET /security/casemanagement/cases/{id}/tasks":1004,"GET /security/casemanagement/cases/{id}/tasks/{id}":1004,"GET /security/casemanagement/casetypeconfigurations":1004,"GET /security/casemanagement/casetypeconfigurations/{id}":1004,"GET /security/casemanagement/casetypeconfigurations/{id}/customfields":1004,"GET /security/casemanagement/casetypeconfigurations/{id}/customfields/{id}":1004,"GET /security/casemanagement/casetypeconfigurations/{id}/statuses":1004,"GET /security/casemanagement/casetypeconfigurations/{id}/statuses/{id}":1004,"GET /security/cases/ediscoverycases":591,"GET /security/cases/ediscoverycases/{id}":591,"GET /security/cases/ediscoverycases/{id}/custodians":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}/lastindexoperation":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}/sitesources":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}/unifiedgroupsources":591,"GET /security/cases/ediscoverycases/{id}/custodians/{id}/usersources":591,"GET /security/cases/ediscoverycases/{id}/legalholds":591,"GET /security/cases/ediscoverycases/{id}/legalholds/{id}":591,"GET /security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources":591,"GET /security/cases/ediscoverycases/{id}/legalholds/{id}/usersources":591,"GET /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}":591,"GET /security/cases/ediscoverycases/{id}/noncustodialsources/{id}/lastindexoperation":591,"GET /security/cases/ediscoverycases/{id}/operations":591,"GET /security/cases/ediscoverycases/{id}/operations/{id}":590,"GET /security/cases/ediscoverycases/{id}/operations/{id}/security.ediscoveryexportoperation/getdownloadurl":591,"GET /security/cases/ediscoverycases/{id}/reviewsets":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/files":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}/childtags/{id}":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}/parent":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}":591,"GET /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/run":591,"GET /security/cases/ediscoverycases/{id}/searches":591,"GET /security/cases/ediscoverycases/{id}/searches/{id}":591,"GET /security/cases/ediscoverycases/{id}/searches/{id}/additionalsources":590,"GET /security/cases/ediscoverycases/{id}/searches/{id}/custodiansources":590,"GET /security/cases/ediscoverycases/{id}/searches/{id}/lastestimatestatisticsoperation":591,"GET /security/cases/ediscoverycases/{id}/searches/{id}/noncustodialsources":590,"GET /security/cases/ediscoverycases/{id}/settings":591,"GET /security/cases/ediscoverycases/{id}/tags":591,"GET /security/cases/ediscoverycases/{id}/tags/ashierarchy":591,"GET /security/cases/ediscoverycases/{id}/tags/{id}":591,"GET /security/collaboration/analyzedemails":583,"GET /security/collaboration/analyzedemails/{id}":583,"GET /security/datadiscovery/cloudappdiscovery/uploadedstreams":1005,"GET /security/datadiscovery/cloudappdiscovery/uploadedstreams/{id}/security.aggregatedappsdetails(period=duration'{id}')":1005,"GET /security/datadiscovery/cloudappdiscovery/uploadedstreams/{id}/security.aggregatedappsdetails(period=duration'{id}')/{id}":1005,"GET /security/datadiscovery/cloudappdiscovery/uploadedstreams/{id}/security.aggregatedappsdetails(period=duration'{id}')/{id}/appinfo":1005,"GET /security/datadiscovery/cloudappdiscovery/uploadedstreams/{id}/security.aggregatedappsdetails(period=duration'{id}')/{id}/devices":1005,"GET /security/datadiscovery/cloudappdiscovery/uploadedstreams/{id}/security.aggregatedappsdetails(period=duration'{id}')/{id}/ipaddresses":1005,"GET /security/datadiscovery/cloudappdiscovery/uploadedstreams/{id}/security.aggregatedappsdetails(period=duration'{id}')/{id}/users":1005,"GET /security/datasecurityandgovernance/sensitivitylabels":607,"GET /security/datasecurityandgovernance/sensitivitylabels/computeinheritance":606,"GET /security/datasecurityandgovernance/sensitivitylabels/{id}":607,"GET /security/datasecurityandgovernance/sensitivitylabels/{id}/rights":607,"GET /security/gethuntingschematables":605,"GET /security/gethuntingschematables(workspaceid={id})":605,"GET /security/getrunhuntingquery(query='{id}',timespan='{id}',workspaceid={id})":605,"GET /security/identities/healthissues":594,"GET /security/identities/healthissues/{id}":594,"GET /security/identities/identityaccounts":596,"GET /security/identities/identityaccounts/{id}":596,"GET /security/identities/sensorcandidateactivationconfiguration":598,"GET /security/identities/sensorcandidates":598,"GET /security/identities/sensormigration":1018,"GET /security/identities/sensors":599,"GET /security/identities/sensors/getdeploymentaccesskey":600,"GET /security/identities/sensors/getdeploymentpackageuri":599,"GET /security/identities/sensors/{id}":599,"GET /security/identities/settings/autoauditingconfiguration":588,"GET /security/incidents":601,"GET /security/incidents/{id}":601,"GET /security/informationprotection/labelpolicysettings":915,"GET /security/informationprotection/sensitivitylabels":915,"GET /security/informationprotection/sensitivitylabels/{id}":915,"GET /security/labels/authorities":587,"GET /security/labels/authorities/{id}":587,"GET /security/labels/categories":587,"GET /security/labels/categories/{id}":587,"GET /security/labels/categories/{id}/subcategories":587,"GET /security/labels/categories/{id}/subcategories/{id}":587,"GET /security/labels/citations":587,"GET /security/labels/citations/{id}":587,"GET /security/labels/departments":587,"GET /security/labels/departments/{id}":587,"GET /security/labels/fileplanreferences":587,"GET /security/labels/fileplanreferences/{id}":587,"GET /security/labels/retentionlabels":603,"GET /security/labels/retentionlabels/{id}":603,"GET /security/labels/retentionlabels/{id}/descriptors/authoritytemplate":587,"GET /security/labels/retentionlabels/{id}/descriptors/categorytemplate":587,"GET /security/labels/retentionlabels/{id}/descriptors/citationtemplate":587,"GET /security/labels/retentionlabels/{id}/descriptors/departmenttemplate":587,"GET /security/labels/retentionlabels/{id}/descriptors/fileplanreferencetemplate":587,"GET /security/labels/retentionlabels/{id}/eventtype":587,"GET /security/partner/securityalerts":975,"GET /security/partner/securityalerts/{id}":975,"GET /security/partner/securityscore":977,"GET /security/partner/securityscore/customerinsights":977,"GET /security/partner/securityscore/history":977,"GET /security/partner/securityscore/history/{id}":977,"GET /security/partner/securityscore/requirements":975,"GET /security/partner/securityscore/requirements/{id}":975,"GET /security/rules/detectionrules":1007,"GET /security/rules/detectionrules/{id}":1007,"GET /security/securescorecontrolprofiles":61,"GET /security/securescores":61,"GET /security/securityactions":1024,"GET /security/securityactions/{id}":1024,"GET /security/securitycopilot/workspaces":1020,"GET /security/securitycopilot/workspaces/{id}/plugins":1020,"GET /security/securitycopilot/workspaces/{id}/sessions":1020,"GET /security/securitycopilot/workspaces/{id}/sessions/{id}":1020,"GET /security/securitycopilot/workspaces/{id}/sessions/{id}/prompts":1020,"GET /security/securitycopilot/workspaces/{id}/sessions/{id}/prompts/{id}":1020,"GET /security/securitycopilot/workspaces/{id}/sessions/{id}/prompts/{id}/evaluations":1020,"GET /security/securitycopilot/workspaces/{id}/sessions/{id}/prompts/{id}/evaluations/{id}":1020,"GET /security/subjectrightsrequests":628,"GET /security/subjectrightsrequests/{id}":628,"GET /security/subjectrightsrequests/{id}/getfinalattachment":628,"GET /security/subjectrightsrequests/{id}/getfinalreport":628,"GET /security/subjectrightsrequests/{id}/notes":628,"GET /security/threatintelligence/articleindicators/{id}":585,"GET /security/threatintelligence/articles":585,"GET /security/threatintelligence/articles/{id}":585,"GET /security/threatintelligence/articles/{id}/indicators":585,"GET /security/threatintelligence/hostcomponents/{id}":585,"GET /security/threatintelligence/hostcookies/{id}":585,"GET /security/threatintelligence/hostpairs/{id}":585,"GET /security/threatintelligence/hostports/{id}":585,"GET /security/threatintelligence/hosts/{id}":585,"GET /security/threatintelligence/hosts/{id}/childhostpairs":585,"GET /security/threatintelligence/hosts/{id}/components":585,"GET /security/threatintelligence/hosts/{id}/cookies":585,"GET /security/threatintelligence/hosts/{id}/hostpairs":585,"GET /security/threatintelligence/hosts/{id}/parenthostpairs":585,"GET /security/threatintelligence/hosts/{id}/passivedns":585,"GET /security/threatintelligence/hosts/{id}/passivednsreverse":585,"GET /security/threatintelligence/hosts/{id}/ports":585,"GET /security/threatintelligence/hosts/{id}/reputation":585,"GET /security/threatintelligence/hosts/{id}/sslcertificates":585,"GET /security/threatintelligence/hosts/{id}/subdomains":585,"GET /security/threatintelligence/hosts/{id}/trackers":585,"GET /security/threatintelligence/hosts/{id}/whois":585,"GET /security/threatintelligence/hosts/{id}/whois/history":585,"GET /security/threatintelligence/hostsslcertificates/{id}":585,"GET /security/threatintelligence/hosttrackers/{id}":585,"GET /security/threatintelligence/intelligenceprofileindicators/{id}":585,"GET /security/threatintelligence/intelprofiles":585,"GET /security/threatintelligence/intelprofiles/{id}":585,"GET /security/threatintelligence/intelprofiles/{id}/indicators":585,"GET /security/threatintelligence/passivednsrecords/{id}":585,"GET /security/threatintelligence/sslcertificates":585,"GET /security/threatintelligence/sslcertificates/{id}":585,"GET /security/threatintelligence/subdomains/{id}":585,"GET /security/threatintelligence/vulnerabilities/{id}":585,"GET /security/threatintelligence/vulnerabilities/{id}/components":585,"GET /security/threatintelligence/vulnerabilities/{id}/components/{id}":585,"GET /security/threatintelligence/whoishistoryrecord/{id}":585,"GET /security/threatintelligence/whoisrecords":585,"GET /security/threatintelligence/whoisrecords/{id}":585,"GET /security/threatintelligence/whoisrecords/{id}/history":585,"GET /security/threatsubmission/emailthreats":1010,"GET /security/threatsubmission/emailthreats/{id}":1009,"GET /security/threatsubmission/emailthreatsubmissionpolicies/{id}":1014,"GET /security/threatsubmission/filethreats":1010,"GET /security/threatsubmission/filethreats/{id}":1009,"GET /security/threatsubmission/urlthreats":1010,"GET /security/threatsubmission/urlthreats/{id}":1009,"GET /security/tiindicators":1054,"GET /security/tiindicators/{id}":1054,"GET /security/triggers/retentionevents":587,"GET /security/triggers/retentionevents/{id}":587,"GET /security/triggers/retentionevents/{id}/labels/{id}":603,"GET /security/triggers/retentionevents/{id}/retentioneventtype":587,"GET /security/triggertypes/retentioneventtypes":587,"GET /security/triggertypes/retentioneventtypes/{id}":587,"GET /security/workbooks":1019,"GET /security/workbooks/{id}":1019,"GET /security/zones":1017,"GET /security/zones/{id}":1017,"GET /security/zones/{id}/environments":1017,"GET /security/zones/{id}/environments/{id}":1017,"GET /serviceprincipals":613,"GET /serviceprincipals(appid='{id}')":70,"GET /serviceprincipals(appid='{id}')/agentidentityblueprintprincipal":39,"GET /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration":76,"GET /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps":76,"GET /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps/{id}":76,"GET /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/targetdevicegroups":565,"GET /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/targetdevicegroups/{id}":76,"GET /serviceprincipals/agentidentity":26,"GET /serviceprincipals/agentidentity/{id}/communicationconfiguration":788,"GET /serviceprincipals/agentidentity/{id}/inheritedapproleassignments":40,"GET /serviceprincipals/agentidentity/{id}/inheritedoauth2permissiongrants":474,"GET /serviceprincipals/agentidentityblueprintprincipal":41,"GET /serviceprincipals/delta":69,"GET /serviceprincipals/{id}":70,"GET /serviceprincipals/{id}/agentidentity":25,"GET /serviceprincipals/{id}/agentidentity/memberof":25,"GET /serviceprincipals/{id}/agentidentity/ownedobjects":25,"GET /serviceprincipals/{id}/agentidentity/owners":25,"GET /serviceprincipals/{id}/agentidentity/sponsors":23,"GET /serviceprincipals/{id}/agentidentity/transitivememberof":25,"GET /serviceprincipals/{id}/agentidentityblueprintprincipal":39,"GET /serviceprincipals/{id}/agentidentityblueprintprincipal/memberof":39,"GET /serviceprincipals/{id}/agentidentityblueprintprincipal/owners":39,"GET /serviceprincipals/{id}/approleassignedto":40,"GET /serviceprincipals/{id}/approleassignments":40,"GET /serviceprincipals/{id}/claimspolicy":9,"GET /serviceprincipals/{id}/createdobjects":40,"GET /serviceprincipals/{id}/delegatedpermissionclassifications":611,"GET /serviceprincipals/{id}/memberof":40,"GET /serviceprincipals/{id}/oauth2permissiongrants":474,"GET /serviceprincipals/{id}/ownedobjects":40,"GET /serviceprincipals/{id}/owners":40,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration":76,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps":76,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}":76,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups":565,"GET /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}":76,"GET /serviceprincipals/{id}/synchronization/jobs":635,"GET /serviceprincipals/{id}/synchronization/jobs/{id}":635,"GET /serviceprincipals/{id}/synchronization/jobs/{id}/schema":638,"GET /serviceprincipals/{id}/synchronization/jobs/{id}/schema/filteroperators":634,"GET /serviceprincipals/{id}/synchronization/jobs/{id}/schema/functions":634,"GET /serviceprincipals/{id}/synchronization/templates":635,"GET /serviceprincipals/{id}/synchronization/templates/{id}":635,"GET /serviceprincipals/{id}/synchronization/templates/{id}/schema":638,"GET /serviceprincipals/{id}/synchronization/templates/{id}/schema/filteroperators":634,"GET /serviceprincipals/{id}/synchronization/templates/{id}/schema/functions":634,"GET /serviceprincipals/{id}/transitivememberof":612,"GET /settings":383,"GET /settings/{id}":383,"GET /shares/{id}":296,"GET /shares/{id}/driveitem/content":300,"GET /shares/{id}/driveitem/contentstream":300,"GET /sites":124,"GET /sites/contoso.sharepoint.com":124,"GET /sites/delta":624,"GET /sites/getallsites":625,"GET /sites/getoperationstatus(operationid='{id}')":1038,"GET /sites/root":124,"GET /sites/{id}/analytics":293,"GET /sites/{id}/columns":232,"GET /sites/{id}/columns/{id}":232,"GET /sites/{id}/contentmodels/getbyname":844,"GET /sites/{id}/contentmodels/{id}":844,"GET /sites/{id}/contentmodels/{id}/getapplieddrives":844,"GET /sites/{id}/contenttypes":232,"GET /sites/{id}/contenttypes/getcompatiblehubcontenttypes":231,"GET /sites/{id}/contenttypes/{id}":232,"GET /sites/{id}/contenttypes/{id}/columns":232,"GET /sites/{id}/contenttypes/{id}/columns/{id}":232,"GET /sites/{id}/contenttypes/{id}/ispublished":244,"GET /sites/{id}/drive":291,"GET /sites/{id}/drive/items/{id}":301,"GET /sites/{id}/drive/items/{id}/children":300,"GET /sites/{id}/drive/items/{id}/content":300,"GET /sites/{id}/drive/items/{id}/contentstream":300,"GET /sites/{id}/drive/items/{id}/permissions":293,"GET /sites/{id}/drive/items/{id}/permissions/{id}":300,"GET /sites/{id}/drive/items/{id}/thumbnails":293,"GET /sites/{id}/drive/items/{id}/versions":293,"GET /sites/{id}/drive/items/{id}/versions/{id}":293,"GET /sites/{id}/drive/items/{id}/versions/{id}/content":293,"GET /sites/{id}/drive/root/delta":293,"GET /sites/{id}/drive/root/search(q='{id}')":293,"GET /sites/{id}/drive/root:/{id}":301,"GET /sites/{id}/drives":293,"GET /sites/{id}/getactivitiesbyinterval(startdatetime={id},enddatetime={id},interval={id})":300,"GET /sites/{id}/getapplicablecontenttypesforlist":444,"GET /sites/{id}/items/{id}/versions":124,"GET /sites/{id}/items/{id}/versions/{id}":124,"GET /sites/{id}/lists":124,"GET /sites/{id}/lists/{id}":124,"GET /sites/{id}/lists/{id}/activities":293,"GET /sites/{id}/lists/{id}/columns":232,"GET /sites/{id}/lists/{id}/columns/{id}":232,"GET /sites/{id}/lists/{id}/contenttypes":444,"GET /sites/{id}/lists/{id}/contenttypes/getcompatiblehubcontenttypes":231,"GET /sites/{id}/lists/{id}/contenttypes/{id}":232,"GET /sites/{id}/lists/{id}/contenttypes/{id}/columns":232,"GET /sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}":232,"GET /sites/{id}/lists/{id}/drive/root/subscriptions/socketio":632,"GET /sites/{id}/lists/{id}/items":124,"GET /sites/{id}/lists/{id}/items/delta":124,"GET /sites/{id}/lists/{id}/items/{id}":445,"GET /sites/{id}/lists/{id}/items/{id}/activities":293,"GET /sites/{id}/lists/{id}/items/{id}/analytics":293,"GET /sites/{id}/lists/{id}/items/{id}/documentsetversions":283,"GET /sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}":283,"GET /sites/{id}/lists/{id}/items/{id}/getactivitiesbyinterval(startdatetime={id},enddatetime={id},interval={id})":300,"GET /sites/{id}/lists/{id}/items/{id}/permissions":444,"GET /sites/{id}/lists/{id}/items/{id}/permissions/{id}":444,"GET /sites/{id}/lists/{id}/items/{id}/versions":124,"GET /sites/{id}/lists/{id}/items/{id}/versions/{id}":124,"GET /sites/{id}/lists/{id}/operations":444,"GET /sites/{id}/lists/{id}/operations/{id}":444,"GET /sites/{id}/lists/{id}/permissions":444,"GET /sites/{id}/onenote/notebooks":471,"GET /sites/{id}/onenote/notebooks/{id}":471,"GET /sites/{id}/onenote/notebooks/{id}/sectiongroups":471,"GET /sites/{id}/onenote/notebooks/{id}/sections":471,"GET /sites/{id}/onenote/operations/{id}":471,"GET /sites/{id}/onenote/pages":476,"GET /sites/{id}/onenote/pages/{id}":492,"GET /sites/{id}/onenote/resources/{id}/content":476,"GET /sites/{id}/onenote/sectiongroups":471,"GET /sites/{id}/onenote/sectiongroups/{id}":471,"GET /sites/{id}/onenote/sectiongroups/{id}/sectiongroups":471,"GET /sites/{id}/onenote/sectiongroups/{id}/sections":471,"GET /sites/{id}/onenote/sections":471,"GET /sites/{id}/onenote/sections/{id}":471,"GET /sites/{id}/onenote/sections/{id}/pages":476,"GET /sites/{id}/operations":444,"GET /sites/{id}/operations/{id}":444,"GET /sites/{id}/pages":124,"GET /sites/{id}/pages/newslinkpage":124,"GET /sites/{id}/pages/sitepage":124,"GET /sites/{id}/pages/{id}":124,"GET /sites/{id}/pages/{id}/newslinkpage":124,"GET /sites/{id}/pages/{id}/sitepage":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}/getpositionofwebpart":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts/{id}/getpositionofwebpart":124,"GET /sites/{id}/pages/{id}/sitepage/getwebpartsbyposition":124,"GET /sites/{id}/pages/{id}/sitepage/webparts":124,"GET /sites/{id}/pages/{id}/sitepage/webparts/{id}":124,"GET /sites/{id}/pages/{id}/sitepage/webparts/{id}/getpositionofwebpart":124,"GET /sites/{id}/pagetemplates/pagetemplate":973,"GET /sites/{id}/pagetemplates/{id}/pagetemplate":124,"GET /sites/{id}/permissions":244,"GET /sites/{id}/permissions/{id}":623,"GET /sites/{id}/recyclebin/items":293,"GET /sites/{id}/settings":124,"GET /sites/{id}/sites":124,"GET /sites/{id}/termstore":687,"GET /sites/{id}/termstore/groups/{id}":687,"GET /sites/{id}/termstore/groups/{id}/sets/{id}/terms/{id}":687,"GET /sites/{id}/termstore/sets/{id}":687,"GET /sites/{id}/termstore/sets/{id}/terms/{id}":687,"GET /sites/{id}:/{id}":124,"GET /solutions/approval":793,"GET /solutions/approval/approvalitems":793,"GET /solutions/approval/approvalitems/{id}":793,"GET /solutions/approval/approvalitems/{id}/requests":793,"GET /solutions/approval/approvalitems/{id}/requests/{id}":793,"GET /solutions/approval/approvalitems/{id}/responses":793,"GET /solutions/approval/approvalitems/{id}/responses/{id}":793,"GET /solutions/approval/operations/{id}":793,"GET /solutions/backuprestore":116,"GET /solutions/backuprestore/activitylogs":805,"GET /solutions/backuprestore/browsesessions":117,"GET /solutions/backuprestore/emailnotificationssetting":116,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxexclusionunits":346,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxexclusionunits/{id}":118,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxexclusionunitsbulkadditionjobs":346,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxexclusionunitsbulkadditionjobs/{id}":346,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules":346,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}":346,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxprotectionunits":118,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxprotectionunitsbulkadditionjobs":118,"GET /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxprotectionunitsbulkadditionjobs/{id}":118,"GET /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifacts":307,"GET /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifactsbulkadditionrequests":307,"GET /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifactsbulkadditionrequests/{id}":307,"GET /solutions/backuprestore/onedriveforbusinessbrowsesessions":117,"GET /solutions/backuprestore/onedriveforbusinessbrowsesessions/{id}":117,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveexclusionunits":346,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveexclusionunits/{id}":118,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveexclusionunitsbulkadditionjobs":346,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveexclusionunitsbulkadditionjobs/{id}":346,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules":346,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}":346,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveprotectionunits":118,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveprotectionunitsbulkadditionjobs":118,"GET /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveprotectionunitsbulkadditionjobs/{id}":118,"GET /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifacts":307,"GET /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifactsbulkadditionrequests":307,"GET /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifactsbulkadditionrequests/{id}":307,"GET /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/granulardriverestoreartifacts":117,"GET /solutions/backuprestore/protectionpolicies":118,"GET /solutions/backuprestore/protectionpolicies/{id}":118,"GET /solutions/backuprestore/protectionunits/driveprotectionunit":118,"GET /solutions/backuprestore/protectionunits/mailboxprotectionunit":118,"GET /solutions/backuprestore/protectionunits/siteprotectionunit":118,"GET /solutions/backuprestore/protectionunits/{id}":118,"GET /solutions/backuprestore/reports/getstatisticsbypolicy(policyid='{id}')":118,"GET /solutions/backuprestore/restorepoints":120,"GET /solutions/backuprestore/restoresessions":120,"GET /solutions/backuprestore/restoresessions/{id}":307,"GET /solutions/backuprestore/serviceapps":121,"GET /solutions/backuprestore/serviceapps/{id}":116,"GET /solutions/backuprestore/sharepointbrowsesessions":117,"GET /solutions/backuprestore/sharepointbrowsesessions/{id}":117,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteexclusionunits":346,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteexclusionunits/{id}":118,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteexclusionunitsbulkadditionjobs":346,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteexclusionunitsbulkadditionjobs/{id}":346,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules":346,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules/{id}":346,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteprotectionunits":118,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteprotectionunitsbulkadditionjobs":118,"GET /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteprotectionunitsbulkadditionjobs/{id}":118,"GET /solutions/backuprestore/sharepointrestoresessions/{id}/granularsiterestoreartifacts":117,"GET /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifacts":307,"GET /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifactsbulkadditionrequests":307,"GET /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifactsbulkadditionrequests/{id}":307,"GET /solutions/bookingbusinesses":134,"GET /solutions/bookingbusinesses/{id}":130,"GET /solutions/bookingbusinesses/{id}/appointments":128,"GET /solutions/bookingbusinesses/{id}/appointments/{id}":128,"GET /solutions/bookingbusinesses/{id}/calendarview":132,"GET /solutions/bookingbusinesses/{id}/customers":132,"GET /solutions/bookingbusinesses/{id}/customers/{id}":128,"GET /solutions/bookingbusinesses/{id}/customquestions":133,"GET /solutions/bookingbusinesses/{id}/customquestions/{id}":132,"GET /solutions/bookingbusinesses/{id}/services":130,"GET /solutions/bookingbusinesses/{id}/services/{id}":130,"GET /solutions/bookingbusinesses/{id}/staffmembers":130,"GET /solutions/bookingbusinesses/{id}/staffmembers/{id}":130,"GET /solutions/bookingcurrencies":138,"GET /solutions/bookingcurrencies/{id}":138,"GET /solutions/businessscenarios":810,"GET /solutions/businessscenarios(uniquename='{id}')":810,"GET /solutions/businessscenarios(uniquename='{id}')/planner/planconfiguration/localizations":810,"GET /solutions/businessscenarios/{id}":810,"GET /solutions/businessscenarios/{id}/planner":812,"GET /solutions/businessscenarios/{id}/planner/planconfiguration":810,"GET /solutions/businessscenarios/{id}/planner/planconfiguration/localizations":810,"GET /solutions/businessscenarios/{id}/planner/taskconfiguration":810,"GET /solutions/businessscenarios/{id}/planner/tasks":813,"GET /solutions/businessscenarios/{id}/planner/tasks/{id}":813,"GET /solutions/migrations/crosstenantmigrationjobs":946,"GET /solutions/sharepoint/migrations/crossorganizationgroupmappings(sourcegroupobjectid='{id}')":1028,"GET /solutions/sharepoint/migrations/crossorganizationmigrationtasks/getbysourcegroupmailnickname(sourcegroupmailnickname='{id}')":1028,"GET /solutions/sharepoint/migrations/crossorganizationmigrationtasks/getbysourcesiteurl(sourcesiteurl='{id}')":1028,"GET /solutions/sharepoint/migrations/crossorganizationmigrationtasks/getbysourceuserprincipalname(sourceprincipalname='{id}')":1028,"GET /solutions/sharepoint/migrations/crossorganizationmigrationtasks/{id}":1028,"GET /solutions/sharepoint/migrations/crossorganizationusermappings(sourceuserprincipalname='{id}')":1028,"GET /solutions/virtualevents/townhalls":745,"GET /solutions/virtualevents/townhalls/getbyuseridandrole(userid='{id}',role='{id}')":745,"GET /solutions/virtualevents/townhalls/getbyuserrole(role='{id}')":747,"GET /solutions/virtualevents/townhalls/{id}":746,"GET /solutions/virtualevents/townhalls/{id}/presenters":739,"GET /solutions/virtualevents/townhalls/{id}/presenters/{id}":739,"GET /solutions/virtualevents/townhalls/{id}/registrationconfiguration":739,"GET /solutions/virtualevents/townhalls/{id}/registrationconfiguration/questions":744,"GET /solutions/virtualevents/townhalls/{id}/registrations":743,"GET /solutions/virtualevents/townhalls/{id}/registrations/{id}":742,"GET /solutions/virtualevents/townhalls/{id}/registrations/{id}/sessions":743,"GET /solutions/virtualevents/townhalls/{id}/sessions":739,"GET /solutions/virtualevents/townhalls/{id}/sessions/{id}":739,"GET /solutions/virtualevents/townhalls/{id}/sessions/{id}/attendancereports":82,"GET /solutions/virtualevents/townhalls/{id}/sessions/{id}/attendancereports/{id}":82,"GET /solutions/virtualevents/townhalls/{id}/sessions/{id}/attendancereports/{id}/attendancerecords":82,"GET /solutions/virtualevents/webinars":745,"GET /solutions/virtualevents/webinars/getbyuseridandrole(userid='{id}',role='{id}')":746,"GET /solutions/virtualevents/webinars/getbyuserrole(role='{id}')":747,"GET /solutions/virtualevents/webinars/{id}":746,"GET /solutions/virtualevents/webinars/{id}/presenters":739,"GET /solutions/virtualevents/webinars/{id}/presenters/{id}":739,"GET /solutions/virtualevents/webinars/{id}/registrationconfiguration":739,"GET /solutions/virtualevents/webinars/{id}/registrationconfiguration/questions":744,"GET /solutions/virtualevents/webinars/{id}/registrations":743,"GET /solutions/virtualevents/webinars/{id}/registrations/{id}":742,"GET /solutions/virtualevents/webinars/{id}/registrations/{id}/sessions":743,"GET /solutions/virtualevents/webinars/{id}/sessions":739,"GET /solutions/virtualevents/webinars/{id}/sessions/{id}":739,"GET /solutions/virtualevents/webinars/{id}/sessions/{id}/attendancereports":82,"GET /solutions/virtualevents/webinars/{id}/sessions/{id}/attendancereports/{id}":82,"GET /solutions/virtualevents/webinars/{id}/sessions/{id}/attendancereports/{id}/attendancerecords":82,"GET /storage/filestorage/containers":363,"GET /storage/filestorage/containers/getbyuser(userobjectid={id})":873,"GET /storage/filestorage/containers/getbyuser(userobjectid={id},role='{id}')":873,"GET /storage/filestorage/containers/getbyuser(userprincipalname='{id}')":873,"GET /storage/filestorage/containers/getbyuser(userprincipalname='{id}',role='{id}')":873,"GET /storage/filestorage/containers/{id}":363,"GET /storage/filestorage/containers/{id}/columns":366,"GET /storage/filestorage/containers/{id}/columns/{id}":366,"GET /storage/filestorage/containers/{id}/customproperties":366,"GET /storage/filestorage/containers/{id}/customproperties/{id}":366,"GET /storage/filestorage/containers/{id}/drive":366,"GET /storage/filestorage/containers/{id}/migrationjobs/{id}/progressevents":366,"GET /storage/filestorage/containers/{id}/permissions":363,"GET /storage/filestorage/containers/{id}/permissions(email='{id}')":363,"GET /storage/filestorage/containers/{id}/permissions(userprincipalname='{id}')":363,"GET /storage/filestorage/containers/{id}/permissions/{id}":363,"GET /storage/filestorage/containers/{id}/recyclebin/items":366,"GET /storage/filestorage/containers/{id}/sharepointgroups":367,"GET /storage/filestorage/containers/{id}/sharepointgroups/{id}":367,"GET /storage/filestorage/containers/{id}/sharepointgroups/{id}/members":367,"GET /storage/filestorage/containers/{id}/sharepointgroups/{id}/members/{id}":367,"GET /storage/filestorage/containertyperegistrations":364,"GET /storage/filestorage/containertyperegistrations/{id}":364,"GET /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants":364,"GET /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants/{id}":364,"GET /storage/filestorage/containertypes":365,"GET /storage/filestorage/containertypes/{id}":365,"GET /storage/filestorage/containertypes/{id}/permissions":365,"GET /storage/filestorage/containertypes/{id}/permissions/{id}":365,"GET /storage/filestorage/deletedcontainers":363,"GET /storage/filestorage/deletedcontainers/{id}":363,"GET /subscribedskus":631,"GET /subscribedskus/{id}":630,"GET /team/{id}/schedule/shiftsroledefinitions/{id}":1033,"GET /teams":78,"GET /teams/{id}":646,"GET /teams/{id}/allchannels":647,"GET /teams/{id}/channels":179,"GET /teams/{id}/channels/getallmessages":174,"GET /teams/{id}/channels/getallretainedmessages":174,"GET /teams/{id}/channels/{id}":173,"GET /teams/{id}/channels/{id}/allmembers":171,"GET /teams/{id}/channels/{id}/allmembers/{id}":171,"GET /teams/{id}/channels/{id}/doesuserhaveaccess(userid='@userid',tenantid='@tenantid',userprincipalname='@userprincipalname')":169,"GET /teams/{id}/channels/{id}/enabledapps":175,"GET /teams/{id}/channels/{id}/enabledapps/{id}":659,"GET /teams/{id}/channels/{id}/filesfolder":170,"GET /teams/{id}/channels/{id}/members":176,"GET /teams/{id}/channels/{id}/members/{id}":171,"GET /teams/{id}/channels/{id}/messages":177,"GET /teams/{id}/channels/{id}/messages/{id}":202,"GET /teams/{id}/channels/{id}/messages/{id}/hostedcontents":202,"GET /teams/{id}/channels/{id}/messages/{id}/hostedcontents/{id}":202,"GET /teams/{id}/channels/{id}/messages/{id}/replies":177,"GET /teams/{id}/channels/{id}/messages/{id}/replies/{id}":202,"GET /teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents":202,"GET /teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents/{id}":202,"GET /teams/{id}/channels/{id}/planner/plans":983,"GET /teams/{id}/channels/{id}/planner/plans_v2":983,"GET /teams/{id}/channels/{id}/sharedwithteams":171,"GET /teams/{id}/channels/{id}/sharedwithteams/{id}":171,"GET /teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers":171,"GET /teams/{id}/channels/{id}/tabs":178,"GET /teams/{id}/channels/{id}/tabs/{id}":172,"GET /teams/{id}/incomingchannels":647,"GET /teams/{id}/installedapps":648,"GET /teams/{id}/installedapps/{id}":643,"GET /teams/{id}/members":644,"GET /teams/{id}/members/{id}":644,"GET /teams/{id}/permissiongrants":1042,"GET /teams/{id}/photo":553,"GET /teams/{id}/photo/$value":553,"GET /teams/{id}/primarychannel":645,"GET /teams/{id}/schedule":482,"GET /teams/{id}/schedule/daynotes":261,"GET /teams/{id}/schedule/daynotes/{id}":261,"GET /teams/{id}/schedule/offershiftrequests":162,"GET /teams/{id}/schedule/offershiftrequests/{id}":475,"GET /teams/{id}/schedule/openshiftchangerequests":482,"GET /teams/{id}/schedule/openshiftchangerequests/{id}":475,"GET /teams/{id}/schedule/openshifts":482,"GET /teams/{id}/schedule/openshifts/{id}":482,"GET /teams/{id}/schedule/schedulinggroups":482,"GET /teams/{id}/schedule/schedulinggroups/{id}":482,"GET /teams/{id}/schedule/shifts":482,"GET /teams/{id}/schedule/shifts/{id}":619,"GET /teams/{id}/schedule/swapshiftschangerequests":482,"GET /teams/{id}/schedule/timecards":261,"GET /teams/{id}/schedule/timecards/{id}":261,"GET /teams/{id}/schedule/timeoffreasons":482,"GET /teams/{id}/schedule/timeoffreasons/{id}":482,"GET /teams/{id}/schedule/timeoffrequests":482,"GET /teams/{id}/schedule/timeoffrequests/{id}":482,"GET /teams/{id}/schedule/timesoff":482,"GET /teams/{id}/schedule/timesoff/{id}":688,"GET /teams/{id}/tags":667,"GET /teams/{id}/tags/{id}":667,"GET /teams/{id}/tags/{id}/members":667,"GET /teams/{id}/tags/{id}/members/{id}":667,"GET /teamwork":662,"GET /teamwork/deletedchats/{id}":193,"GET /teamwork/deletedteams":663,"GET /teamwork/deletedteams/{id}/channels/getallmessages":174,"GET /teamwork/devices":1046,"GET /teamwork/devices/{id}":1046,"GET /teamwork/devices/{id}/activity":1046,"GET /teamwork/devices/{id}/configuration":1046,"GET /teamwork/devices/{id}/health":1046,"GET /teamwork/devices/{id}/operations":1046,"GET /teamwork/devices/{id}/operations/{id}":1046,"GET /teamwork/messaging/customemojis":1048,"GET /teamwork/teamsappsettings":660,"GET /teamwork/teamtemplates":1044,"GET /teamwork/teamtemplates/{id}/definitions/{id}":1044,"GET /teamwork/teamtemplates/{id}/definitions/{id}/teamdefinition":1044,"GET /teamwork/workforceintegrations":754,"GET /teamwork/workforceintegrations/{id}":754,"GET /tenantrelationships/delegatedadmincustomers":264,"GET /tenantrelationships/delegatedadmincustomers/{id}":264,"GET /tenantrelationships/delegatedadmincustomers/{id}/servicemanagementdetails":264,"GET /tenantrelationships/delegatedadminrelationships":264,"GET /tenantrelationships/delegatedadminrelationships/{id}":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/accessassignments":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/accessassignments/{id}":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/operations":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/operations/{id}":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/requests":264,"GET /tenantrelationships/delegatedadminrelationships/{id}/requests/{id}":264,"GET /tenantrelationships/findtenantinformationbydomainname(domainname='{id}')":685,"GET /tenantrelationships/findtenantinformationbytenantid(tenantid='{id}')":685,"GET /tenantrelationships/managedtenants/aggregatedpolicycompliances":941,"GET /tenantrelationships/managedtenants/auditevents":943,"GET /tenantrelationships/managedtenants/auditevents/{id}":939,"GET /tenantrelationships/managedtenants/cloudpcconnections":229,"GET /tenantrelationships/managedtenants/cloudpcconnections/{id}":229,"GET /tenantrelationships/managedtenants/cloudpcdevices":229,"GET /tenantrelationships/managedtenants/cloudpcdevices/{id}":229,"GET /tenantrelationships/managedtenants/cloudpcsoverview":229,"GET /tenantrelationships/managedtenants/cloudpcsoverview/{id}":229,"GET /tenantrelationships/managedtenants/conditionalaccesspolicycoverages":940,"GET /tenantrelationships/managedtenants/conditionalaccesspolicycoverages/{id}":940,"GET /tenantrelationships/managedtenants/credentialuserregistrationssummaries":544,"GET /tenantrelationships/managedtenants/credentialuserregistrationssummaries/{id}":544,"GET /tenantrelationships/managedtenants/devicecompliancepolicysettingstatesummaries":942,"GET /tenantrelationships/managedtenants/devicecompliancepolicysettingstatesummaries/{id}":941,"GET /tenantrelationships/managedtenants/manageddevicecompliances":942,"GET /tenantrelationships/managedtenants/manageddevicecompliances/{id}":942,"GET /tenantrelationships/managedtenants/manageddevicecompliancetrends":942,"GET /tenantrelationships/managedtenants/manageddevicecompliancetrends/{id}":942,"GET /tenantrelationships/managedtenants/managementactions":939,"GET /tenantrelationships/managedtenants/managementactions/{id}":939,"GET /tenantrelationships/managedtenants/managementactiontenantdeploymentstatuses":939,"GET /tenantrelationships/managedtenants/managementactiontenantdeploymentstatuses/{id}":939,"GET /tenantrelationships/managedtenants/managementintents":939,"GET /tenantrelationships/managedtenants/managementintents/{id}":939,"GET /tenantrelationships/managedtenants/managementtemplates":939,"GET /tenantrelationships/managedtenants/managementtemplates/{id}":939,"GET /tenantrelationships/managedtenants/myroles":939,"GET /tenantrelationships/managedtenants/tenantgroups":939,"GET /tenantrelationships/managedtenants/tenantgroups/{id}":939,"GET /tenantrelationships/managedtenants/tenants":939,"GET /tenantrelationships/managedtenants/tenants/{id}":939,"GET /tenantrelationships/managedtenants/tenantscustomizedinformation":939,"GET /tenantrelationships/managedtenants/tenantscustomizedinformation/{id}":939,"GET /tenantrelationships/managedtenants/tenantsdetailedinformation":939,"GET /tenantrelationships/managedtenants/tenantsdetailedinformation/{id}":939,"GET /tenantrelationships/managedtenants/tenanttags":939,"GET /tenantrelationships/managedtenants/tenanttags/{id}":939,"GET /tenantrelationships/managedtenants/tenantusage":939,"GET /tenantrelationships/managedtenants/windowsdevicemalwarestates":942,"GET /tenantrelationships/managedtenants/windowsdevicemalwarestates/{id}":942,"GET /tenantrelationships/managedtenants/windowsprotectionstates":942,"GET /tenantrelationships/managedtenants/windowsprotectionstates/{id}":942,"GET /tenantrelationships/multitenantorganization":465,"GET /tenantrelationships/multitenantorganization/joinrequest":466,"GET /tenantrelationships/multitenantorganization/tenants":465,"GET /tenantrelationships/multitenantorganization/tenants/{id}":464,"GET /termstore":687,"GET /termstore/groups":687,"GET /termstore/groups/{id}":687,"GET /termstore/groups/{id}/sets":687,"GET /termstore/groups/{id}/sets/{id}/terms/{id}":687,"GET /termstore/sets/{id}":687,"GET /termstore/sets/{id}/children":687,"GET /termstore/sets/{id}/relations":687,"GET /termstore/sets/{id}/terms/{id}":687,"GET /termstore/sets/{id}/terms/{id}/children":687,"GET /termstore/sets/{id}/terms/{id}/relations":687,"GET /trustframework/keysets":1055,"GET /trustframework/keysets/{id}":1055,"GET /trustframework/keysets/{id}/getactivekey":1055,"GET /trustframework/keysets/{id}/keys_v2/{id}":1057,"GET /trustframework/policies":1056,"GET /trustframework/policies/{id}/$value":1056,"GET /userinsights/daily/summary":849,"GET /users":718,"GET /users/agentuser":55,"GET /users/agentuser/{id}":47,"GET /users/delta":698,"GET /users/getmanagedappblockedusers":416,"GET /users/{id}":702,"GET /users/{id}/adhoccalls/getallrecordings":11,"GET /users/{id}/adhoccalls/getalltranscripts":12,"GET /users/{id}/adhoccalls/{id}/recordings/{id}":155,"GET /users/{id}/adhoccalls/{id}/recordings/{id}/content":155,"GET /users/{id}/adhoccalls/{id}/transcripts/{id}":157,"GET /users/{id}/adhoccalls/{id}/transcripts/{id}/content":157,"GET /users/{id}/agreementacceptances":59,"GET /users/{id}/analytics/activitystatistics":771,"GET /users/{id}/approleassignedresources":1070,"GET /users/{id}/approleassignments":48,"GET /users/{id}/authentication/emailmethods":85,"GET /users/{id}/authentication/emailmethods/{id}":328,"GET /users/{id}/authentication/externalauthenticationmethods":86,"GET /users/{id}/authentication/externalauthenticationmethods/{id}":348,"GET /users/{id}/authentication/fido2methods":362,"GET /users/{id}/authentication/fido2methods/creationoptions(challengetimeoutinminutes={id})":799,"GET /users/{id}/authentication/fido2methods/{id}":361,"GET /users/{id}/authentication/hardwareoathmethods":798,"GET /users/{id}/authentication/hardwareoathmethods/{id}":881,"GET /users/{id}/authentication/methods":86,"GET /users/{id}/authentication/methods/{id}":105,"GET /users/{id}/authentication/microsoftauthenticatormethods":463,"GET /users/{id}/authentication/microsoftauthenticatormethods/{id}":462,"GET /users/{id}/authentication/operations/{id}":937,"GET /users/{id}/authentication/passwordlessmicrosoftauthenticatormethods":980,"GET /users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}":979,"GET /users/{id}/authentication/passwordmethods":87,"GET /users/{id}/authentication/passwordmethods/{id}":87,"GET /users/{id}/authentication/phonemethods":88,"GET /users/{id}/authentication/phonemethods/{id}":505,"GET /users/{id}/authentication/platformcredentialmethods":513,"GET /users/{id}/authentication/platformcredentialmethods/{id}":512,"GET /users/{id}/authentication/qrcodepinmethod":558,"GET /users/{id}/authentication/qrcodepinmethod/standardqrcode":558,"GET /users/{id}/authentication/qrcodepinmethod/temporaryqrcode":558,"GET /users/{id}/authentication/requirements":797,"GET /users/{id}/authentication/resourceaccountkeyauthenticationmethods":89,"GET /users/{id}/authentication/resourceaccountkeyauthenticationmethods/{id}":89,"GET /users/{id}/authentication/signinpreferences":797,"GET /users/{id}/authentication/softwareoathmethods":90,"GET /users/{id}/authentication/softwareoathmethods/{id}":627,"GET /users/{id}/authentication/temporaryaccesspassmethods":91,"GET /users/{id}/authentication/temporaryaccesspassmethods/{id}":670,"GET /users/{id}/authentication/windowshelloforbusinessmethods":751,"GET /users/{id}/authentication/windowshelloforbusinessmethods/{id}":750,"GET /users/{id}/calendar/calendarview":145,"GET /users/{id}/calendar/events":145,"GET /users/{id}/calendar/events/delta":868,"GET /users/{id}/calendar/events/{id}":146,"GET /users/{id}/calendar/events/{id}/instances":146,"GET /users/{id}/calendargroups":704,"GET /users/{id}/calendargroups/{id}":146,"GET /users/{id}/calendargroups/{id}/calendars":147,"GET /users/{id}/calendargroups/{id}/calendars/{id}/calendarview":145,"GET /users/{id}/calendargroups/{id}/calendars/{id}/events":145,"GET /users/{id}/calendargroups/{id}/calendars/{id}/events/delta":868,"GET /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}":146,"GET /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/instances":146,"GET /users/{id}/calendars":147,"GET /users/{id}/calendars/delta":144,"GET /users/{id}/calendars/{id}/calendarview":145,"GET /users/{id}/calendars/{id}/calendarview/delta":868,"GET /users/{id}/calendars/{id}/events":145,"GET /users/{id}/calendars/{id}/events/delta":868,"GET /users/{id}/calendars/{id}/events/{id}":146,"GET /users/{id}/calendars/{id}/events/{id}/instances":146,"GET /users/{id}/calendarview":145,"GET /users/{id}/calendarview/delta":868,"GET /users/{id}/chats":206,"GET /users/{id}/chats/getallmessages":198,"GET /users/{id}/chats/getallmessages/delta":198,"GET /users/{id}/chats/getallretainedmessages":198,"GET /users/{id}/chats/{id}":197,"GET /users/{id}/chats/{id}/members":201,"GET /users/{id}/chats/{id}/members/{id}":195,"GET /users/{id}/chats/{id}/messages":202,"GET /users/{id}/chats/{id}/messages/{id}":202,"GET /users/{id}/chats/{id}/messages/{id}/hostedcontents":202,"GET /users/{id}/chats/{id}/messages/{id}/hostedcontents/{id}":202,"GET /users/{id}/cloudlicensing/assignmenterrors":823,"GET /users/{id}/cloudlicensing/assignmenterrors/{id}":827,"GET /users/{id}/cloudlicensing/assignments":822,"GET /users/{id}/cloudlicensing/assignments/{id}":822,"GET /users/{id}/cloudlicensing/assignments/{id}/allotment":822,"GET /users/{id}/cloudlicensing/usagerights":835,"GET /users/{id}/cloudlicensing/usagerights/{id}":835,"GET /users/{id}/cloudlicensing/usagerights/{id}/assignments":836,"GET /users/{id}/cloudlicensing/waitingmembers":827,"GET /users/{id}/cloudlicensing/waitingmembers/{id}":827,"GET /users/{id}/cloudlicensing/waitingmembers/{id}/allotment":825,"GET /users/{id}/cloudpcs/{id}":228,"GET /users/{id}/cloudpcs/{id}/getcloudpclaunchinfo":229,"GET /users/{id}/cloudpcs/{id}/retrievecloudpclaunchdetail":229,"GET /users/{id}/communications/callsettings/delegates":815,"GET /users/{id}/communications/callsettings/delegates/{id}":815,"GET /users/{id}/communications/callsettings/delegators":815,"GET /users/{id}/communications/callsettings/delegators/{id}":815,"GET /users/{id}/contactfolders":242,"GET /users/{id}/contactfolders/delta":242,"GET /users/{id}/contactfolders/{id}":242,"GET /users/{id}/contactfolders/{id}/childfolders":242,"GET /users/{id}/contactfolders/{id}/childfolders/{id}/contacts":242,"GET /users/{id}/contactfolders/{id}/childfolders/{id}/contacts/{id}":242,"GET /users/{id}/contactfolders/{id}/contacts":242,"GET /users/{id}/contactfolders/{id}/contacts/delta":242,"GET /users/{id}/contactfolders/{id}/contacts/{id}":242,"GET /users/{id}/contactfolders/{id}/contacts/{id}/photo":553,"GET /users/{id}/contactfolders/{id}/contacts/{id}/photo/$value":553,"GET /users/{id}/contacts":242,"GET /users/{id}/contacts/{id}":242,"GET /users/{id}/contacts/{id}/photo":553,"GET /users/{id}/contacts/{id}/photo/$value":553,"GET /users/{id}/createdobjects":705,"GET /users/{id}/directreports":49,"GET /users/{id}/distributionlists":242,"GET /users/{id}/distributionlists/{id}":242,"GET /users/{id}/drive":291,"GET /users/{id}/drive/items/{id}":301,"GET /users/{id}/drive/items/{id}/children":300,"GET /users/{id}/drive/items/{id}/content":300,"GET /users/{id}/drive/items/{id}/contentstream":300,"GET /users/{id}/drive/items/{id}/permissions":293,"GET /users/{id}/drive/items/{id}/permissions/{id}":300,"GET /users/{id}/drive/items/{id}/thumbnails":293,"GET /users/{id}/drive/items/{id}/versions":293,"GET /users/{id}/drive/items/{id}/versions/{id}":293,"GET /users/{id}/drive/items/{id}/versions/{id}/content":293,"GET /users/{id}/drive/root/delta":293,"GET /users/{id}/drive/root/search(q='{id}')":293,"GET /users/{id}/drive/root:/{id}":301,"GET /users/{id}/drives":293,"GET /users/{id}/employeeexperience/assignedroles":334,"GET /users/{id}/employeeexperience/learningcourseactivities":441,"GET /users/{id}/employeeexperience/storyline/followers":1041,"GET /users/{id}/employeeexperience/storyline/followings":1041,"GET /users/{id}/events":145,"GET /users/{id}/events/delta":868,"GET /users/{id}/events/{id}":146,"GET /users/{id}/events/{id}/attachments":342,"GET /users/{id}/events/{id}/instances":146,"GET /users/{id}/exportdeviceandappmanagementdata":430,"GET /users/{id}/findroomlists":490,"GET /users/{id}/findrooms":490,"GET /users/{id}/findrooms(roomlist='{id}')":490,"GET /users/{id}/geteffectivedeviceenrollmentconfigurations":430,"GET /users/{id}/getmanagedappdiagnosticstatuses":416,"GET /users/{id}/getmanagedapppolicies":416,"GET /users/{id}/getmanageddeviceswithappfailures":924,"GET /users/{id}/getmanageddeviceswithfailedorpendingapps":924,"GET /users/{id}/inferenceclassification/overrides":344,"GET /users/{id}/informationprotection/policy/labels":915,"GET /users/{id}/informationprotection/policy/labels/{id}":915,"GET /users/{id}/insights/shared":412,"GET /users/{id}/insights/trending":412,"GET /users/{id}/insights/trending/{id}/resource":412,"GET /users/{id}/insights/used":412,"GET /users/{id}/insights/used/{id}/resource":412,"GET /users/{id}/invitedby":1071,"GET /users/{id}/ismanagedappuserblocked":416,"GET /users/{id}/joinedgroups/{id}/photos":382,"GET /users/{id}/joinedteams":707,"GET /users/{id}/joinedteams/getopenshifts":261,"GET /users/{id}/joinedteams/getshifts":261,"GET /users/{id}/joinedteams/gettimesoff":261,"GET /users/{id}/licensedetails":708,"GET /users/{id}/licensedetails/getteamslicensingdetails":442,"GET /users/{id}/mailboxsettings":701,"GET /users/{id}/mailboxsettings/automaticrepliessetting":701,"GET /users/{id}/mailboxsettings/dateformat":701,"GET /users/{id}/mailboxsettings/delegatemeetingmessagedeliveryoptions":701,"GET /users/{id}/mailboxsettings/language":701,"GET /users/{id}/mailboxsettings/timeformat":701,"GET /users/{id}/mailboxsettings/timezone":701,"GET /users/{id}/mailboxsettings/userpurpose":701,"GET /users/{id}/mailboxsettings/workinghours":701,"GET /users/{id}/mailfolders":456,"GET /users/{id}/mailfolders/delta":455,"GET /users/{id}/mailfolders/inbox/messagerules":457,"GET /users/{id}/mailfolders/inbox/messagerules/{id}":457,"GET /users/{id}/mailfolders/{id}":456,"GET /users/{id}/mailfolders/{id}/childfolders":456,"GET /users/{id}/mailfolders/{id}/childfolders/{id}/messages/{id}/attachments/{id}":344,"GET /users/{id}/mailfolders/{id}/messages":456,"GET /users/{id}/mailfolders/{id}/messages/delta":455,"GET /users/{id}/mailfolders/{id}/messages/{id}":344,"GET /users/{id}/mailfolders/{id}/messages/{id}/$value":460,"GET /users/{id}/mailfolders/{id}/messages/{id}/attachments":344,"GET /users/{id}/mailfolders/{id}/operations":344,"GET /users/{id}/mailfolders/{id}/operations/{id}":344,"GET /users/{id}/mailfolders/{id}/userconfigurations/{id}":1077,"GET /users/{id}/manager":50,"GET /users/{id}/memberof":51,"GET /users/{id}/messages":456,"GET /users/{id}/messages/{id}":344,"GET /users/{id}/messages/{id}/$value":460,"GET /users/{id}/messages/{id}/attachments":344,"GET /users/{id}/mobileappintentandstates":924,"GET /users/{id}/mobileappintentandstates/{id}":924,"GET /users/{id}/mobileapptroubleshootingevents":924,"GET /users/{id}/mobileapptroubleshootingevents/{id}":924,"GET /users/{id}/notes":469,"GET /users/{id}/notes/delta":469,"GET /users/{id}/notes/{id}":469,"GET /users/{id}/notes/{id}/attachments":469,"GET /users/{id}/oauth2permissiongrants":711,"GET /users/{id}/onenote/notebooks":471,"GET /users/{id}/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={id})":471,"GET /users/{id}/onenote/notebooks/{id}":471,"GET /users/{id}/onenote/notebooks/{id}/sectiongroups":471,"GET /users/{id}/onenote/notebooks/{id}/sections":471,"GET /users/{id}/onenote/operations/{id}":471,"GET /users/{id}/onenote/pages":476,"GET /users/{id}/onenote/pages/{id}":492,"GET /users/{id}/onenote/resources/{id}/content":476,"GET /users/{id}/onenote/sectiongroups":471,"GET /users/{id}/onenote/sectiongroups/{id}":471,"GET /users/{id}/onenote/sectiongroups/{id}/sectiongroups":471,"GET /users/{id}/onenote/sectiongroups/{id}/sections":471,"GET /users/{id}/onenote/sections":471,"GET /users/{id}/onenote/sections/{id}":471,"GET /users/{id}/onenote/sections/{id}/pages":476,"GET /users/{id}/onlinemeetings":477,"GET /users/{id}/onlinemeetings/getallrecordings(meetingorganizeruserid='{id}',startdatetime={id})/delta":155,"GET /users/{id}/onlinemeetings/getallrecordings(meetingorganizeruserid='{id}',startdatetime={id},enddatetime={id})":155,"GET /users/{id}/onlinemeetings/getalltranscripts(meetingorganizeruserid='{id}',startdatetime={id})/delta":157,"GET /users/{id}/onlinemeetings/getalltranscripts(meetingorganizeruserid='{id}',startdatetime={id},enddatetime={id})":157,"GET /users/{id}/onlinemeetings/{id}":477,"GET /users/{id}/onlinemeetings/{id}/alternativerecording":477,"GET /users/{id}/onlinemeetings/{id}/attendancereports":82,"GET /users/{id}/onlinemeetings/{id}/attendancereports/{id}":82,"GET /users/{id}/onlinemeetings/{id}/attendancereports/{id}/attendancerecords":82,"GET /users/{id}/onlinemeetings/{id}/attendeereport":477,"GET /users/{id}/onlinemeetings/{id}/getvirtualappointmentjoinweburl":737,"GET /users/{id}/onlinemeetings/{id}/meetingattendancereport":82,"GET /users/{id}/onlinemeetings/{id}/recording":477,"GET /users/{id}/onlinemeetings/{id}/recordings":478,"GET /users/{id}/onlinemeetings/{id}/recordings/{id}":155,"GET /users/{id}/onlinemeetings/{id}/recordings/{id}/content":155,"GET /users/{id}/onlinemeetings/{id}/registration":477,"GET /users/{id}/onlinemeetings/{id}/registration/registrants":477,"GET /users/{id}/onlinemeetings/{id}/transcripts":479,"GET /users/{id}/onlinemeetings/{id}/transcripts/{id}":157,"GET /users/{id}/onlinemeetings/{id}/transcripts/{id}/content":157,"GET /users/{id}/onlinemeetings/{id}/virtualappointment":477,"GET /users/{id}/outlook/mastercategories":457,"GET /users/{id}/outlook/mastercategories/{id}":457,"GET /users/{id}/outlook/supportedlanguages":490,"GET /users/{id}/outlook/supportedtimezones":490,"GET /users/{id}/outlook/supportedtimezones(timezonestandard=microsoft.graph.timezonestandard'{id}')":490,"GET /users/{id}/outlook/taskfolders":808,"GET /users/{id}/outlook/taskfolders/{id}":808,"GET /users/{id}/outlook/taskfolders/{id}/tasks":808,"GET /users/{id}/outlook/taskgroups":808,"GET /users/{id}/outlook/taskgroups/{id}":808,"GET /users/{id}/outlook/taskgroups/{id}/taskfolders":808,"GET /users/{id}/outlook/taskgroups/{id}/taskfolders/{id}":808,"GET /users/{id}/outlook/taskgroups/{id}/taskfolders/{id}/tasks":808,"GET /users/{id}/outlook/tasks":808,"GET /users/{id}/outlook/tasks/{id}":808,"GET /users/{id}/outlook/tasks/{id}/attachments":808,"GET /users/{id}/owneddevices":1072,"GET /users/{id}/ownedobjects":49,"GET /users/{id}/people":714,"GET /users/{id}/permissiongrants":715,"GET /users/{id}/photo":553,"GET /users/{id}/photo/$value":553,"GET /users/{id}/photos/{id}":553,"GET /users/{id}/planner":985,"GET /users/{id}/planner/all/delta":510,"GET /users/{id}/planner/favoriteplans":986,"GET /users/{id}/planner/mydaytasks":983,"GET /users/{id}/planner/plans":510,"GET /users/{id}/planner/plans_v2":692,"GET /users/{id}/planner/recentplans":986,"GET /users/{id}/planner/rosterplans":983,"GET /users/{id}/planner/tasks":509,"GET /users/{id}/planner/tasks_v2":983,"GET /users/{id}/presence":518,"GET /users/{id}/profile":866,"GET /users/{id}/profile/account":866,"GET /users/{id}/profile/account/{id}":866,"GET /users/{id}/profile/addresses":866,"GET /users/{id}/profile/addresses/{id}":866,"GET /users/{id}/profile/anniversaries":866,"GET /users/{id}/profile/anniversaries/{id}":866,"GET /users/{id}/profile/awards":866,"GET /users/{id}/profile/awards/{id}":866,"GET /users/{id}/profile/certifications":866,"GET /users/{id}/profile/certifications/{id}":866,"GET /users/{id}/profile/educationalactivities":866,"GET /users/{id}/profile/educationalactivities/{id}":866,"GET /users/{id}/profile/emails":866,"GET /users/{id}/profile/emails/{id}":866,"GET /users/{id}/profile/interests":866,"GET /users/{id}/profile/interests/{id}":866,"GET /users/{id}/profile/languages":866,"GET /users/{id}/profile/languages/{id}":866,"GET /users/{id}/profile/names":982,"GET /users/{id}/profile/names/{id}":866,"GET /users/{id}/profile/notes":866,"GET /users/{id}/profile/notes/{id}":982,"GET /users/{id}/profile/patents":866,"GET /users/{id}/profile/patents/{id}":866,"GET /users/{id}/profile/phones":866,"GET /users/{id}/profile/phones/{id}":866,"GET /users/{id}/profile/positions":866,"GET /users/{id}/profile/positions/{id}":866,"GET /users/{id}/profile/projects":866,"GET /users/{id}/profile/projects/{id}":866,"GET /users/{id}/profile/publications":866,"GET /users/{id}/profile/publications/{id}":866,"GET /users/{id}/profile/skills":866,"GET /users/{id}/profile/skills/{id}":866,"GET /users/{id}/profile/webaccounts":866,"GET /users/{id}/profile/webaccounts/{id}":866,"GET /users/{id}/profile/websites":866,"GET /users/{id}/profile/websites/{id}":866,"GET /users/{id}/registereddevices":712,"GET /users/{id}/reminderview(startdatetime={id},enddatetime={id})":145,"GET /users/{id}/responsibilities":866,"GET /users/{id}/responsibilities/{id}":982,"GET /users/{id}/retrievemanageddeviceswithappinstallationissues":928,"GET /users/{id}/scopedrolememberof":1073,"GET /users/{id}/security/informationprotection/labelpolicysettings":915,"GET /users/{id}/security/informationprotection/sensitivitylabels":915,"GET /users/{id}/security/informationprotection/sensitivitylabels/{id}":915,"GET /users/{id}/settings":729,"GET /users/{id}/settings/exchange":730,"GET /users/{id}/settings/iteminsights":725,"GET /users/{id}/settings/regionalandlanguagesettings":997,"GET /users/{id}/settings/shiftpreferences":620,"GET /users/{id}/settings/workhoursandlocations":755,"GET /users/{id}/settings/workhoursandlocations/occurrencesview(startdatetime='{id}',enddatetime='{id}')":757,"GET /users/{id}/settings/workhoursandlocations/recurrences":756,"GET /users/{id}/solutions/schedule":759,"GET /users/{id}/sponsorof":716,"GET /users/{id}/sponsors":52,"GET /users/{id}/tasks/alltasks/{id}":692,"GET /users/{id}/tasks/lists":692,"GET /users/{id}/tasks/lists/delta":692,"GET /users/{id}/tasks/lists/{id}":808,"GET /users/{id}/tasks/lists/{id}/tasks":692,"GET /users/{id}/tasks/lists/{id}/tasks/delta":692,"GET /users/{id}/tasks/lists/{id}/tasks/{id}":692,"GET /users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems":806,"GET /users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems/{id}":223,"GET /users/{id}/tasks/lists/{id}/tasks/{id}/linkedresources":806,"GET /users/{id}/tasks/lists/{id}/tasks/{id}/linkedresources/{id}":806,"GET /users/{id}/teamwork":735,"GET /users/{id}/teamwork/associatedteams":78,"GET /users/{id}/teamwork/getallretainedtargetedmessages":736,"GET /users/{id}/teamwork/getalltargetedmessages":736,"GET /users/{id}/teamwork/installedapps":734,"GET /users/{id}/teamwork/installedapps/{id}":734,"GET /users/{id}/teamwork/installedapps/{id}/chat":728,"GET /users/{id}/teamwork/sections":1051,"GET /users/{id}/teamwork/sections/{id}":1051,"GET /users/{id}/teamwork/sections/{id}/items":1051,"GET /users/{id}/todo/lists":223,"GET /users/{id}/todo/lists/delta":693,"GET /users/{id}/todo/lists/{id}":223,"GET /users/{id}/todo/lists/{id}/tasks":223,"GET /users/{id}/todo/lists/{id}/tasks/delta":691,"GET /users/{id}/todo/lists/{id}/tasks/{id}":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/attachments":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}/$value":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources":223,"GET /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}":223,"GET /users/{id}/transitivememberof":53,"GET /users/{id}/transitivereports/$count":54,"GET /users/{id}/trendingaround":1074,"GET /users/{id}/usagerights":705,"GET /users/{id}@{id}/settings/windows":1078,"GET /users/{id}@{id}/settings/windows/{id}":1081,"GET /users/{id}@{id}/settings/windows/{id}/instances":1081,"GET /users/{id}@{id}/settings/windows/{id}/instances/{id}":1081,"GET /workplace/sensordevices":1082,"GET /workplace/sensordevices/{id}":1082,"PATCH /accessreviews/{id}":763,"PATCH /admin/appsandservices":773,"PATCH /admin/cloudlicensing/allotments/{id}/assignments/{id}":828,"PATCH /admin/cloudlicensing/assignments/{id}":828,"PATCH /admin/configurationmanagement/configurationmonitors/{id}":239,"PATCH /admin/dynamics":775,"PATCH /admin/edge/internetexplorermode/sitelists/{id}":140,"PATCH /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies/{id}":140,"PATCH /admin/edge/internetexplorermode/sitelists/{id}/sites/{id}":140,"PATCH /admin/exchange/mailboxes/{id}/folders/{id}":450,"PATCH /admin/exchange/mailboxes/{id}/folders/{id}/childfolders/{id}":450,"PATCH /admin/forms":777,"PATCH /admin/microsoft365apps/installationoptions":448,"PATCH /admin/people/iteminsights":916,"PATCH /admin/people/namepronunciation":413,"PATCH /admin/people/photoupdatesettings":413,"PATCH /admin/people/profilecardproperties/{id}":499,"PATCH /admin/people/profilepropertysettings/{id}":413,"PATCH /admin/people/profilesources(sourceid='{id}')":413,"PATCH /admin/people/pronouns":413,"PATCH /admin/reportsettings":21,"PATCH /admin/sharepoint/settings":618,"PATCH /admin/todo":779,"PATCH /admin/windows/updates/deployments/{id}":781,"PATCH /admin/windows/updates/policies/{id}":781,"PATCH /admin/windows/updates/policies/{id}/approvals/{id}":781,"PATCH /admin/windows/updates/policies/{id}/rings/{id}":781,"PATCH /admin/windows/updates/updatepolicies/{id}":781,"PATCH /admin/windows/updates/updatepolicies/{id}/compliancechanges/{id}":781,"PATCH /administrativeunits/{id}":15,"PATCH /agentregistry/agentcardmanifests/{id}":783,"PATCH /agentregistry/agentcollections/{id}":787,"PATCH /agentregistry/agentinstances/{id}":790,"PATCH /app/calls/{id}/audioroutinggroups/{id}":83,"PATCH /applications(appid='{id}')":68,"PATCH /applications(appid='{id}')/federatedidentitycredentials(name='{id}')":68,"PATCH /applications(appid='{id}')/federatedidentitycredentials/{id}":68,"PATCH /applications(uniquename='{id}')":68,"PATCH /applications(uniquename='{id}')/agentidentityblueprint":30,"PATCH /applications/{id}":68,"PATCH /applications/{id}/agentidentityblueprint":36,"PATCH /applications/{id}/agentidentityblueprint/federatedidentitycredentials(name='{id}')":68,"PATCH /applications/{id}/agentidentityblueprint/federatedidentitycredentials/{id}":68,"PATCH /applications/{id}/agentidentityblueprint/inheritablepermissions/{id}":411,"PATCH /applications/{id}/federatedidentitycredentials(name='{id}')":68,"PATCH /applications/{id}/federatedidentitycredentials/{id}":68,"PATCH /applications/{id}/onpremisespublishing/segmentsconfiguration/ipsegmentconfiguration/applicationsegments/{id}":935,"PATCH /applications/{id}/synchronization/templates/{id}":634,"PATCH /backuprestore/driveprotectionunits/{id}":556,"PATCH /backuprestore/mailboxprotectionunits/{id}":556,"PATCH /backuprestore/siteprotectionunits/{id}":556,"PATCH /chats/{id}":208,"PATCH /chats/{id}/messages/{id}":220,"PATCH /chats/{id}/tabs/{id}":207,"PATCH /communications/calls/{id}/audioroutinggroups/{id}":83,"PATCH /compliance/ediscovery/cases/{id}":591,"PATCH /compliance/ediscovery/cases/{id}/custodians/{id}":591,"PATCH /compliance/ediscovery/cases/{id}/legalholds/{id}":591,"PATCH /compliance/ediscovery/cases/{id}/reviewsets/{id}/queries/{id}":591,"PATCH /compliance/ediscovery/cases/{id}/settings":590,"PATCH /compliance/ediscovery/cases/{id}/sourcecollections/{id}":591,"PATCH /compliance/ediscovery/cases/{id}/tags/{id}":591,"PATCH /copilot/settings/people/enhancedpersonalization":413,"PATCH /deviceappmanagement":418,"PATCH /deviceappmanagement/androidmanagedappprotections/{id}":415,"PATCH /deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}":418,"PATCH /deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/androidmanagedappprotections/{id}/deploymentsummary":418,"PATCH /deviceappmanagement/defaultmanagedappprotections/{id}":415,"PATCH /deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}":418,"PATCH /deviceappmanagement/defaultmanagedappprotections/{id}/deploymentsummary":418,"PATCH /deviceappmanagement/deviceappmanagementtasks/{id}":415,"PATCH /deviceappmanagement/enterprisecodesigningcertificates/{id}":418,"PATCH /deviceappmanagement/ioslobappprovisioningconfigurations/{id}":415,"PATCH /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/devicestatuses/{id}":418,"PATCH /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/groupassignments/{id}":418,"PATCH /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/userstatuses/{id}":418,"PATCH /deviceappmanagement/iosmanagedappprotections/{id}":415,"PATCH /deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}":418,"PATCH /deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/iosmanagedappprotections/{id}/deploymentsummary":418,"PATCH /deviceappmanagement/managedappregistrations/{id}":418,"PATCH /deviceappmanagement/managedappregistrations/{id}/managedapplogcollectionrequests/{id}":418,"PATCH /deviceappmanagement/managedappregistrations/{id}/operations/{id}":418,"PATCH /deviceappmanagement/managedebookcategories/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}/categories/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}/devicestates/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}/installsummary":415,"PATCH /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}":415,"PATCH /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates/{id}":415,"PATCH /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}":415,"PATCH /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":418,"PATCH /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":418,"PATCH /deviceappmanagement/mobileappcategories/{id}":415,"PATCH /deviceappmanagement/mobileappconfigurations/{id}":415,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses/{id}":418,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/devicestatussummary":418,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/userstatuses/{id}":418,"PATCH /deviceappmanagement/mobileappconfigurations/{id}/userstatussummary":418,"PATCH /deviceappmanagement/mobileapprelationships/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}":415,"PATCH /deviceappmanagement/mobileapps/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/mobileapps/{id}/categories/{id}":415,"PATCH /deviceappmanagement/mobileapps/{id}/contentversions/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/contentversions/{id}/scripts/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/devicestatuses/{id}":415,"PATCH /deviceappmanagement/mobileapps/{id}/installsummary":415,"PATCH /deviceappmanagement/mobileapps/{id}/iosvppapp/assignedlicenses/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/macosvppapp/assignedlicenses/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/microsoftstoreforbusinessapp/containedapps/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/relationships/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/targetassignments/{id}":418,"PATCH /deviceappmanagement/mobileapps/{id}/userstatuses/{id}":415,"PATCH /deviceappmanagement/mobileapps/{id}/userstatuses/{id}/devicestatuses/{id}":415,"PATCH /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps/{id}":418,"PATCH /deviceappmanagement/policysets/{id}/assignments/{id}":419,"PATCH /deviceappmanagement/policysets/{id}/items/{id}":419,"PATCH /deviceappmanagement/sideloadingkeys/{id}":427,"PATCH /deviceappmanagement/symanteccodesigningcertificate":418,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}":415,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}":418,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}/deploymentsummary":418,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}":418,"PATCH /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions/{id}":418,"PATCH /deviceappmanagement/vpptokens/{id}":431,"PATCH /deviceappmanagement/wdacsupplementalpolicies/{id}":415,"PATCH /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments/{id}":415,"PATCH /deviceappmanagement/wdacsupplementalpolicies/{id}/deploysummary":415,"PATCH /deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}":415,"PATCH /deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}/policy":415,"PATCH /deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}":418,"PATCH /deviceappmanagement/windowsinformationprotectionpolicies/{id}":415,"PATCH /deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}":418,"PATCH /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}":418,"PATCH /deviceappmanagement/windowsinformationprotectionwipeactions/{id}":418,"PATCH /deviceappmanagement/windowsmanagedappprotections/{id}":415,"PATCH /deviceappmanagement/windowsmanagedappprotections/{id}/apps/{id}":418,"PATCH /deviceappmanagement/windowsmanagedappprotections/{id}/assignments/{id}":418,"PATCH /deviceappmanagement/windowsmanagedappprotections/{id}/deploymentsummary":418,"PATCH /deviceappmanagement/windowsmanagementapp":429,"PATCH /deviceappmanagement/windowsmanagementapp/healthstates/{id}":429,"PATCH /devicemanagement/advancedthreatprotectiononboardingstatesummary":419,"PATCH /devicemanagement/advancedthreatprotectiononboardingstatesummary/advancedthreatprotectiononboardingdevicesettingstates/{id}":419,"PATCH /devicemanagement/androidappconfigurationschema":419,"PATCH /devicemanagement/androiddeviceownerenrollmentprofiles/{id}":419,"PATCH /devicemanagement/androidforworkappconfigurationschemas/{id}":419,"PATCH /devicemanagement/androidforworkenrollmentprofiles/{id}":419,"PATCH /devicemanagement/androidforworksettings":419,"PATCH /devicemanagement/androidmanagedstoreaccountenterprisesettings":419,"PATCH /devicemanagement/androidmanagedstoreappconfigurationschemas/{id}":419,"PATCH /devicemanagement/applepushnotificationcertificate":422,"PATCH /devicemanagement/appleuserinitiatedenrollmentprofiles/{id}":422,"PATCH /devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/assignments/{id}":427,"PATCH /devicemanagement/assignmentfilters/{id}":419,"PATCH /devicemanagement/auditevents/{id}":415,"PATCH /devicemanagement/auditpolicies/{id}/settings/{id}":419,"PATCH /devicemanagement/autopilotevents/{id}":429,"PATCH /devicemanagement/autopilotevents/{id}/policystatusdetails/{id}":424,"PATCH /devicemanagement/carttoclassassociations/{id}":422,"PATCH /devicemanagement/categories/{id}":419,"PATCH /devicemanagement/categories/{id}/settingdefinitions/{id}":419,"PATCH /devicemanagement/certificateconnectordetails/{id}":419,"PATCH /devicemanagement/chromeosonboardingsettings/{id}":419,"PATCH /devicemanagement/cloudcertificationauthority/{id}":419,"PATCH /devicemanagement/cloudcertificationauthority/{id}/cloudcertificationauthorityleafcertificate/{id}":419,"PATCH /devicemanagement/cloudcertificationauthorityleafcertificate/{id}":419,"PATCH /devicemanagement/cloudpcconnectivityissues/{id}":429,"PATCH /devicemanagement/comanageddevices/{id}":424,"PATCH /devicemanagement/comanagementeligibledevices/{id}":429,"PATCH /devicemanagement/compliancecategories/{id}":419,"PATCH /devicemanagement/compliancemanagementpartners/{id}":427,"PATCH /devicemanagement/compliancepolicies/{id}":419,"PATCH /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}":419,"PATCH /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}":419,"PATCH /devicemanagement/compliancepolicies/{id}/settings/{id}":419,"PATCH /devicemanagement/compliancesettings/{id}":419,"PATCH /devicemanagement/conditionalaccesssettings":427,"PATCH /devicemanagement/configmanagercollections/{id}":415,"PATCH /devicemanagement/configurationcategories/{id}":419,"PATCH /devicemanagement/configurationpolicies/{id}":921,"PATCH /devicemanagement/configurationpolicies/{id}/settings/{id}":419,"PATCH /devicemanagement/configurationpolicies/{id}/settings/{id}/settingdefinitions/{id}":419,"PATCH /devicemanagement/configurationpolicytemplates/{id}":419,"PATCH /devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}":419,"PATCH /devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}/settingdefinitions/{id}":419,"PATCH /devicemanagement/configurationsettings/{id}":419,"PATCH /devicemanagement/datasharingconsents/{id}":427,"PATCH /devicemanagement/deploymentplans/{id}":419,"PATCH /devicemanagement/deployments/{id}":419,"PATCH /devicemanagement/deployments/{id}/rings/{id}":419,"PATCH /devicemanagement/deployments/{id}/rings/{id}/assignmentconfigurations/{id}":419,"PATCH /devicemanagement/deponboardingsettings/{id}":422,"PATCH /devicemanagement/deponboardingsettings/{id}/defaultiosenrollmentprofile":427,"PATCH /devicemanagement/deponboardingsettings/{id}/defaultmacosenrollmentprofile":427,"PATCH /devicemanagement/deponboardingsettings/{id}/defaulttvosenrollmentprofile":427,"PATCH /devicemanagement/deponboardingsettings/{id}/defaultvisionosenrollmentprofile":427,"PATCH /devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}":422,"PATCH /devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities/{id}":427,"PATCH /devicemanagement/derivedcredentials/{id}":422,"PATCH /devicemanagement/detectedapps/{id}":429,"PATCH /devicemanagement/devicecategories/{id}":429,"PATCH /devicemanagement/devicecompliancepolicies/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/assignments/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/devicestatuses/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/devicestatusoverview":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/userstatuses/{id}":419,"PATCH /devicemanagement/devicecompliancepolicies/{id}/userstatusoverview":419,"PATCH /devicemanagement/devicecompliancepolicydevicestatesummary":419,"PATCH /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}":419,"PATCH /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates/{id}":419,"PATCH /devicemanagement/devicecompliancescripts/{id}":926,"PATCH /devicemanagement/devicecompliancescripts/{id}/assignments/{id}":420,"PATCH /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}":429,"PATCH /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice":424,"PATCH /devicemanagement/devicecompliancescripts/{id}/runsummary":429,"PATCH /devicemanagement/deviceconfigurationconflictsummary/{id}":419,"PATCH /devicemanagement/deviceconfigurationdevicestatesummaries":419,"PATCH /devicemanagement/deviceconfigurationrestrictedappsviolations/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidcertificateprofilebase/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androiddeviceownercertificateprofilebase/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androiddeviceownerderivedcredentialauthenticationconfiguration/derivedcredentialsettings":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/derivedcredentialsettings":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/rootcertificateforservervalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/rootcertificatesforservervalidation/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androiddeviceownerimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androiddeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androiddeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androiddeviceownervpnconfiguration/derivedcredentialsettings":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidenterprisewificonfiguration/rootcertificateforservervalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidforworkcertificateprofilebase/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidforworkenterprisewificonfiguration/rootcertificateforservervalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidforworkimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidforworkpkcscertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidforworkscepcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidpkcscertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidscepcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidworkprofilecertificateprofilebase/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidworkprofileenterprisewificonfiguration/rootcertificateforservervalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidworkprofilepkcscertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/androidworkprofilescepcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/aospdeviceownercertificateprofilebase/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/aospdeviceownerenterprisewificonfiguration/rootcertificateforservervalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/aospdeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/aospdeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/assignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/derivedcredentialsettings":419,"PATCH /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/devicestatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/devicestatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosderivedcredentialauthenticationconfiguration/derivedcredentialsettings":419,"PATCH /devicemanagement/deviceconfigurations/{id}/ioseasemailprofileconfiguration/derivedcredentialsettings":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosenterprisewificonfiguration/derivedcredentialsettings":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iospkcscertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/assignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicestatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicestatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/groupassignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/userstatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/userstatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/iosvpnconfiguration/derivedcredentialsettings":419,"PATCH /devicemanagement/deviceconfigurations/{id}/ioswirednetworkconfiguration/rootcertificateforservervalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/ioswirednetworkconfiguration/rootcertificatesforservervalidation/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosenterprisewificonfiguration/rootcertificateforservervalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macospkcscertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/assignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicestatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicestatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/groupassignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/userstatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/userstatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macoswirednetworkconfiguration/rootcertificateforservervalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/macoswirednetworkconfiguration/rootcertificatesforservervalidation/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/rootcertificate/assignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/rootcertificate/groupassignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/userstatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/userstatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windows10generalconfiguration/privacyaccesscontrols/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/assignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicestatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicestatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/groupassignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/userstatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/userstatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/assignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/groupassignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10importedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10pkcscertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows81scepcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows81scepcertificateprofile/rootcertificate":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windowsphone81importedpfxcertificateprofile/manageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificateforclientvalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/assignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/groupassignments/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatuses/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatusoverview":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/rootcertificateforclientvalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/rootcertificatesforservervalidation/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/secondaryrootcertificateforclientvalidation":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforclientvalidation/{id}":419,"PATCH /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforservervalidation/{id}":419,"PATCH /devicemanagement/deviceconfigurationsallmanageddevicecertificatestates/{id}":419,"PATCH /devicemanagement/deviceconfigurationuserstatesummaries":419,"PATCH /devicemanagement/devicecustomattributeshellscripts/{id}":926,"PATCH /devicemanagement/devicecustomattributeshellscripts/{id}/assignments/{id}":429,"PATCH /devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates/{id}":429,"PATCH /devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments/{id}":429,"PATCH /devicemanagement/devicecustomattributeshellscripts/{id}/runsummary":429,"PATCH /devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates/{id}":429,"PATCH /devicemanagement/deviceenrollmentconfigurations/{id}":427,"PATCH /devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}":427,"PATCH /devicemanagement/devicehealthscripts/{id}":926,"PATCH /devicemanagement/devicehealthscripts/{id}/assignments/{id}":420,"PATCH /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}":420,"PATCH /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice":424,"PATCH /devicemanagement/devicehealthscripts/{id}/runsummary":420,"PATCH /devicemanagement/devicemanagementpartners/{id}":427,"PATCH /devicemanagement/devicemanagementscripts/{id}":926,"PATCH /devicemanagement/devicemanagementscripts/{id}/assignments/{id}":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice":424,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}":424,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicecategory":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicehealthscriptstates/{id}":420,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}":424,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate/{id}":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/groupassignments/{id}":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/runsummary":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}":429,"PATCH /devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates/{id}":429,"PATCH /devicemanagement/deviceshellscripts/{id}":926,"PATCH /devicemanagement/deviceshellscripts/{id}/assignments/{id}":429,"PATCH /devicemanagement/deviceshellscripts/{id}/devicerunstates/{id}":429,"PATCH /devicemanagement/deviceshellscripts/{id}/groupassignments/{id}":429,"PATCH /devicemanagement/deviceshellscripts/{id}/runsummary":429,"PATCH /devicemanagement/deviceshellscripts/{id}/userrunstates/{id}":429,"PATCH /devicemanagement/domainjoinconnectors/{id}":419,"PATCH /devicemanagement/elevationrequests/{id}":419,"PATCH /devicemanagement/embeddedsimactivationcodepools/{id}":419,"PATCH /devicemanagement/embeddedsimactivationcodepools/{id}/assignments/{id}":419,"PATCH /devicemanagement/embeddedsimactivationcodepools/{id}/devicestates/{id}":419,"PATCH /devicemanagement/endpointprivilegemanagementprovisioningstatus":419,"PATCH /devicemanagement/exchangeconnectors/{id}":427,"PATCH /devicemanagement/exchangeonpremisespolicies/{id}":427,"PATCH /devicemanagement/exchangeonpremisespolicy":427,"PATCH /devicemanagement/exchangeonpremisespolicy/conditionalaccesssettings":427,"PATCH /devicemanagement/grouppolicycategories/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/assignments/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/definition":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/definitionvalue":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/children/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitionfile":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitions/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/parent":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/definitions/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/grouppolicyuploadeddefinitionfile/grouppolicyoperations/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/nextversiondefinition":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/presentations/{id}":419,"PATCH /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/previousversiondefinition":419,"PATCH /devicemanagement/grouppolicydefinitionfiles/{id}":419,"PATCH /devicemanagement/grouppolicydefinitions/{id}":419,"PATCH /devicemanagement/grouppolicymigrationreports/{id}":419,"PATCH /devicemanagement/grouppolicymigrationreports/{id}/grouppolicysettingmappings/{id}":419,"PATCH /devicemanagement/grouppolicymigrationreports/{id}/unsupportedgrouppolicyextensions/{id}":419,"PATCH /devicemanagement/grouppolicyobjectfiles/{id}":419,"PATCH /devicemanagement/grouppolicyuploadeddefinitionfiles/{id}":419,"PATCH /devicemanagement/hardwareconfigurations/{id}":419,"PATCH /devicemanagement/hardwareconfigurations/{id}/assignments/{id}":419,"PATCH /devicemanagement/hardwareconfigurations/{id}/devicerunstates/{id}":419,"PATCH /devicemanagement/hardwareconfigurations/{id}/runsummary":419,"PATCH /devicemanagement/hardwareconfigurations/{id}/userrunstates/{id}":419,"PATCH /devicemanagement/hardwarepassworddetails/{id}":419,"PATCH /devicemanagement/hardwarepasswordinfo/{id}":419,"PATCH /devicemanagement/importeddeviceidentities/{id}":427,"PATCH /devicemanagement/intents/{id}":419,"PATCH /devicemanagement/intents/{id}/assignments/{id}":419,"PATCH /devicemanagement/intents/{id}/categories/{id}":419,"PATCH /devicemanagement/intents/{id}/categories/{id}/settingdefinitions/{id}":419,"PATCH /devicemanagement/intents/{id}/categories/{id}/settings/{id}":419,"PATCH /devicemanagement/intents/{id}/devicesettingstatesummaries/{id}":419,"PATCH /devicemanagement/intents/{id}/devicestates/{id}":419,"PATCH /devicemanagement/intents/{id}/devicestatesummary":419,"PATCH /devicemanagement/intents/{id}/settings/{id}":419,"PATCH /devicemanagement/intents/{id}/userstates/{id}":419,"PATCH /devicemanagement/intents/{id}/userstatesummary":419,"PATCH /devicemanagement/intunebrandingprofiles/{id}":415,"PATCH /devicemanagement/intunebrandingprofiles/{id}/assignments/{id}":415,"PATCH /devicemanagement/inventorycategories/{id}":419,"PATCH /devicemanagement/inventorypolicies/{id}/settings/{id}":419,"PATCH /devicemanagement/inventorysettings/{id}":419,"PATCH /devicemanagement/iosupdatestatuses/{id}":419,"PATCH /devicemanagement/macossoftwareupdateaccountsummaries/{id}":419,"PATCH /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}":419,"PATCH /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}/updatestatesummaries/{id}":419,"PATCH /devicemanagement/manageddevicecleanuprules/{id}":424,"PATCH /devicemanagement/manageddeviceencryptionstates/{id}":419,"PATCH /devicemanagement/manageddeviceoverview":429,"PATCH /devicemanagement/manageddevices/{id}":424,"PATCH /devicemanagement/microsofttunnelconfigurations/{id}":419,"PATCH /devicemanagement/microsofttunnelhealththresholds/{id}":419,"PATCH /devicemanagement/microsofttunnelserverlogcollectionresponses/{id}":419,"PATCH /devicemanagement/microsofttunnelsites/{id}":419,"PATCH /devicemanagement/microsofttunnelsites/{id}/microsofttunnelconfiguration":419,"PATCH /devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}":419,"PATCH /devicemanagement/mobileapptroubleshootingevents/{id}":429,"PATCH /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}":429,"PATCH /devicemanagement/mobilethreatdefenseconnectors/{id}":422,"PATCH /devicemanagement/monitoring/alertrules/{id}":230,"PATCH /devicemanagement/ndesconnectors/{id}":422,"PATCH /devicemanagement/notificationmessagetemplates/{id}":419,"PATCH /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages/{id}":419,"PATCH /devicemanagement/operationapprovalpolicies/{id}":434,"PATCH /devicemanagement/operationapprovalrequests/{id}":931,"PATCH /devicemanagement/privilegemanagementelevations/{id}":429,"PATCH /devicemanagement/remoteactionaudits/{id}":429,"PATCH /devicemanagement/remoteassistancepartners/{id}":427,"PATCH /devicemanagement/remoteassistancesettings":427,"PATCH /devicemanagement/reports":419,"PATCH /devicemanagement/reports/cachedreportconfigurations/{id}":435,"PATCH /devicemanagement/reports/exportjobs/{id}":435,"PATCH /devicemanagement/reports/reportschedules/{id}":435,"PATCH /devicemanagement/resourceaccessprofiles/{id}":422,"PATCH /devicemanagement/resourceaccessprofiles/{id}/assignments/{id}":422,"PATCH /devicemanagement/resourceoperations/{id}":931,"PATCH /devicemanagement/reusablepolicysettings/{id}":419,"PATCH /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}":921,"PATCH /devicemanagement/reusablesettings/{id}":419,"PATCH /devicemanagement/roleassignments/{id}":433,"PATCH /devicemanagement/roledefinitions/{id}":433,"PATCH /devicemanagement/roledefinitions/{id}/roleassignments/{id}":433,"PATCH /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/{id}":433,"PATCH /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/{id}/assignments/{id}":931,"PATCH /devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition":433,"PATCH /devicemanagement/rolescopetags/{id}":433,"PATCH /devicemanagement/settingdefinitions/{id}":419,"PATCH /devicemanagement/softwareupdatestatussummary":419,"PATCH /devicemanagement/targetpayloadassignments/{id}":419,"PATCH /devicemanagement/templateinsights/{id}":419,"PATCH /devicemanagement/templates/{id}":419,"PATCH /devicemanagement/templates/{id}/categories/{id}":419,"PATCH /devicemanagement/templates/{id}/categories/{id}/recommendedsettings/{id}":419,"PATCH /devicemanagement/templates/{id}/categories/{id}/settingdefinitions/{id}":419,"PATCH /devicemanagement/templates/{id}/migratableto/{id}":419,"PATCH /devicemanagement/templates/{id}/securitybaselinetemplate/categorydevicestatesummaries/{id}":419,"PATCH /devicemanagement/templates/{id}/securitybaselinetemplate/devicestates/{id}":419,"PATCH /devicemanagement/templates/{id}/securitybaselinetemplate/devicestatesummary":419,"PATCH /devicemanagement/templates/{id}/settings/{id}":419,"PATCH /devicemanagement/templatesettings/{id}":419,"PATCH /devicemanagement/tenantattachrbac":429,"PATCH /devicemanagement/termsandconditions/{id}":422,"PATCH /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}":422,"PATCH /devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}/termsandconditions":422,"PATCH /devicemanagement/termsandconditions/{id}/assignments/{id}":422,"PATCH /devicemanagement/termsandconditions/{id}/groupassignments/{id}":422,"PATCH /devicemanagement/termsandconditions/{id}/groupassignments/{id}/termsandconditions":422,"PATCH /devicemanagement/troubleshootingevents/{id}":429,"PATCH /devicemanagement/virtualendpoint/cloudapps/{id}":227,"PATCH /devicemanagement/virtualendpoint/cloudpcpools/{id}":227,"PATCH /devicemanagement/virtualendpoint/externalpartners/{id}":227,"PATCH /devicemanagement/virtualendpoint/externalpartnersettings/{id}":227,"PATCH /devicemanagement/virtualendpoint/onpremisesconnections/{id}":230,"PATCH /devicemanagement/virtualendpoint/organizationsettings":840,"PATCH /devicemanagement/virtualendpoint/provisioningpolicies/{id}":227,"PATCH /devicemanagement/virtualendpoint/usersettings/{id}":227,"PATCH /devicemanagement/windowsautopilotdeploymentprofiles/{id}":422,"PATCH /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile":422,"PATCH /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/activedirectorywindowsautopilotdeploymentprofile/domainjoinconfiguration":427,"PATCH /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assignments/{id}":427,"PATCH /devicemanagement/windowsautopilotdeviceidentities/{id}/intendeddeploymentprofile":422,"PATCH /devicemanagement/windowsautopilotsettings":427,"PATCH /devicemanagement/windowsdriverupdateprofiles/{id}":419,"PATCH /devicemanagement/windowsdriverupdateprofiles/{id}/assignments/{id}":419,"PATCH /devicemanagement/windowsdriverupdateprofiles/{id}/driverinventories/{id}":419,"PATCH /devicemanagement/windowsfeatureupdateprofiles/{id}":419,"PATCH /devicemanagement/windowsfeatureupdateprofiles/{id}/assignments/{id}":419,"PATCH /devicemanagement/windowsinformationprotectionapplearningsummaries/{id}":415,"PATCH /devicemanagement/windowsinformationprotectionnetworklearningsummaries/{id}":415,"PATCH /devicemanagement/windowsmalwareinformation/{id}":429,"PATCH /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}":429,"PATCH /devicemanagement/windowsqualityupdatepolicies/{id}":419,"PATCH /devicemanagement/windowsqualityupdatepolicies/{id}/assignments/{id}":419,"PATCH /devicemanagement/windowsqualityupdateprofiles/{id}":419,"PATCH /devicemanagement/windowsqualityupdateprofiles/{id}/assignments/{id}":419,"PATCH /devicemanagement/windowsupdatecatalogitems/{id}":419,"PATCH /devicemanagement/zebrafotaartifacts/{id}":419,"PATCH /devices(deviceid='{id}')":270,"PATCH /devices/{id}":270,"PATCH /directory/administrativeunits/{id}":15,"PATCH /directory/attributesets/{id}":64,"PATCH /directory/authenticationmethoddevices/hardwareoathdevices":108,"PATCH /directory/authenticationmethoddevices/hardwareoathdevices/{id}":108,"PATCH /directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}":816,"PATCH /directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}":816,"PATCH /directory/certificateauthorities/mutualtlsoauthconfigurations/{id}":819,"PATCH /directory/customsecurityattributedefinitions/{id}":64,"PATCH /directory/customsecurityattributedefinitions/{id}/allowedvalues/{id}":64,"PATCH /directory/externaluserprofiles/{id}":854,"PATCH /directory/onpremisessynchronization/{id}":481,"PATCH /directory/pendingexternaluserprofiles/{id}":855,"PATCH /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}":159,"PATCH /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities/{id}":159,"PATCH /directory/recommendationconfiguration":893,"PATCH /directory/tenantgovernance/governancepolicytemplates/default":672,"PATCH /directory/tenantgovernance/governancepolicytemplates/{id}":672,"PATCH /directory/tenantgovernance/governancerelationships/{id}":677,"PATCH /directory/tenantgovernance/governancerequests/{id}":679,"PATCH /directory/tenantgovernance/settings":682,"PATCH /domains/{id}":284,"PATCH /domains/{id}/federationconfiguration/{id}":289,"PATCH /drives/{id}/items/{id}":296,"PATCH /drives/{id}/items/{id}/permissions/{id}":296,"PATCH /drives/{id}/items/{id}/retentionlabel":295,"PATCH /education/classes/{id}":314,"PATCH /education/classes/{id}/assignmentdefaults":308,"PATCH /education/classes/{id}/assignments/{id}":309,"PATCH /education/classes/{id}/assignments/{id}/rubric":308,"PATCH /education/classes/{id}/assignments/{id}/submissions/{id}/outcomes/{id}":312,"PATCH /education/classes/{id}/assignmentsettings":308,"PATCH /education/classes/{id}/assignmentsettings/gradingcategories/{id}":308,"PATCH /education/classes/{id}/assignmentsettings/gradingschemes/{id}":308,"PATCH /education/classes/{id}/modules/{id}":321,"PATCH /education/classes/{id}/modules/{id}/resources/{id}":321,"PATCH /education/me":314,"PATCH /education/me/rubrics/{id}":308,"PATCH /education/schools/{id}":314,"PATCH /education/users/{id}":314,"PATCH /employeeexperience/communities/{id}":233,"PATCH /employeeexperience/learningproviders/{id}":331,"PATCH /employeeexperience/learningproviders/{id}/learningcontents(externalid='{id}')":439,"PATCH /employeeexperience/learningproviders/{id}/learningcontents/{id}":439,"PATCH /employeeexperience/learningproviders/{id}/learningcourseactivities/{id}":335,"PATCH /external/connections/{id}":351,"PATCH /external/connections/{id}/schema":351,"PATCH /external/industrydata/dataconnectors/{id}":898,"PATCH /external/industrydata/inboundflows/{id}":900,"PATCH /external/industrydata/outboundprovisioningflowsets/{id}":903,"PATCH /external/industrydata/outboundprovisioningflowsets/{id}/provisioningflows/{id}":895,"PATCH /external/industrydata/referencedefinitions/{id}":907,"PATCH /external/industrydata/sourcesystems/{id}":911,"PATCH /external/industrydata/years/{id}":913,"PATCH /financials/companies/{id}/companyinformation/{id}":864,"PATCH /financials/companies/{id}/countriesregions/{id}":864,"PATCH /financials/companies/{id}/currencies/{id}":864,"PATCH /financials/companies/{id}/customerpaymentjournals/{id}":864,"PATCH /financials/companies/{id}/customerpaymentjournals/{id}/customerpayments/{id}":864,"PATCH /financials/companies/{id}/customers/{id}":864,"PATCH /financials/companies/{id}/employees/{id}":864,"PATCH /financials/companies/{id}/itemcategories/{id}":864,"PATCH /financials/companies/{id}/items/{id}":864,"PATCH /financials/companies/{id}/journals/{id}":864,"PATCH /financials/companies/{id}/journals/{id}/journallines/{id}":864,"PATCH /financials/companies/{id}/paymentmethods/{id}":864,"PATCH /financials/companies/{id}/paymentterms/{id}":864,"PATCH /financials/companies/{id}/shipmentmethods/{id}":864,"PATCH /financials/companies/{id}/taxareas/{id}":864,"PATCH /financials/companies/{id}/taxgroups/{id}":864,"PATCH /financials/companies/{id}/unitsofmeasure/{id}":864,"PATCH /financials/companies/{id}/vendors/{id}":864,"PATCH /grouplifecyclepolicies/{id}":19,"PATCH /groups(uniquename='uniquename')":372,"PATCH /groups/{id}":388,"PATCH /groups/{id}/calendar/events/{id}":253,"PATCH /groups/{id}/cloudlicensing/assignments/{id}":828,"PATCH /groups/{id}/conversations/{id}/threads/{id}":254,"PATCH /groups/{id}/drive/items/{id}":296,"PATCH /groups/{id}/drive/items/{id}/permissions/{id}":296,"PATCH /groups/{id}/events/{id}":253,"PATCH /groups/{id}/onenote/pages/{id}/content":491,"PATCH /groups/{id}/settings/{id}":389,"PATCH /groups/{id}/threads/{id}":254,"PATCH /identity/apiconnectors/{id}":391,"PATCH /identity/authenticationeventlisteners/{id}":98,"PATCH /identity/authenticationeventsflows/{id}":98,"PATCH /identity/b2cuserflows/{id}":113,"PATCH /identity/b2cuserflows/{id}/userattributeassignments/{id}":113,"PATCH /identity/b2xuserflows/{id}/userattributeassignments/{id}":113,"PATCH /identity/b2xuserflows/{id}/userflowidentityproviders/$ref":113,"PATCH /identity/conditionalaccess/authenticationcontextclassreferences/{id}":102,"PATCH /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}":97,"PATCH /identity/customauthenticationextensions/{id}":259,"PATCH /identity/events/onsignupstart/{id}":9,"PATCH /identity/identityproviders/{id}":393,"PATCH /identity/riskprevention/fraudprotectionproviders/{id}":369,"PATCH /identity/riskprevention/webapplicationfirewallproviders/{id}":369,"PATCH /identity/signinidentifiers/{id}":1035,"PATCH /identity/userflowattributes/{id}":113,"PATCH /identity/verifiedid/profiles/{id}":406,"PATCH /identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/{id}":6,"PATCH /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}":5,"PATCH /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}":6,"PATCH /identitygovernance/accessreviews/policy":770,"PATCH /identitygovernance/catalogs/{id}/accesspackageresources/{id}/uploadsessions/{id}":0,"PATCH /identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/steps/{id}":75,"PATCH /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}":0,"PATCH /identitygovernance/entitlementmanagement/accesspackages/{id}":0,"PATCH /identitygovernance/entitlementmanagement/connectedorganizations/{id}":0,"PATCH /identitygovernance/entitlementmanagement/externaloriginresourceconnectors/{id}":0,"PATCH /identitygovernance/entitlementmanagement/settings":0,"PATCH /identitygovernance/entitlementmanagement/subjects(objectid='{id}')":0,"PATCH /identitygovernance/lifecycleworkflows/customtaskextensions/{id}":394,"PATCH /identitygovernance/lifecycleworkflows/lifecyclepolicies/{id}":888,"PATCH /identitygovernance/lifecycleworkflows/lifecyclepolicies/{id}/rules/{id}":892,"PATCH /identitygovernance/lifecycleworkflows/lifecyclepolicypriorityconfigurations/{id}":892,"PATCH /identitygovernance/lifecycleworkflows/settings":399,"PATCH /identitygovernance/lifecycleworkflows/workflows/{id}":396,"PATCH /identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}":396,"PATCH /identitygovernance/privilegedaccess/group/assignmentapprovals/{id}/steps/{id}":75,"PATCH /identitygovernance/rolemanagementalerts/alertconfigurations/{id}":1063,"PATCH /identitygovernance/rolemanagementalerts/alerts/{id}":1063,"PATCH /identitygovernance/termsofuse/agreements/{id}":57,"PATCH /identityproviders/{id}":393,"PATCH /me":723,"PATCH /me/authentication/qrcodepinmethod/pin":557,"PATCH /me/authentication/qrcodepinmethod/pin/updatepin":265,"PATCH /me/authentication/qrcodepinmethod/standardqrcode":557,"PATCH /me/authentication/qrcodepinmethod/temporaryqrcode":557,"PATCH /me/authentication/requirements":800,"PATCH /me/calendar/events/{id}":143,"PATCH /me/calendargroups/{id}":143,"PATCH /me/calendargroups/{id}/calendars/{id}/events/{id}":143,"PATCH /me/calendars/{id}/events/{id}":143,"PATCH /me/cloudlicensing/allotments/{id}/assignments/{id}":828,"PATCH /me/contactfolders/{id}":241,"PATCH /me/contactfolders/{id}/childfolders/{id}/.../contacts/{id}":241,"PATCH /me/contactfolders/{id}/contacts/{id}":241,"PATCH /me/contactfolders/{id}/contacts/{id}/photo/$value":554,"PATCH /me/contacts/{id}":241,"PATCH /me/contacts/{id}/photo/$value":554,"PATCH /me/distributionlists/{id}":241,"PATCH /me/drive/items/{id}":296,"PATCH /me/drive/items/{id}/permissions/{id}":296,"PATCH /me/drive/items/{id}/workbook/names/{id}":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format/borders()":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format/fill":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format/font":187,"PATCH /me/drive/items/{id}/workbook/names/{id}/range/format/protection":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders()":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/font":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/protection":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/rows/{id}":187,"PATCH /me/drive/items/{id}/workbook/tables/{id}/sort/fields/icon":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/datalabels":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range()/format/protection":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders()":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/fill":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/font":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"PATCH /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/fields/icon":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders()":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format/fill":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/names/{id}/range/format/protection":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders()":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/protection":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/rows/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/tables/{id}/sort/fields/icon":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/datalabels":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range()/format/protection":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders()":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/fill":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/font":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}":187,"PATCH /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/fields/icon":187,"PATCH /me/events/{id}":143,"PATCH /me/inferenceclassification/overrides/{id}":343,"PATCH /me/mailboxsettings":458,"PATCH /me/mailfolders/inbox/messagerules/{id}":458,"PATCH /me/mailfolders/{id}":343,"PATCH /me/mailfolders/{id}/messages/{id}":343,"PATCH /me/mailfolders/{id}/userconfigurations/{id}":938,"PATCH /me/messages/{id}":343,"PATCH /me/notes/{id}":468,"PATCH /me/onenote/pages/{id}/content":491,"PATCH /me/onlinemeetings/{id}":74,"PATCH /me/onlinemeetings/{id}/registration":74,"PATCH /me/onlinemeetings/{id}/registration/customquestions/{id}":74,"PATCH /me/onlinemeetings/{id}/virtualappointment":74,"PATCH /me/outlook/mastercategories/{id}":458,"PATCH /me/outlook/taskfolders/{id}":222,"PATCH /me/outlook/taskgroups/{id}":222,"PATCH /me/outlook/taskgroups/{id}/taskfolders/{id}":222,"PATCH /me/outlook/tasks/{id}":222,"PATCH /me/planner":987,"PATCH /me/profile/account/{id}":732,"PATCH /me/profile/addresses/{id}":732,"PATCH /me/profile/anniversaries/{id}":732,"PATCH /me/profile/awards/{id}":732,"PATCH /me/profile/certifications/{id}":732,"PATCH /me/profile/educationalactivities/{id}":732,"PATCH /me/profile/emails/{id}":732,"PATCH /me/profile/interests/{id}":732,"PATCH /me/profile/languages/{id}":732,"PATCH /me/profile/names/{id}":732,"PATCH /me/profile/notes/{id}":982,"PATCH /me/profile/patents/{id}":732,"PATCH /me/profile/phones/{id}":732,"PATCH /me/profile/positions/{id}":732,"PATCH /me/profile/projects/{id}":732,"PATCH /me/profile/publications/{id}":732,"PATCH /me/profile/skills/{id}":732,"PATCH /me/profile/webaccounts/{id}":732,"PATCH /me/profile/websites/{id}":732,"PATCH /me/responsibilities/{id}":982,"PATCH /me/settings":732,"PATCH /me/settings/contactmergesuggestions":726,"PATCH /me/settings/iteminsights":726,"PATCH /me/settings/regionalandlanguagesettings":998,"PATCH /me/settings/workhoursandlocations":758,"PATCH /me/tasks/alltasks/{id}":222,"PATCH /me/tasks/lists/{id}":222,"PATCH /me/tasks/lists/{id}/tasks/{id}":222,"PATCH /me/tasks/lists/{id}/tasks/{id}/checklistitems/{id}":222,"PATCH /me/tasks/lists/{id}/tasks/{id}/linkedresources/{id}":807,"PATCH /me/todo/lists/{id}":222,"PATCH /me/todo/lists/{id}/tasks/{id}":222,"PATCH /me/todo/lists/{id}/tasks/{id}/checklistitems/{id}":222,"PATCH /me/todo/lists/{id}/tasks/{id}/linkedresources/{id}":222,"PATCH /networkaccess":955,"PATCH /networkaccess/cloudfirewallpolicies/{id}":955,"PATCH /networkaccess/cloudfirewallpolicies/{id}/policyrules/{id}":955,"PATCH /networkaccess/connectivity/branches/{id}":955,"PATCH /networkaccess/connectivity/branches/{id}/devicelinks/{id}":955,"PATCH /networkaccess/connectivity/branches/{id}/forwardingprofiles":955,"PATCH /networkaccess/filteringpolicies/{id}/policyrules/{id}":955,"PATCH /networkaccess/filteringprofiles/{id}":955,"PATCH /networkaccess/forwardingpolicies/{id}/policyrules/{id}":955,"PATCH /networkaccess/forwardingprofiles/{id}":955,"PATCH /networkaccess/forwardingprofiles/{id}/policies/{id}":955,"PATCH /networkaccess/settings/conditionalaccess":955,"PATCH /networkaccess/settings/crosstenantaccess":955,"PATCH /networkaccess/settings/customblockpage":955,"PATCH /networkaccess/settings/forwardingoptions":957,"PATCH /networkaccess/threatintelligencepolicies/{id}":955,"PATCH /networkaccess/tls/externalcertificateauthoritycertificates/{id}":955,"PATCH /networkaccess/tlsinspectionpolicies/{id}":955,"PATCH /networkaccess/tlsinspectionpolicies/{id}/policyrules/{id}":955,"PATCH /oauth2permissiongrants/{id}":472,"PATCH /onpremencryptedpayloads/{id}":419,"PATCH /onpremisespublishingprofiles/applicationproxy/connectorgroups/{id}":842,"PATCH /onpremisespublishingprofiles/{id}/agentgroups/{id}":842,"PATCH /onpremisespublishingprofiles/{id}/hybridagentupdaterconfiguration":842,"PATCH /onpremisespublishingprofiles/{id}/publishedresources/{id}":967,"PATCH /organization/{id}":160,"PATCH /organization/{id}/branding":487,"PATCH /organization/{id}/branding/localizations/{id}":487,"PATCH /organization/{id}/branding/themes/{id}":968,"PATCH /organization/{id}/branding/themes/{id}/localizations/{id}":968,"PATCH /organization/{id}/settings/contactinsights":916,"PATCH /organization/{id}/settings/microsoftapplicationdataaccess":160,"PATCH /organization/{id}/settings/peopleinsights":916,"PATCH /pfxrecryptionrequests/{id}":419,"PATCH /pfxusercertificates/{id}":419,"PATCH /places":141,"PATCH /places/{id}":141,"PATCH /places/{id}/building/map/levels/{id}/fixtures/{id}":141,"PATCH /places/{id}/building/map/levels/{id}/sections/{id}":141,"PATCH /places/{id}/building/map/levels/{id}/units/{id}":141,"PATCH /planner/buckets/{id}":508,"PATCH /planner/plans/{id}":508,"PATCH /planner/plans/{id}/details":508,"PATCH /planner/tasks/{id}":508,"PATCH /planner/tasks/{id}/assignedtotaskboardformat":508,"PATCH /planner/tasks/{id}/buckettaskboardformat":508,"PATCH /planner/tasks/{id}/details":508,"PATCH /planner/tasks/{id}/messages/{id}":222,"PATCH /planner/tasks/{id}/progresstaskboardformat":508,"PATCH /policies/accessreviewpolicy":770,"PATCH /policies/activitybasedtimeoutpolicies/{id}":9,"PATCH /policies/appmanagementpolicies/{id}":9,"PATCH /policies/authenticationflowspolicy":104,"PATCH /policies/authenticationmethodspolicy":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/email":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/fido2":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/hardwareoath":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/microsoftauthenticator":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/qrcodepin":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/sms":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/softwareoath":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/temporaryaccesspass":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/verifiablecredentials/{id}":329,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/voice":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/x509certificate":108,"PATCH /policies/authenticationmethodspolicy/authenticationmethodconfigurations/{id}":108,"PATCH /policies/authenticationstrengthpolicies/{id}":97,"PATCH /policies/authorizationpolicy/authorizationpolicy":112,"PATCH /policies/b2bmanagementpolicies/{id}":804,"PATCH /policies/b2cauthenticationmethodspolicy":108,"PATCH /policies/claimsmappingpolicies/{id}":9,"PATCH /policies/crosstenantaccesspolicy":256,"PATCH /policies/crosstenantaccesspolicy/default":256,"PATCH /policies/crosstenantaccesspolicy/default/m365capabilities/{id}":258,"PATCH /policies/crosstenantaccesspolicy/partners/{id}":256,"PATCH /policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization":256,"PATCH /policies/crosstenantaccesspolicy/partners/{id}/m365capabilities/{id}":258,"PATCH /policies/crosstenantaccesspolicy/templates/multitenantorganizationidentitysynchronization":256,"PATCH /policies/crosstenantaccesspolicy/templates/multitenantorganizationpartnerconfiguration":256,"PATCH /policies/defaultappmanagementpolicy":9,"PATCH /policies/externalidentitiespolicy":871,"PATCH /policies/featurerolloutpolicies/{id}":358,"PATCH /policies/homerealmdiscoverypolicies/{id}":9,"PATCH /policies/identitysecuritydefaultsenforcementpolicy":236,"PATCH /policies/mobileappmanagementpolicies/{id}":948,"PATCH /policies/mobiledevicemanagementpolicies/{id}":948,"PATCH /policies/onpremauthenticationpolicies/{id}":963,"PATCH /policies/ownerlessgrouppolicy":253,"PATCH /policies/permissiongrantpolicies/{id}":500,"PATCH /policies/permissiongrantpreapprovalpolicies/{id}":500,"PATCH /policies/rolemanagementpolicies/{id}":694,"PATCH /policies/rolemanagementpolicies/{id}/rules/{id}":694,"PATCH /policies/tokenissuancepolicies/{id}":9,"PATCH /policies/tokenlifetimepolicies/{id}":9,"PATCH /print/connectors/{id}":528,"PATCH /print/printers/{id}":538,"PATCH /print/printers/{id}/jobs/{id}":542,"PATCH /print/settings":527,"PATCH /print/shares/{id}":526,"PATCH /print/taskdefinitions/{id}":519,"PATCH /print/taskdefinitions/{id}/tasks/{id}":519,"PATCH /privacy/subjectrightsrequests/{id}":629,"PATCH /programs/{id}":988,"PATCH /reports":419,"PATCH /reports/healthmonitoring/alertconfigurations/{id}":885,"PATCH /reports/healthmonitoring/alerts/{id}":883,"PATCH /rolemanagement":931,"PATCH /rolemanagement/cloudpc/roleassignments/{id}":227,"PATCH /rolemanagement/cloudpc/roledefinitions/{id}":991,"PATCH /rolemanagement/devicemanagement":931,"PATCH /rolemanagement/devicemanagement/roleassignments/{id}":227,"PATCH /rolemanagement/devicemanagement/roledefinitions/{id}":991,"PATCH /rolemanagement/directory/roleassignmentapprovals/{id}/steps/{id}":75,"PATCH /rolemanagement/directory/roledefinitions/{id}":991,"PATCH /rolemanagement/exchange/customappscopes/{id}":847,"PATCH /schemaextensions/{id}":35,"PATCH /search/acronyms/{id}":578,"PATCH /search/bookmarks/{id}":578,"PATCH /search/qnas/{id}":578,"PATCH /security/alerts/{id}":62,"PATCH /security/alerts_v2/{id}":582,"PATCH /security/attacksimulation/simulations/{id}":81,"PATCH /security/attacksimulation/trainingcampaigns/{id}":81,"PATCH /security/casemanagement/cases/{id}":1003,"PATCH /security/casemanagement/cases/{id}/activities/{id}":1003,"PATCH /security/casemanagement/cases/{id}/attachments/{id}":1003,"PATCH /security/casemanagement/cases/{id}/relations/{id}":1003,"PATCH /security/casemanagement/cases/{id}/tasks/{id}":1003,"PATCH /security/cases/ediscoverycases/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/legalholds/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/reviewsets/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/searches/{id}":591,"PATCH /security/cases/ediscoverycases/{id}/settings":590,"PATCH /security/cases/ediscoverycases/{id}/tags/{id}":591,"PATCH /security/identities/healthissues/{id}":595,"PATCH /security/identities/sensors/{id}":600,"PATCH /security/incidents/{id}":602,"PATCH /security/labels/retentionlabels/{id}":604,"PATCH /security/labels/retentionlabels/{id}/eventtype":592,"PATCH /security/partner/securityalerts/{id}":976,"PATCH /security/rules/detectionrules/{id}":1008,"PATCH /security/securescorecontrolprofiles/{id}":62,"PATCH /security/securitycopilot/workspaces/{id}/sessions/{id}":1021,"PATCH /security/subjectrightsrequests/{id}":629,"PATCH /security/tiindicators/{id}":1054,"PATCH /security/triggers/retentionevents/{id}/retentioneventtype":592,"PATCH /security/triggertypes/retentioneventtypes/{id}":592,"PATCH /security/workbooks/{id}":1006,"PATCH /security/zones/{id}":1016,"PATCH /serviceprincipals(appid='appid')":67,"PATCH /serviceprincipals(appid='{id}')":615,"PATCH /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration":566,"PATCH /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps/{id}":77,"PATCH /serviceprincipals/{id}":615,"PATCH /serviceprincipals/{id}/agentidentity":28,"PATCH /serviceprincipals/{id}/claimspolicy":9,"PATCH /serviceprincipals/{id}/graph.agentidentityblueprintprincipal":43,"PATCH /serviceprincipals/{id}/remotedesktopsecurityconfiguration":566,"PATCH /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}":77,"PATCH /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}":77,"PATCH /settings/{id}":389,"PATCH /sites/{id}/columns/{id}":231,"PATCH /sites/{id}/contenttypes/{id}":231,"PATCH /sites/{id}/contenttypes/{id}/columns/{id}":231,"PATCH /sites/{id}/drive/items/{id}":296,"PATCH /sites/{id}/drive/items/{id}/permissions/{id}":296,"PATCH /sites/{id}/lists/{id}/columns/{id}":231,"PATCH /sites/{id}/lists/{id}/contenttypes/{id}":231,"PATCH /sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}":231,"PATCH /sites/{id}/lists/{id}/items/{id}/fields":123,"PATCH /sites/{id}/lists/{id}/items/{id}/permissions/{id}":243,"PATCH /sites/{id}/lists/{id}/permissions/{id}":243,"PATCH /sites/{id}/onenote/pages/{id}/content":491,"PATCH /sites/{id}/pages/{id}/newslinkpage":123,"PATCH /sites/{id}/pages/{id}/sitepage":123,"PATCH /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}":123,"PATCH /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}":123,"PATCH /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection":123,"PATCH /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts/{id}":123,"PATCH /sites/{id}/pages/{id}/sitepage/webparts/{id}":123,"PATCH /sites/{id}/pagetemplates/{id}/pagetemplate":123,"PATCH /sites/{id}/permissions/{id}":623,"PATCH /solutions/backuprestore/emailnotificationssetting":330,"PATCH /solutions/backuprestore/exchangeprotectionpolicies/{id}":122,"PATCH /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}":122,"PATCH /solutions/backuprestore/exchangerestoresessions/{id}":117,"PATCH /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}":122,"PATCH /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}":122,"PATCH /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}":117,"PATCH /solutions/backuprestore/sharepointprotectionpolicies/{id}":122,"PATCH /solutions/backuprestore/sharepointrestoresessions/{id}":117,"PATCH /solutions/bookingbusinesses/{id}":136,"PATCH /solutions/bookingbusinesses/{id}/appointments/{id}":127,"PATCH /solutions/bookingbusinesses/{id}/customers/{id}":127,"PATCH /solutions/bookingbusinesses/{id}/customquestions/{id}":126,"PATCH /solutions/bookingbusinesses/{id}/services/{id}":136,"PATCH /solutions/bookingbusinesses/{id}/staffmembers/{id}":136,"PATCH /solutions/businessscenarios(uniquename='{id}')":809,"PATCH /solutions/businessscenarios(uniquename='{id}')/planner/planconfiguration":809,"PATCH /solutions/businessscenarios/{id}":809,"PATCH /solutions/businessscenarios/{id}/planner/planconfiguration":809,"PATCH /solutions/businessscenarios/{id}/planner/taskconfiguration":809,"PATCH /solutions/businessscenarios/{id}/planner/tasks/{id}":811,"PATCH /solutions/sharepoint/migrations/crossorganizationgroupmappings":1029,"PATCH /solutions/sharepoint/migrations/crossorganizationusermappings":1029,"PATCH /solutions/virtualevents/townhalls/{id}":740,"PATCH /solutions/virtualevents/webinars/{id}":740,"PATCH /solutions/virtualevents/webinars/{id}/presenters/{id}":740,"PATCH /storage/filestorage/containers/{id}":363,"PATCH /storage/filestorage/containers/{id}/columns":363,"PATCH /storage/filestorage/containers/{id}/columns/{id}":366,"PATCH /storage/filestorage/containers/{id}/customproperties":366,"PATCH /storage/filestorage/containers/{id}/permissions":363,"PATCH /storage/filestorage/containers/{id}/permissions(email='{id}')":363,"PATCH /storage/filestorage/containers/{id}/permissions(userprincipalname='{id}')":363,"PATCH /storage/filestorage/containers/{id}/permissions/{id}":363,"PATCH /storage/filestorage/containers/{id}/recyclebin/settings":366,"PATCH /storage/filestorage/containers/{id}/sharepointgroups/{id}":367,"PATCH /storage/filestorage/containertyperegistrations/{id}":364,"PATCH /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants/{id}":364,"PATCH /storage/filestorage/containertypes/{id}":365,"PATCH /team/{id}/schedule/shiftsroledefinitions/{id}":1034,"PATCH /teams/(team-id)/channels/{id}/messages/{id}":220,"PATCH /teams/(team-id)/channels/{id}/messages/{id}/replies/{id}":220,"PATCH /teams/{id}":639,"PATCH /teams/{id}/channels/{id}":181,"PATCH /teams/{id}/channels/{id}/members/{id}":186,"PATCH /teams/{id}/channels/{id}/tabs/{id}":180,"PATCH /teams/{id}/members/{id}":252,"PATCH /teams/{id}/tags/{id}":666,"PATCH /teamwork/teamsappsettings":661,"PATCH /teamwork/workforceintegrations/{id}":753,"PATCH /tenantrelationships/delegatedadminrelationships/{id}":263,"PATCH /tenantrelationships/delegatedadminrelationships/{id}/accessassignments/{id}":263,"PATCH /tenantrelationships/managedtenants/tenantscustomizedinformation/{id}":944,"PATCH /tenantrelationships/managedtenants/tenanttags/{id}":944,"PATCH /tenantrelationships/multitenantorganization":464,"PATCH /tenantrelationships/multitenantorganization/joinrequest":464,"PATCH /tenantrelationships/multitenantorganization/tenants/{id}":464,"PATCH /termstore":686,"PATCH /termstore/sets/{id}":686,"PATCH /termstore/sets/{id}/terms/{id}":686,"PATCH /trustframework/keysets/{id}/keys_v2/{id}":1057,"PATCH /users/agentuser/{id}":44,"PATCH /users/{id}":723,"PATCH /users/{id}/authentication/emailmethods/{id}":327,"PATCH /users/{id}/authentication/phonemethods/{id}":503,"PATCH /users/{id}/authentication/qrcodepinmethod/pin":557,"PATCH /users/{id}/authentication/qrcodepinmethod/pin/updatepin":265,"PATCH /users/{id}/authentication/qrcodepinmethod/standardqrcode":557,"PATCH /users/{id}/authentication/qrcodepinmethod/temporaryqrcode":557,"PATCH /users/{id}/authentication/requirements":800,"PATCH /users/{id}/authentication/signinpreferences":800,"PATCH /users/{id}/calendar/events/{id}":143,"PATCH /users/{id}/calendargroups/{id}":143,"PATCH /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}":143,"PATCH /users/{id}/calendars/{id}/events/{id}":143,"PATCH /users/{id}/cloudlicensing/assignments/{id}":828,"PATCH /users/{id}/contactfolders/{id}":241,"PATCH /users/{id}/contactfolders/{id}/childfolders/{id}/contacts/{id}":241,"PATCH /users/{id}/contactfolders/{id}/contacts/{id}":241,"PATCH /users/{id}/contactfolders/{id}/contacts/{id}/photo/$value":554,"PATCH /users/{id}/contacts/{id}":241,"PATCH /users/{id}/contacts/{id}/photo/$value":554,"PATCH /users/{id}/distributionlists/{id}":241,"PATCH /users/{id}/drive/items/{id}":296,"PATCH /users/{id}/drive/items/{id}/permissions/{id}":296,"PATCH /users/{id}/events/{id}":143,"PATCH /users/{id}/inferenceclassification/overrides/{id}":343,"PATCH /users/{id}/mailboxsettings":458,"PATCH /users/{id}/mailfolders/inbox/messagerules/{id}":458,"PATCH /users/{id}/mailfolders/{id}":343,"PATCH /users/{id}/mailfolders/{id}/messages/{id}":343,"PATCH /users/{id}/mailfolders/{id}/userconfigurations/{id}":938,"PATCH /users/{id}/messages/{id}":343,"PATCH /users/{id}/mobileappintentandstates/{id}":429,"PATCH /users/{id}/mobileapptroubleshootingevents/{id}":429,"PATCH /users/{id}/notes/{id}":468,"PATCH /users/{id}/onenote/pages/{id}/content":491,"PATCH /users/{id}/onlinemeetings/{id}":74,"PATCH /users/{id}/onlinemeetings/{id}/virtualappointment":74,"PATCH /users/{id}/outlook/mastercategories/{id}":458,"PATCH /users/{id}/outlook/taskfolders/{id}":222,"PATCH /users/{id}/outlook/taskgroups/{id}":222,"PATCH /users/{id}/outlook/taskgroups/{id}/taskfolders/{id}":222,"PATCH /users/{id}/outlook/tasks/{id}":222,"PATCH /users/{id}/profile/account/{id}":732,"PATCH /users/{id}/profile/addresses/{id}":732,"PATCH /users/{id}/profile/anniversaries/{id}":732,"PATCH /users/{id}/profile/awards/{id}":732,"PATCH /users/{id}/profile/certifications/{id}":732,"PATCH /users/{id}/profile/educationalactivities/{id}":732,"PATCH /users/{id}/profile/emails/{id}":732,"PATCH /users/{id}/profile/interests/{id}":732,"PATCH /users/{id}/profile/languages/{id}":732,"PATCH /users/{id}/profile/names/{id}":732,"PATCH /users/{id}/profile/notes/{id}":982,"PATCH /users/{id}/profile/patents/{id}":732,"PATCH /users/{id}/profile/phones/{id}":732,"PATCH /users/{id}/profile/positions/{id}":732,"PATCH /users/{id}/profile/projects/{id}":732,"PATCH /users/{id}/profile/publications/{id}":732,"PATCH /users/{id}/profile/skills/{id}":732,"PATCH /users/{id}/profile/webaccounts/{id}":732,"PATCH /users/{id}/profile/websites/{id}":732,"PATCH /users/{id}/responsibilities/{id}":982,"PATCH /users/{id}/settings":732,"PATCH /users/{id}/settings/iteminsights":726,"PATCH /users/{id}/settings/regionalandlanguagesettings":998,"PATCH /users/{id}/settings/workhoursandlocations":758,"PATCH /users/{id}/tasks/alltasks/{id}":222,"PATCH /users/{id}/tasks/lists/{id}":222,"PATCH /users/{id}/tasks/lists/{id}/tasks/{id}":222,"PATCH /users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems/{id}":222,"PATCH /users/{id}/tasks/lists/{id}/tasks/{id}/linkedresources/{id}":807,"PATCH /users/{id}/teamwork/sections/{id}":1050,"PATCH /users/{id}/todo/lists/{id}":222,"PATCH /users/{id}/todo/lists/{id}/tasks/{id}":222,"PATCH /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}":222,"PATCH /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}":222,"PATCH /workplace/sensordevices/{id}":1083,"POST /accessreviews":763,"POST /accessreviews/{id}/applydecisions":763,"POST /accessreviews/{id}/resetdecisions":763,"POST /accessreviews/{id}/reviewers":763,"POST /accessreviews/{id}/sendreminder":763,"POST /accessreviews/{id}/stop":763,"POST /admin/cloudlicensing/allotments/{id}/assignments":824,"POST /admin/cloudlicensing/assignments":824,"POST /admin/configurationmanagement/configurationmonitors":239,"POST /admin/configurationmanagement/configurationsnapshots/createsnapshot":239,"POST /admin/edge/internetexplorermode/sitelists":140,"POST /admin/edge/internetexplorermode/sitelists/{id}/publish":140,"POST /admin/edge/internetexplorermode/sitelists/{id}/sharedcookies":140,"POST /admin/edge/internetexplorermode/sitelists/{id}/sites":140,"POST /admin/exchange/mailboxes/{id}/createimportsession":449,"POST /admin/exchange/mailboxes/{id}/exportitems":451,"POST /admin/exchange/mailboxes/{id}/folders":450,"POST /admin/exchange/mailboxes/{id}/folders/inbox/childfolders":450,"POST /admin/people/profilecardproperties":499,"POST /admin/people/profilepropertysettings":413,"POST /admin/people/profilesources":413,"POST /admin/reportsettings/sharepoint/disableapiusagereport":1030,"POST /admin/reportsettings/sharepoint/enableapiusagereport":1030,"POST /admin/serviceannouncement/messages/archive":616,"POST /admin/serviceannouncement/messages/favorite":616,"POST /admin/serviceannouncement/messages/markread":616,"POST /admin/serviceannouncement/messages/markunread":616,"POST /admin/serviceannouncement/messages/unarchive":616,"POST /admin/serviceannouncement/messages/unfavorite":616,"POST /admin/teams/policy/userassignments/assign":657,"POST /admin/teams/policy/userassignments/unassign":657,"POST /admin/teams/telephonenumbermanagement/numberassignments/assignnumber":654,"POST /admin/teams/telephonenumbermanagement/numberassignments/unassignnumber":654,"POST /admin/teams/telephonenumbermanagement/numberassignments/updatenumber":654,"POST /admin/windows/updates/deploymentaudiences":781,"POST /admin/windows/updates/deploymentaudiences/{id}/updateaudience":781,"POST /admin/windows/updates/deployments":781,"POST /admin/windows/updates/deployments/{id}/audience/updateaudiencebyid":781,"POST /admin/windows/updates/policies":781,"POST /admin/windows/updates/policies/{id}/approvals":781,"POST /admin/windows/updates/policies/{id}/rings":781,"POST /admin/windows/updates/resourceconnections":781,"POST /admin/windows/updates/updatableassets":781,"POST /admin/windows/updates/updatableassets/enrollassets":781,"POST /admin/windows/updates/updatableassets/enrollassetsbyid":781,"POST /admin/windows/updates/updatableassets/unenrollassets":781,"POST /admin/windows/updates/updatableassets/unenrollassetsbyid":781,"POST /admin/windows/updates/updatableassets/{id}/addmembers":781,"POST /admin/windows/updates/updatableassets/{id}/addmembersbyid":781,"POST /admin/windows/updates/updatableassets/{id}/removemembers":781,"POST /admin/windows/updates/updatableassets/{id}/removemembersbyid":781,"POST /admin/windows/updates/updatepolicies":781,"POST /admin/windows/updates/updatepolicies/{id}/compliancechanges":781,"POST /administrativeunits":15,"POST /administrativeunits/{id}/members":19,"POST /administrativeunits/{id}/members/$ref":19,"POST /administrativeunits/{id}/scopedrolemembers":16,"POST /agentregistry/agentcollections":791,"POST /agentregistry/agentinstances":790,"POST /agreements/{id}/files":57,"POST /app/calls":73,"POST /app/calls/{id}/addlargegalleryview":148,"POST /app/calls/{id}/answer":149,"POST /app/calls/{id}/audioroutinggroups":83,"POST /app/calls/{id}/cancelmediaprocessing":150,"POST /app/calls/{id}/changescreensharingrole":151,"POST /app/calls/{id}/mute":150,"POST /app/calls/{id}/participants/invite":493,"POST /app/calls/{id}/participants/muteall":149,"POST /app/calls/{id}/participants/{id}/mute":149,"POST /app/calls/{id}/participants/{id}/reportsyntheticmedia":974,"POST /app/calls/{id}/playprompt":150,"POST /app/calls/{id}/recordresponse":151,"POST /app/calls/{id}/redirect":153,"POST /app/calls/{id}/senddtmftones":150,"POST /app/calls/{id}/subscribetotone":151,"POST /app/calls/{id}/transfer":153,"POST /app/calls/{id}/unmute":150,"POST /app/calls/{id}/updaterecordingstatus":154,"POST /appcatalogs/teamsapps":658,"POST /appcatalogs/teamsapps/{id}/appdefinitions":658,"POST /applications":72,"POST /applications(appid='{id}')/addkey":67,"POST /applications(appid='{id}')/addpassword":67,"POST /applications(appid='{id}')/extensionproperties":67,"POST /applications(appid='{id}')/federatedidentitycredentials":68,"POST /applications(appid='{id}')/removekey":67,"POST /applications(appid='{id}')/removepassword":67,"POST /applications(appid='{id}')/setverifiedpublisher":35,"POST /applications(appid='{id}')/unsetverifiedpublisher":35,"POST /applications/agentidentityblueprint":34,"POST /applications/{id}/addkey":67,"POST /applications/{id}/addpassword":67,"POST /applications/{id}/agentidentityblueprint/addkey":29,"POST /applications/{id}/agentidentityblueprint/addpassword":29,"POST /applications/{id}/agentidentityblueprint/federatedidentitycredentials":68,"POST /applications/{id}/agentidentityblueprint/inheritablepermissions":34,"POST /applications/{id}/agentidentityblueprint/owners/$ref":30,"POST /applications/{id}/agentidentityblueprint/removekey":29,"POST /applications/{id}/agentidentityblueprint/removepassword":29,"POST /applications/{id}/agentidentityblueprint/unsetverifiedpublisher":31,"POST /applications/{id}/extensionproperties":67,"POST /applications/{id}/federatedidentitycredentials":68,"POST /applications/{id}/onpremisespublishing/segmentsconfiguration/ipsegmentconfiguration/applicationsegments":935,"POST /applications/{id}/removekey":67,"POST /applications/{id}/removepassword":67,"POST /applications/{id}/setverifiedpublisher":35,"POST /applications/{id}/synchronization/acquireaccesstoken":634,"POST /applications/{id}/unsetverifiedpublisher":35,"POST /applicationtemplates/{id}/instantiate":67,"POST /auditlogs/signins/confirmcompromised":622,"POST /auditlogs/signins/confirmsafe":622,"POST /auditlogs/signins/dismiss":622,"POST /chats":214,"POST /chats/{id}/completemigration":164,"POST /chats/{id}/hideforuser":199,"POST /chats/{id}/installedapps":209,"POST /chats/{id}/installedapps/{id}/upgrade":209,"POST /chats/{id}/markchatreadforuser":199,"POST /chats/{id}/markchatunreadforuser":199,"POST /chats/{id}/members":210,"POST /chats/{id}/messages":211,"POST /chats/{id}/messages/forwardtochat":218,"POST /chats/{id}/messages/replywithquote":218,"POST /chats/{id}/messages/{id}/setreaction":219,"POST /chats/{id}/messages/{id}/unsetreaction":219,"POST /chats/{id}/pinnedmessages":212,"POST /chats/{id}/removeallaccessforuser":215,"POST /chats/{id}/sendactivitynotification":216,"POST /chats/{id}/startmigration":164,"POST /chats/{id}/tabs":213,"POST /chats/{id}/unhideforuser":199,"POST /communications/calls":73,"POST /communications/calls/logteleconferencedevicequality":151,"POST /communications/calls/{id}/addlargegalleryview":148,"POST /communications/calls/{id}/answer":149,"POST /communications/calls/{id}/audioroutinggroups":83,"POST /communications/calls/{id}/cancelmediaprocessing":150,"POST /communications/calls/{id}/changescreensharingrole":151,"POST /communications/calls/{id}/keepalive":150,"POST /communications/calls/{id}/mute":150,"POST /communications/calls/{id}/participants/invite":493,"POST /communications/calls/{id}/participants/muteall":149,"POST /communications/calls/{id}/participants/{id}/mute":149,"POST /communications/calls/{id}/participants/{id}/reportsyntheticmedia":974,"POST /communications/calls/{id}/participants/{id}/startholdmusic":494,"POST /communications/calls/{id}/participants/{id}/stopholdmusic":494,"POST /communications/calls/{id}/playprompt":150,"POST /communications/calls/{id}/recordresponse":151,"POST /communications/calls/{id}/redirect":153,"POST /communications/calls/{id}/senddtmftones":150,"POST /communications/calls/{id}/startrecording":814,"POST /communications/calls/{id}/starttranscription":814,"POST /communications/calls/{id}/stoprecording":814,"POST /communications/calls/{id}/stoptranscription":814,"POST /communications/calls/{id}/subscribetotone":151,"POST /communications/calls/{id}/transfer":153,"POST /communications/calls/{id}/unmute":150,"POST /communications/calls/{id}/updaterecordingstatus":154,"POST /communications/getpresencesbyuserid":226,"POST /compliance/ediscovery/cases":591,"POST /compliance/ediscovery/cases/{id}/close":591,"POST /compliance/ediscovery/cases/{id}/custodians":591,"POST /compliance/ediscovery/cases/{id}/custodians/{id}/activate":591,"POST /compliance/ediscovery/cases/{id}/custodians/{id}/release":591,"POST /compliance/ediscovery/cases/{id}/custodians/{id}/sitesources":591,"POST /compliance/ediscovery/cases/{id}/custodians/{id}/unifiedgroupsources":865,"POST /compliance/ediscovery/cases/{id}/custodians/{id}/usersources":591,"POST /compliance/ediscovery/cases/{id}/legalholds":865,"POST /compliance/ediscovery/cases/{id}/legalholds/{id}/sitesources":591,"POST /compliance/ediscovery/cases/{id}/legalholds/{id}/usersources":591,"POST /compliance/ediscovery/cases/{id}/noncustodialdatasources":591,"POST /compliance/ediscovery/cases/{id}/noncustodialdatasources/{id}/release":591,"POST /compliance/ediscovery/cases/{id}/reopen":591,"POST /compliance/ediscovery/cases/{id}/reviewsets":591,"POST /compliance/ediscovery/cases/{id}/reviewsets/{id}/addtoreviewset":591,"POST /compliance/ediscovery/cases/{id}/reviewsets/{id}/export":591,"POST /compliance/ediscovery/cases/{id}/reviewsets/{id}/queries":591,"POST /compliance/ediscovery/cases/{id}/reviewsets/{id}/queries/{id}/applytags":591,"POST /compliance/ediscovery/cases/{id}/settings/resettodefault":590,"POST /compliance/ediscovery/cases/{id}/sourcecollections":591,"POST /compliance/ediscovery/cases/{id}/sourcecollections/{id}/additionalsources":591,"POST /compliance/ediscovery/cases/{id}/sourcecollections/{id}/custodiansources/$ref":591,"POST /compliance/ediscovery/cases/{id}/sourcecollections/{id}/estimatestatistics":591,"POST /compliance/ediscovery/cases/{id}/sourcecollections/{id}/noncustodialsources/$ref":590,"POST /compliance/ediscovery/cases/{id}/sourcecollections/{id}/purgedata":590,"POST /compliance/ediscovery/cases/{id}/tags":591,"POST /contacts/{id}/checkmembergroups":861,"POST /contacts/{id}/checkmemberobjects":277,"POST /contacts/{id}/getmembergroups":279,"POST /contacts/{id}/getmemberobjects":277,"POST /contacts/{id}/retryserviceprovisioning":488,"POST /deviceappmanagement/androidmanagedappprotections":415,"POST /deviceappmanagement/androidmanagedappprotections/haspayloadlinks":417,"POST /deviceappmanagement/androidmanagedappprotections/{id}/apps":418,"POST /deviceappmanagement/defaultmanagedappprotections":415,"POST /deviceappmanagement/defaultmanagedappprotections/{id}/apps":418,"POST /deviceappmanagement/deviceappmanagementtasks":415,"POST /deviceappmanagement/deviceappmanagementtasks/{id}/updatestatus":415,"POST /deviceappmanagement/enterprisecodesigningcertificates":419,"POST /deviceappmanagement/ioslobappprovisioningconfigurations":415,"POST /deviceappmanagement/ioslobappprovisioningconfigurations/haspayloadlinks":417,"POST /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assign":415,"POST /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments":415,"POST /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/devicestatuses":418,"POST /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/groupassignments":415,"POST /deviceappmanagement/ioslobappprovisioningconfigurations/{id}/userstatuses":418,"POST /deviceappmanagement/iosmanagedappprotections":415,"POST /deviceappmanagement/iosmanagedappprotections/haspayloadlinks":417,"POST /deviceappmanagement/iosmanagedappprotections/{id}/apps":418,"POST /deviceappmanagement/managedapppolicies/{id}/assign":418,"POST /deviceappmanagement/managedapppolicies/{id}/targetapps":415,"POST /deviceappmanagement/managedappregistrations":418,"POST /deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}/assign":418,"POST /deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}/targetapps":415,"POST /deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}/assign":418,"POST /deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}/targetapps":415,"POST /deviceappmanagement/managedappregistrations/{id}/managedapplogcollectionrequests":415,"POST /deviceappmanagement/managedappregistrations/{id}/operations":418,"POST /deviceappmanagement/managedebookcategories":415,"POST /deviceappmanagement/managedebooks":415,"POST /deviceappmanagement/managedebooks/{id}/assign":415,"POST /deviceappmanagement/managedebooks/{id}/assignments":415,"POST /deviceappmanagement/managedebooks/{id}/categories":415,"POST /deviceappmanagement/managedebooks/{id}/devicestates":415,"POST /deviceappmanagement/managedebooks/{id}/userstatesummary":415,"POST /deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates":415,"POST /deviceappmanagement/mdmwindowsinformationprotectionpolicies":415,"POST /deviceappmanagement/mdmwindowsinformationprotectionpolicies/haspayloadlinks":417,"POST /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles":415,"POST /deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles":415,"POST /deviceappmanagement/mobileappcategories":415,"POST /deviceappmanagement/mobileappconfigurations":415,"POST /deviceappmanagement/mobileappconfigurations/{id}/assign":415,"POST /deviceappmanagement/mobileappconfigurations/{id}/assignments":418,"POST /deviceappmanagement/mobileappconfigurations/{id}/devicestatuses":418,"POST /deviceappmanagement/mobileappconfigurations/{id}/userstatuses":418,"POST /deviceappmanagement/mobileapprelationships":418,"POST /deviceappmanagement/mobileapps":415,"POST /deviceappmanagement/mobileapps/createcatalogapp":415,"POST /deviceappmanagement/mobileapps/haspayloadlinks":417,"POST /deviceappmanagement/mobileapps/validatexml":415,"POST /deviceappmanagement/mobileapps/{id}/assign":415,"POST /deviceappmanagement/mobileapps/{id}/assignments":415,"POST /deviceappmanagement/mobileapps/{id}/categories":415,"POST /deviceappmanagement/mobileapps/{id}/configureassignments":415,"POST /deviceappmanagement/mobileapps/{id}/contentversions":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}/commit":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}/renewupload":418,"POST /deviceappmanagement/mobileapps/{id}/contentversions/{id}/scripts":418,"POST /deviceappmanagement/mobileapps/{id}/devicestatuses":415,"POST /deviceappmanagement/mobileapps/{id}/devicestatuses/{id}/app/assign":415,"POST /deviceappmanagement/mobileapps/{id}/devicestatuses/{id}/app/updaterelationships":415,"POST /deviceappmanagement/mobileapps/{id}/enableapplicablearchitectures":421,"POST /deviceappmanagement/mobileapps/{id}/iosvppapp/assignedlicenses":418,"POST /deviceappmanagement/mobileapps/{id}/macosvppapp/assignedlicenses":418,"POST /deviceappmanagement/mobileapps/{id}/managedmobilelobapp/contentversions":418,"POST /deviceappmanagement/mobileapps/{id}/microsoftstoreforbusinessapp/containedapps":418,"POST /deviceappmanagement/mobileapps/{id}/mobilelobapp/contentversions":418,"POST /deviceappmanagement/mobileapps/{id}/relationships":418,"POST /deviceappmanagement/mobileapps/{id}/revokealllicenses":418,"POST /deviceappmanagement/mobileapps/{id}/revokedevicelicense":418,"POST /deviceappmanagement/mobileapps/{id}/revokeuserlicense":418,"POST /deviceappmanagement/mobileapps/{id}/targetassignments":418,"POST /deviceappmanagement/mobileapps/{id}/updaterelationships":415,"POST /deviceappmanagement/mobileapps/{id}/userstatuses":415,"POST /deviceappmanagement/mobileapps/{id}/userstatuses/{id}/app/assign":415,"POST /deviceappmanagement/mobileapps/{id}/userstatuses/{id}/app/updaterelationships":415,"POST /deviceappmanagement/mobileapps/{id}/userstatuses/{id}/devicestatuses":415,"POST /deviceappmanagement/mobileapps/{id}/windowsuniversalappx/committedcontainedapps":418,"POST /deviceappmanagement/policysets":419,"POST /deviceappmanagement/policysets/getpolicysets":420,"POST /deviceappmanagement/policysets/{id}/assignments":419,"POST /deviceappmanagement/policysets/{id}/items":419,"POST /deviceappmanagement/policysets/{id}/update":419,"POST /deviceappmanagement/sideloadingkeys":427,"POST /deviceappmanagement/syncmicrosoftstoreforbusinessapps":418,"POST /deviceappmanagement/targetedmanagedappconfigurations":415,"POST /deviceappmanagement/targetedmanagedappconfigurations/haspayloadlinks":417,"POST /deviceappmanagement/targetedmanagedappconfigurations/{id}/apps":418,"POST /deviceappmanagement/targetedmanagedappconfigurations/{id}/assign":418,"POST /deviceappmanagement/targetedmanagedappconfigurations/{id}/changesettings":421,"POST /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings":418,"POST /deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions":418,"POST /deviceappmanagement/targetedmanagedappconfigurations/{id}/targetapps":418,"POST /deviceappmanagement/vpptokens":431,"POST /deviceappmanagement/vpptokens/synclicensecounts":431,"POST /deviceappmanagement/vpptokens/{id}/revokelicenses":431,"POST /deviceappmanagement/vpptokens/{id}/synclicenses":431,"POST /deviceappmanagement/wdacsupplementalpolicies":415,"POST /deviceappmanagement/wdacsupplementalpolicies/{id}/assign":415,"POST /deviceappmanagement/wdacsupplementalpolicies/{id}/assignments":415,"POST /deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses":415,"POST /deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}/policy/assign":415,"POST /deviceappmanagement/windowsinformationprotectiondeviceregistrations":418,"POST /deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}/wipe":415,"POST /deviceappmanagement/windowsinformationprotectionpolicies":415,"POST /deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles":415,"POST /deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles":415,"POST /deviceappmanagement/windowsinformationprotectionwipeactions":418,"POST /deviceappmanagement/windowsmanagedappprotections":415,"POST /deviceappmanagement/windowsmanagedappprotections/{id}/apps":418,"POST /deviceappmanagement/windowsmanagedappprotections/{id}/assign":418,"POST /deviceappmanagement/windowsmanagedappprotections/{id}/targetapps":418,"POST /deviceappmanagement/windowsmanagementapp/healthstates":429,"POST /deviceappmanagement/windowsmanagementapp/setasmanagedinstaller":417,"POST /devicemanagement/advancedthreatprotectiononboardingstatesummary/advancedthreatprotectiononboardingdevicesettingstates":419,"POST /devicemanagement/androidappconfigurationschema/retrieveschema":420,"POST /devicemanagement/androiddeviceownerenrollmentprofiles":419,"POST /devicemanagement/androiddeviceownerenrollmentprofiles/{id}/clearenrollmenttimedevicemembershiptarget":917,"POST /devicemanagement/androiddeviceownerenrollmentprofiles/{id}/createtoken":419,"POST /devicemanagement/androiddeviceownerenrollmentprofiles/{id}/retrieveenrollmenttimedevicemembershiptarget":917,"POST /devicemanagement/androiddeviceownerenrollmentprofiles/{id}/revoketoken":419,"POST /devicemanagement/androiddeviceownerenrollmentprofiles/{id}/setenrollmenttimedevicemembershiptarget":419,"POST /devicemanagement/androidforworkappconfigurationschemas":419,"POST /devicemanagement/androidforworkenrollmentprofiles":419,"POST /devicemanagement/androidforworkenrollmentprofiles/{id}/createtoken":419,"POST /devicemanagement/androidforworkenrollmentprofiles/{id}/revoketoken":419,"POST /devicemanagement/androidforworksettings/completesignup":419,"POST /devicemanagement/androidforworksettings/requestsignupurl":419,"POST /devicemanagement/androidforworksettings/syncapps":419,"POST /devicemanagement/androidforworksettings/unbind":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/addapps":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/approveapps":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/completesignup":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/creategoogleplaywebtoken":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/requestenterpriseupgradeurl":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/requestsignupurl":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/setandroiddeviceownerfullymanagedenrollmentstate":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/setstorelayout":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/syncapps":419,"POST /devicemanagement/androidmanagedstoreaccountenterprisesettings/unbind":419,"POST /devicemanagement/androidmanagedstoreappconfigurationschemas":419,"POST /devicemanagement/applepushnotificationcertificate/generateapplepushnotificationcertificatesigningrequest":422,"POST /devicemanagement/appleuserinitiatedenrollmentprofiles":422,"POST /devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/assignments":422,"POST /devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/setpriority":422,"POST /devicemanagement/assignmentfilters":419,"POST /devicemanagement/assignmentfilters/enable":419,"POST /devicemanagement/assignmentfilters/validatefilter":419,"POST /devicemanagement/auditevents":415,"POST /devicemanagement/auditpolicies/{id}/settings":419,"POST /devicemanagement/autopilotevents":429,"POST /devicemanagement/autopilotevents/{id}/policystatusdetails":424,"POST /devicemanagement/carttoclassassociations":422,"POST /devicemanagement/categories":419,"POST /devicemanagement/categories/{id}/settingdefinitions":419,"POST /devicemanagement/certificateconnectordetails":419,"POST /devicemanagement/certificateconnectordetails/{id}/gethealthmetrics":420,"POST /devicemanagement/certificateconnectordetails/{id}/gethealthmetrictimeseries":420,"POST /devicemanagement/chromeosonboardingsettings":419,"POST /devicemanagement/chromeosonboardingsettings/connect":419,"POST /devicemanagement/chromeosonboardingsettings/disconnect":419,"POST /devicemanagement/cloudcertificationauthority":419,"POST /devicemanagement/cloudcertificationauthority/{id}/changecloudcertificationauthoritystatus":917,"POST /devicemanagement/cloudcertificationauthority/{id}/cloudcertificationauthorityleafcertificate":419,"POST /devicemanagement/cloudcertificationauthority/{id}/getallcloudcertificationauthority":420,"POST /devicemanagement/cloudcertificationauthority/{id}/getallcloudcertificationauthorityleafcertificates":420,"POST /devicemanagement/cloudcertificationauthority/{id}/getcloudcertificationauthority":420,"POST /devicemanagement/cloudcertificationauthority/{id}/patchcloudcertificationauthority":917,"POST /devicemanagement/cloudcertificationauthority/{id}/postcloudcertificationauthority":917,"POST /devicemanagement/cloudcertificationauthority/{id}/revokecloudcertificationauthoritycertificate":917,"POST /devicemanagement/cloudcertificationauthority/{id}/revokeleafcertificate":917,"POST /devicemanagement/cloudcertificationauthority/{id}/revokeleafcertificatebyserialnumber":917,"POST /devicemanagement/cloudcertificationauthority/{id}/searchcloudcertificationauthorityleafcertificatebyserialnumber":917,"POST /devicemanagement/cloudcertificationauthority/{id}/uploadexternallysignedcertificationauthoritycertificate":917,"POST /devicemanagement/cloudcertificationauthorityleafcertificate":419,"POST /devicemanagement/cloudpcconnectivityissues":429,"POST /devicemanagement/comanageddevices":429,"POST /devicemanagement/comanageddevices/downloadappdiagnostics":425,"POST /devicemanagement/comanageddevices/downloadpowerliftappdiagnostic":425,"POST /devicemanagement/comanageddevices/executeaction":426,"POST /devicemanagement/comanageddevices/movedevicestoou":426,"POST /devicemanagement/comanageddevices/{id}/activatedeviceesim":426,"POST /devicemanagement/comanageddevices/{id}/bypassactivationlock":424,"POST /devicemanagement/comanageddevices/{id}/changeassignments":426,"POST /devicemanagement/comanageddevices/{id}/cleanwindowsdevice":426,"POST /devicemanagement/comanageddevices/{id}/createdevicelogcollectionrequest":424,"POST /devicemanagement/comanageddevices/{id}/deleteuserfromsharedappledevice":426,"POST /devicemanagement/comanageddevices/{id}/deprovision":426,"POST /devicemanagement/comanageddevices/{id}/disable":426,"POST /devicemanagement/comanageddevices/{id}/disablelostmode":426,"POST /devicemanagement/comanageddevices/{id}/enablelostmode":426,"POST /devicemanagement/comanageddevices/{id}/enrollnowaction":426,"POST /devicemanagement/comanageddevices/{id}/initiatedeviceattestation":426,"POST /devicemanagement/comanageddevices/{id}/initiatemobiledevicemanagementkeyrecovery":426,"POST /devicemanagement/comanageddevices/{id}/initiateondemandproactiveremediation":426,"POST /devicemanagement/comanageddevices/{id}/locatedevice":424,"POST /devicemanagement/comanageddevices/{id}/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/comanageddevices/{id}/pauseconfigurationrefresh":426,"POST /devicemanagement/comanageddevices/{id}/playlostmodesound":426,"POST /devicemanagement/comanageddevices/{id}/rebootnow":426,"POST /devicemanagement/comanageddevices/{id}/recoverpasscode":426,"POST /devicemanagement/comanageddevices/{id}/reenable":426,"POST /devicemanagement/comanageddevices/{id}/remotelock":426,"POST /devicemanagement/comanageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement":426,"POST /devicemanagement/comanageddevices/{id}/requestremoteassistance":424,"POST /devicemanagement/comanageddevices/{id}/resetpasscode":426,"POST /devicemanagement/comanageddevices/{id}/restoremanagedhomescreen":426,"POST /devicemanagement/comanageddevices/{id}/retire":426,"POST /devicemanagement/comanageddevices/{id}/revokeapplevpplicenses":426,"POST /devicemanagement/comanageddevices/{id}/rotatebitlockerkeys":424,"POST /devicemanagement/comanageddevices/{id}/rotatefilevaultkey":426,"POST /devicemanagement/comanageddevices/{id}/rotatelocaladminpassword":426,"POST /devicemanagement/comanageddevices/{id}/rotaterecoverylockpasscode":424,"POST /devicemanagement/comanageddevices/{id}/sendcustomnotificationtocompanyportal":422,"POST /devicemanagement/comanageddevices/{id}/setdevicename":426,"POST /devicemanagement/comanageddevices/{id}/shutdown":426,"POST /devicemanagement/comanageddevices/{id}/suspendmanagedhomescreen":426,"POST /devicemanagement/comanageddevices/{id}/syncdevice":426,"POST /devicemanagement/comanageddevices/{id}/triggerconfigurationmanageraction":426,"POST /devicemanagement/comanageddevices/{id}/updatewindowsdeviceaccount":426,"POST /devicemanagement/comanageddevices/{id}/windowsdefenderscan":426,"POST /devicemanagement/comanageddevices/{id}/windowsdefenderupdatesignatures":426,"POST /devicemanagement/comanageddevices/{id}/wipe":426,"POST /devicemanagement/comanagementeligibledevices":429,"POST /devicemanagement/compliancecategories":419,"POST /devicemanagement/compliancemanagementpartners":427,"POST /devicemanagement/compliancepolicies":419,"POST /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule":419,"POST /devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations":419,"POST /devicemanagement/compliancepolicies/{id}/setscheduledactions":419,"POST /devicemanagement/compliancepolicies/{id}/settings":419,"POST /devicemanagement/compliancesettings":419,"POST /devicemanagement/configmanagercollections":415,"POST /devicemanagement/configurationcategories":419,"POST /devicemanagement/configurationpolicies":921,"POST /devicemanagement/configurationpolicies/{id}/clearenrollmenttimedevicemembershiptarget":917,"POST /devicemanagement/configurationpolicies/{id}/createcopy":921,"POST /devicemanagement/configurationpolicies/{id}/reorder":921,"POST /devicemanagement/configurationpolicies/{id}/retrieveenrollmenttimedevicemembershiptarget":917,"POST /devicemanagement/configurationpolicies/{id}/setenrollmenttimedevicemembershiptarget":419,"POST /devicemanagement/configurationpolicies/{id}/settings":419,"POST /devicemanagement/configurationpolicies/{id}/settings/{id}/settingdefinitions":419,"POST /devicemanagement/configurationpolicytemplates":419,"POST /devicemanagement/configurationpolicytemplates/{id}/settingtemplates":419,"POST /devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}/settingdefinitions":419,"POST /devicemanagement/configurationsettings":419,"POST /devicemanagement/datasharingconsents":427,"POST /devicemanagement/datasharingconsents/{id}/consenttodatasharing":422,"POST /devicemanagement/deploymentplans":419,"POST /devicemanagement/deployments":419,"POST /devicemanagement/deployments/{id}/deployaction":917,"POST /devicemanagement/deployments/{id}/rings":419,"POST /devicemanagement/deployments/{id}/rings/{id}/assignmentconfigurations":419,"POST /devicemanagement/deponboardingsettings":422,"POST /devicemanagement/deponboardingsettings/{id}/enrollmentprofiles":422,"POST /devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}/setdefaultprofile":422,"POST /devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}/updatedeviceprofileassignment":422,"POST /devicemanagement/deponboardingsettings/{id}/generateencryptionpublickey":430,"POST /devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities":427,"POST /devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities/importappledeviceidentitylist":422,"POST /devicemanagement/deponboardingsettings/{id}/releaseappledevices":428,"POST /devicemanagement/deponboardingsettings/{id}/shareforschooldatasyncservice":427,"POST /devicemanagement/deponboardingsettings/{id}/syncwithappledeviceenrollmentprogram":427,"POST /devicemanagement/deponboardingsettings/{id}/unshareforschooldatasyncservice":427,"POST /devicemanagement/deponboardingsettings/{id}/uploaddeptoken":427,"POST /devicemanagement/derivedcredentials":422,"POST /devicemanagement/detectedapps":429,"POST /devicemanagement/devicecategories":424,"POST /devicemanagement/devicecompliancepolicies":419,"POST /devicemanagement/devicecompliancepolicies/getnoncompliantdevicestoretire":419,"POST /devicemanagement/devicecompliancepolicies/haspayloadlinks":420,"POST /devicemanagement/devicecompliancepolicies/refreshdevicecompliancereportsummarization":419,"POST /devicemanagement/devicecompliancepolicies/setscheduledretirestate":419,"POST /devicemanagement/devicecompliancepolicies/validatecompliancescript":419,"POST /devicemanagement/devicecompliancepolicies/{id}/assign":419,"POST /devicemanagement/devicecompliancepolicies/{id}/assignments":419,"POST /devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries":419,"POST /devicemanagement/devicecompliancepolicies/{id}/devicestatuses":419,"POST /devicemanagement/devicecompliancepolicies/{id}/scheduleactionsforrules":419,"POST /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule":419,"POST /devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations":419,"POST /devicemanagement/devicecompliancepolicies/{id}/userstatuses":419,"POST /devicemanagement/devicecompliancepolicysettingstatesummaries":419,"POST /devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates":419,"POST /devicemanagement/devicecompliancescripts":926,"POST /devicemanagement/devicecompliancescripts/{id}/assign":926,"POST /devicemanagement/devicecompliancescripts/{id}/assignments":420,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates":429,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/activatedeviceesim":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/bypassactivationlock":424,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/changeassignments":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/cleanwindowsdevice":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/createdevicelogcollectionrequest":424,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/deleteuserfromsharedappledevice":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/deprovision":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/disable":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/disablelostmode":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/enablelostmode":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/enrollnowaction":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/initiatedeviceattestation":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/initiatemobiledevicemanagementkeyrecovery":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/initiateondemandproactiveremediation":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/locatedevice":424,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/pauseconfigurationrefresh":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/playlostmodesound":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rebootnow":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/recoverpasscode":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/reenable":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/remotelock":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/removedevicefirmwareconfigurationinterfacemanagement":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/requestremoteassistance":424,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/resetpasscode":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/restoremanagedhomescreen":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/retire":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/revokeapplevpplicenses":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rotatebitlockerkeys":424,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rotatefilevaultkey":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rotatelocaladminpassword":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rotaterecoverylockpasscode":424,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/sendcustomnotificationtocompanyportal":422,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/setdevicename":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/shutdown":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/suspendmanagedhomescreen":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/syncdevice":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/triggerconfigurationmanageraction":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/updatewindowsdeviceaccount":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderscan":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderupdatesignatures":426,"POST /devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/wipe":426,"POST /devicemanagement/deviceconfigurationconflictsummary":419,"POST /devicemanagement/deviceconfigurationrestrictedappsviolations":419,"POST /devicemanagement/deviceconfigurations":419,"POST /devicemanagement/deviceconfigurations/gettargetedusersanddevices":419,"POST /devicemanagement/deviceconfigurations/haspayloadlinks":420,"POST /devicemanagement/deviceconfigurations/{id}/androiddeviceownerenterprisewificonfiguration/rootcertificatesforservervalidation":419,"POST /devicemanagement/deviceconfigurations/{id}/androiddeviceownerimportedpfxcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androiddeviceownerpkcscertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androiddeviceownerscepcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androidforworkimportedpfxcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androidforworkpkcscertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androidforworkscepcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androidimportedpfxcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androidpkcscertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androidscepcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androidworkprofilepkcscertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/androidworkprofilescepcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/aospdeviceownerpkcscertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/aospdeviceownerscepcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/assign":419,"POST /devicemanagement/deviceconfigurations/{id}/assignedaccessmultimodeprofiles":420,"POST /devicemanagement/deviceconfigurations/{id}/assignments":419,"POST /devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries":419,"POST /devicemanagement/deviceconfigurations/{id}/devicestatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/extendfeatureupdatespause":419,"POST /devicemanagement/deviceconfigurations/{id}/extendqualityupdatespause":419,"POST /devicemanagement/deviceconfigurations/{id}/groupassignments":419,"POST /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/assign":419,"POST /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/assignedaccessmultimodeprofiles":420,"POST /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/extendfeatureupdatespause":419,"POST /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/extendqualityupdatespause":419,"POST /devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/windowsprivacyaccesscontrols":419,"POST /devicemanagement/deviceconfigurations/{id}/iosenterprisewificonfiguration/rootcertificatesforservervalidation":419,"POST /devicemanagement/deviceconfigurations/{id}/iosimportedpfxcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/iospkcscertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/assignments":419,"POST /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicesettingstatesummaries":419,"POST /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/devicestatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/groupassignments":419,"POST /devicemanagement/deviceconfigurations/{id}/iosscepcertificateprofile/rootcertificate/userstatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/ioswirednetworkconfiguration/rootcertificatesforservervalidation":419,"POST /devicemanagement/deviceconfigurations/{id}/macosenterprisewificonfiguration/rootcertificatesforservervalidation":419,"POST /devicemanagement/deviceconfigurations/{id}/macosimportedpfxcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/macospkcscertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/assignments":419,"POST /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicesettingstatesummaries":419,"POST /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/devicestatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/groupassignments":419,"POST /devicemanagement/deviceconfigurations/{id}/macosscepcertificateprofile/rootcertificate/userstatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/macoswirednetworkconfiguration/rootcertificatesforservervalidation":419,"POST /devicemanagement/deviceconfigurations/{id}/rootcertificate/assignments":419,"POST /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicesettingstatesummaries":419,"POST /devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/rootcertificate/groupassignments":419,"POST /devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/userstatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/windows10generalconfiguration/privacyaccesscontrols":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/gettargetedusersanddevices":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/assign":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/assignedaccessmultimodeprofiles":420,"POST /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/extendfeatureupdatespause":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/extendqualityupdatespause":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/windowsprivacyaccesscontrols":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/assignments":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicesettingstatesummaries":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/devicestatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/groupassignments":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsphone81scepcertificateprofile/rootcertificate/userstatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsprivacyaccesscontrols":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/assignments":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/groupassignments":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10importedpfxcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows10pkcscertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windows81scepcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/windowsphone81importedpfxcertificateprofile/manageddevicecertificatestates":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/assignments":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicesettingstatesummaries":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/groupassignments":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatuses":419,"POST /devicemanagement/deviceconfigurations/{id}/windowswirednetworkconfiguration/rootcertificatesforservervalidation":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforclientvalidation":419,"POST /devicemanagement/deviceconfigurations/{id}/windowsztdnsconfiguration/rootcertificatesforservervalidation":419,"POST /devicemanagement/deviceconfigurationsallmanageddevicecertificatestates":419,"POST /devicemanagement/devicecustomattributeshellscripts":926,"POST /devicemanagement/devicecustomattributeshellscripts/{id}/assign":926,"POST /devicemanagement/devicecustomattributeshellscripts/{id}/assignments":429,"POST /devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates":429,"POST /devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments":429,"POST /devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates":429,"POST /devicemanagement/deviceenrollmentconfigurations":422,"POST /devicemanagement/deviceenrollmentconfigurations/createenrollmentnotificationconfiguration":422,"POST /devicemanagement/deviceenrollmentconfigurations/haspayloadlinks":423,"POST /devicemanagement/deviceenrollmentconfigurations/{id}/assign":427,"POST /devicemanagement/deviceenrollmentconfigurations/{id}/assignments":427,"POST /devicemanagement/deviceenrollmentconfigurations/{id}/setpriority":427,"POST /devicemanagement/devicehealthscripts":926,"POST /devicemanagement/devicehealthscripts/enableglobalscripts":926,"POST /devicemanagement/devicehealthscripts/{id}/assign":926,"POST /devicemanagement/devicehealthscripts/{id}/assignments":420,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates":420,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/activatedeviceesim":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/bypassactivationlock":424,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/changeassignments":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/cleanwindowsdevice":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/createdevicelogcollectionrequest":424,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/deleteuserfromsharedappledevice":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/deprovision":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/disable":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/disablelostmode":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/enablelostmode":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/enrollnowaction":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/initiatedeviceattestation":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/initiatemobiledevicemanagementkeyrecovery":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/initiateondemandproactiveremediation":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/locatedevice":424,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/pauseconfigurationrefresh":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/playlostmodesound":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rebootnow":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/recoverpasscode":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/reenable":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/remotelock":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/removedevicefirmwareconfigurationinterfacemanagement":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/requestremoteassistance":424,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/resetpasscode":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/restoremanagedhomescreen":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/retire":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/revokeapplevpplicenses":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rotatebitlockerkeys":424,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rotatefilevaultkey":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rotatelocaladminpassword":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rotaterecoverylockpasscode":424,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/sendcustomnotificationtocompanyportal":422,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/setdevicename":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/shutdown":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/suspendmanagedhomescreen":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/syncdevice":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/triggerconfigurationmanageraction":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/updatewindowsdeviceaccount":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderscan":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderupdatesignatures":426,"POST /devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/wipe":426,"POST /devicemanagement/devicehealthscripts/{id}/getglobalscripthighestavailableversion":927,"POST /devicemanagement/devicehealthscripts/{id}/updateglobalscript":926,"POST /devicemanagement/devicemanagementpartners":427,"POST /devicemanagement/devicemanagementpartners/{id}/terminate":428,"POST /devicemanagement/devicemanagementscripts":926,"POST /devicemanagement/devicemanagementscripts/haspayloadlinks":420,"POST /devicemanagement/devicemanagementscripts/{id}/assign":926,"POST /devicemanagement/devicemanagementscripts/{id}/assignments":429,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates":429,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/activatedeviceesim":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/bypassactivationlock":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/changeassignments":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/cleanwindowsdevice":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/createdevicelogcollectionrequest":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/deleteuserfromsharedappledevice":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/deprovision":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps":429,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices":429,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/downloadappdiagnostics":425,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/downloadpowerliftappdiagnostic":425,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/executeaction":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/movedevicestoou":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/activatedeviceesim":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/bypassactivationlock":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/changeassignments":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/cleanwindowsdevice":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/createdevicelogcollectionrequest":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/deleteuserfromsharedappledevice":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/deprovision":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/disable":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/disablelostmode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/enablelostmode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/enrollnowaction":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/initiatedeviceattestation":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/initiatemobiledevicemanagementkeyrecovery":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/initiateondemandproactiveremediation":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/locatedevice":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/pauseconfigurationrefresh":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/playlostmodesound":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rebootnow":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/recoverpasscode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/reenable":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/remotelock":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/requestremoteassistance":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/resetpasscode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/restoremanagedhomescreen":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/retire":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/revokeapplevpplicenses":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rotatebitlockerkeys":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rotatefilevaultkey":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rotatelocaladminpassword":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rotaterecoverylockpasscode":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/sendcustomnotificationtocompanyportal":422,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/setdevicename":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/shutdown":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/suspendmanagedhomescreen":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/syncdevice":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/triggerconfigurationmanageraction":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/updatewindowsdeviceaccount":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/windowsdefenderscan":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/windowsdefenderupdatesignatures":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/wipe":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicehealthscriptstates":420,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/disable":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/disablelostmode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/enablelostmode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/enrollnowaction":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/initiatedeviceattestation":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/initiatemobiledevicemanagementkeyrecovery":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/initiateondemandproactiveremediation":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/locatedevice":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests":429,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}/createdownloadurl":924,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}/downloaddevicelogs":928,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/pauseconfigurationrefresh":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/playlostmodesound":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rebootnow":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/recoverpasscode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/reenable":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/remotelock":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/removedevicefirmwareconfigurationinterfacemanagement":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/requestremoteassistance":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/resetpasscode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/restoremanagedhomescreen":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/retire":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/revokeapplevpplicenses":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rotatebitlockerkeys":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rotatefilevaultkey":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rotatelocaladminpassword":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rotaterecoverylockpasscode":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/sendcustomnotificationtocompanyportal":422,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/setdevicename":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/shutdown":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/suspendmanagedhomescreen":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/syncdevice":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/triggerconfigurationmanageraction":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/updatewindowsdeviceaccount":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users":429,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices":429,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/downloadappdiagnostics":425,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/downloadpowerliftappdiagnostic":425,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/executeaction":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/movedevicestoou":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/activatedeviceesim":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/bypassactivationlock":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/changeassignments":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/cleanwindowsdevice":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/createdevicelogcollectionrequest":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/deleteuserfromsharedappledevice":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/deprovision":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/disable":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/disablelostmode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/enablelostmode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/enrollnowaction":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/initiatedeviceattestation":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/initiatemobiledevicemanagementkeyrecovery":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/initiateondemandproactiveremediation":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/locatedevice":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/pauseconfigurationrefresh":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/playlostmodesound":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rebootnow":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/recoverpasscode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/reenable":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/remotelock":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/requestremoteassistance":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/resetpasscode":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/restoremanagedhomescreen":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/retire":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/revokeapplevpplicenses":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rotatebitlockerkeys":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rotatefilevaultkey":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rotatelocaladminpassword":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rotaterecoverylockpasscode":424,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/sendcustomnotificationtocompanyportal":422,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/setdevicename":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/shutdown":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/suspendmanagedhomescreen":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/syncdevice":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/triggerconfigurationmanageraction":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/updatewindowsdeviceaccount":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/windowsdefenderscan":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/windowsdefenderupdatesignatures":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/wipe":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/removealldevicesfrommanagement":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderscan":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderupdatesignatures":426,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate":429,"POST /devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/wipe":426,"POST /devicemanagement/devicemanagementscripts/{id}/groupassignments":429,"POST /devicemanagement/devicemanagementscripts/{id}/userrunstates":429,"POST /devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates":429,"POST /devicemanagement/deviceshellscripts":926,"POST /devicemanagement/deviceshellscripts/{id}/assign":926,"POST /devicemanagement/deviceshellscripts/{id}/assignments":429,"POST /devicemanagement/deviceshellscripts/{id}/devicerunstates":429,"POST /devicemanagement/deviceshellscripts/{id}/groupassignments":429,"POST /devicemanagement/deviceshellscripts/{id}/userrunstates":429,"POST /devicemanagement/domainjoinconnectors":419,"POST /devicemanagement/elevationrequests":419,"POST /devicemanagement/elevationrequests/{id}/approve":419,"POST /devicemanagement/elevationrequests/{id}/deny":419,"POST /devicemanagement/elevationrequests/{id}/getallelevationrequests":420,"POST /devicemanagement/elevationrequests/{id}/revoke":419,"POST /devicemanagement/embeddedsimactivationcodepools":419,"POST /devicemanagement/embeddedsimactivationcodepools/{id}/assign":419,"POST /devicemanagement/embeddedsimactivationcodepools/{id}/assignments":419,"POST /devicemanagement/embeddedsimactivationcodepools/{id}/devicestates":419,"POST /devicemanagement/enableandroiddeviceadministratorenrollment":422,"POST /devicemanagement/enableendpointprivilegemanagement":422,"POST /devicemanagement/enablelegacypcmanagement":422,"POST /devicemanagement/enabletenantandroidpersonalworkprofilewebenrollmentsetting":422,"POST /devicemanagement/enabletenantperpermissionsscopetagsetting":422,"POST /devicemanagement/enableunlicensedadminstrators":422,"POST /devicemanagement/evaluateassignmentfilter":420,"POST /devicemanagement/exchangeconnectors":427,"POST /devicemanagement/exchangeconnectors/{id}/sync":422,"POST /devicemanagement/getassignmentfiltersstatusdetails":420,"POST /devicemanagement/grouppolicycategories":419,"POST /devicemanagement/grouppolicyconfigurations":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/assign":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/assignments":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/children":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitions":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/definitions":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/grouppolicyuploadeddefinitionfile/grouppolicyoperations":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/presentations":419,"POST /devicemanagement/grouppolicyconfigurations/{id}/updatedefinitionvalues":419,"POST /devicemanagement/grouppolicydefinitions":419,"POST /devicemanagement/grouppolicymigrationreports":419,"POST /devicemanagement/grouppolicymigrationreports/createmigrationreport":419,"POST /devicemanagement/grouppolicymigrationreports/{id}/grouppolicysettingmappings":419,"POST /devicemanagement/grouppolicymigrationreports/{id}/unsupportedgrouppolicyextensions":419,"POST /devicemanagement/grouppolicymigrationreports/{id}/updatescopetags":419,"POST /devicemanagement/grouppolicyobjectfiles":419,"POST /devicemanagement/grouppolicyuploadeddefinitionfiles":419,"POST /devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/addlanguagefiles":419,"POST /devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/remove":419,"POST /devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/removelanguagefiles":419,"POST /devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/updatelanguagefiles":419,"POST /devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/uploadnewversion":419,"POST /devicemanagement/hardwareconfigurations":419,"POST /devicemanagement/hardwareconfigurations/{id}/assign":419,"POST /devicemanagement/hardwareconfigurations/{id}/assignhardwareconfiguration":917,"POST /devicemanagement/hardwareconfigurations/{id}/assignments":419,"POST /devicemanagement/hardwareconfigurations/{id}/devicerunstates":419,"POST /devicemanagement/hardwareconfigurations/{id}/userrunstates":419,"POST /devicemanagement/hardwarepassworddetails":419,"POST /devicemanagement/hardwarepasswordinfo":419,"POST /devicemanagement/importeddeviceidentities":427,"POST /devicemanagement/importeddeviceidentities/importdeviceidentitylist":422,"POST /devicemanagement/importeddeviceidentities/searchexistingidentities":422,"POST /devicemanagement/importedwindowsautopilotdeviceidentities":422,"POST /devicemanagement/importedwindowsautopilotdeviceidentities/import":422,"POST /devicemanagement/intents":419,"POST /devicemanagement/intents/{id}/assign":419,"POST /devicemanagement/intents/{id}/assignments":419,"POST /devicemanagement/intents/{id}/categories":419,"POST /devicemanagement/intents/{id}/categories/{id}/settingdefinitions":419,"POST /devicemanagement/intents/{id}/categories/{id}/settings":419,"POST /devicemanagement/intents/{id}/createcopy":419,"POST /devicemanagement/intents/{id}/devicesettingstatesummaries":419,"POST /devicemanagement/intents/{id}/devicestates":419,"POST /devicemanagement/intents/{id}/migratetotemplate":419,"POST /devicemanagement/intents/{id}/settings":419,"POST /devicemanagement/intents/{id}/updatesettings":419,"POST /devicemanagement/intents/{id}/userstates":419,"POST /devicemanagement/intunebrandingprofiles":422,"POST /devicemanagement/intunebrandingprofiles/{id}/assign":422,"POST /devicemanagement/intunebrandingprofiles/{id}/assignments":415,"POST /devicemanagement/inventorycategories":419,"POST /devicemanagement/inventorypolicies/{id}/settings":419,"POST /devicemanagement/inventorysettings":419,"POST /devicemanagement/iosupdatestatuses":419,"POST /devicemanagement/macossoftwareupdateaccountsummaries":419,"POST /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries":419,"POST /devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}/updatestatesummaries":419,"POST /devicemanagement/manageddevicecleanuprules":424,"POST /devicemanagement/manageddeviceencryptionstates":419,"POST /devicemanagement/manageddevices":429,"POST /devicemanagement/manageddevices/downloadappdiagnostics":425,"POST /devicemanagement/manageddevices/downloadpowerliftappdiagnostic":425,"POST /devicemanagement/manageddevices/executeaction":426,"POST /devicemanagement/manageddevices/movedevicestoou":426,"POST /devicemanagement/manageddevices/{id}/activatedeviceesim":426,"POST /devicemanagement/manageddevices/{id}/bypassactivationlock":424,"POST /devicemanagement/manageddevices/{id}/changeassignments":426,"POST /devicemanagement/manageddevices/{id}/cleanwindowsdevice":426,"POST /devicemanagement/manageddevices/{id}/createdevicelogcollectionrequest":424,"POST /devicemanagement/manageddevices/{id}/deleteuserfromsharedappledevice":426,"POST /devicemanagement/manageddevices/{id}/deprovision":426,"POST /devicemanagement/manageddevices/{id}/disable":426,"POST /devicemanagement/manageddevices/{id}/disablelostmode":426,"POST /devicemanagement/manageddevices/{id}/enablelostmode":426,"POST /devicemanagement/manageddevices/{id}/enrollnowaction":426,"POST /devicemanagement/manageddevices/{id}/initiatedeviceattestation":426,"POST /devicemanagement/manageddevices/{id}/initiatemobiledevicemanagementkeyrecovery":426,"POST /devicemanagement/manageddevices/{id}/initiateondemandproactiveremediation":426,"POST /devicemanagement/manageddevices/{id}/locatedevice":424,"POST /devicemanagement/manageddevices/{id}/logoutsharedappledeviceactiveuser":426,"POST /devicemanagement/manageddevices/{id}/pauseconfigurationrefresh":426,"POST /devicemanagement/manageddevices/{id}/playlostmodesound":426,"POST /devicemanagement/manageddevices/{id}/rebootnow":426,"POST /devicemanagement/manageddevices/{id}/recoverpasscode":426,"POST /devicemanagement/manageddevices/{id}/reenable":426,"POST /devicemanagement/manageddevices/{id}/remotelock":426,"POST /devicemanagement/manageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement":426,"POST /devicemanagement/manageddevices/{id}/requestremoteassistance":424,"POST /devicemanagement/manageddevices/{id}/resetpasscode":426,"POST /devicemanagement/manageddevices/{id}/restoremanagedhomescreen":426,"POST /devicemanagement/manageddevices/{id}/retire":426,"POST /devicemanagement/manageddevices/{id}/revokeapplevpplicenses":426,"POST /devicemanagement/manageddevices/{id}/rotatebitlockerkeys":424,"POST /devicemanagement/manageddevices/{id}/rotatefilevaultkey":426,"POST /devicemanagement/manageddevices/{id}/rotatelocaladminpassword":426,"POST /devicemanagement/manageddevices/{id}/rotaterecoverylockpasscode":424,"POST /devicemanagement/manageddevices/{id}/sendcustomnotificationtocompanyportal":422,"POST /devicemanagement/manageddevices/{id}/setdevicename":426,"POST /devicemanagement/manageddevices/{id}/shutdown":426,"POST /devicemanagement/manageddevices/{id}/suspendmanagedhomescreen":426,"POST /devicemanagement/manageddevices/{id}/syncdevice":426,"POST /devicemanagement/manageddevices/{id}/triggerconfigurationmanageraction":426,"POST /devicemanagement/manageddevices/{id}/updatewindowsdeviceaccount":426,"POST /devicemanagement/manageddevices/{id}/windowsdefenderscan":426,"POST /devicemanagement/manageddevices/{id}/windowsdefenderupdatesignatures":426,"POST /devicemanagement/manageddevices/{id}/wipe":426,"POST /devicemanagement/microsofttunnelconfigurations":419,"POST /devicemanagement/microsofttunnelhealththresholds":419,"POST /devicemanagement/microsofttunnelserverlogcollectionresponses":419,"POST /devicemanagement/microsofttunnelserverlogcollectionresponses/{id}/createdownloadurl":420,"POST /devicemanagement/microsofttunnelserverlogcollectionresponses/{id}/generatedownloadurl":419,"POST /devicemanagement/microsofttunnelsites":419,"POST /devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers":419,"POST /devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/createserverlogcollectionrequest":420,"POST /devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/generateserverlogcollectionrequest":420,"POST /devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/gethealthmetrics":420,"POST /devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/gethealthmetrictimeseries":420,"POST /devicemanagement/microsofttunnelsites/{id}/requestupgrade":420,"POST /devicemanagement/mobileapptroubleshootingevents":429,"POST /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests":429,"POST /devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}/createdownloadurl":924,"POST /devicemanagement/mobilethreatdefenseconnectors":422,"POST /devicemanagement/monitoring/alertrecords/changealertrecordsportalnotificationassent":227,"POST /devicemanagement/monitoring/alertrecords/{id}/setportalnotificationassent":230,"POST /devicemanagement/monitoring/alertrules":230,"POST /devicemanagement/ndesconnectors":419,"POST /devicemanagement/notificationmessagetemplates":419,"POST /devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages":419,"POST /devicemanagement/notificationmessagetemplates/{id}/sendtestmessage":419,"POST /devicemanagement/operationapprovalpolicies":434,"POST /devicemanagement/operationapprovalrequests":931,"POST /devicemanagement/operationapprovalrequests/cancelmyrequest":930,"POST /devicemanagement/operationapprovalrequests/retrieverequeststatus":930,"POST /devicemanagement/operationapprovalrequests/{id}/approve":930,"POST /devicemanagement/operationapprovalrequests/{id}/cancelapproval":930,"POST /devicemanagement/operationapprovalrequests/{id}/reject":930,"POST /devicemanagement/privilegemanagementelevations":429,"POST /devicemanagement/remoteactionaudits":429,"POST /devicemanagement/remoteassistancepartners":427,"POST /devicemanagement/remoteassistancepartners/{id}/beginonboarding":422,"POST /devicemanagement/remoteassistancepartners/{id}/disconnect":422,"POST /devicemanagement/reports/cachedreportconfigurations":435,"POST /devicemanagement/reports/exportjobs":435,"POST /devicemanagement/reports/getcachedreport":436,"POST /devicemanagement/reports/getcompliancepolicynoncompliancereport":436,"POST /devicemanagement/reports/getcompliancepolicynoncompliancesummaryreport":436,"POST /devicemanagement/reports/getcompliancesettingnoncompliancereport":436,"POST /devicemanagement/reports/getconfigurationpolicynoncompliancereport":436,"POST /devicemanagement/reports/getconfigurationpolicynoncompliancesummaryreport":436,"POST /devicemanagement/reports/getconfigurationsettingnoncompliancereport":436,"POST /devicemanagement/reports/getdevicemanagementintentpersettingcontributingprofiles":436,"POST /devicemanagement/reports/getdevicemanagementintentsettingsreport":436,"POST /devicemanagement/reports/getdevicenoncompliancereport":436,"POST /devicemanagement/reports/getdevicepoliciescompliancereport":436,"POST /devicemanagement/reports/getdevicepolicysettingscompliancereport":436,"POST /devicemanagement/reports/getdevicesstatusbypolicyplatformcompliancereport":436,"POST /devicemanagement/reports/getdevicesstatusbysettingreport":436,"POST /devicemanagement/reports/getdevicestatusbycompliacepolicyreport":436,"POST /devicemanagement/reports/getdevicestatusbycompliancepolicysettingreport":436,"POST /devicemanagement/reports/getdevicestatussummarybycompliacepolicyreport":436,"POST /devicemanagement/reports/getdevicestatussummarybycompliancepolicysettingsreport":436,"POST /devicemanagement/reports/getdeviceswithoutcompliancepolicyreport":436,"POST /devicemanagement/reports/getgrouppolicysettingsdevicesettingsreport":420,"POST /devicemanagement/reports/gethistoricalreport":436,"POST /devicemanagement/reports/getmobileapplicationmanagementappconfigurationreport":420,"POST /devicemanagement/reports/getmobileapplicationmanagementappregistrationsummaryreport":420,"POST /devicemanagement/reports/getnoncompliantdevicesandsettingsreport":436,"POST /devicemanagement/reports/getpolicynoncompliancemetadata":436,"POST /devicemanagement/reports/getpolicynoncompliancereport":436,"POST /devicemanagement/reports/getpolicynoncompliancesummaryreport":436,"POST /devicemanagement/reports/getremoteassistancesessionsreport":422,"POST /devicemanagement/reports/getreportfilters":436,"POST /devicemanagement/reports/getsettingcomplianceaggreport":436,"POST /devicemanagement/reports/getsettingnoncompliancereport":436,"POST /devicemanagement/reports/reportschedules":435,"POST /devicemanagement/reports/retrieveandroidworkprofiledevicemigrationstatuses":932,"POST /devicemanagement/reports/retrieveappledeviceosupdatestatus":932,"POST /devicemanagement/reports/retrieveappleosupdatefailures":932,"POST /devicemanagement/reports/retrievecloudpkileafcertificatereport":919,"POST /devicemanagement/reports/retrievecloudpkileafcertificatesummaryreport":919,"POST /devicemanagement/reports/retrieveenrollmenttimegroupingfailurereport":932,"POST /devicemanagement/resourceaccessprofiles":422,"POST /devicemanagement/resourceaccessprofiles/querybyplatformtype":422,"POST /devicemanagement/resourceaccessprofiles/{id}/assign":422,"POST /devicemanagement/resourceaccessprofiles/{id}/assignments":422,"POST /devicemanagement/resourceoperations":931,"POST /devicemanagement/reusablepolicysettings":921,"POST /devicemanagement/reusablepolicysettings/{id}/clone":921,"POST /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies":921,"POST /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}/clearenrollmenttimedevicemembershiptarget":917,"POST /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}/createcopy":921,"POST /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}/reorder":921,"POST /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}/retrieveenrollmenttimedevicemembershiptarget":917,"POST /devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}/setenrollmenttimedevicemembershiptarget":419,"POST /devicemanagement/reusablesettings":419,"POST /devicemanagement/roleassignments":433,"POST /devicemanagement/roledefinitions":433,"POST /devicemanagement/roledefinitions/{id}/roleassignments":433,"POST /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags":433,"POST /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/getrolescopetagsbyid":434,"POST /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/{id}/assign":433,"POST /devicemanagement/roledefinitions/{id}/roleassignments/{id}/deviceandappmanagementroleassignment/rolescopetags/{id}/assignments":433,"POST /devicemanagement/rolescopetags":433,"POST /devicemanagement/rolescopetags/getrolescopetagsbyid":434,"POST /devicemanagement/rolescopetags/{id}/assign":433,"POST /devicemanagement/sendcustomnotificationtocompanyportal":422,"POST /devicemanagement/settingdefinitions":419,"POST /devicemanagement/targetpayloadassignments":419,"POST /devicemanagement/targetpayloadassignments/{id}/reassignpayloadconflictssetting":917,"POST /devicemanagement/templateinsights":419,"POST /devicemanagement/templates":419,"POST /devicemanagement/templates/importoffice365deviceconfigurationpolicies":419,"POST /devicemanagement/templates/{id}/categories":419,"POST /devicemanagement/templates/{id}/categories/{id}/recommendedsettings":419,"POST /devicemanagement/templates/{id}/categories/{id}/settingdefinitions":419,"POST /devicemanagement/templates/{id}/createinstance":419,"POST /devicemanagement/templates/{id}/migratableto":419,"POST /devicemanagement/templates/{id}/migratableto/importoffice365deviceconfigurationpolicies":419,"POST /devicemanagement/templates/{id}/migratableto/{id}/createinstance":419,"POST /devicemanagement/templates/{id}/securitybaselinetemplate/categorydevicestatesummaries":419,"POST /devicemanagement/templates/{id}/securitybaselinetemplate/devicestates":419,"POST /devicemanagement/templates/{id}/settings":419,"POST /devicemanagement/templatesettings":419,"POST /devicemanagement/tenantattachrbac/enable":433,"POST /devicemanagement/termsandconditions":422,"POST /devicemanagement/termsandconditions/{id}/acceptancestatuses":422,"POST /devicemanagement/termsandconditions/{id}/assignments":422,"POST /devicemanagement/termsandconditions/{id}/groupassignments":422,"POST /devicemanagement/troubleshootingevents":429,"POST /devicemanagement/userexperienceanalyticsdevicescope/triggerdevicescopeaction":424,"POST /devicemanagement/userexperienceanalyticsdevicescopes/{id}/triggerdevicescopeaction":424,"POST /devicemanagement/userpfxcertificates":419,"POST /devicemanagement/virtualendpoint/bulkactions":227,"POST /devicemanagement/virtualendpoint/bulkactions/{id}/retry":230,"POST /devicemanagement/virtualendpoint/cloudapps":227,"POST /devicemanagement/virtualendpoint/cloudapps/publish":227,"POST /devicemanagement/virtualendpoint/cloudapps/reset":227,"POST /devicemanagement/virtualendpoint/cloudapps/unpublish":227,"POST /devicemanagement/virtualendpoint/cloudpcpools":227,"POST /devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments":227,"POST /devicemanagement/virtualendpoint/cloudpcs/validatebulkresize":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/changeuseraccounttype":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/createsnapshot":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/endgraceperiod":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/poweroff":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/poweron":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/reboot":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/rename":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/reprovision":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/resize":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/restore":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/retrypartneragentinstallation":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/setreviewstatus":228,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/sharesnapshot":227,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/start":230,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/stop":230,"POST /devicemanagement/virtualendpoint/cloudpcs/{id}/troubleshoot":227,"POST /devicemanagement/virtualendpoint/crosscloudgovernmentorganizationmapping":230,"POST /devicemanagement/virtualendpoint/deviceimages":227,"POST /devicemanagement/virtualendpoint/deviceimages/{id}/retryupload":227,"POST /devicemanagement/virtualendpoint/deviceimages/{id}/reupload":227,"POST /devicemanagement/virtualendpoint/externalpartners":227,"POST /devicemanagement/virtualendpoint/externalpartnersettings":227,"POST /devicemanagement/virtualendpoint/onpremisesconnections":230,"POST /devicemanagement/virtualendpoint/onpremisesconnections/{id}/runhealthchecks":230,"POST /devicemanagement/virtualendpoint/onpremisesconnections/{id}/updateaddomainpassword":227,"POST /devicemanagement/virtualendpoint/organizationaction":230,"POST /devicemanagement/virtualendpoint/provisioningpolicies":227,"POST /devicemanagement/virtualendpoint/provisioningpolicies/applyconfig":227,"POST /devicemanagement/virtualendpoint/provisioningpolicies/{id}/apply":227,"POST /devicemanagement/virtualendpoint/provisioningpolicies/{id}/assign":227,"POST /devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/cloudpcusersettingspersistence/batchcleanupusersettingspersistenceprofile":227,"POST /devicemanagement/virtualendpoint/provisioningpolicies/{id}/retry":227,"POST /devicemanagement/virtualendpoint/provisioningpolicies/{id}/schedulepolicyapplytask":227,"POST /devicemanagement/virtualendpoint/report/retrievecloudpcclientappusagereport":227,"POST /devicemanagement/virtualendpoint/report/retrievecloudpcrecommendationreports":227,"POST /devicemanagement/virtualendpoint/reports/exportjobs":227,"POST /devicemanagement/virtualendpoint/reports/getactionstatusreports":228,"POST /devicemanagement/virtualendpoint/reports/getcloudpcperformancereport":228,"POST /devicemanagement/virtualendpoint/reports/getcloudpcrecommendationreports":228,"POST /devicemanagement/virtualendpoint/reports/getconnectionqualityreports":228,"POST /devicemanagement/virtualendpoint/reports/getdailyaggregatedremoteconnectionreports":228,"POST /devicemanagement/virtualendpoint/reports/getfrontlinereport":228,"POST /devicemanagement/virtualendpoint/reports/getinaccessiblecloudpcreports":228,"POST /devicemanagement/virtualendpoint/reports/getrawremoteconnectionreports":228,"POST /devicemanagement/virtualendpoint/reports/getremoteconnectionhistoricalreports":228,"POST /devicemanagement/virtualendpoint/reports/getshareduselicenseusagereport":228,"POST /devicemanagement/virtualendpoint/reports/gettotalaggregatedremoteconnectionreports":228,"POST /devicemanagement/virtualendpoint/reports/retrievebulkactionstatusreport":228,"POST /devicemanagement/virtualendpoint/reports/retrievecloudpcperformancemetricsreport":228,"POST /devicemanagement/virtualendpoint/reports/retrievecloudpcrecommendationreports":227,"POST /devicemanagement/virtualendpoint/reports/retrievecloudpctenantmetricsreport":228,"POST /devicemanagement/virtualendpoint/reports/retrievecloudpctroubleshootreports":228,"POST /devicemanagement/virtualendpoint/reports/retrieveconnectionqualityreports":228,"POST /devicemanagement/virtualendpoint/reports/retrievecrossregiondisasterrecoveryreport":228,"POST /devicemanagement/virtualendpoint/snapshots/importsnapshot":228,"POST /devicemanagement/virtualendpoint/snapshots/purgeimportedsnapshot":228,"POST /devicemanagement/virtualendpoint/usersettings":227,"POST /devicemanagement/virtualendpoint/usersettings/{id}/assign":227,"POST /devicemanagement/windowsautopilotdeploymentprofiles":422,"POST /devicemanagement/windowsautopilotdeploymentprofiles/haspayloadlinks":423,"POST /devicemanagement/windowsautopilotdeploymentprofiles/{id}/assign":422,"POST /devicemanagement/windowsautopilotdeviceidentities":427,"POST /devicemanagement/windowsautopilotdeviceidentities/deletedevices":428,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/allownextenrollment":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/assignresourceaccounttodevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/assignusertodevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assign":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices":427,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/deletedevices":428,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/allownextenrollment":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/assignresourceaccounttodevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/assignusertodevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/unassignresourceaccountfromdevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/unassignuserfromdevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/updatedeviceproperties":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assignments":427,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/intendeddeploymentprofile/assign":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/unassignresourceaccountfromdevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/unassignuserfromdevice":422,"POST /devicemanagement/windowsautopilotdeviceidentities/{id}/updatedeviceproperties":422,"POST /devicemanagement/windowsautopilotsettings/sync":422,"POST /devicemanagement/windowsdriverupdateprofiles":419,"POST /devicemanagement/windowsdriverupdateprofiles/{id}/assign":419,"POST /devicemanagement/windowsdriverupdateprofiles/{id}/assignments":419,"POST /devicemanagement/windowsdriverupdateprofiles/{id}/driverinventories":419,"POST /devicemanagement/windowsdriverupdateprofiles/{id}/executeaction":419,"POST /devicemanagement/windowsdriverupdateprofiles/{id}/syncinventory":419,"POST /devicemanagement/windowsfeatureupdateprofiles":419,"POST /devicemanagement/windowsfeatureupdateprofiles/{id}/assign":419,"POST /devicemanagement/windowsfeatureupdateprofiles/{id}/assignments":419,"POST /devicemanagement/windowsinformationprotectionapplearningsummaries":415,"POST /devicemanagement/windowsinformationprotectionnetworklearningsummaries":415,"POST /devicemanagement/windowsmalwareinformation":429,"POST /devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates":429,"POST /devicemanagement/windowsqualityupdatepolicies":419,"POST /devicemanagement/windowsqualityupdatepolicies/{id}/assign":419,"POST /devicemanagement/windowsqualityupdatepolicies/{id}/assignments":419,"POST /devicemanagement/windowsqualityupdatepolicies/{id}/bulkaction":419,"POST /devicemanagement/windowsqualityupdateprofiles":419,"POST /devicemanagement/windowsqualityupdateprofiles/{id}/assign":419,"POST /devicemanagement/windowsqualityupdateprofiles/{id}/assignments":419,"POST /devicemanagement/windowsupdatecatalogitems":419,"POST /devicemanagement/zebrafotaartifacts":419,"POST /devices":265,"POST /devices(deviceid='{id}')/registeredowners/$ref":265,"POST /devices(deviceid='{id}')/registeredusers/$ref":265,"POST /devices/provision":269,"POST /devices/{id}/checkmembergroups":861,"POST /devices/{id}/checkmemberobjects":277,"POST /devices/{id}/cloudlicensing/assignments":832,"POST /devices/{id}/getmembergroups":279,"POST /devices/{id}/getmemberobjects":277,"POST /devices/{id}/registeredowners/$ref":265,"POST /devices/{id}/registeredusers/$ref":265,"POST /directory/administrativeunits":15,"POST /directory/attributesets":64,"POST /directory/authenticationmethoddevices/hardwareoathdevices":108,"POST /directory/certificateauthorities/certificatebasedapplicationconfigurations":816,"POST /directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities":816,"POST /directory/certificateauthorities/mutualtlsoauthconfigurations":819,"POST /directory/customsecurityattributedefinitions":64,"POST /directory/customsecurityattributedefinitions/{id}/allowedvalues":64,"POST /directory/deleteditems/getuserownedobjects":274,"POST /directory/federationconfigurations/samlorwsfedexternaldomainfederation":393,"POST /directory/federationconfigurations/{id}/samlorwsfedexternaldomainfederation/domains":393,"POST /directory/inboundshareduserprofiles/{id}/exportpersonaldata":857,"POST /directory/inboundshareduserprofiles/{id}/removepersonaldata":894,"POST /directory/outboundshareduserprofiles/{id}/tenants/{id}/removepersonaldata":894,"POST /directory/pendingexternaluserprofiles":855,"POST /directory/publickeyinfrastructure/certificatebasedauthconfigurations":159,"POST /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/certificateauthorities":159,"POST /directory/publickeyinfrastructure/certificatebasedauthconfigurations/{id}/upload":159,"POST /directory/recommendations/{id}/acceptrisk":893,"POST /directory/recommendations/{id}/addtag":893,"POST /directory/recommendations/{id}/applyalternatemitigation":893,"POST /directory/recommendations/{id}/complete":893,"POST /directory/recommendations/{id}/dismiss":893,"POST /directory/recommendations/{id}/impactedresources/addtag":893,"POST /directory/recommendations/{id}/impactedresources/removetag":893,"POST /directory/recommendations/{id}/impactedresources/{id}/acceptrisk":893,"POST /directory/recommendations/{id}/impactedresources/{id}/addtag":893,"POST /directory/recommendations/{id}/impactedresources/{id}/applyalternatemitigation":893,"POST /directory/recommendations/{id}/impactedresources/{id}/complete":893,"POST /directory/recommendations/{id}/impactedresources/{id}/dismiss":893,"POST /directory/recommendations/{id}/impactedresources/{id}/markplanned":893,"POST /directory/recommendations/{id}/impactedresources/{id}/postpone":893,"POST /directory/recommendations/{id}/impactedresources/{id}/reactivate":893,"POST /directory/recommendations/{id}/impactedresources/{id}/removetag":893,"POST /directory/recommendations/{id}/markplanned":893,"POST /directory/recommendations/{id}/postpone":893,"POST /directory/recommendations/{id}/reactivate":893,"POST /directory/recommendations/{id}/removetag":893,"POST /directory/recovery/snapshots/{id}/recoveryjobs":340,"POST /directory/recovery/snapshots/{id}/recoverypreviewjobs":341,"POST /directory/templates/devicetemplates":1053,"POST /directory/templates/devicetemplates/{id}/createdevicefromtemplate":850,"POST /directory/templates/devicetemplates/{id}/owners/$ref":851,"POST /directory/tenantgovernance/governanceinvitations":673,"POST /directory/tenantgovernance/governancepolicytemplates":672,"POST /directory/tenantgovernance/governancerequests":679,"POST /directory/tenantgovernance/relatedtenants/refresh":681,"POST /directory/tenantgovernance/settings/enablerelatedtenants":682,"POST /directoryobjects/getbyids":278,"POST /directoryobjects/validateproperties":280,"POST /directoryobjects/{id}/checkmembergroups":861,"POST /directoryobjects/{id}/checkmemberobjects":277,"POST /directoryobjects/{id}/getmembergroups":279,"POST /directoryobjects/{id}/getmemberobjects":277,"POST /directoryroles":16,"POST /directoryroles/roletemplateid={id}/members/$ref":16,"POST /directoryroles/{id}/members/$ref":16,"POST /domains":284,"POST /domains/{id}/federationconfiguration":289,"POST /domains/{id}/forcedelete":284,"POST /domains/{id}/promote":284,"POST /domains/{id}/verify":284,"POST /drive/bundles/{id}/archive":863,"POST /drive/bundles/{id}/unarchive":863,"POST /drive/following/{id}/archive":863,"POST /drive/following/{id}/unarchive":863,"POST /drive/items/{id}/archive":863,"POST /drive/items/{id}/unarchive":863,"POST /drive/root/archive":863,"POST /drive/root/unarchive":863,"POST /drive/special/{id}/archive":863,"POST /drive/special/{id}/unarchive":863,"POST /drives/{id}/items/{id}/archive":863,"POST /drives/{id}/items/{id}/assignsensitivitylabel":295,"POST /drives/{id}/items/{id}/checkin":296,"POST /drives/{id}/items/{id}/checkout":296,"POST /drives/{id}/items/{id}/children":296,"POST /drives/{id}/items/{id}/copy":296,"POST /drives/{id}/items/{id}/createlink":296,"POST /drives/{id}/items/{id}/createuploadsession":297,"POST /drives/{id}/items/{id}/discardcheckout":296,"POST /drives/{id}/items/{id}/extractsensitivitylabels":298,"POST /drives/{id}/items/{id}/follow":293,"POST /drives/{id}/items/{id}/invite":296,"POST /drives/{id}/items/{id}/lock":296,"POST /drives/{id}/items/{id}/permanentdelete":296,"POST /drives/{id}/items/{id}/permissions":303,"POST /drives/{id}/items/{id}/permissions/{id}/revokegrants":296,"POST /drives/{id}/items/{id}/preview":293,"POST /drives/{id}/items/{id}/releaselock":296,"POST /drives/{id}/items/{id}/unarchive":863,"POST /drives/{id}/items/{id}/versions/{id}/restoreversion":296,"POST /drives/{id}/items/{id}:/{id}:/createuploadsession":297,"POST /drives/{id}/root/archive":863,"POST /drives/{id}/root/unarchive":863,"POST /drives/{id}/root:/{id}:/assignsensitivitylabel":295,"POST /drives/{id}/root:/{id}:/extractsensitivitylabels":298,"POST /education/classes":314,"POST /education/classes/{id}/assignmentcategories":308,"POST /education/classes/{id}/assignments":309,"POST /education/classes/{id}/assignments/{id}/activate":308,"POST /education/classes/{id}/assignments/{id}/categories/$ref":308,"POST /education/classes/{id}/assignments/{id}/deactivate":308,"POST /education/classes/{id}/assignments/{id}/publish":309,"POST /education/classes/{id}/assignments/{id}/resources":309,"POST /education/classes/{id}/assignments/{id}/setupfeedbackresourcesfolder":311,"POST /education/classes/{id}/assignments/{id}/setupresourcesfolder":312,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/excuse":312,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/outcomes":312,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/reassign":326,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/resources":308,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/return":312,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/setupresourcesfolder":311,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/submit":326,"POST /education/classes/{id}/assignments/{id}/submissions/{id}/unsubmit":326,"POST /education/classes/{id}/assignmentsettings/gradingschemes":308,"POST /education/classes/{id}/members/$ref":320,"POST /education/classes/{id}/modules":321,"POST /education/classes/{id}/modules/{id}/pin":321,"POST /education/classes/{id}/modules/{id}/publish":321,"POST /education/classes/{id}/modules/{id}/resources":321,"POST /education/classes/{id}/modules/{id}/setupresourcesfolder":321,"POST /education/classes/{id}/modules/{id}/unpin":321,"POST /education/classes/{id}/teachers/$ref":314,"POST /education/me/rubrics":308,"POST /education/schools":314,"POST /education/schools/{id}/classes/$ref":314,"POST /education/schools/{id}/users/$ref":314,"POST /education/users":314,"POST /employeeexperience/communities":233,"POST /employeeexperience/goals/exportjobs":875,"POST /employeeexperience/learningproviders":331,"POST /employeeexperience/learningproviders/{id}/learningcourseactivities":335,"POST /employeeexperience/roles/{id}/members":337,"POST /external/connections":351,"POST /external/connections/{id}/groups":352,"POST /external/connections/{id}/groups/{id}/members":352,"POST /external/industrydata/dataconnectors":898,"POST /external/industrydata/dataconnectors/{id}/validate":897,"POST /external/industrydata/inboundflows":900,"POST /external/industrydata/inboundflows/{id}/dataconnector/validate":897,"POST /external/industrydata/outboundprovisioningflowsets":903,"POST /external/industrydata/outboundprovisioningflowsets/{id}/provisioningflows":895,"POST /external/industrydata/outboundprovisioningflowsets/{id}/provisioningflows/{id}/reset":895,"POST /external/industrydata/referencedefinitions":907,"POST /external/industrydata/runs/start":906,"POST /external/industrydata/sourcesystems":911,"POST /external/industrydata/years":913,"POST /financials/companies/{id}/countriesregions":864,"POST /financials/companies/{id}/currencies":864,"POST /financials/companies/{id}/customerpaymentjournals":864,"POST /financials/companies/{id}/customerpaymentjournals/{id}/customerpayments":864,"POST /financials/companies/{id}/customers":864,"POST /financials/companies/{id}/employees":864,"POST /financials/companies/{id}/itemcategories":864,"POST /financials/companies/{id}/items":864,"POST /financials/companies/{id}/journals":864,"POST /financials/companies/{id}/journals/{id}/journallines":864,"POST /financials/companies/{id}/paymentmethods":864,"POST /financials/companies/{id}/paymentterms":864,"POST /financials/companies/{id}/shipmentmethods":864,"POST /financials/companies/{id}/taxareas":864,"POST /financials/companies/{id}/taxgroups":864,"POST /financials/companies/{id}/unitsofmeasure":864,"POST /financials/companies/{id}/vendors":864,"POST /grouplifecyclepolicies":19,"POST /grouplifecyclepolicies/renewgroup":372,"POST /grouplifecyclepolicies/{id}/addgroup":19,"POST /grouplifecyclepolicies/{id}/removegroup":19,"POST /groups":386,"POST /groups/{id}/acceptedsenders/$ref":253,"POST /groups/{id}/addfavorite":253,"POST /groups/{id}/assignlicense":370,"POST /groups/{id}/calendar/events":253,"POST /groups/{id}/calendar/events/{id}/cancel":143,"POST /groups/{id}/calendar/events/{id}/forward":342,"POST /groups/{id}/calendar/permanentdelete":143,"POST /groups/{id}/calendarview/{id}/permanentdelete":143,"POST /groups/{id}/checkmembergroups":861,"POST /groups/{id}/checkmemberobjects":277,"POST /groups/{id}/cloudlicensing/assignments":834,"POST /groups/{id}/conversations":253,"POST /groups/{id}/conversations/{id}/threads":249,"POST /groups/{id}/conversations/{id}/threads/{id}/posts/{id}/forward":254,"POST /groups/{id}/conversations/{id}/threads/{id}/posts/{id}/reply":246,"POST /groups/{id}/conversations/{id}/threads/{id}/reply":253,"POST /groups/{id}/deletepasswordsinglesignoncredentials":878,"POST /groups/{id}/drive/items/{id}/assignsensitivitylabel":295,"POST /groups/{id}/drive/items/{id}/checkin":296,"POST /groups/{id}/drive/items/{id}/checkout":296,"POST /groups/{id}/drive/items/{id}/children":296,"POST /groups/{id}/drive/items/{id}/copy":296,"POST /groups/{id}/drive/items/{id}/createlink":296,"POST /groups/{id}/drive/items/{id}/createuploadsession":297,"POST /groups/{id}/drive/items/{id}/discardcheckout":296,"POST /groups/{id}/drive/items/{id}/extractsensitivitylabels":298,"POST /groups/{id}/drive/items/{id}/follow":293,"POST /groups/{id}/drive/items/{id}/invite":296,"POST /groups/{id}/drive/items/{id}/permissions":303,"POST /groups/{id}/drive/items/{id}/permissions/{id}/revokegrants":296,"POST /groups/{id}/drive/items/{id}/preview":293,"POST /groups/{id}/drive/items/{id}/versions/{id}/restoreversion":296,"POST /groups/{id}/drive/items/{id}:/{id}:/createuploadsession":297,"POST /groups/{id}/drive/root:/{id}:/assignsensitivitylabel":295,"POST /groups/{id}/drive/root:/{id}:/extractsensitivitylabels":298,"POST /groups/{id}/events":253,"POST /groups/{id}/events/{id}/attachments":143,"POST /groups/{id}/events/{id}/cancel":143,"POST /groups/{id}/events/{id}/forward":342,"POST /groups/{id}/events/{id}/permanentdelete":143,"POST /groups/{id}/getmembergroups":279,"POST /groups/{id}/getmemberobjects":277,"POST /groups/{id}/getpasswordsinglesignoncredentials":878,"POST /groups/{id}/onenote/notebooks":470,"POST /groups/{id}/onenote/notebooks/getnotebookfromweburl":471,"POST /groups/{id}/onenote/notebooks/{id}/copynotebook":470,"POST /groups/{id}/onenote/notebooks/{id}/sectiongroups":470,"POST /groups/{id}/onenote/notebooks/{id}/sections":470,"POST /groups/{id}/onenote/pages":470,"POST /groups/{id}/onenote/pages/{id}/copytosection":470,"POST /groups/{id}/onenote/sectiongroups/{id}/sectiongroups":470,"POST /groups/{id}/onenote/sectiongroups/{id}/sections":470,"POST /groups/{id}/onenote/sections/{id}/copytonotebook":470,"POST /groups/{id}/onenote/sections/{id}/copytosectiongroup":470,"POST /groups/{id}/onenote/sections/{id}/pages":470,"POST /groups/{id}/owners/$ref":372,"POST /groups/{id}/rejectedsenders/$ref":253,"POST /groups/{id}/removefavorite":253,"POST /groups/{id}/renew":372,"POST /groups/{id}/resetunseencount":253,"POST /groups/{id}/retryserviceprovisioning":372,"POST /groups/{id}/settings":387,"POST /groups/{id}/subscribebymail":253,"POST /groups/{id}/team/channels/{id}/archive":163,"POST /groups/{id}/team/channels/{id}/unarchive":163,"POST /groups/{id}/threads":253,"POST /groups/{id}/threads/{id}/posts/{id}/forward":254,"POST /groups/{id}/threads/{id}/posts/{id}/reply":246,"POST /groups/{id}/threads/{id}/reply":253,"POST /groups/{id}/unsubscribebymail":246,"POST /groups/{id}/validateproperties":274,"POST /identity/apiconnectors":391,"POST /identity/apiconnectors/{id}/uploadclientcertificate":391,"POST /identity/authenticationeventlisteners":98,"POST /identity/authenticationeventsflows":98,"POST /identity/authenticationeventsflows/{id}/conditions/applications/includeapplications":98,"POST /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onattributecollection/onattributecollectionexternalusersselfservicesignup/attributes/$ref":98,"POST /identity/authenticationeventsflows/{id}/externalusersselfservicesignupeventsflow/onauthenticationmethodloadstart/onauthenticationmethodloadstartexternalusersselfservicesignup/identityproviders/$ref":98,"POST /identity/b2cuserflows":113,"POST /identity/b2cuserflows/{id}/identityproviders/$ref":113,"POST /identity/b2cuserflows/{id}/userattributeassignments":113,"POST /identity/b2cuserflows/{id}/userattributeassignments/setorder":113,"POST /identity/b2cuserflows/{id}/userflowidentityproviders/$ref":113,"POST /identity/b2xuserflows":113,"POST /identity/b2xuserflows/{id}/identityproviders/$ref":113,"POST /identity/b2xuserflows/{id}/userattributeassignments":113,"POST /identity/b2xuserflows/{id}/userattributeassignments/setorder":113,"POST /identity/conditionalaccess/authenticationcontextclassreferences":102,"POST /identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations":97,"POST /identity/conditionalaccess/evaluate":237,"POST /identity/customauthenticationextensions":259,"POST /identity/customauthenticationextensions/validateauthenticationconfiguration":260,"POST /identity/customauthenticationextensions/{id}/validateauthenticationconfiguration":260,"POST /identity/events/onsignupstart":9,"POST /identity/identityproviders":393,"POST /identity/riskprevention/fraudprotectionproviders":369,"POST /identity/riskprevention/webapplicationfirewallproviders":369,"POST /identity/riskprevention/webapplicationfirewallproviders/{id}/verify":369,"POST /identity/userflowattributes":113,"POST /identity/userflows":113,"POST /identity/verifiedid/profiles":406,"POST /identitygovernance/accessreviews/decisions/filterbycurrentuser(on='reviewer')/recordalldecisions":768,"POST /identitygovernance/accessreviews/definitions":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/applydecisions":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/resetdecisions":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/sendreminder":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/acceptrecommendations":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/batchrecorddecisions":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/stop":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stop":5,"POST /identitygovernance/accessreviews/definitions/{id}/instances/{id}/stopapplydecisions":5,"POST /identitygovernance/accessreviews/historydefinitions":5,"POST /identitygovernance/accessreviews/historydefinitions/{id}/instances/{id}/generatedownloaduri":5,"POST /identitygovernance/accessreviews/unified/definitions":5,"POST /identitygovernance/accessreviews/unified/instances/{id}/batchapplycustomdataprovidedresourcedecisions":5,"POST /identitygovernance/catalogs/{id}/accesspackageresources/{id}/uploadsessions":0,"POST /identitygovernance/catalogs/{id}/accesspackageresources/{id}/uploadsessions/{id}/uploadfile":0,"POST /identitygovernance/entitlementmanagement/accesspackageassignmentpolicies":0,"POST /identitygovernance/entitlementmanagement/accesspackageassignmentrequests":338,"POST /identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}/cancel":3,"POST /identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}/reprocess":0,"POST /identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}/resume":0,"POST /identitygovernance/entitlementmanagement/accesspackageassignments/{id}/reprocess":0,"POST /identitygovernance/entitlementmanagement/accesspackagecatalogs":0,"POST /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackagecustomworkflowextensions":762,"POST /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackageresources/{id}/refresh":0,"POST /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions":75,"POST /identitygovernance/entitlementmanagement/accesspackageresourcerequests":0,"POST /identitygovernance/entitlementmanagement/accesspackages":0,"POST /identitygovernance/entitlementmanagement/accesspackages/{id}/accesspackageresourcerolescopes":0,"POST /identitygovernance/entitlementmanagement/accesspackages/{id}/getapplicablepolicyrequirements":1,"POST /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatibleaccesspackages/$ref":0,"POST /identitygovernance/entitlementmanagement/accesspackages/{id}/incompatiblegroups/$ref":0,"POST /identitygovernance/entitlementmanagement/accesspackages/{id}/movetocatalog":0,"POST /identitygovernance/entitlementmanagement/assignmentrequests":338,"POST /identitygovernance/entitlementmanagement/assignmentrequests/{id}/cancel":3,"POST /identitygovernance/entitlementmanagement/assignmentrequests/{id}/reprocess":0,"POST /identitygovernance/entitlementmanagement/assignmentrequests/{id}/resume":0,"POST /identitygovernance/entitlementmanagement/connectedorganizations":0,"POST /identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors/$ref":0,"POST /identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors/$ref":0,"POST /identitygovernance/entitlementmanagement/externaloriginresourceconnectors":0,"POST /identitygovernance/lifecycleworkflows/customtaskextensions":394,"POST /identitygovernance/lifecycleworkflows/deleteditems/lifecyclepolicies/{id}/restore":888,"POST /identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}/restore":396,"POST /identitygovernance/lifecycleworkflows/lifecyclepolicies":888,"POST /identitygovernance/lifecycleworkflows/workflows":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/activate":403,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/activateandwait":403,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/activatewithscope":403,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/cancelprocessing":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/createnewversion":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/previewtaskfailures":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/previewworkflow":396,"POST /identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}/taskprocessingresults/{id}/resume":399,"POST /identitygovernance/permissionsmanagement/scheduledpermissionsrequests":981,"POST /identitygovernance/privilegedaccess/group/assignmentschedulerequests":548,"POST /identitygovernance/privilegedaccess/group/assignmentschedulerequests/{id}/cancel":546,"POST /identitygovernance/privilegedaccess/group/eligibilityschedulerequests":549,"POST /identitygovernance/privilegedaccess/group/eligibilityschedulerequests/{id}/cancel":550,"POST /identitygovernance/rolemanagementalerts/alerts/refresh":1063,"POST /identitygovernance/rolemanagementalerts/alerts/{id}/alertincidents/{id}/remediate":1063,"POST /identitygovernance/rolemanagementalerts/alerts/{id}/refresh":1063,"POST /identitygovernance/termsofuse/agreements":57,"POST /identityprotection/riskyagents/confirmcompromised":999,"POST /identityprotection/riskyagents/confirmsafe":999,"POST /identityprotection/riskyagents/dismiss":999,"POST /identityprotection/riskyserviceprincipals/confirmcompromised":572,"POST /identityprotection/riskyserviceprincipals/dismiss":572,"POST /identityproviders":393,"POST /informationprotection/policy/labels/evaluateclassificationresults":915,"POST /informationprotection/policy/labels/evaluateremoval":915,"POST /informationprotection/policy/labels/extractlabel":915,"POST /informationprotection/threatassessmentrequests":409,"POST /invitations":437,"POST /me/authentication/hardwareoathmethods":796,"POST /me/authentication/hardwareoathmethods/assignandactivate":796,"POST /me/authentication/hardwareoathmethods/assignandactivatebyserialnumber":796,"POST /me/authentication/hardwareoathmethods/{id}/activate":796,"POST /me/authentication/hardwareoathmethods/{id}/deactivate":796,"POST /me/authentication/phonemethods/{id}/disablesmssignin":504,"POST /me/authentication/phonemethods/{id}/enablesmssignin":504,"POST /me/calendar/events":143,"POST /me/calendar/events/{id}/accept":143,"POST /me/calendar/events/{id}/cancel":143,"POST /me/calendar/events/{id}/decline":143,"POST /me/calendar/events/{id}/dismissreminder":143,"POST /me/calendar/events/{id}/forward":342,"POST /me/calendar/events/{id}/snoozereminder":143,"POST /me/calendar/events/{id}/tentativelyaccept":143,"POST /me/calendar/getschedule":145,"POST /me/calendargroups":143,"POST /me/calendargroups/{id}/calendars":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/accept":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/cancel":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/decline":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/dismissreminder":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/forward":342,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/snoozereminder":143,"POST /me/calendargroups/{id}/calendars/{id}/events/{id}/tentativelyaccept":143,"POST /me/calendars":143,"POST /me/calendars/{id}/events":143,"POST /me/calendars/{id}/events/{id}/accept":143,"POST /me/calendars/{id}/events/{id}/cancel":143,"POST /me/calendars/{id}/events/{id}/decline":143,"POST /me/calendars/{id}/events/{id}/dismissreminder":143,"POST /me/calendars/{id}/events/{id}/forward":342,"POST /me/calendars/{id}/events/{id}/snoozereminder":143,"POST /me/calendars/{id}/events/{id}/tentativelyaccept":143,"POST /me/changepassword":696,"POST /me/checkmembergroups":861,"POST /me/checkmemberobjects":277,"POST /me/cloudlicensing/assignments":837,"POST /me/cloudpcs/{id}/reboot":227,"POST /me/cloudpcs/{id}/rename":227,"POST /me/cloudpcs/{id}/reprovision":227,"POST /me/cloudpcs/{id}/start":230,"POST /me/cloudpcs/{id}/stop":230,"POST /me/cloudpcs/{id}/troubleshoot":227,"POST /me/contactfolders":241,"POST /me/contactfolders/{id}/childfolders":241,"POST /me/contactfolders/{id}/contacts":241,"POST /me/contacts":241,"POST /me/datasecurityandgovernance/activities/contentactivities":8,"POST /me/datasecurityandgovernance/processcontent":724,"POST /me/datasecurityandgovernance/protectionscopes/compute":727,"POST /me/distributionlists":241,"POST /me/distributionlists/{id}/addmembers":241,"POST /me/distributionlists/{id}/deletemembers":241,"POST /me/drive/items/{id}/assignsensitivitylabel":295,"POST /me/drive/items/{id}/checkin":296,"POST /me/drive/items/{id}/checkout":296,"POST /me/drive/items/{id}/children":296,"POST /me/drive/items/{id}/copy":296,"POST /me/drive/items/{id}/createlink":296,"POST /me/drive/items/{id}/createuploadsession":297,"POST /me/drive/items/{id}/discardcheckout":296,"POST /me/drive/items/{id}/extractsensitivitylabels":298,"POST /me/drive/items/{id}/follow":293,"POST /me/drive/items/{id}/invite":296,"POST /me/drive/items/{id}/permissions":303,"POST /me/drive/items/{id}/permissions/{id}/revokegrants":296,"POST /me/drive/items/{id}/preview":293,"POST /me/drive/items/{id}/restore":305,"POST /me/drive/items/{id}/unfollow":293,"POST /me/drive/items/{id}/versions/{id}/restoreversion":296,"POST /me/drive/items/{id}/workbook/application/calculate":187,"POST /me/drive/items/{id}/workbook/closesession":187,"POST /me/drive/items/{id}/workbook/comments":187,"POST /me/drive/items/{id}/workbook/comments/{id}/replies":187,"POST /me/drive/items/{id}/workbook/createsession":187,"POST /me/drive/items/{id}/workbook/names/add":467,"POST /me/drive/items/{id}/workbook/names/{id}/range/clear":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/delete":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/format/autofitcolumns":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/format/autofitrows":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/format/borders":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/insert":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/merge":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/row":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/sort/apply":187,"POST /me/drive/items/{id}/workbook/names/{id}/range/unmerge":187,"POST /me/drive/items/{id}/workbook/refreshsession":187,"POST /me/drive/items/{id}/workbook/tables/add":187,"POST /me/drive/items/{id}/workbook/tables/{id}/clearfilters":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/add":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/filter/apply":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/filter/clear":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/clear":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/delete":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/autofitcolumns":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/autofitrows":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/insert":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/merge":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/row":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/sort/apply":187,"POST /me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/unmerge":187,"POST /me/drive/items/{id}/workbook/tables/{id}/converttorange":187,"POST /me/drive/items/{id}/workbook/tables/{id}/reapplyfilters":187,"POST /me/drive/items/{id}/workbook/tables/{id}/rows":187,"POST /me/drive/items/{id}/workbook/tables/{id}/rows/add":187,"POST /me/drive/items/{id}/workbook/tables/{id}/sort/apply":187,"POST /me/drive/items/{id}/workbook/tables/{id}/sort/clear":187,"POST /me/drive/items/{id}/workbook/tables/{id}/sort/reapply":187,"POST /me/drive/items/{id}/workbook/worksheets/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/format/fill/setsolidcolor":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend/format/fill/setsolidcolor":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/setdata":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/setposition":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title/format/fill/setsolidcolor":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/names/add":467,"POST /me/drive/items/{id}/workbook/worksheets/{id}/pivottables/refreshall":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/pivottables/{id}/refresh":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/protection/protect":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/protection/unprotect":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/delete":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/autofitcolumns":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/autofitrows":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/borders":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/format/fill/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/insert":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/merge":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/row":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/sort/apply":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range(address='')/unmerge":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/range/resizedrange(deltarows={id},deltacolumns={id})":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/clearfilters":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/apply":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/converttorange":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/reapplyfilters":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/add":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/apply":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/clear":187,"POST /me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/reapply":187,"POST /me/drive/items/{id}:/{id}:/createuploadsession":297,"POST /me/drive/root:/{id}:/assignsensitivitylabel":295,"POST /me/drive/root:/{id}:/extractsensitivitylabels":298,"POST /me/drive/root:/{id}:/workbook/application/calculate":187,"POST /me/drive/root:/{id}:/workbook/closesession":187,"POST /me/drive/root:/{id}:/workbook/comments":187,"POST /me/drive/root:/{id}:/workbook/comments/{id}/replies":187,"POST /me/drive/root:/{id}:/workbook/createsession":187,"POST /me/drive/root:/{id}:/workbook/names/add":467,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/clear":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/delete":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/format/autofitcolumns":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/format/autofitrows":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/format/borders":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/insert":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/merge":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/row":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/names/{id}/range/unmerge":187,"POST /me/drive/root:/{id}:/workbook/refreshsession":187,"POST /me/drive/root:/{id}:/workbook/tables/add":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/clearfilters":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/add":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/filter/apply":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/filter/clear":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/clear":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/delete":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/autofitcolumns":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/autofitrows":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/insert":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/merge":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/row":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/unmerge":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/converttorange":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/reapplyfilters":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/rows":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/rows/add":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/sort/clear":187,"POST /me/drive/root:/{id}:/workbook/tables/{id}/sort/reapply":187,"POST /me/drive/root:/{id}:/workbook/worksheets/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/format/fill/setsolidcolor":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend/format/fill/setsolidcolor":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/setdata":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/setposition":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title/format/fill/setsolidcolor":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/names/add":467,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/refreshall":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/{id}/refresh":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/protection/protect":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/protection/unprotect":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/delete":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/autofitcolumns":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/autofitrows":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/borders":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/format/fill/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/insert":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/merge":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/row":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range(address='')/unmerge":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/range/resizedrange(deltarows={id},deltacolumns={id})":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/clearfilters":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/apply":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/converttorange":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/reapplyfilters":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/add":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/apply":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/clear":187,"POST /me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/reapply":187,"POST /me/events":143,"POST /me/events/{id}/accept":143,"POST /me/events/{id}/attachments":143,"POST /me/events/{id}/attachments/createuploadsession":79,"POST /me/events/{id}/cancel":143,"POST /me/events/{id}/decline":143,"POST /me/events/{id}/dismissreminder":143,"POST /me/events/{id}/forward":342,"POST /me/events/{id}/snoozereminder":143,"POST /me/events/{id}/tentativelyaccept":143,"POST /me/findmeetingtimes":700,"POST /me/getmailtips":703,"POST /me/getmembergroups":279,"POST /me/getmemberobjects":277,"POST /me/inferenceclassification/overrides":343,"POST /me/invalidateallrefreshtokens":1069,"POST /me/mailfolders":343,"POST /me/mailfolders/inbox/messagerules":458,"POST /me/mailfolders/sentitems/messages/{id}/recall":343,"POST /me/mailfolders/{id}/childfolders":343,"POST /me/mailfolders/{id}/childfolders/{id}/.../messages/{id}/attachments/{id}":343,"POST /me/mailfolders/{id}/copy":343,"POST /me/mailfolders/{id}/messages":343,"POST /me/mailfolders/{id}/messages/{id}/attachments":343,"POST /me/mailfolders/{id}/messages/{id}/copy":343,"POST /me/mailfolders/{id}/messages/{id}/createforward":343,"POST /me/mailfolders/{id}/messages/{id}/createreply":343,"POST /me/mailfolders/{id}/messages/{id}/createreplyall":343,"POST /me/mailfolders/{id}/messages/{id}/forward":459,"POST /me/mailfolders/{id}/messages/{id}/markasjunk":343,"POST /me/mailfolders/{id}/messages/{id}/markasnotjunk":343,"POST /me/mailfolders/{id}/messages/{id}/move":343,"POST /me/mailfolders/{id}/messages/{id}/permanentdelete":343,"POST /me/mailfolders/{id}/messages/{id}/reply":459,"POST /me/mailfolders/{id}/messages/{id}/replyall":459,"POST /me/mailfolders/{id}/move":343,"POST /me/mailfolders/{id}/permanentdelete":343,"POST /me/mailfolders/{id}/updateallmessagesreadstate":343,"POST /me/mailfolders/{id}/userconfigurations":938,"POST /me/messages":343,"POST /me/messages/{id}/attachments":343,"POST /me/messages/{id}/attachments/createuploadsession":79,"POST /me/messages/{id}/copy":343,"POST /me/messages/{id}/createforward":343,"POST /me/messages/{id}/createreply":343,"POST /me/messages/{id}/createreplyall":343,"POST /me/messages/{id}/forward":459,"POST /me/messages/{id}/markasjunk":343,"POST /me/messages/{id}/markasnotjunk":343,"POST /me/messages/{id}/move":343,"POST /me/messages/{id}/permanentdelete":343,"POST /me/messages/{id}/reply":459,"POST /me/messages/{id}/replyall":459,"POST /me/messages/{id}/reportmessage":343,"POST /me/messages/{id}/send":459,"POST /me/notes":468,"POST /me/notes/{id}/attachments":468,"POST /me/notifications":962,"POST /me/onenote/notebooks":470,"POST /me/onenote/notebooks/getnotebookfromweburl":471,"POST /me/onenote/notebooks/{id}/copynotebook":470,"POST /me/onenote/notebooks/{id}/sectiongroups":470,"POST /me/onenote/notebooks/{id}/sections":470,"POST /me/onenote/pages":470,"POST /me/onenote/pages/{id}/copytosection":470,"POST /me/onenote/sectiongroups/{id}/sectiongroups":470,"POST /me/onenote/sectiongroups/{id}/sections":470,"POST /me/onenote/sections/{id}/copytonotebook":470,"POST /me/onenote/sections/{id}/copytosectiongroup":470,"POST /me/onenote/sections/{id}/pages":470,"POST /me/onlinemeetings":74,"POST /me/onlinemeetings/createorget":74,"POST /me/onlinemeetings/{id}/registration":74,"POST /me/onlinemeetings/{id}/registration/meetingregistration/customquestions":74,"POST /me/onlinemeetings/{id}/registration/registrants":74,"POST /me/onlinemeetings/{id}/sendvirtualappointmentremindersms":738,"POST /me/onlinemeetings/{id}/sendvirtualappointmentsms":738,"POST /me/outlook/mastercategories":458,"POST /me/outlook/taskfolders":222,"POST /me/outlook/taskfolders/{id}/tasks":222,"POST /me/outlook/taskgroups":222,"POST /me/outlook/taskgroups/{id}/taskfolders":222,"POST /me/outlook/taskgroups/{id}/taskfolders/{id}/tasks":222,"POST /me/outlook/tasks":222,"POST /me/outlook/tasks/{id}/attachments":222,"POST /me/outlook/tasks/{id}/complete":222,"POST /me/pendingaccessreviewinstances/{id}/acceptrecommendations":6,"POST /me/pendingaccessreviewinstances/{id}/batchrecorddecisions":5,"POST /me/presence/clearautomaticlocation":516,"POST /me/presence/clearlocation":516,"POST /me/presence/setautomaticlocation":516,"POST /me/presence/setmanuallocation":516,"POST /me/profile/account":732,"POST /me/profile/addresses":732,"POST /me/profile/anniversaries":732,"POST /me/profile/awards":732,"POST /me/profile/certifications":732,"POST /me/profile/educationalactivities":732,"POST /me/profile/emails":732,"POST /me/profile/interests":732,"POST /me/profile/languages":732,"POST /me/profile/names":982,"POST /me/profile/notes":732,"POST /me/profile/patents":732,"POST /me/profile/phones":732,"POST /me/profile/positions":732,"POST /me/profile/projects":732,"POST /me/profile/publications":732,"POST /me/profile/skills":732,"POST /me/profile/webaccounts":732,"POST /me/profile/websites":732,"POST /me/responsibilities":732,"POST /me/revokesigninsessions":721,"POST /me/security/informationprotection/sensitivitylabels/evaluateapplication":915,"POST /me/security/informationprotection/sensitivitylabels/evaluateclassificationresults":915,"POST /me/security/informationprotection/sensitivitylabels/evaluateremoval":915,"POST /me/security/informationprotection/sensitivitylabels/extractcontentlabel":915,"POST /me/sendmail":459,"POST /me/settings/workhoursandlocations/occurrences":221,"POST /me/settings/workhoursandlocations/occurrences/setcurrentlocation":221,"POST /me/settings/workhoursandlocations/recurrences":221,"POST /me/tasks/alltasks/{id}/move":222,"POST /me/tasks/lists":222,"POST /me/tasks/lists/{id}/tasks":222,"POST /me/tasks/lists/{id}/tasks/{id}/checklistitems":807,"POST /me/tasks/lists/{id}/tasks/{id}/linkedresources":807,"POST /me/tasks/lists/{id}/tasks/{id}/move":222,"POST /me/teamwork/sections/reorder":1050,"POST /me/teamwork/sections/{id}/items/reorder":1050,"POST /me/todo/lists":690,"POST /me/todo/lists/{id}/tasks":222,"POST /me/todo/lists/{id}/tasks/{id}/attachments":222,"POST /me/todo/lists/{id}/tasks/{id}/attachments/createuploadsession":222,"POST /me/todo/lists/{id}/tasks/{id}/checklistitems":222,"POST /me/todo/lists/{id}/tasks/{id}/linkedresources":222,"POST /me/translateexchangeids":722,"POST /networkaccess/cloudfirewallpolicies":955,"POST /networkaccess/cloudfirewallpolicies/{id}/policyrules":955,"POST /networkaccess/connectivity/branches":955,"POST /networkaccess/connectivity/branches/{id}/devicelinks":955,"POST /networkaccess/connectivity/branches/{id}/forwardingprofiles":957,"POST /networkaccess/filteringpolicies":955,"POST /networkaccess/filteringpolicies/{id}/policyrules":955,"POST /networkaccess/forwardingpolicies/{id}/updatepolicyrules":957,"POST /networkaccess/threatintelligencepolicies":955,"POST /networkaccess/tls/externalcertificateauthoritycertificates":955,"POST /networkaccess/tlsinspectionpolicies":955,"POST /networkaccess/tlsinspectionpolicies/{id}/policyrules":955,"POST /oauth2permissiongrants":472,"POST /onpremencryptedpayloads":419,"POST /onpremisespublishingprofiles/applicationproxy/connectorgroups":19,"POST /onpremisespublishingprofiles/applicationproxy/connectorgroups/{id}/members/$ref":842,"POST /onpremisespublishingprofiles/applicationproxy/connectors/{id}/memberof/$ref":842,"POST /onpremisespublishingprofiles/{id}/agentgroups":842,"POST /onpremisespublishingprofiles/{id}/agents/{id}/agentgroups/$ref":358,"POST /onpremisespublishingprofiles/{id}/publishedresources":967,"POST /onpremisespublishingprofiles/{id}/publishedresources/{id}/agentgroups/$ref":967,"POST /organization/{id}/branding/localizations":487,"POST /organization/{id}/branding/themes":968,"POST /organization/{id}/branding/themes/{id}/localizations":968,"POST /organization/{id}/certificatebasedauthconfiguration":160,"POST /organization/{id}/setmobiledevicemanagementauthority":427,"POST /pfxrecryptionrequests":419,"POST /pfxusercertificates":419,"POST /places":141,"POST /places/{id}/building/ingestmapfile":141,"POST /places/{id}/checkins":221,"POST /planner/buckets":508,"POST /planner/plans":508,"POST /planner/plans/{id}/archive":690,"POST /planner/plans/{id}/movetocontainer":983,"POST /planner/plans/{id}/unarchive":690,"POST /planner/rosters":690,"POST /planner/rosters/{id}/assignsensitivitylabel":690,"POST /planner/rosters/{id}/members":690,"POST /planner/tasks":508,"POST /planner/tasks/{id}/messages":222,"POST /planner/tasks/{id}/messages/{id}/setreaction":222,"POST /planner/tasks/{id}/messages/{id}/unsetreaction":222,"POST /policies/activitybasedtimeoutpolicies":9,"POST /policies/appmanagementpolicies":9,"POST /policies/authenticationstrengthpolicies":97,"POST /policies/authenticationstrengthpolicies/{id}/updateallowedcombinations":97,"POST /policies/b2bmanagementpolicies":804,"POST /policies/claimsmappingpolicies":9,"POST /policies/crosstenantaccesspolicy/default/m365capabilities":258,"POST /policies/crosstenantaccesspolicy/default/resettosystemdefault":256,"POST /policies/crosstenantaccesspolicy/partners":256,"POST /policies/crosstenantaccesspolicy/partners/{id}/m365capabilities":258,"POST /policies/crosstenantaccesspolicy/templates/multitenantorganizationidentitysynchronization/resettodefaultsettings":256,"POST /policies/crosstenantaccesspolicy/templates/multitenantorganizationpartnerconfiguration/resettodefaultsettings":256,"POST /policies/featurerolloutpolicies":357,"POST /policies/featurerolloutpolicies/{id}/appliesto/$ref":358,"POST /policies/homerealmdiscoverypolicies":9,"POST /policies/mobileappmanagementpolicies/{id}/includedgroups/$ref":948,"POST /policies/mobiledevicemanagementpolicies/{id}/includedgroups/$ref":948,"POST /policies/onpremauthenticationpolicies":963,"POST /policies/onpremauthenticationpolicies/{id}/appliesto/$ref":963,"POST /policies/permissiongrantpolicies":500,"POST /policies/permissiongrantpolicies/{id}/excludes":500,"POST /policies/permissiongrantpolicies/{id}/includes":500,"POST /policies/permissiongrantpreapprovalpolicies":500,"POST /print/printers/create":531,"POST /print/printers/{id}/jobs/{id}/abort":542,"POST /print/printers/{id}/jobs/{id}/cancel":541,"POST /print/printers/{id}/jobs/{id}/documents/{id}/createuploadsession":529,"POST /print/printers/{id}/jobs/{id}/redirect":543,"POST /print/printers/{id}/restorefactorydefaults":532,"POST /print/printers/{id}/tasktriggers":532,"POST /print/shares":526,"POST /print/shares/{id}/allowedgroups/$ref":526,"POST /print/shares/{id}/allowedusers/$ref":526,"POST /print/shares/{id}/jobs/{id}/documents/{id}/createuploadsession":529,"POST /print/shares/{id}/jobs/{id}/start":537,"POST /print/taskdefinitions":519,"POST /privacy/subjectrightsrequests":629,"POST /privacy/subjectrightsrequests/{id}/notes":629,"POST /privilegedaccess/azureresources/roleassignmentrequests/{id}/cancel":876,"POST /programcontrols":990,"POST /programs":988,"POST /reports/partners/billing/aggregatedusage/billed/export":495,"POST /reports/partners/billing/reconciliation/billed/export":495,"POST /reports/partners/billing/reconciliation/unbilled/export":495,"POST /reports/partners/billing/usage/billed/export":495,"POST /reports/partners/billing/usage/unbilled/export":495,"POST /riskyusers/confirmcompromised":573,"POST /riskyusers/confirmsafe":573,"POST /riskyusers/dismiss":573,"POST /rolemanagement/cloudpc/roleassignments":995,"POST /rolemanagement/cloudpc/roledefinitions":991,"POST /rolemanagement/defender/roleassignments":995,"POST /rolemanagement/defender/roledefinitions":991,"POST /rolemanagement/devicemanagement/roleassignments":995,"POST /rolemanagement/devicemanagement/roledefinitions":991,"POST /rolemanagement/directory/deleteditems/roledefinitions/{id}/restore":16,"POST /rolemanagement/directory/roleassignments":847,"POST /rolemanagement/directory/roleassignmentschedulerequests":563,"POST /rolemanagement/directory/roleassignmentschedulerequests/{id}/cancel":560,"POST /rolemanagement/directory/roledefinitions":991,"POST /rolemanagement/directory/roleeligibilityschedulerequests":562,"POST /rolemanagement/directory/roleeligibilityschedulerequests/{id}/cancel":562,"POST /rolemanagement/entitlementmanagement/roleassignments":847,"POST /rolemanagement/exchange/customappscopes":847,"POST /rolemanagement/exchange/roleassignments":847,"POST /schemaextensions":35,"POST /search/acronyms":578,"POST /search/bookmarks":578,"POST /search/qnas":578,"POST /search/query":579,"POST /security/alerts/updatealerts":62,"POST /security/alerts_v2":1002,"POST /security/alerts_v2/createalert":1002,"POST /security/alerts_v2/movealerts":581,"POST /security/alerts_v2/{id}/comments":582,"POST /security/attacksimulation/simulations":81,"POST /security/attacksimulation/trainingcampaigns":81,"POST /security/casemanagement/cases":1003,"POST /security/casemanagement/cases/{id}/activities":1003,"POST /security/casemanagement/cases/{id}/attachments":1003,"POST /security/casemanagement/cases/{id}/relations":1003,"POST /security/casemanagement/cases/{id}/tasks":1003,"POST /security/cases/ediscoverycases":591,"POST /security/cases/ediscoverycases/{id}/close":591,"POST /security/cases/ediscoverycases/{id}/custodians":591,"POST /security/cases/ediscoverycases/{id}/custodians/applyhold":591,"POST /security/cases/ediscoverycases/{id}/custodians/removehold":591,"POST /security/cases/ediscoverycases/{id}/custodians/updateindex":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/activate":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/applyhold":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/release":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/removehold":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/sitesources":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/unifiedgroupsources":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/updateindex":591,"POST /security/cases/ediscoverycases/{id}/custodians/{id}/usersources":591,"POST /security/cases/ediscoverycases/{id}/legalholds":591,"POST /security/cases/ediscoverycases/{id}/legalholds/{id}/disablepolicy":591,"POST /security/cases/ediscoverycases/{id}/legalholds/{id}/enablepolicy":591,"POST /security/cases/ediscoverycases/{id}/legalholds/{id}/retrypolicy":590,"POST /security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources":591,"POST /security/cases/ediscoverycases/{id}/legalholds/{id}/usersources":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/applyhold":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/removehold":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/applyhold":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/release":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/removehold":591,"POST /security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/updateindex":591,"POST /security/cases/ediscoverycases/{id}/reopen":591,"POST /security/cases/ediscoverycases/{id}/reviewsets":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/addtoreviewset":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/export":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/applytags":591,"POST /security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/export":591,"POST /security/cases/ediscoverycases/{id}/searches":591,"POST /security/cases/ediscoverycases/{id}/searches/{id}/additionalsources":590,"POST /security/cases/ediscoverycases/{id}/searches/{id}/custodiansources/$ref":590,"POST /security/cases/ediscoverycases/{id}/searches/{id}/estimatestatistics":591,"POST /security/cases/ediscoverycases/{id}/searches/{id}/exportreport":591,"POST /security/cases/ediscoverycases/{id}/searches/{id}/exportresult":591,"POST /security/cases/ediscoverycases/{id}/searches/{id}/noncustodialsources/$ref":590,"POST /security/cases/ediscoverycases/{id}/searches/{id}/purgedata":590,"POST /security/cases/ediscoverycases/{id}/settings/resettodefault":590,"POST /security/cases/ediscoverycases/{id}/tags":591,"POST /security/collaboration/analyzedemails/remediate":584,"POST /security/datasecurityandgovernance/processcontent":671,"POST /security/datasecurityandgovernance/processcontentasync":671,"POST /security/datasecurityandgovernance/protectionscopes/compute":684,"POST /security/datasecurityandgovernance/sensitivitylabels/computerightsandinheritance":606,"POST /security/identities/identityaccounts/{id}/invokeaction":597,"POST /security/identities/sensorcandidateactivationconfigurations":600,"POST /security/identities/sensorcandidates/activate":600,"POST /security/identities/sensormigration/migrate":1022,"POST /security/identities/sensors/regeneratedeploymentaccesskey":600,"POST /security/identities/settings/autoauditingconfiguration":589,"POST /security/incidents/mergeincidents":581,"POST /security/incidents/{id}/comments":602,"POST /security/informationprotection/sensitivitylabels/evaluateapplication":915,"POST /security/labels/authorities":592,"POST /security/labels/categories":592,"POST /security/labels/categories/{id}/subcategories":592,"POST /security/labels/citations":592,"POST /security/labels/departments":592,"POST /security/labels/fileplanreferences":592,"POST /security/labels/retentionlabels":604,"POST /security/rules/detectionrules":1008,"POST /security/runhuntingquery":605,"POST /security/securityactions":1023,"POST /security/securityactions/{id}/cancelsecurityaction":1023,"POST /security/securitycopilot/workspaces/{id}/sessions":1021,"POST /security/securitycopilot/workspaces/{id}/sessions/{id}/prompts":1021,"POST /security/securitycopilot/workspaces/{id}/sessions/{id}/prompts/{id}/evaluations":1021,"POST /security/subjectrightsrequests":629,"POST /security/subjectrightsrequests/{id}/notes":629,"POST /security/threatsubmission/emailthreats":1011,"POST /security/threatsubmission/emailthreats/{id}/review":1012,"POST /security/threatsubmission/emailthreatsubmissionpolicies":1015,"POST /security/threatsubmission/filethreats":1011,"POST /security/threatsubmission/urlthreats":1011,"POST /security/tiindicators":1054,"POST /security/tiindicators/deletetiindicators":1054,"POST /security/tiindicators/deletetiindicatorsbyexternalid":1054,"POST /security/tiindicators/submittiindicators":1054,"POST /security/tiindicators/updatetiindicators":1054,"POST /security/triggers/retentionevents":592,"POST /security/triggertypes/retentioneventtypes":592,"POST /security/workbooks":1006,"POST /security/zones":1016,"POST /security/zones/{id}/environments":1016,"POST /serviceprincipals":67,"POST /serviceprincipals(appid='{id}')/addkey":67,"POST /serviceprincipals(appid='{id}')/addpassword":67,"POST /serviceprincipals(appid='{id}')/addtokensigningcertificate":67,"POST /serviceprincipals(appid='{id}')/agentidentityblueprintprincipal/owners/$ref":30,"POST /serviceprincipals(appid='{id}')/delegatedpermissionclassifications":500,"POST /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration":614,"POST /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/approvedclientapps":77,"POST /serviceprincipals(appid='{id}')/remotedesktopsecurityconfiguration/targetdevicegroups":77,"POST /serviceprincipals(appid='{id}')/removekey":67,"POST /serviceprincipals(appid='{id}')/removepassword":67,"POST /serviceprincipals/agentidentity":27,"POST /serviceprincipals/agentidentity/{id}/communicationconfiguration/reset":788,"POST /serviceprincipals/agentidentityblueprintprincipal":42,"POST /serviceprincipals/{id}/addkey":67,"POST /serviceprincipals/{id}/addpassword":67,"POST /serviceprincipals/{id}/addtokensigningcertificate":67,"POST /serviceprincipals/{id}/agentidentity/owners/$ref":22,"POST /serviceprincipals/{id}/agentidentity/sponsors/$ref":23,"POST /serviceprincipals/{id}/agentidentityblueprintprincipal/owners/$ref":30,"POST /serviceprincipals/{id}/checkmembergroups":861,"POST /serviceprincipals/{id}/checkmemberobjects":277,"POST /serviceprincipals/{id}/delegatedpermissionclassifications":500,"POST /serviceprincipals/{id}/getmembergroups":279,"POST /serviceprincipals/{id}/getmemberobjects":277,"POST /serviceprincipals/{id}/remotedesktopsecurityconfiguration":614,"POST /serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps":77,"POST /serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups":77,"POST /serviceprincipals/{id}/removekey":67,"POST /serviceprincipals/{id}/removepassword":67,"POST /serviceprincipals/{id}/synchronization/acquireaccesstoken":634,"POST /serviceprincipals/{id}/synchronization/jobs":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/bulkupload":636,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/pause":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/provisionondemand":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/restart":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/schema/directories/{id}/discover":633,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/schema/parseexpression":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/start":634,"POST /serviceprincipals/{id}/synchronization/jobs/{id}/validatecredentials":634,"POST /serviceprincipals/{id}/synchronization/templates/{id}/schema/parseexpression":634,"POST /settings":387,"POST /shares/{id}/driveitem/archive":863,"POST /shares/{id}/driveitem/preview":293,"POST /shares/{id}/driveitem/unarchive":863,"POST /shares/{id}/permission/grant":296,"POST /shares/{id}/root/archive":863,"POST /shares/{id}/root/unarchive":863,"POST /sites":1038,"POST /sites/f2d90359-865b-4b6c-8848-d2722dd630e5/lists/1d702d60-503c-4924-abfd-028c65fc89ed/permissions":243,"POST /sites/{id}/archive":1037,"POST /sites/{id}/columns":231,"POST /sites/{id}/contentmodels/{id}/addtodrive":843,"POST /sites/{id}/contentmodels/{id}/removefromdrive":845,"POST /sites/{id}/contenttypes":231,"POST /sites/{id}/contenttypes/addcopyfromcontenttypehub":231,"POST /sites/{id}/contenttypes/{id}/associatewithhubsites":231,"POST /sites/{id}/contenttypes/{id}/columns":231,"POST /sites/{id}/contenttypes/{id}/copytodefaultcontentlocation":243,"POST /sites/{id}/contenttypes/{id}/publish":244,"POST /sites/{id}/contenttypes/{id}/unpublish":244,"POST /sites/{id}/documentprocessingjobs":845,"POST /sites/{id}/drive/items/{id}/assignsensitivitylabel":295,"POST /sites/{id}/drive/items/{id}/checkin":296,"POST /sites/{id}/drive/items/{id}/checkout":296,"POST /sites/{id}/drive/items/{id}/children":296,"POST /sites/{id}/drive/items/{id}/copy":296,"POST /sites/{id}/drive/items/{id}/createlink":296,"POST /sites/{id}/drive/items/{id}/createuploadsession":297,"POST /sites/{id}/drive/items/{id}/discardcheckout":296,"POST /sites/{id}/drive/items/{id}/extractsensitivitylabels":298,"POST /sites/{id}/drive/items/{id}/follow":293,"POST /sites/{id}/drive/items/{id}/invite":296,"POST /sites/{id}/drive/items/{id}/permissions":303,"POST /sites/{id}/drive/items/{id}/permissions/{id}/revokegrants":296,"POST /sites/{id}/drive/items/{id}/preview":293,"POST /sites/{id}/drive/items/{id}/versions/{id}/restoreversion":296,"POST /sites/{id}/drive/items/{id}:/{id}:/createuploadsession":297,"POST /sites/{id}/drive/root:/{id}:/assignsensitivitylabel":295,"POST /sites/{id}/drive/root:/{id}:/extractsensitivitylabels":298,"POST /sites/{id}/items/{id}/versions/{id}/restoreversion":243,"POST /sites/{id}/lists":443,"POST /sites/{id}/lists/{id}/columns":231,"POST /sites/{id}/lists/{id}/contenttypes/addcopy":231,"POST /sites/{id}/lists/{id}/contenttypes/addcopyfromcontenttypehub":231,"POST /sites/{id}/lists/{id}/contenttypes/{id}/columns":231,"POST /sites/{id}/lists/{id}/items":123,"POST /sites/{id}/lists/{id}/items/{id}/createlink":296,"POST /sites/{id}/lists/{id}/items/{id}/documentsetversions":282,"POST /sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}/restore":282,"POST /sites/{id}/lists/{id}/items/{id}/driveitem/permissions/{id}/revokegrants":296,"POST /sites/{id}/lists/{id}/items/{id}/permissions":243,"POST /sites/{id}/lists/{id}/items/{id}/versions/{id}/restoreversion":243,"POST /sites/{id}/onenote/notebooks":470,"POST /sites/{id}/onenote/notebooks/getnotebookfromweburl":471,"POST /sites/{id}/onenote/notebooks/{id}/copynotebook":470,"POST /sites/{id}/onenote/notebooks/{id}/sectiongroups":470,"POST /sites/{id}/onenote/notebooks/{id}/sections":470,"POST /sites/{id}/onenote/pages":470,"POST /sites/{id}/onenote/pages/{id}/copytosection":470,"POST /sites/{id}/onenote/sectiongroups/{id}/sectiongroups":470,"POST /sites/{id}/onenote/sectiongroups/{id}/sections":470,"POST /sites/{id}/onenote/sections/{id}/copytonotebook":470,"POST /sites/{id}/onenote/sections/{id}/copytosectiongroup":470,"POST /sites/{id}/onenote/sections/{id}/pages":470,"POST /sites/{id}/pages":123,"POST /sites/{id}/pages/createfromtemplate":243,"POST /sites/{id}/pages/{id}/newslinkpage/publish":296,"POST /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections":123,"POST /sites/{id}/pages/{id}/sitepage/canvaslayout/horizontalsections/{id}/columns/{id}/webparts":123,"POST /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection/webparts":123,"POST /sites/{id}/pages/{id}/sitepage/publish":296,"POST /sites/{id}/pages/{id}/sitepage/saveastemplate":123,"POST /sites/{id}/pagetemplates/pagetemplate":123,"POST /sites/{id}/permissions":1039,"POST /sites/{id}/unarchive":1037,"POST /solutions/approval/approvalitems":792,"POST /solutions/approval/approvalitems/{id}/cancel":792,"POST /solutions/approval/approvalitems/{id}/responses":794,"POST /solutions/approval/provision":793,"POST /solutions/backuprestore/enable":115,"POST /solutions/backuprestore/exchangeprotectionpolicies":122,"POST /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxexclusionunitsbulkadditionjobs":122,"POST /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules":122,"POST /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}/deleteandunprotect":122,"POST /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxinclusionrules/{id}/run":122,"POST /solutions/backuprestore/exchangeprotectionpolicies/{id}/mailboxprotectionunitsbulkadditionjobs":118,"POST /solutions/backuprestore/exchangerestoresessions":117,"POST /solutions/backuprestore/exchangerestoresessions/{id}/mailboxrestoreartifactsbulkadditionrequests":117,"POST /solutions/backuprestore/onedriveforbusinessbrowsesessions":117,"POST /solutions/backuprestore/onedriveforbusinessbrowsesessions/{id}/browse":117,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies":122,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveexclusionunitsbulkadditionjobs":122,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules":122,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}/deleteandunprotect":122,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveinclusionrules/{id}/run":122,"POST /solutions/backuprestore/onedriveforbusinessprotectionpolicies/{id}/driveprotectionunitsbulkadditionjobs":118,"POST /solutions/backuprestore/onedriveforbusinessrestoresessions":117,"POST /solutions/backuprestore/onedriveforbusinessrestoresessions/{id}/driverestoreartifactsbulkadditionrequests":117,"POST /solutions/backuprestore/protectionpolicies/{id}/activate":122,"POST /solutions/backuprestore/protectionpolicies/{id}/deactivate":122,"POST /solutions/backuprestore/protectionunits/{id}/canceloffboard":556,"POST /solutions/backuprestore/protectionunits/{id}/offboard":556,"POST /solutions/backuprestore/restorepoints/search":119,"POST /solutions/backuprestore/restoresessions/{id}/activate":117,"POST /solutions/backuprestore/serviceapps":115,"POST /solutions/backuprestore/serviceapps/{id}/activate":330,"POST /solutions/backuprestore/serviceapps/{id}/deactivate":330,"POST /solutions/backuprestore/sharepointbrowsesessions":117,"POST /solutions/backuprestore/sharepointbrowsesessions/{id}/browse":117,"POST /solutions/backuprestore/sharepointprotectionpolicies":122,"POST /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteexclusionunitsbulkadditionjobs":122,"POST /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules":122,"POST /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteinclusionrules/{id}/run":122,"POST /solutions/backuprestore/sharepointprotectionpolicies/{id}/siteprotectionunitsbulkadditionjobs":118,"POST /solutions/backuprestore/sharepointrestoresessions":117,"POST /solutions/backuprestore/sharepointrestoresessions/{id}/siterestoreartifactsbulkadditionrequests":117,"POST /solutions/bookingbusinesses":129,"POST /solutions/bookingbusinesses/{id}/appointments":127,"POST /solutions/bookingbusinesses/{id}/appointments/{id}/cancel":126,"POST /solutions/bookingbusinesses/{id}/customers":135,"POST /solutions/bookingbusinesses/{id}/customquestions":126,"POST /solutions/bookingbusinesses/{id}/getstaffavailability":131,"POST /solutions/bookingbusinesses/{id}/publish":137,"POST /solutions/bookingbusinesses/{id}/services":136,"POST /solutions/bookingbusinesses/{id}/staffmembers":136,"POST /solutions/bookingbusinesses/{id}/unpublish":137,"POST /solutions/businessscenarios":809,"POST /solutions/businessscenarios/{id}/planner/getplan":813,"POST /solutions/businessscenarios/{id}/planner/tasks":811,"POST /solutions/migrations/crosstenantmigrationjobs":947,"POST /solutions/sharepoint/migrations/crossorganizationmigrationtasks":1029,"POST /solutions/sharepoint/migrations/crossorganizationmigrationtasks/{id}/cancel":1029,"POST /solutions/virtualevents/townhalls":740,"POST /solutions/virtualevents/townhalls/{id}/cancel":740,"POST /solutions/virtualevents/townhalls/{id}/presenters":740,"POST /solutions/virtualevents/townhalls/{id}/publish":740,"POST /solutions/virtualevents/townhalls/{id}/registrationconfiguration/questions":740,"POST /solutions/virtualevents/townhalls/{id}/registrations":748,"POST /solutions/virtualevents/townhalls/{id}/registrations/{id}/cancel":741,"POST /solutions/virtualevents/townhalls/{id}/setexternaleventinformation":740,"POST /solutions/virtualevents/webinars":740,"POST /solutions/virtualevents/webinars/{id}/cancel":740,"POST /solutions/virtualevents/webinars/{id}/presenters":740,"POST /solutions/virtualevents/webinars/{id}/publish":740,"POST /solutions/virtualevents/webinars/{id}/registrationconfiguration/questions":740,"POST /solutions/virtualevents/webinars/{id}/registrations":748,"POST /solutions/virtualevents/webinars/{id}/registrations/{id}/cancel":741,"POST /solutions/virtualevents/webinars/{id}/setexternaleventinformation":740,"POST /storage/filestorage/containers":366,"POST /storage/filestorage/containers/{id}/activate":366,"POST /storage/filestorage/containers/{id}/archive":363,"POST /storage/filestorage/containers/{id}/columns":366,"POST /storage/filestorage/containers/{id}/lock":363,"POST /storage/filestorage/containers/{id}/migrationjobs":366,"POST /storage/filestorage/containers/{id}/permanentdelete":363,"POST /storage/filestorage/containers/{id}/permissions":363,"POST /storage/filestorage/containers/{id}/provisionmigrationcontainers":366,"POST /storage/filestorage/containers/{id}/recyclebin/items(driveitemid='{id}')/restore":366,"POST /storage/filestorage/containers/{id}/recyclebin/items/delete":366,"POST /storage/filestorage/containers/{id}/recyclebin/items/restore":366,"POST /storage/filestorage/containers/{id}/sharepointgroups":367,"POST /storage/filestorage/containers/{id}/sharepointgroups/{id}/members":367,"POST /storage/filestorage/containers/{id}/transferprincipalownership":873,"POST /storage/filestorage/containers/{id}/unarchive":363,"POST /storage/filestorage/containers/{id}/unlock":363,"POST /storage/filestorage/containertypes":365,"POST /storage/filestorage/containertypes/{id}/permissions":365,"POST /storage/filestorage/deletedcontainers/{id}/restore":363,"POST /teams":651,"POST /teams/{id}/archive":639,"POST /teams/{id}/channels":184,"POST /teams/{id}/channels/{id}/archive":163,"POST /teams/{id}/channels/{id}/completemigration":164,"POST /teams/{id}/channels/{id}/enabledapps/$ref":165,"POST /teams/{id}/channels/{id}/members":166,"POST /teams/{id}/channels/{id}/messages":182,"POST /teams/{id}/channels/{id}/messages/forwardtochat":218,"POST /teams/{id}/channels/{id}/messages/{id}/replies":182,"POST /teams/{id}/channels/{id}/messages/{id}/replies/forwardtochat":218,"POST /teams/{id}/channels/{id}/messages/{id}/replies/{id}/setreaction":219,"POST /teams/{id}/channels/{id}/messages/{id}/replies/{id}/softdelete":199,"POST /teams/{id}/channels/{id}/messages/{id}/replies/{id}/undosoftdelete":199,"POST /teams/{id}/channels/{id}/messages/{id}/replies/{id}/unsetreaction":219,"POST /teams/{id}/channels/{id}/messages/{id}/setreaction":219,"POST /teams/{id}/channels/{id}/messages/{id}/softdelete":199,"POST /teams/{id}/channels/{id}/messages/{id}/undosoftdelete":199,"POST /teams/{id}/channels/{id}/messages/{id}/unsetreaction":219,"POST /teams/{id}/channels/{id}/provisionemail":185,"POST /teams/{id}/channels/{id}/removeemail":185,"POST /teams/{id}/channels/{id}/startmigration":164,"POST /teams/{id}/channels/{id}/tabs":183,"POST /teams/{id}/channels/{id}/unarchive":163,"POST /teams/{id}/clone":640,"POST /teams/{id}/completemigration":164,"POST /teams/{id}/installedapps":1043,"POST /teams/{id}/installedapps/{id}/upgrade":653,"POST /teams/{id}/members":252,"POST /teams/{id}/members/add":252,"POST /teams/{id}/members/remove":251,"POST /teams/{id}/schedule/daynotes":262,"POST /teams/{id}/schedule/offershiftrequests":162,"POST /teams/{id}/schedule/offershiftrequests/{id}/approve":162,"POST /teams/{id}/schedule/offershiftrequests/{id}/approveforuser":1001,"POST /teams/{id}/schedule/offershiftrequests/{id}/decline":162,"POST /teams/{id}/schedule/offershiftrequests/{id}/declineforuser":1001,"POST /teams/{id}/schedule/openshiftchangerequests":162,"POST /teams/{id}/schedule/openshiftchangerequests/{id}/approve":162,"POST /teams/{id}/schedule/openshiftchangerequests/{id}/approveforuser":1001,"POST /teams/{id}/schedule/openshiftchangerequests/{id}/decline":162,"POST /teams/{id}/schedule/openshiftchangerequests/{id}/declineforuser":1001,"POST /teams/{id}/schedule/openshifts":483,"POST /teams/{id}/schedule/openshifts/{id}/stagefordeletion":162,"POST /teams/{id}/schedule/schedulinggroups":162,"POST /teams/{id}/schedule/share":162,"POST /teams/{id}/schedule/shifts":253,"POST /teams/{id}/schedule/shifts/{id}/stagefordeletion":162,"POST /teams/{id}/schedule/swapshiftschangerequests":162,"POST /teams/{id}/schedule/swapshiftschangerequests/{id}/approve":162,"POST /teams/{id}/schedule/swapshiftschangerequests/{id}/approveforuser":1001,"POST /teams/{id}/schedule/swapshiftschangerequests/{id}/decline":162,"POST /teams/{id}/schedule/swapshiftschangerequests/{id}/declineforuser":1001,"POST /teams/{id}/schedule/timecards":262,"POST /teams/{id}/schedule/timecards/clockin":262,"POST /teams/{id}/schedule/timecards/{id}/clockout":262,"POST /teams/{id}/schedule/timecards/{id}/confirm":262,"POST /teams/{id}/schedule/timecards/{id}/confirmforuser":1001,"POST /teams/{id}/schedule/timecards/{id}/endbreak":262,"POST /teams/{id}/schedule/timecards/{id}/startbreak":262,"POST /teams/{id}/schedule/timeoffreasons":253,"POST /teams/{id}/schedule/timeoffrequests":262,"POST /teams/{id}/schedule/timeoffrequests/{id}/approve":162,"POST /teams/{id}/schedule/timeoffrequests/{id}/approveforuser":1001,"POST /teams/{id}/schedule/timeoffrequests/{id}/decline":162,"POST /teams/{id}/schedule/timeoffrequests/{id}/declineforuser":1001,"POST /teams/{id}/schedule/timesoff":162,"POST /teams/{id}/schedule/timesoff/{id}/stagefordeletion":162,"POST /teams/{id}/sendactivitynotification":652,"POST /teams/{id}/tags":666,"POST /teams/{id}/tags/{id}/members":668,"POST /teams/{id}/unarchive":639,"POST /teamwork/deletedchats/{id}/undodelete":193,"POST /teamwork/determineifinteractionisallowed":1045,"POST /teamwork/devices/{id}/restart":1047,"POST /teamwork/devices/{id}/rundiagnostics":1047,"POST /teamwork/devices/{id}/updatesoftware":1047,"POST /teamwork/messaging/customemojis":1049,"POST /teamwork/sendactivitynotificationtorecipients":664,"POST /teamwork/workforceintegrations":753,"POST /tenantrelationships/delegatedadminrelationships":263,"POST /tenantrelationships/delegatedadminrelationships/{id}/accessassignments":263,"POST /tenantrelationships/delegatedadminrelationships/{id}/requests":263,"POST /tenantrelationships/managedtenants/managementactions/{id}/apply":944,"POST /tenantrelationships/managedtenants/managementactiontenantdeploymentstatuses/changedeploymentstatus":944,"POST /tenantrelationships/managedtenants/tenantgroups/tenantsearch":939,"POST /tenantrelationships/managedtenants/tenants/{id}/offboardtenant":944,"POST /tenantrelationships/managedtenants/tenants/{id}/resettenantonboardingstatus":944,"POST /tenantrelationships/managedtenants/tenanttags":944,"POST /tenantrelationships/managedtenants/tenanttags/{id}/assigntag":944,"POST /tenantrelationships/managedtenants/tenanttags/{id}/unassigntag":944,"POST /tenantrelationships/multitenantorganization/tenants":464,"POST /termstore/groups":686,"POST /termstore/sets":686,"POST /termstore/sets/{id}/children":686,"POST /termstore/sets/{id}/terms/{id}/children":686,"POST /termstore/sets/{id}/terms/{id}/relations":686,"POST /trustframework/keysets":1057,"POST /trustframework/keysets/{id}/generatekey":1057,"POST /trustframework/keysets/{id}/uploadcertificate":1057,"POST /trustframework/keysets/{id}/uploadpkcs12":1057,"POST /trustframework/keysets/{id}/uploadsecret":1057,"POST /trustframework/policies":1058,"POST /users":719,"POST /users/agentuser":44,"POST /users/security/informationprotection/sensitivitylabels/evaluateclassificationresults":915,"POST /users/security/informationprotection/sensitivitylabels/evaluateremoval":915,"POST /users/security/informationprotection/sensitivitylabels/extractcontentlabel":915,"POST /users/validatepassword":1075,"POST /users/{id}/approleassignments":56,"POST /users/{id}/assignlicense":695,"POST /users/{id}/authentication/emailmethods":92,"POST /users/{id}/authentication/externalauthenticationmethods":84,"POST /users/{id}/authentication/fido2methods":799,"POST /users/{id}/authentication/hardwareoathmethods":796,"POST /users/{id}/authentication/hardwareoathmethods/assignandactivate":796,"POST /users/{id}/authentication/hardwareoathmethods/assignandactivatebyserialnumber":796,"POST /users/{id}/authentication/hardwareoathmethods/{id}/activate":796,"POST /users/{id}/authentication/hardwareoathmethods/{id}/deactivate":796,"POST /users/{id}/authentication/methods/{id}/resetpassword":106,"POST /users/{id}/authentication/phonemethods":94,"POST /users/{id}/authentication/phonemethods/{id}/disablesmssignin":504,"POST /users/{id}/authentication/phonemethods/{id}/enablesmssignin":504,"POST /users/{id}/authentication/temporaryaccesspassmethods":91,"POST /users/{id}/calendar/events":143,"POST /users/{id}/calendar/events/{id}/accept":143,"POST /users/{id}/calendar/events/{id}/cancel":143,"POST /users/{id}/calendar/events/{id}/decline":143,"POST /users/{id}/calendar/events/{id}/dismissreminder":143,"POST /users/{id}/calendar/events/{id}/forward":342,"POST /users/{id}/calendar/events/{id}/snoozereminder":143,"POST /users/{id}/calendar/events/{id}/tentativelyaccept":143,"POST /users/{id}/calendar/getschedule":145,"POST /users/{id}/calendargroups":143,"POST /users/{id}/calendargroups/{id}/calendars":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/accept":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/cancel":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/decline":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/dismissreminder":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/forward":342,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/snoozereminder":143,"POST /users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/tentativelyaccept":143,"POST /users/{id}/calendars":143,"POST /users/{id}/calendars/permanentdelete":143,"POST /users/{id}/calendars/{id}/events":143,"POST /users/{id}/calendars/{id}/events/{id}/accept":143,"POST /users/{id}/calendars/{id}/events/{id}/cancel":143,"POST /users/{id}/calendars/{id}/events/{id}/decline":143,"POST /users/{id}/calendars/{id}/events/{id}/dismissreminder":143,"POST /users/{id}/calendars/{id}/events/{id}/forward":342,"POST /users/{id}/calendars/{id}/events/{id}/snoozereminder":143,"POST /users/{id}/calendars/{id}/events/{id}/tentativelyaccept":143,"POST /users/{id}/calendarview/{id}/permanentdelete":143,"POST /users/{id}/chats/{id}/messages/{id}/softdelete":199,"POST /users/{id}/chats/{id}/messages/{id}/undosoftdelete":199,"POST /users/{id}/checkmembergroups":861,"POST /users/{id}/checkmemberobjects":277,"POST /users/{id}/cloudlicensing/assignments":837,"POST /users/{id}/cloudlicensing/assignments/reprocessassignments":829,"POST /users/{id}/cloudpcs/{id}/reboot":227,"POST /users/{id}/cloudpcs/{id}/rename":227,"POST /users/{id}/cloudpcs/{id}/reprovision":227,"POST /users/{id}/cloudpcs/{id}/start":230,"POST /users/{id}/cloudpcs/{id}/stop":230,"POST /users/{id}/cloudpcs/{id}/troubleshoot":227,"POST /users/{id}/contactfolders":241,"POST /users/{id}/contactfolders/{id}/childfolders":241,"POST /users/{id}/contactfolders/{id}/childfolders/{id}/permanentdelete":241,"POST /users/{id}/contactfolders/{id}/contacts":241,"POST /users/{id}/contactfolders/{id}/contacts/{id}/permanentdelete":241,"POST /users/{id}/contactfolders/{id}/permanentdelete":241,"POST /users/{id}/contacts":241,"POST /users/{id}/contacts/{id}/permanentdelete":241,"POST /users/{id}/convertexternaltointernalmemberuser":1066,"POST /users/{id}/datasecurityandgovernance/activities/contentactivities":8,"POST /users/{id}/datasecurityandgovernance/processcontent":724,"POST /users/{id}/datasecurityandgovernance/protectionscopes/compute":727,"POST /users/{id}/deletepasswordsinglesignoncredentials":878,"POST /users/{id}/distributionlists":241,"POST /users/{id}/distributionlists/{id}/addmembers":241,"POST /users/{id}/distributionlists/{id}/deletemembers":241,"POST /users/{id}/drive/items/{id}/assignsensitivitylabel":295,"POST /users/{id}/drive/items/{id}/checkin":296,"POST /users/{id}/drive/items/{id}/checkout":296,"POST /users/{id}/drive/items/{id}/children":296,"POST /users/{id}/drive/items/{id}/copy":296,"POST /users/{id}/drive/items/{id}/createlink":296,"POST /users/{id}/drive/items/{id}/createuploadsession":297,"POST /users/{id}/drive/items/{id}/discardcheckout":296,"POST /users/{id}/drive/items/{id}/extractsensitivitylabels":298,"POST /users/{id}/drive/items/{id}/follow":293,"POST /users/{id}/drive/items/{id}/invite":296,"POST /users/{id}/drive/items/{id}/permissions":303,"POST /users/{id}/drive/items/{id}/permissions/{id}/revokegrants":296,"POST /users/{id}/drive/items/{id}/preview":293,"POST /users/{id}/drive/items/{id}/unfollow":293,"POST /users/{id}/drive/items/{id}/versions/{id}/restoreversion":296,"POST /users/{id}/drive/items/{id}/workbook/comments":187,"POST /users/{id}/drive/items/{id}:/{id}:/createuploadsession":297,"POST /users/{id}/drive/root:/{id}:/assignsensitivitylabel":295,"POST /users/{id}/drive/root:/{id}:/extractsensitivitylabels":298,"POST /users/{id}/drive/root:/{id}:/workbook/comments":187,"POST /users/{id}/employeeexperience/storyline/follow":1040,"POST /users/{id}/employeeexperience/storyline/unfollow":1040,"POST /users/{id}/events":143,"POST /users/{id}/events/{id}/accept":143,"POST /users/{id}/events/{id}/attachments":143,"POST /users/{id}/events/{id}/cancel":143,"POST /users/{id}/events/{id}/decline":143,"POST /users/{id}/events/{id}/dismissreminder":143,"POST /users/{id}/events/{id}/forward":342,"POST /users/{id}/events/{id}/permanentdelete":143,"POST /users/{id}/events/{id}/snoozereminder":143,"POST /users/{id}/events/{id}/tentativelyaccept":143,"POST /users/{id}/exportpersonaldata":699,"POST /users/{id}/findmeetingtimes":700,"POST /users/{id}/followedsites/add":123,"POST /users/{id}/followedsites/remove":123,"POST /users/{id}/getmailtips":703,"POST /users/{id}/getmembergroups":279,"POST /users/{id}/getmemberobjects":277,"POST /users/{id}/getpasswordsinglesignoncredentials":878,"POST /users/{id}/identitygovernance.attest":1065,"POST /users/{id}/inferenceclassification/overrides":343,"POST /users/{id}/informationprotection/policy/labels/evaluateapplication":915,"POST /users/{id}/invalidateallrefreshtokens":1069,"POST /users/{id}/mailfolders":343,"POST /users/{id}/mailfolders/inbox/messagerules":458,"POST /users/{id}/mailfolders/sentitems/messages/{id}/recall":343,"POST /users/{id}/mailfolders/{id}/childfolders":343,"POST /users/{id}/mailfolders/{id}/childfolders/{id}/messages/{id}/attachments/{id}":343,"POST /users/{id}/mailfolders/{id}/childfolders/{id}/permanentdelete":343,"POST /users/{id}/mailfolders/{id}/copy":343,"POST /users/{id}/mailfolders/{id}/messages":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/attachments":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/copy":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/createforward":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/createreply":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/createreplyall":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/forward":459,"POST /users/{id}/mailfolders/{id}/messages/{id}/markasjunk":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/markasnotjunk":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/move":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/permanentdelete":343,"POST /users/{id}/mailfolders/{id}/messages/{id}/reply":459,"POST /users/{id}/mailfolders/{id}/messages/{id}/replyall":459,"POST /users/{id}/mailfolders/{id}/move":343,"POST /users/{id}/mailfolders/{id}/permanentdelete":343,"POST /users/{id}/mailfolders/{id}/updateallmessagesreadstate":343,"POST /users/{id}/mailfolders/{id}/userconfigurations":938,"POST /users/{id}/manager/$ref":44,"POST /users/{id}/messages":343,"POST /users/{id}/messages/{id}/attachments":343,"POST /users/{id}/messages/{id}/copy":343,"POST /users/{id}/messages/{id}/createforward":343,"POST /users/{id}/messages/{id}/createreply":343,"POST /users/{id}/messages/{id}/createreplyall":343,"POST /users/{id}/messages/{id}/event/calendar/calendarview/{id}/permanentdelete":143,"POST /users/{id}/messages/{id}/event/calendar/events/{id}/permanentdelete":143,"POST /users/{id}/messages/{id}/event/exceptionoccurrences/{id}/permanentdelete":143,"POST /users/{id}/messages/{id}/event/instances/{id}/permanentdelete":143,"POST /users/{id}/messages/{id}/event/permanentdelete":143,"POST /users/{id}/messages/{id}/forward":459,"POST /users/{id}/messages/{id}/markasjunk":343,"POST /users/{id}/messages/{id}/markasnotjunk":343,"POST /users/{id}/messages/{id}/move":343,"POST /users/{id}/messages/{id}/permanentdelete":343,"POST /users/{id}/messages/{id}/reply":459,"POST /users/{id}/messages/{id}/replyall":459,"POST /users/{id}/messages/{id}/reportmessage":343,"POST /users/{id}/messages/{id}/send":459,"POST /users/{id}/messages/{id}/unsubscribe":459,"POST /users/{id}/mobileappintentandstates":429,"POST /users/{id}/mobileapptroubleshootingevents":429,"POST /users/{id}/notes":468,"POST /users/{id}/notes/{id}/attachments":468,"POST /users/{id}/onenote/notebooks":470,"POST /users/{id}/onenote/notebooks/getnotebookfromweburl":471,"POST /users/{id}/onenote/notebooks/{id}/copynotebook":470,"POST /users/{id}/onenote/notebooks/{id}/sectiongroups":470,"POST /users/{id}/onenote/notebooks/{id}/sections":470,"POST /users/{id}/onenote/pages":470,"POST /users/{id}/onenote/pages/{id}/copytosection":470,"POST /users/{id}/onenote/sectiongroups/{id}/sectiongroups":470,"POST /users/{id}/onenote/sectiongroups/{id}/sections":470,"POST /users/{id}/onenote/sections/{id}/copytonotebook":470,"POST /users/{id}/onenote/sections/{id}/copytosectiongroup":470,"POST /users/{id}/onenote/sections/{id}/pages":470,"POST /users/{id}/onlinemeetings":74,"POST /users/{id}/onlinemeetings/createorget":74,"POST /users/{id}/onlinemeetings/{id}/registration":74,"POST /users/{id}/onlinemeetings/{id}/registration/registrants":945,"POST /users/{id}/onlinemeetings/{id}/sendvirtualappointmentremindersms":738,"POST /users/{id}/onlinemeetings/{id}/sendvirtualappointmentsms":738,"POST /users/{id}/outlook/mastercategories":458,"POST /users/{id}/outlook/taskfolders":222,"POST /users/{id}/outlook/taskfolders/{id}/permanentdelete":222,"POST /users/{id}/outlook/taskfolders/{id}/tasks":222,"POST /users/{id}/outlook/taskgroups":222,"POST /users/{id}/outlook/taskgroups/{id}/taskfolders":222,"POST /users/{id}/outlook/taskgroups/{id}/taskfolders/{id}/permanentdelete":222,"POST /users/{id}/outlook/taskgroups/{id}/taskfolders/{id}/tasks":222,"POST /users/{id}/outlook/taskgroups/{id}/taskfolders/{id}/tasks/{id}/permanentdelete":222,"POST /users/{id}/outlook/tasks":222,"POST /users/{id}/outlook/tasks/{id}/attachments":222,"POST /users/{id}/outlook/tasks/{id}/complete":222,"POST /users/{id}/outlook/tasks/{id}/permanentdelete":222,"POST /users/{id}/presence/clearpresence":517,"POST /users/{id}/presence/clearuserpreferredpresence":517,"POST /users/{id}/presence/setpresence":517,"POST /users/{id}/presence/setstatusmessage":517,"POST /users/{id}/presence/setuserpreferredpresence":517,"POST /users/{id}/profile/account":732,"POST /users/{id}/profile/addresses":732,"POST /users/{id}/profile/anniversaries":732,"POST /users/{id}/profile/awards":732,"POST /users/{id}/profile/certifications":732,"POST /users/{id}/profile/educationalactivities":732,"POST /users/{id}/profile/emails":732,"POST /users/{id}/profile/interests":732,"POST /users/{id}/profile/languages":732,"POST /users/{id}/profile/names":982,"POST /users/{id}/profile/notes":732,"POST /users/{id}/profile/patents":732,"POST /users/{id}/profile/phones":732,"POST /users/{id}/profile/positions":732,"POST /users/{id}/profile/projects":732,"POST /users/{id}/profile/publications":732,"POST /users/{id}/profile/skills":732,"POST /users/{id}/profile/webaccounts":732,"POST /users/{id}/profile/websites":732,"POST /users/{id}/reprocesslicenseassignment":45,"POST /users/{id}/responsibilities":732,"POST /users/{id}/retryserviceprovisioning":720,"POST /users/{id}/revokesigninsessions":721,"POST /users/{id}/security/informationprotection/sensitivitylabels/evaluateapplication":915,"POST /users/{id}/security/informationprotection/sensitivitylabels/evaluateclassificationresults":915,"POST /users/{id}/security/informationprotection/sensitivitylabels/evaluateremoval":915,"POST /users/{id}/security/informationprotection/sensitivitylabels/extractcontentlabel":915,"POST /users/{id}/sendmail":459,"POST /users/{id}/settings/workhoursandlocations/occurrences":221,"POST /users/{id}/settings/workhoursandlocations/occurrences/setcurrentlocation":221,"POST /users/{id}/settings/workhoursandlocations/recurrences":221,"POST /users/{id}/solutions/workingtimeschedule/endworkingtime":759,"POST /users/{id}/solutions/workingtimeschedule/startworkingtime":759,"POST /users/{id}/sponsors/$ref":45,"POST /users/{id}/tasks/alltasks/{id}/move":222,"POST /users/{id}/tasks/lists":222,"POST /users/{id}/tasks/lists/{id}/tasks":222,"POST /users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems":807,"POST /users/{id}/tasks/lists/{id}/tasks/{id}/linkedresources":807,"POST /users/{id}/tasks/lists/{id}/tasks/{id}/move":222,"POST /users/{id}/teamwork/deletetargetedmessage":192,"POST /users/{id}/teamwork/installedapps":733,"POST /users/{id}/teamwork/installedapps/{id}/upgrade":733,"POST /users/{id}/teamwork/sections":1050,"POST /users/{id}/teamwork/sections/reorder":1050,"POST /users/{id}/teamwork/sections/{id}/items":1050,"POST /users/{id}/teamwork/sections/{id}/items/reorder":1050,"POST /users/{id}/teamwork/sections/{id}/items/{id}/move":1050,"POST /users/{id}/teamwork/sendactivitynotification":664,"POST /users/{id}/todo/lists":690,"POST /users/{id}/todo/lists/{id}/tasks":222,"POST /users/{id}/todo/lists/{id}/tasks/{id}/attachments":222,"POST /users/{id}/todo/lists/{id}/tasks/{id}/attachments/createuploadsession":222,"POST /users/{id}/todo/lists/{id}/tasks/{id}/checklistitems":222,"POST /users/{id}/todo/lists/{id}/tasks/{id}/linkedresources":222,"POST /users/{id}/translateexchangeids":722,"POST /users/{id}/unblockmanagedapps":418,"POST /users/{id}/wipeandblockmanagedapps":418,"POST /users/{id}/wipemanagedappregistrationbydevicetag":418,"POST /users/{id}/wipemanagedappregistrationsbyazureaddeviceid":421,"POST /users/{id}/wipemanagedappregistrationsbydevicetag":418,"POST /workplace/sensordevices":1083,"POST /workplace/sensordevices/ingesttelemetry":1084,"PUT /applications(appid='{id}')/logo":68,"PUT /applications/{id}/agentidentityblueprint/communicationconfiguration":788,"PUT /applications/{id}/connectorgroup/$ref":842,"PUT /applications/{id}/logo":68,"PUT /applications/{id}/synchronization/templates/{id}/schema":637,"PUT /drives/{id}/items/{id}/content":296,"PUT /drives/{id}/items/{id}:/{id}:/content":296,"PUT /education/classes/{id}/assignments/{id}/gradingcategory/$ref":308,"PUT /education/classes/{id}/assignments/{id}/gradingscheme/$ref":308,"PUT /education/classes/{id}/assignments/{id}/rubric/$ref":308,"PUT /external/connections/{id}/items/{id}":352,"PUT /groups/{id}/drive/items/{id}/content":296,"PUT /groups/{id}/drive/items/{id}:/{id}:/content":296,"PUT /groups/{id}/photo/$value":554,"PUT /groups/{id}/team":372,"PUT /identity/b2cuserflows/{id}/apiconnectorconfiguration/{id}/$ref":113,"PUT /identity/b2cuserflows/{id}/languages/{id}":113,"PUT /identity/b2cuserflows/{id}/languages/{id}/overridespages/{id}/$value":113,"PUT /identity/b2xuserflows/{id}/apiconnectorconfiguration/{id}/$ref":113,"PUT /identity/b2xuserflows/{id}/languages/{id}/overridespages/{id}/$value":113,"PUT /identity/events/onsignupstart/{id}":9,"PUT /identitygovernance/accessreviews/definitions/{id}":5,"PUT /identitygovernance/accessreviews/definitions/{id}/instances/{id}":5,"PUT /identitygovernance/entitlementmanagement/accesspackageassignmentpolicies/{id}":0,"PUT /identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions/{id}":0,"PUT /identitygovernance/entitlementmanagement/controlconfigurations/endusersettings":0,"PUT /me/activities/{id}":555,"PUT /me/activities/{id}/historyitems/{id}":555,"PUT /me/authentication/hardwareoathmethods/{id}/device/assignto/$ref":796,"PUT /me/authentication/qrcodepinmethod":95,"PUT /me/contactfolders/{id}/contacts/{id}/photo/$value":554,"PUT /me/contacts/{id}/photo/$value":554,"PUT /me/drive/items/{id}/content":296,"PUT /me/drive/items/{id}:/{id}:/content":296,"PUT /me/onlinemeetings/{id}/virtualappointment":74,"PUT /me/photo/$value":554,"PUT /me/settings/regionalandlanguagesettings":998,"PUT /me/settings/workhoursandlocations/occurrences/{id}":221,"PUT /me/settings/workhoursandlocations/recurrences/{id}":221,"PUT /organization/{id}/branding/localizations/{id}/{id}":487,"PUT /policies/adminconsentrequestpolicy":14,"PUT /policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization":256,"PUT /policies/deviceregistrationpolicy":273,"PUT /security/casemanagement/cases/{id}/attachments/{id}/content":1003,"PUT /serviceprincipals/agentidentity/{id}/communicationconfiguration":788,"PUT /serviceprincipals/{id}/claimspolicy":9,"PUT /serviceprincipals/{id}/synchronization/jobs/{id}/schema":637,"PUT /serviceprincipals/{id}/synchronization/secrets":634,"PUT /sites/{id}/drive/items/{id}/content":296,"PUT /sites/{id}/drive/items/{id}:/{id}:/content":296,"PUT /sites/{id}/pages/{id}/sitepage/canvaslayout/verticalsection":123,"PUT /storage/filestorage/containertyperegistrations/{id}":364,"PUT /storage/filestorage/containertyperegistrations/{id}/applicationpermissiongrants/{id}":364,"PUT /teams/{id}/photo/$value":554,"PUT /teams/{id}/schedule":162,"PUT /teams/{id}/schedule/daynotes/{id}":262,"PUT /teams/{id}/schedule/openshifts/{id}":162,"PUT /teams/{id}/schedule/schedulinggroups/{id}":162,"PUT /teams/{id}/schedule/shifts/{id}":162,"PUT /teams/{id}/schedule/timecards/{id}":262,"PUT /teams/{id}/schedule/timeoffreasons/{id}":162,"PUT /teams/{id}/schedule/timesoff/{id}":689,"PUT /tenantrelationships/multitenantorganization":464,"PUT /trustframework/keysets/{id}":1057,"PUT /trustframework/policies/{id}/$value":1058,"PUT /users/{id}/authentication/hardwareoathmethods/{id}/device/assignto/$ref":796,"PUT /users/{id}/authentication/qrcodepinmethod":95,"PUT /users/{id}/contactfolders/{id}/contacts/{id}/photo/$value":554,"PUT /users/{id}/contacts/{id}/photo/$value":554,"PUT /users/{id}/drive/items/{id}/content":296,"PUT /users/{id}/drive/items/{id}:/{id}:/content":296,"PUT /users/{id}/manager/$ref":45,"PUT /users/{id}/onlinemeetings/{id}/virtualappointment":74,"PUT /users/{id}/photo/$value":554,"PUT /users/{id}/settings/regionalandlanguagesettings":998,"PUT /users/{id}/settings/shiftpreferences":1032,"PUT /users/{id}/settings/workhoursandlocations/occurrences/{id}":221,"PUT /users/{id}/settings/workhoursandlocations/recurrences/{id}":221}}
diff --git a/build/tools/graph-permissions.json b/build/tools/graph-permissions.json
new file mode 100644
index 0000000000..c64566158b
--- /dev/null
+++ b/build/tools/graph-permissions.json
@@ -0,0 +1,65763 @@
+{
+ "$schema": "https://raw.githubusercontent.com/microsoftgraph/kibali/main/specs/permissions-schema.json",
+ "permissions": {
+ "AccessReview.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all access reviews that user can access",
+ "adminDescription": "Allows the app to read access reviews, reviewers, decisions and settings that the signed-in user has access to in the organization.",
+ "userDisplayName": "Read access reviews that you can access",
+ "userDescription": "Allows the app to read information on access reviews, reviewers, decisions and settings that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all access reviews",
+ "adminDescription": "Allows the app to read access reviews, reviewers, decisions and settings in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/accessreviews": "least=DelegatedWork,Application",
+ "/accessreviews/{id}": "least=DelegatedWork,Application",
+ "/accessreviews/{id}/decisions": "least=DelegatedWork,Application",
+ "/accessreviews/{id}/reviewers": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/contactedreviewers": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/contactedreviewers": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/filterbycurrentuser(on={value})": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/accessreviews/{id}/mydecisions": "least=DelegatedWork",
+ "/me/pendingaccessreviewinstances": "least=DelegatedWork",
+ "/me/pendingaccessreviewinstances/{id}/decisions": "least=DelegatedWork",
+ "/users/{id}/pendingaccessreviewinstances": "least=DelegatedWork",
+ "/users/{id}/pendingaccessreviewinstances/{id}/decisions": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/accessreviews/decisions/filterbycurrentuser(on={value})/recordalldecisions": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "AccessReview.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage all access reviews that user can access",
+ "adminDescription": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings that the signed-in user has access to in the organization.",
+ "userDisplayName": "Manage access reviews that you can access",
+ "userDescription": "Allows the app to read, update and perform action on access reviews, reviewers, decisions and settings that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage all access reviews",
+ "adminDescription": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/accessreviews": "",
+ "/accessreviews/{id}/reviewers": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/accessreviews/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/accessreviews/{id}/applydecisions": "",
+ "/accessreviews/{id}/resetdecisions": "",
+ "/accessreviews/{id}/sendreminder": "",
+ "/accessreviews/{id}/stop": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/acceptrecommendations": "least=DelegatedWork",
+ "/me/pendingaccessreviewinstances/{id}/acceptrecommendations": "least=DelegatedWork",
+ "/users/{id}/pendingaccessreviewinstances/{id}/acceptrecommendations": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/accessreviews/{id}/decisions": "",
+ "/accessreviews/{id}/mydecisions": "",
+ "/me/pendingaccessreviewinstances": "",
+ "/me/pendingaccessreviewinstances/{id}/decisions": "",
+ "/users/{id}/pendingaccessreviewinstances": "",
+ "/users/{id}/pendingaccessreviewinstances/{id}/decisions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/accessreviews/{id}/reviewers/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/accessreviews/decisions/filterbycurrentuser(on={value})/recordalldecisions": "least=Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/applydecisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/batchrecorddecisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/resetdecisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/sendreminder": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/acceptrecommendations": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/batchrecorddecisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/stop": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stop": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/historydefinitions/{id}/instances/{id}/generatedownloaduri": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/applydecisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/batchrecorddecisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/resetdecisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/sendreminder": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/acceptrecommendations": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/batchrecorddecisions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/stop": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stop": "least=DelegatedWork,Application",
+ "/me/pendingaccessreviewinstances/{id}/batchrecorddecisions": "least=DelegatedWork,Application",
+ "/users/{id}/pendingaccessreviewinstances/{id}/batchrecorddecisions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/accessreviews/definitions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/historydefinitions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/identitygovernance/accessreviews/definitions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/accessreviews/definitions/{id}/instances": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/contactedreviewers": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/{id}": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/accessreviews/definitions/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/accessreviews/historydefinitions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/historydefinitions/{id}/instances": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/contactedreviewers": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/{id}": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/accessreviews/unified/definitions/filterbycurrentuser(on={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/decisions/{id}": "least=DelegatedWork",
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "least=DelegatedWork",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/decisions/{id}": "least=DelegatedWork",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}/decisions/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/accessreviews/definitions/{id}/instances/{id}/stages/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessreviews/unified/definitions/{id}/instances/{id}/stages/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "AccessReview.ReadWrite.Membership": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage access reviews for group and app memberships",
+ "adminDescription": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings for group and app memberships that the signed-in user has access to in the organization.",
+ "userDisplayName": "Manage access reviews for group and app memberships",
+ "userDescription": "Allows the app to read, update and perform action on access reviews, reviewers, decisions and settings that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage access reviews for group and app memberships",
+ "adminDescription": "Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings in the organization for group and app memberships, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/accessreviews": "least=DelegatedWork,Application",
+ "/accessreviews/{id}/reviewers": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/accessreviews/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/accessreviews/{id}/applydecisions": "least=DelegatedWork,Application",
+ "/accessreviews/{id}/resetdecisions": "least=DelegatedWork,Application",
+ "/accessreviews/{id}/sendreminder": "least=DelegatedWork,Application",
+ "/accessreviews/{id}/stop": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/accessreviews/{id}/decisions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/accessreviews/{id}/mydecisions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/accessreviews/{id}/reviewers/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "Acronym.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all acronyms that the user can access",
+ "adminDescription": "Allows an app to read all acronyms that the signed-in user can access.",
+ "userDisplayName": "Read all acronyms that you have access to",
+ "userDescription": "Allows the app to read all acronyms you can access.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/search/query": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mssearchgraphapi"
+ }
+ },
+ "AdministrativeUnit.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read administrative units",
+ "adminDescription": "Allows the app to read administrative units and administrative unit membership on behalf of the signed-in user.",
+ "userDisplayName": "Read administrative units",
+ "userDescription": "Allows the app to read administrative units and administrative unit membership on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all administrative units",
+ "adminDescription": "Allows the app to read administrative units and administrative unit membership without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/administrativeunits": "least=DelegatedWork,Application",
+ "/administrativeunits/{id}": "least=DelegatedWork,Application",
+ "/administrativeunits/{id}/members": "least=DelegatedWork,Application",
+ "/administrativeunits/{id}/members/{id}": "least=DelegatedWork,Application",
+ "/administrativeunits/delta": "least=DelegatedWork,Application",
+ "/directory/administrativeunits": "least=DelegatedWork",
+ "/directory/administrativeunits/{id}": "least=DelegatedWork",
+ "/directory/administrativeunits/{id}/members": "least=DelegatedWork,Application",
+ "/directory/administrativeunits/{id}/members/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "AdministrativeUnit.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write administrative units",
+ "adminDescription": "Allows the app to create, read, update, and delete administrative units and manage administrative unit membership on behalf of the signed-in user.",
+ "userDisplayName": "Read and write administrative units",
+ "userDescription": "Allows the app to create, read, update, and delete administrative units and manage administrative unit membership on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all administrative units",
+ "adminDescription": "Allows the app to create, read, update, and delete administrative units and manage administrative unit membership without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/administrativeunits": "least=DelegatedWork,Application",
+ "/administrativeunits/{id}/members": "least=DelegatedWork,Application",
+ "/directory/administrativeunits": "least=DelegatedWork",
+ "/directory/administrativeunits/{id}/members": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/administrativeunits/{id}": "least=DelegatedWork,Application",
+ "/directory/administrativeunits/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/administrativeunits/{id}": "least=DelegatedWork,Application",
+ "/directory/administrativeunits/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/administrativeunits/{id}/members/{id}": "least=DelegatedWork,Application",
+ "/directory/administrativeunits/{id}/members/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/administrativeunits/delta": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "AgentCardManifest.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all agent card manifests in Agent Registry",
+ "adminDescription": "Allows the app to read agent card manifests in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read agent card manifests in Agent Registry",
+ "userDescription": "Allows the app to read agent card manifests on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all agent card manifests in Agent Registry",
+ "adminDescription": "Allows the app to read all agent card manifests in your organization's Agent Registry without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCardManifests": "least=DelegatedWork,Application",
+ "/agentRegistry/agentCardManifests/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All,AgentInstance.ReadWrite.ManagedBy",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All,AgentInstance.ReadWrite.ManagedBy"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentCardManifest.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write agent card manifests in Agent Registry",
+ "adminDescription": "Allows the app to read and write agent card manifests in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read and write agent card manifests in Agent Registry",
+ "userDescription": "Allows the app to read and write agent card manifests on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all agent card manifests in Agent Registry",
+ "adminDescription": "Allows the app to read and write to all agent card manifests in your organization's Agent Registry without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCardManifests": "",
+ "/agentRegistry/agentCardManifests/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/agentRegistry/agentCardManifests/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All,AgentInstance.ReadWrite.ManagedBy",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All,AgentInstance.ReadWrite.ManagedBy"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentCardManifest.ReadWrite.ManagedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write managed-by agent card manifests in Agent Registry",
+ "adminDescription": "Allows the app to read and write agent card manifests that name it as manager in your organization's Agent Registry without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCardManifests": "",
+ "/agentRegistry/agentCardManifests/{id}": "",
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All,AgentInstance.ReadWrite.ManagedBy",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All,AgentInstance.ReadWrite.ManagedBy"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/agentRegistry/agentCardManifests/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentCollection.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all collections in Agent Registry, except quarantined and global",
+ "adminDescription": "Allows the app to read collections and their membership in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read collections in Agent Registry",
+ "userDescription": "Allows the app to read collections and their membership on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all collections in Agent Registry, except quarantined and global",
+ "adminDescription": "Allows the app to read all collections and their membership in your organization's Agent Registry without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections": "least=DelegatedWork,Application",
+ "/agentRegistry/agentCollections/{id}": "least=DelegatedWork,Application",
+ "/agentRegistry/agentCollections/{id}/members": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentCollection.Read.Global": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read global collection in Agent Registry",
+ "adminDescription": "Allows the app to read global collection and its membership in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read global collection in Agent Registry",
+ "userDescription": "Allows the app to read global collection and its membership on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{global-collection-id}": "",
+ "/agentRegistry/agentCollections/{global-collection-id}/members": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentCollection.Read.Quarantined": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read quarantined collection in Agent Registry",
+ "adminDescription": "Allows the app to read quarantined collection and its membership in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read quarantined collection in Agent Registry",
+ "userDescription": "Allows the app to read quarantined collection and its membership on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{quarantined-collection-id}": "",
+ "/agentRegistry/agentCollections/{quarantined-collection-id}/members": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentCollection.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write collections in Agent Registry, except quarantined and global",
+ "adminDescription": "Allows the app to create, read, update, and delete collections and manage their membership in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read and write collections in Agent Registry, except quarantined and global",
+ "userDescription": "Allows the app to create, read, update, and delete collections and manage their membership on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all collections in Agent Registry, except quarantined and global",
+ "adminDescription": "Allows the app to create, read, update, and delete all collections and manage their membership in your organization's Agent Registry without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections": "",
+ "/agentRegistry/agentCollections/{id}": "",
+ "/agentRegistry/agentCollections/{id}/members": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}/members/{member-id}/$ref": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}/members/$ref": "least=DelegatedWork;AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}/members/$ref": "least=Application;AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All,AgentInstance.ReadWrite.ManagedBy"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentCollection.ReadWrite.Global": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write global collection in Agent Registry",
+ "adminDescription": "Allows the app to read and update global collection and manage its membership in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read and write global collection in Agent Registry",
+ "userDescription": "Allows the app to read and update global collection and manage its membership on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{global-collection-id}": "",
+ "/agentRegistry/agentCollections/{global-collection-id}/members": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{global-collection-id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{global-collection-id}/members/$ref": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{global-collection-id}/members/{member-id}/$ref": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentCollection.ReadWrite.ManagedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write managed-by collections in Agent Registry",
+ "adminDescription": "Allows the app to create, read, update, and delete collections that designate the calling app as their manager and manage their membership in your organization's Agent Registry without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections": "",
+ "/agentRegistry/agentCollections/{id}/members/$ref": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All,AgentInstance.ReadWrite.ManagedBy"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections": "",
+ "/agentRegistry/agentCollections/{id}": "",
+ "/agentRegistry/agentCollections/{id}/members": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}/members/{member-id}/$ref": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentCollection.ReadWrite.Quarantined": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write quarantined collection in Agent Registry",
+ "adminDescription": "Allows the app to read and update quarantined collection and manage its membership in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read and write quarantined collection in Agent Registry",
+ "userDescription": "Allows the app to read and update quarantined collection and manage its membership on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{quarantined-collection-id}": "",
+ "/agentRegistry/agentCollections/{quarantined-collection-id}/members": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{quarantined-collection-id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{quarantined-collection-id}/members/$ref": "AlsoRequires=AgentInstance.Read.All,AgentInstance.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{quarantined-collection-id}/members/{member-id}/$ref": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentIdentity.Create.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create agent identities without an agent blueprint parent",
+ "adminDescription": "Allows the client to create agent identities on behalf of the signed-in user, even if the client is not the parent agent identity blueprint.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Create agent identities without an agent blueprint parent",
+ "adminDescription": "Allows the client to create agent identities without a signed-in user, even if the client is not the parent agent identity blueprint.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentity": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentity.CreateAsManager": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Create and manage agent identities as the parent agent identity blueprint",
+ "adminDescription": "Allows the app to create agent identities as the parent agent identity blueprint and fully manage them, including reading, updating, and deleting, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentity": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentity.DeleteRestore.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete and restore agent identities",
+ "adminDescription": "Allows the client to delete and restore agent identities on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Delete and restore agent identities",
+ "adminDescription": "Allows the client to delete and restore agent identities without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentity/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/deletedItems/{id}/restore": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentity.EnableDisable.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Enable or disable agent identities",
+ "adminDescription": "Allows the client to enable or disable agent identities on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Enable or disable agent identities",
+ "adminDescription": "Allows the client to enable or disable agent identities without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentity/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentity.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all agent identities",
+ "adminDescription": "Allows the client to read all agent identities on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all agent identities",
+ "adminDescription": "Allows the app to read all agent identities without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentity": "least=Application,DelegatedWork",
+ "/servicePrincipals/microsoft.graph.agentIdentity/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentity.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all agent identities",
+ "adminDescription": "Allows the client to read, update, create, and delete agent identities on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all agent identities",
+ "adminDescription": "Allows the client to read, update, create, and delete agent identities without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentity/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}": "",
+ "/servicePrincipals/microsoft.graph.agentIdentity/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentity": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentity/{id}/microsoft.graph.identityGovernance.extend": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentity.UpdateSponsors.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Add or remove sponsors for agent identities",
+ "adminDescription": "Allows the client to add or remove sponsors for agent identities on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Add or remove sponsors for agent identities",
+ "adminDescription": "Allows the client to add or remove sponsors for agent identities without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/sponsors/{id}/$ref": "least=Application,DelegatedWork",
+ "/servicePrincipals/microsoft.graph.agentIdentity/{id}/sponsors/{id}/$ref": "least=Application,DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/sponsors/$ref": "least=Application,DelegatedWork",
+ "/servicePrincipals/microsoft.graph.agentIdentity/{id}/sponsors/$ref": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadlcmeng"
+ }
+ },
+ "AgentIdentityBlueprint.AddRemoveCreds.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Update agent identity blueprint credentials",
+ "adminDescription": "Allows updating agent identity blueprint credentials on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Update agent identity blueprint credentials",
+ "adminDescription": "Allows updating agent identity blueprint credentials without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprint.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create agent identity blueprints",
+ "adminDescription": "Allows creating new agent identity blueprints on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Create agent identity blueprints",
+ "adminDescription": "Allows creating new agent identity blueprints without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprint.DeleteRestore.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete and restore agent identity blueprints",
+ "adminDescription": "Allows deleting or restoring agent identity blueprints on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Delete and restore agent identity blueprints",
+ "adminDescription": "Allows deleting or restoring agent identity blueprints without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint/{id}": "least=Application,DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/deletedItems/{id}/restore": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprint.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all agent identity blueprints",
+ "adminDescription": "Allows the client to read all agent identity blueprints on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all agent identity blueprints",
+ "adminDescription": "Allows the client to read all agent identity blueprints without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint": "least=Application,DelegatedWork",
+ "/applications/microsoft.graph.agentIdentityBlueprint/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprint.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all agent identity blueprints",
+ "adminDescription": "Allows the client to read, update, create, and delete agent identity blueprints on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all agent identity blueprints",
+ "adminDescription": "Allows the client to read, update, create, and delete agent identity blueprints without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprint.UpdateAuthProperties.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Update agent identity blueprint authorization and authentication properties",
+ "adminDescription": "Allows updating agent identity blueprint authorization and authentication properties on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Update agent identity blueprint authorization and authentication properties",
+ "adminDescription": "Allows updating agent identity blueprint authorization and authentication properties without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprint.UpdateBranding.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Update agent identity blueprint branding",
+ "adminDescription": "Allows updating agent identity blueprint branding on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Update agent identity blueprint branding",
+ "adminDescription": "Allows updating agent identity blueprint branding without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprint.UpdateSponsors.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Add or remove sponsors for agent identity blueprints",
+ "adminDescription": "Allows the app to add or remove sponsors for agent identity blueprints on behalf of the signed-in user.",
+ "userDisplayName": "Add or remove sponsors for agent identity blueprints",
+ "userDescription": "Allows adding or removing sponsors for agent identity blueprints on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Add or remove sponsors for agent identity blueprints",
+ "adminDescription": "Allows the app to add or remove sponsors for agent identity blueprints without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint/{id}/sponsors/{id}/$ref": "least=Application,DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications/microsoft.graph.agentIdentityBlueprint/{id}/sponsors/$ref": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadlcmeng"
+ }
+ },
+ "AgentIdentityBlueprintPrincipal.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create agent identity blueprint principals",
+ "adminDescription": "Allows creating new agent identity blueprint principals on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Create agent identity blueprint principals",
+ "adminDescription": "Allows creating new agent identity blueprint principals without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentityBlueprintPrincipal": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprintPrincipal.DeleteRestore.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete and restore agent identity blueprint principals",
+ "adminDescription": "Allows deleting or restoring agent identity blueprint principals on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Delete and restore agent identity blueprint principals",
+ "adminDescription": "Allows deleting or restoring agent identity blueprint principals without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentityBlueprintPrincipal/{id}": "least=Application,DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/deletedItems/{id}/restore": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprintPrincipal.EnableDisable.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Enable or disable agent identity blueprint principals",
+ "adminDescription": "Allows enabling or disabling agent identity blueprint principals on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Enable or disable agent identity blueprint principals",
+ "adminDescription": "Allows enabling or disabling agent identity blueprint principals without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentityBlueprintPrincipal/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprintPrincipal.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read agent identity blueprint principals",
+ "adminDescription": "Allows reading agent identity blueprint principals on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read agent identity blueprint principals",
+ "adminDescription": "Allows reading agent identity blueprint principals without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentityBlueprintPrincipal": "least=Application,DelegatedWork",
+ "/servicePrincipals/microsoft.graph.agentIdentityBlueprintPrincipal/{id}": "least=Application,DelegatedWork",
+ "/servicePrincipals/microsoft.graph.agentIdentityBlueprintPrincipal/{id}/sponsors/": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdentityBlueprintPrincipal.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all agent identity blueprint principals",
+ "adminDescription": "Allows the app to read, update, create, and delete agent identity blueprint principals on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all agent identity blueprint principals",
+ "adminDescription": "Allows the app to read, update, create, and delete agent identity blueprint principals without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentityBlueprintPrincipal/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentityBlueprintPrincipal": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/servicePrincipals/microsoft.graph.agentIdentityBlueprintPrincipal/{id}/microsoft.graph.identityGovernance.extend": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AgentIdUser.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all agent ID users' full profiles",
+ "adminDescription": "Allows the app to create agent users, read and write the full set of profile properties, reports, and managers of agent ID users, delete and restore agent users in your organization, and read basic company properties, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all agent ID users' full profiles",
+ "userDescription": "Allows the app to create agent users, read and write the full set of profile properties, reports, and managers of agent ID users, delete and restore agent users in your organization, and read basic company properties, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all agent ID users' full profiles",
+ "adminDescription": "Allows the app to create agent users, read and update agent ID user profiles and read basic company properties, delete and restore agent users without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/assignlicense": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/cloudLicensing/assignments/reprocessAssignments": "",
+ "/users/{id}/getmemberobjects": "",
+ "/users/{id}/reprocesslicenseassignment": "",
+ "/users/{id}/revokesigninsessions": "",
+ "/users/{id}/translateexchangeids": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/cloudLicensing/assignments/reprocessAssignments": "",
+ "/me/getmemberobjects": "",
+ "/me/revokesigninsessions": "",
+ "/me/translateexchangeids": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/people/itemInsights": "",
+ "/me": "",
+ "/me/cloudLicensing/assignmentErrors": "",
+ "/me/cloudLicensing/assignmentErrors/{id}": "",
+ "/me/cloudLicensing/assignments/{id}/allotment": "",
+ "/me/cloudLicensing/usageRights": "",
+ "/me/cloudLicensing/usageRights/{id}": "",
+ "/me/cloudLicensing/usageRights/{id}/assignments": "",
+ "/me/cloudLicensing/waitingMembers": "",
+ "/me/cloudLicensing/waitingMembers/{id}": "",
+ "/me/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/me/createdobjects": "",
+ "/me/directreports": "",
+ "/me/joinedteams": "",
+ "/me/licensedetails": "",
+ "/me/manager": "",
+ "/me/ownedobjects": "",
+ "/me/sponsors": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/groups/{id}/cloudLicensing/usageRights": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/assignmentErrors": "",
+ "/users/{id}/cloudLicensing/assignmentErrors/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/users/{id}/cloudLicensing/usageRights": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/waitingMembers": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/users/{id}/createdobjects": "",
+ "/users/{id}/directreports": "",
+ "/users/{id}/joinedteams": "",
+ "/users/{id}/licensedetails": "",
+ "/users/{id}/ownedobjects": "",
+ "/users/{id}/usagerights": "",
+ "/users/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/profile": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/me/profile": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments": "",
+ "/users/{id}/cloudLicensing/assignments": "",
+ "/users/{id}/profile/account": "",
+ "/users/{id}/profile/addresses": "",
+ "/users/{id}/profile/anniversaries": "",
+ "/users/{id}/profile/awards": "",
+ "/users/{id}/profile/certifications": "",
+ "/users/{id}/profile/educationalactivities": "",
+ "/users/{id}/profile/emails": "",
+ "/users/{id}/profile/interests": "",
+ "/users/{id}/profile/languages": "",
+ "/users/{id}/profile/names": "",
+ "/users/{id}/profile/notes": "",
+ "/users/{id}/profile/patents": "",
+ "/users/{id}/profile/phones": "",
+ "/users/{id}/profile/positions": "",
+ "/users/{id}/profile/projects": "",
+ "/users/{id}/profile/publications": "",
+ "/users/{id}/profile/skills": "",
+ "/users/{id}/profile/webaccounts": "",
+ "/users/{id}/profile/websites": "",
+ "/users/{id}/responsibilities": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments": "",
+ "/me/profile/account": "",
+ "/me/profile/addresses": "",
+ "/me/profile/anniversaries": "",
+ "/me/profile/awards": "",
+ "/me/profile/certifications": "",
+ "/me/profile/educationalactivities": "",
+ "/me/profile/emails": "",
+ "/me/profile/interests": "",
+ "/me/profile/languages": "",
+ "/me/profile/names": "",
+ "/me/profile/notes": "",
+ "/me/profile/patents": "",
+ "/me/profile/phones": "",
+ "/me/profile/positions": "",
+ "/me/profile/projects": "",
+ "/me/profile/publications": "",
+ "/me/profile/skills": "",
+ "/me/profile/webaccounts": "",
+ "/me/profile/websites": "",
+ "/me/responsibilities": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}": "",
+ "/users/{id}/profile/account/{id}": "",
+ "/users/{id}/profile/addresses/{id}": "",
+ "/users/{id}/profile/anniversaries/{id}": "",
+ "/users/{id}/profile/awards/{id}": "",
+ "/users/{id}/profile/certifications/{id}": "",
+ "/users/{id}/profile/educationalactivities/{id}": "",
+ "/users/{id}/profile/emails/{id}": "",
+ "/users/{id}/profile/interests/{id}": "",
+ "/users/{id}/profile/languages/{id}": "",
+ "/users/{id}/profile/names/{id}": "",
+ "/users/{id}/profile/notes/{id}": "",
+ "/users/{id}/profile/patents/{id}": "",
+ "/users/{id}/profile/phones/{id}": "",
+ "/users/{id}/profile/positions/{id}": "",
+ "/users/{id}/profile/projects/{id}": "",
+ "/users/{id}/profile/publications/{id}": "",
+ "/users/{id}/profile/skills/{id}": "",
+ "/users/{id}/profile/webaccounts/{id}": "",
+ "/users/{id}/profile/websites/{id}": "",
+ "/users/{id}/responsibilities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/{id}": "",
+ "/me/profile/account/{id}": "",
+ "/me/profile/addresses/{id}": "",
+ "/me/profile/anniversaries/{id}": "",
+ "/me/profile/awards/{id}": "",
+ "/me/profile/certifications/{id}": "",
+ "/me/profile/educationalactivities/{id}": "",
+ "/me/profile/emails/{id}": "",
+ "/me/profile/interests/{id}": "",
+ "/me/profile/languages/{id}": "",
+ "/me/profile/names/{id}": "",
+ "/me/profile/notes/{id}": "",
+ "/me/profile/patents/{id}": "",
+ "/me/profile/phones/{id}": "",
+ "/me/profile/positions/{id}": "",
+ "/me/profile/projects/{id}": "",
+ "/me/profile/publications/{id}": "",
+ "/me/profile/skills/{id}": "",
+ "/me/profile/webaccounts/{id}": "",
+ "/me/profile/websites/{id}": "",
+ "/me/responsibilities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/settings": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/settings/contactinsights": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/me/cloudLicensing/assignments/{id}/assignedTo/$ref": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/settings": "",
+ "/organization/{id}/settings/iteminsights": "",
+ "/organization/{id}/settings/peopleinsights": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/organization/{id}/settings/profilecardproperties": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/settings/profilecardproperties/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/settings/regionalandlanguagesettings": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/settings/regionalandlanguagesettings": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/users/{id}/getTeamsLicensingDetails": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users": "",
+ "/users/{id}/sponsors": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": "",
+ "/users/{id}/getTeamsLicensingDetails": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/manager": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/photo": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/settings/shiftpreferences": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/sponsors/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/deletedItems/{id}/restore": "",
+ "/users/{id}/getTeamsLicensingDetails": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "AgentIdUser.ReadWrite.IdentityParentedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write full profiles of agent ID users under an agent blueprint",
+ "adminDescription": "Allows the app to create agent users, read and write the full set of profile properties, reports, and managers of agent ID users in your organization, delete and restore agent users under an agent blueprint, and read basic company properties, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write full profiles of agent ID users under an agent blueprint",
+ "userDescription": "Allows the app to create agent users, read and write the full set of profile properties, reports, and managers of agent ID users in your organization, delete and restore agent users under an agent blueprint, and read basic company properties, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write full profiles of agent ID users under an agent blueprint",
+ "adminDescription": "Allows the app to create agent users, read and update agent ID user profiles, delete and restore agent users under an agent blueprint, and read basic company properties without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/assignlicense": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/cloudLicensing/assignments/reprocessAssignments": "",
+ "/users/{id}/getmemberobjects": "",
+ "/users/{id}/reprocesslicenseassignment": "",
+ "/users/{id}/revokesigninsessions": "",
+ "/users/{id}/translateexchangeids": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/cloudLicensing/assignments/reprocessAssignments": "",
+ "/me/getmemberobjects": "",
+ "/me/revokesigninsessions": "",
+ "/me/translateexchangeids": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/people/itemInsights": "",
+ "/me": "",
+ "/me/cloudLicensing/assignmentErrors": "",
+ "/me/cloudLicensing/assignmentErrors/{id}": "",
+ "/me/cloudLicensing/assignments/{id}/allotment": "",
+ "/me/cloudLicensing/usageRights": "",
+ "/me/cloudLicensing/usageRights/{id}": "",
+ "/me/cloudLicensing/usageRights/{id}/assignments": "",
+ "/me/cloudLicensing/waitingMembers": "",
+ "/me/cloudLicensing/waitingMembers/{id}": "",
+ "/me/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/me/createdobjects": "",
+ "/me/directreports": "",
+ "/me/joinedteams": "",
+ "/me/licensedetails": "",
+ "/me/manager": "",
+ "/me/ownedobjects": "",
+ "/me/sponsors": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/groups/{id}/cloudLicensing/usageRights": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/assignmentErrors": "",
+ "/users/{id}/cloudLicensing/assignmentErrors/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/users/{id}/cloudLicensing/usageRights": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/waitingMembers": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/users/{id}/createdobjects": "",
+ "/users/{id}/directreports": "",
+ "/users/{id}/joinedteams": "",
+ "/users/{id}/licensedetails": "",
+ "/users/{id}/ownedobjects": "",
+ "/users/{id}/usagerights": "",
+ "/users/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/profile": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/me/profile": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments": "",
+ "/users/{id}/cloudLicensing/assignments": "",
+ "/users/{id}/profile/account": "",
+ "/users/{id}/profile/addresses": "",
+ "/users/{id}/profile/anniversaries": "",
+ "/users/{id}/profile/awards": "",
+ "/users/{id}/profile/certifications": "",
+ "/users/{id}/profile/educationalactivities": "",
+ "/users/{id}/profile/emails": "",
+ "/users/{id}/profile/interests": "",
+ "/users/{id}/profile/languages": "",
+ "/users/{id}/profile/names": "",
+ "/users/{id}/profile/notes": "",
+ "/users/{id}/profile/patents": "",
+ "/users/{id}/profile/phones": "",
+ "/users/{id}/profile/positions": "",
+ "/users/{id}/profile/projects": "",
+ "/users/{id}/profile/publications": "",
+ "/users/{id}/profile/skills": "",
+ "/users/{id}/profile/webaccounts": "",
+ "/users/{id}/profile/websites": "",
+ "/users/{id}/responsibilities": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments": "",
+ "/me/profile/account": "",
+ "/me/profile/addresses": "",
+ "/me/profile/anniversaries": "",
+ "/me/profile/awards": "",
+ "/me/profile/certifications": "",
+ "/me/profile/educationalactivities": "",
+ "/me/profile/emails": "",
+ "/me/profile/interests": "",
+ "/me/profile/languages": "",
+ "/me/profile/names": "",
+ "/me/profile/notes": "",
+ "/me/profile/patents": "",
+ "/me/profile/phones": "",
+ "/me/profile/positions": "",
+ "/me/profile/projects": "",
+ "/me/profile/publications": "",
+ "/me/profile/skills": "",
+ "/me/profile/webaccounts": "",
+ "/me/profile/websites": "",
+ "/me/responsibilities": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}": "",
+ "/users/{id}/profile/account/{id}": "",
+ "/users/{id}/profile/addresses/{id}": "",
+ "/users/{id}/profile/anniversaries/{id}": "",
+ "/users/{id}/profile/awards/{id}": "",
+ "/users/{id}/profile/certifications/{id}": "",
+ "/users/{id}/profile/educationalactivities/{id}": "",
+ "/users/{id}/profile/emails/{id}": "",
+ "/users/{id}/profile/interests/{id}": "",
+ "/users/{id}/profile/languages/{id}": "",
+ "/users/{id}/profile/names/{id}": "",
+ "/users/{id}/profile/notes/{id}": "",
+ "/users/{id}/profile/patents/{id}": "",
+ "/users/{id}/profile/phones/{id}": "",
+ "/users/{id}/profile/positions/{id}": "",
+ "/users/{id}/profile/projects/{id}": "",
+ "/users/{id}/profile/publications/{id}": "",
+ "/users/{id}/profile/skills/{id}": "",
+ "/users/{id}/profile/webaccounts/{id}": "",
+ "/users/{id}/profile/websites/{id}": "",
+ "/users/{id}/responsibilities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/{id}": "",
+ "/me/profile/account/{id}": "",
+ "/me/profile/addresses/{id}": "",
+ "/me/profile/anniversaries/{id}": "",
+ "/me/profile/awards/{id}": "",
+ "/me/profile/certifications/{id}": "",
+ "/me/profile/educationalactivities/{id}": "",
+ "/me/profile/emails/{id}": "",
+ "/me/profile/interests/{id}": "",
+ "/me/profile/languages/{id}": "",
+ "/me/profile/names/{id}": "",
+ "/me/profile/notes/{id}": "",
+ "/me/profile/patents/{id}": "",
+ "/me/profile/phones/{id}": "",
+ "/me/profile/positions/{id}": "",
+ "/me/profile/projects/{id}": "",
+ "/me/profile/publications/{id}": "",
+ "/me/profile/skills/{id}": "",
+ "/me/profile/webaccounts/{id}": "",
+ "/me/profile/websites/{id}": "",
+ "/me/responsibilities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/settings": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/settings/contactinsights": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/me/cloudLicensing/assignments/{id}/assignedTo/$ref": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/settings": "",
+ "/organization/{id}/settings/iteminsights": "",
+ "/organization/{id}/settings/peopleinsights": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/organization/{id}/settings/profilecardproperties": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/settings/profilecardproperties/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/settings/regionalandlanguagesettings": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/settings/regionalandlanguagesettings": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/users/{id}/getTeamsLicensingDetails": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users": "",
+ "/users/{id}/sponsors": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": "",
+ "/users/{id}/getTeamsLicensingDetails": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/manager": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/photo": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/settings/shiftpreferences": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/sponsors/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/deletedItems/{id}/restore": "",
+ "/users/{id}/getTeamsLicensingDetails": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "AgentInstance.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all agent instances in Agent Registry",
+ "adminDescription": "Allows the app to read agent instances and their related collections in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read agent instances in Agent Registry",
+ "userDescription": "Allows the app to read agent instances and their related collections on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all agent instances in Agent Registry",
+ "adminDescription": "Allows the app to read all agent instances and their related collections in your organization's Agent Registry without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances": "least=DelegatedWork,Application",
+ "/agentRegistry/agentInstances/{id}": "least=DelegatedWork,Application",
+ "/agentRegistry/agentInstances/{id}/collections": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}/members/{member-id}/$ref": "least=DelegatedWork;AlsoRequires=AgentCollection.ReadWrite.All,AgentCollection.ReadWrite.Global,AgentCollection.ReadWrite.Quarantined"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}/members/{member-id}/$ref": "least=Application;AlsoRequires=AgentCollection.ReadWrite.All,AgentCollection.ReadWrite.ManagedBy"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "least=DelegatedWork;AlsoRequires=AgentCardManifest.Read.All",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "least=DelegatedWork;AlsoRequires=AgentCardManifest.Read.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "least=Application;AlsoRequires=AgentCardManifest.Read.All",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "least=Application;AlsoRequires=AgentCardManifest.Read.All"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentInstance.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write agent instances in Agent Registry",
+ "adminDescription": "Allows the app to create, read, update, and delete agent instances in your organization's Agent Registry on behalf of the signed-in user.",
+ "userDisplayName": "Read and write agent instances in Agent Registry",
+ "userDescription": "Allows the app to create, read, update, and delete agent instances on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all agent instances in Agent Registry",
+ "adminDescription": "Allows the app to create, read, update, and delete all agent instances in your organization's Agent Registry without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances": "",
+ "/agentRegistry/agentInstances/{id}": "",
+ "/agentRegistry/agentInstances/{id}/collections": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}/members/{member-id}/$ref": "AlsoRequires=AgentCollection.ReadWrite.All,AgentCollection.ReadWrite.Global,AgentCollection.ReadWrite.Quarantined"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}/members/{member-id}/$ref": "AlsoRequires=AgentCollection.ReadWrite.All,AgentCollection.ReadWrite.ManagedBy"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "AlsoRequires=AgentCardManifest.Read.All,AgentCardManifest.ReadWrite.All",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "AlsoRequires=AgentCardManifest.Read.All,AgentCardManifest.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "AlsoRequires=AgentCardManifest.Read.All,AgentCardManifest.ReadWrite.All,AgentCardManifest.ReadWrite.ManagedBy",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "AlsoRequires=AgentCardManifest.Read.All,AgentCardManifest.ReadWrite.All,AgentCardManifest.ReadWrite.ManagedBy"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentInstance.ReadWrite.ManagedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write managed-by agent instances in Agent Registry",
+ "adminDescription": "Allows the app to create, read, update, and delete agent instances that designate the calling app as their manager in your organization's Agent Registry without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances": "",
+ "/agentRegistry/agentInstances?$filter=agentCardManifest/id eq '{id}'": "AlsoRequires=AgentCardManifest.Read.All,AgentCardManifest.ReadWrite.All,AgentCardManifest.ReadWrite.ManagedBy",
+ "/agentRegistry/agentInstances/{id}": "",
+ "/agentRegistry/agentInstances/{id}/agentCardManifest": "AlsoRequires=AgentCardManifest.Read.All,AgentCardManifest.ReadWrite.All,AgentCardManifest.ReadWrite.ManagedBy",
+ "/agentRegistry/agentInstances/{id}/collections": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agentRegistry/agentCollections/{id}/members/{member-id}/$ref": "AlsoRequires=AgentCollection.ReadWrite.All,AgentCollection.ReadWrite.ManagedBy",
+ "/agentRegistry/agentInstances": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/agentRegistry/agentInstances/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "agentregistrydevs"
+ }
+ },
+ "AgentRegistration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all agent registrations",
+ "adminDescription": "Allows the user to read all agent registration information",
+ "userDisplayName": "Read all agent registrations",
+ "userDescription": "Allows the app to read agent registration information.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all agent registrations",
+ "adminDescription": "Allows the app to read agent registration information without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/agentRegistrations/{agentId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365adminsvcdevteam"
+ }
+ },
+ "AgentRegistration.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all agent registrations",
+ "adminDescription": "Allows the user to read and write all agent registration information",
+ "userDisplayName": "Read and write all agent registrations",
+ "userDescription": "Allows the app to read and write agent registration information.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all agent registrations",
+ "adminDescription": "Allows the app to read and write agent registration information without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/agentRegistrations/{agentId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/agentRegistrations": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/copilot/agentRegistrations/{agentId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/copilot/agentRegistrations/{agentId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365adminsvcdevteam"
+ }
+ },
+ "Agreement.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all terms of use agreements",
+ "adminDescription": "Allows the app to read terms of use agreements on behalf of the signed-in user.",
+ "userDisplayName": "Read all terms of use agreements",
+ "userDescription": "Allows the app to read terms of use agreements on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agreements/{id}": "least=DelegatedWork",
+ "/agreements/{id}/file": "least=DelegatedWork",
+ "/identitygovernance/termsofuse/agreements": "least=DelegatedWork",
+ "/identitygovernance/termsofuse/agreements/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "Agreement.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all terms of use agreements",
+ "adminDescription": "Allows the app to read and write terms of use agreements on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all terms of use agreements",
+ "userDescription": "Allows the app to read and write terms of use agreements on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/agreements/{id}/file": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/agreements/{id}/files": "least=DelegatedWork",
+ "/identitygovernance/termsofuse/agreements": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/termsofuse/agreements/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "AgreementAcceptance.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user terms of use acceptance statuses",
+ "adminDescription": "Allows the app to read terms of use acceptance statuses on behalf of the signed-in user.",
+ "userDisplayName": "Read your terms of use acceptance statuses",
+ "userDescription": "Allows the app to read your terms of use acceptance statuses.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/termsofuse/agreements/{id}/acceptances": "least=DelegatedWork",
+ "/me/agreementacceptances": "least=DelegatedWork",
+ "/users/{id}/agreementacceptances": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "AgreementAcceptance.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read terms of use acceptance statuses that user can access",
+ "adminDescription": "Allows the app to read terms of use acceptance statuses on behalf of the signed-in user.",
+ "userDisplayName": "Read all terms of use acceptance statuses",
+ "userDescription": "Allows the app to read terms of use acceptance statuses on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/termsofuse/agreements/{id}/acceptances": "",
+ "/me/agreementacceptances": "",
+ "/users/{id}/agreementacceptances": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "AiEnterpriseInteraction.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user AI enterprise interactions.",
+ "adminDescription": "Allows the app to read user AI enterprise interactions, on behalf of the signed-in user.",
+ "userDisplayName": "Read your AI enterprise interactions.",
+ "userDescription": "Allows an app to read your AI enterprise interactions, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "AiEnterpriseInteraction.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all AI enterprise interactions.",
+ "adminDescription": "Allows the app to read all AI enterprise interactions.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/users/{id}/interactionHistory/getAllEnterpriseInteractions": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "AiEnterpriseInteraction.Read.User": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read user AI enterprise interactions.",
+ "adminDescription": "Allows the app to read user AI enterprise interactions, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Analytics.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user activity statistics",
+ "adminDescription": "Allows the app to read the signed-in user's activity statistics, such as how much time the user has spent on emails, in meetings, or in chat sessions.",
+ "userDisplayName": "Read your activity statistics",
+ "userDescription": "Allows the app to read your activity statistics, such as how much time you've spent on emails, in meetings, or in chat sessions.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/analytics/activitystatistics": "least=DelegatedWork",
+ "/users/{id}/analytics/activitystatistics": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "APIConnectors.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write API connectors for authentication flows",
+ "adminDescription": "Allows the app to read, create and manage the API connectors used in user authentication flows, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write API connectors for authentication flows",
+ "userDescription": "Allows the app to read, create and manage the API connectors used in user authentication flows, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write API connectors for authentication flows",
+ "adminDescription": "Allows the app to read, create and manage the API connectors used in user authentication flows, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identity/apiconnectors": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/apiconnectors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/apiconnectors/{id}/uploadclientcertificate": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "AppCatalog.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all app catalogs",
+ "adminDescription": "Allows the app to read the apps in the app catalogs.",
+ "userDisplayName": "Read all app catalogs",
+ "userDescription": "Allows the app to read apps in the app catalogs.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all app catalogs",
+ "adminDescription": "Allows the app to read apps in the app catalogs without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps": "least=Application",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/bot": "least=DelegatedWork,Application",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/coloricon": "least=DelegatedWork,Application",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/coloricon/hostedcontent": "least=DelegatedWork,Application",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/outlineicon": "least=DelegatedWork,Application",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/outlineicon/hostedcontent": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "AppCatalog.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write to all app catalogs",
+ "adminDescription": "Allows the app to create, read, update, and delete apps in the app catalogs.",
+ "userDisplayName": "Read and write to all app catalogs",
+ "userDescription": "Allows the app to create, read, update, and delete apps in the app catalogs.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write to all app catalogs",
+ "adminDescription": "Allows the app to create, read, update, and delete apps in the app catalogs without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/bot": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/coloricon": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/coloricon/hostedcontent": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/outlineicon": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/outlineicon/hostedcontent": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "AppCatalog.Submit": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Submit application packages to the catalog and cancel pending submissions",
+ "adminDescription": "Allows the app to submit application packages to the catalog and cancel submissions that are pending review on behalf of the signed-in user.",
+ "userDisplayName": "Submit application packages to your organization's catalog and cancel pending submissions",
+ "userDescription": "Allows the app to submit application packages to the catalog and cancel submissions that are pending review on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}": "least=DelegatedWork",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/bot": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/coloricon": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/coloricon/hostedcontent": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/outlineicon": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/outlineicon/hostedcontent": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "AppCertTrustConfiguration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "",
+ "adminDescription": "Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user.",
+ "userDisplayName": "Read the trusted certificate authority configuration for applications",
+ "userDescription": "Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read the trusted certificate authority configuration for applications",
+ "adminDescription": "Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations": "least=DelegatedWork,Application",
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}": "least=DelegatedWork,Application",
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities": "least=DelegatedWork,Application",
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AppCertTrustConfiguration.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "",
+ "adminDescription": "Allows the app to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write the trusted certificate authority configuration for applications",
+ "userDescription": "Allows the app to to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write the trusted certificate authority configuration for applications",
+ "adminDescription": "Allows the app to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations": "",
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}": "",
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities": "",
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations": "least=DelegatedWork,Application",
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}": "least=DelegatedWork,Application",
+ "/directory/certificateauthorities/certificatebasedapplicationconfigurations/{id}/trustedcertificateauthorities/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "Application-RemoteDesktopConfig.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the remote desktop security configuration for all apps",
+ "adminDescription": "Allows the app to read and write other apps' remote desktop security configuration, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write the remote desktop security configuration for apps",
+ "userDescription": "Allows the app to read and write other apps' remote desktop security configuration, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write the remote desktop security configuration for all apps",
+ "adminDescription": "Allows the app to read and write the remote desktop security configuration for all apps in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "Application.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read applications",
+ "adminDescription": "Allows the app to read applications and service principals on behalf of the signed-in user.",
+ "userDisplayName": "Read applications",
+ "userDescription": "Allows the app to read applications and service principals on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read applications",
+ "adminDescription": "Allows the app to read applications and service principals on behalf of the signed-in user.",
+ "userDisplayName": "Read applications",
+ "userDescription": "Allows the app to read applications and service principals on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all applications",
+ "adminDescription": "Allows the app to read all applications and service principals without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/applications": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/applications(appid={value})": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/applications/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/applications/{id}/extensionproperties": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/applications/{id}/extensionproperties/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/applications(appid={value})/federatedidentitycredentials": "least=DelegatedWork,Application",
+ "/applications(appid={value})/owners": "least=DelegatedWork,Application",
+ "/applications(appid={value})/sponsors": "least=DelegatedWork,Application",
+ "/applications/{id}/authorization": "",
+ "/applications/{id}/authorization/resourceSchema": "",
+ "/applications/{id}/authorization/resourceSchema/environmentAttributes": "",
+ "/applications/{id}/authorization/resourceSchema/environmentAttributes/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/principalAttributes": "",
+ "/applications/{id}/authorization/resourceSchema/principalAttributes/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/actions": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/actions/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/attributes": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/attributes/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/parents": "",
+ "/applications/{id}/authorization/roleDefinitions": "",
+ "/applications/{id}/authorization/roleDefinitions/{id}": "",
+ "/applications/{id}/authorization/roleDefinitions/{id}/inheritsPermissionsFrom": "",
+ "/applications/{id}/federatedidentitycredentials": "least=DelegatedWork,Application",
+ "/applications/{id}/onPremisesPublishing": "least=DelegatedWork,Application",
+ "/applications/{id}/onPremisesPublishing/segmentsConfiguration/microsoft.graph.ipSegmentConfiguration/applicationSegments": "least=DelegatedWork,Application",
+ "/applications/{id}/onPremisesPublishing/segmentsConfiguration/microsoft.graph.ipSegmentConfiguration/applicationSegments/{id}": "least=DelegatedWork,Application",
+ "/applications/{id}/owners": "least=DelegatedWork,Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig": "least=DelegatedWork,Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig/{trustedHostPairwiseBrokerId}": "least=DelegatedWork,Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig/{trustedHostPairwiseBrokerId}/perResourceAllowedScopes": "least=DelegatedWork,Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig/{trustedHostPairwiseBrokerId}/perResourceAllowedScopes/{resourceAppId}": "least=DelegatedWork,Application",
+ "/applications/{id}/sponsors": "least=DelegatedWork,Application",
+ "/applications/delta": "",
+ "/policies/appmanagementpolicies/{id}/appliesto": "least=DelegatedWork,Application",
+ "/policies/claimsmappingpolicies/{id}/appliesto": "",
+ "/policies/homerealmdiscoverypolicies/{id}/appliesto": "",
+ "/policies/tokenissuancepolicies/{id}/appliesto": "",
+ "/policies/tokenlifetimepolicies/{id}/appliesto": "",
+ "/schemaextensions": "least=Application",
+ "/schemaextensions/{id}": "least=Application",
+ "/serviceprincipals": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/approleassignedto": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/approleassignments": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/createdobjects": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/delegatedpermissionclassifications": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/inheritedapproleassignments": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/memberof": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/ownedobjects": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/owners": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/sponsors": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/transitivememberof": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/approleassignedto": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/approleassignments": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/createdobjects": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/delegatedpermissionclassifications": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/inheritedapproleassignments": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/memberof": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/ownedobjects": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/owners": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/sponsors": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/transitivememberof": "least=DelegatedWork,Application",
+ "/serviceprincipals/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "POST"
+ ],
+ "paths": {
+ "/applications/{id}/appmanagementpolicies": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "least=DelegatedWork,Application",
+ "/contacts/{id}/checkmemberobjects": "least=DelegatedWork,Application",
+ "/contacts/{id}/getmembergroups": "least=DelegatedWork,Application",
+ "/contacts/{id}/getmemberobjects": "least=DelegatedWork,Application",
+ "/devices/{id}/checkmembergroups": "least=DelegatedWork,Application",
+ "/devices/{id}/checkmemberobjects": "least=DelegatedWork,Application",
+ "/devices/{id}/getmembergroups": "least=DelegatedWork,Application",
+ "/devices/{id}/getmemberobjects": "least=DelegatedWork,Application",
+ "/directoryobjects/{id}/checkmembergroups": "least=DelegatedWork,Application",
+ "/directoryobjects/{id}/checkmemberobjects": "least=DelegatedWork,Application",
+ "/directoryobjects/{id}/getmembergroups": "least=DelegatedWork,Application",
+ "/directoryobjects/{id}/getmemberobjects": "least=DelegatedWork,Application",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/identity/conditionalaccess/policies": "least=DelegatedWork",
+ "/me/checkmembergroups": "least=DelegatedWork,Application",
+ "/me/checkmemberobjects": "least=DelegatedWork,Application",
+ "/me/getmembergroups": "least=DelegatedWork,Application",
+ "/me/getmemberobjects": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/approleassignedto": "least=DelegatedWork,Application;AlsoRequires=AppRoleAssignment.ReadWrite.All",
+ "/serviceprincipals(appid={value})/approleassignments": "least=DelegatedWork,Application;AlsoRequires=AppRoleAssignment.ReadWrite.All",
+ "/serviceprincipals(appid={value})/inheritedapproleassignments": "least=DelegatedWork,Application;AlsoRequires=AppRoleAssignment.ReadWrite.All",
+ "/serviceprincipals/{id}/approleassignedto": "least=DelegatedWork,Application;AlsoRequires=AppRoleAssignment.ReadWrite.All",
+ "/serviceprincipals/{id}/approleassignments": "least=DelegatedWork,Application;AlsoRequires=AppRoleAssignment.ReadWrite.All",
+ "/serviceprincipals/{id}/checkmembergroups": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/checkmemberobjects": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/getmembergroups": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/getmemberobjects": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/inheritedapproleassignments": "least=DelegatedWork,Application;AlsoRequires=AppRoleAssignment.ReadWrite.All",
+ "/users/{id}/checkmembergroups": "least=DelegatedWork,Application",
+ "/users/{id}/checkmemberobjects": "least=DelegatedWork,Application",
+ "/users/{id}/getmembergroups": "least=DelegatedWork,Application",
+ "/users/{id}/getmemberobjects": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/policies/{id}": "least=DelegatedWork",
+ "/identity/continuousaccessevaluationpolicy": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/conditionalaccesspolicycoverages": "",
+ "/tenantrelationships/managedtenants/conditionalaccesspolicycoverages/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications/validatepartner": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "Application.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all applications",
+ "adminDescription": "Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Allows management of app role assignments, except those exposed by Microsoft Graph. Does not allow management of delegated permission grants.",
+ "userDisplayName": "Read and write applications",
+ "userDescription": "Allows the app to create, read, update and delete applications and service principals on your behalf. Allows management of app role assignments, except those exposed by Microsoft Graph. Does not allow management of delegated permission grants.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write all applications",
+ "adminDescription": "Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Allows management of app role assignments, except those exposed by Microsoft Graph. Does not allow management of delegated permission grants.",
+ "userDisplayName": "Read and write applications",
+ "userDescription": "Allows the app to create, read, update and delete applications and service principals on your behalf. Allows management of app role assignments, except those exposed by Microsoft Graph. Does not allow management of delegated permission grants.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all applications",
+ "adminDescription": "Allows the app to create, read, update and delete applications and service principals without a signed-in user. Allows management of app role assignments, except those exposed by Microsoft Graph. Does not allow management of delegated permission grants.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications": "least=DelegatedWork,DelegatedPersonal",
+ "/applications/{id}/extensionproperties": "least=DelegatedWork,DelegatedPersonal",
+ "/applications/{id}/federatedidentitycredentials": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/serviceTreeConfiguration/validate": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/applications(appid={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/applications(appid={value})/federatedidentitycredentials/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/applications/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/applications/{id}/federatedidentitycredentials/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/addkey": "least=DelegatedWork",
+ "/applications(appid={value})/extendlifecycle": "",
+ "/applications(appid={value})/removekey": "least=DelegatedWork",
+ "/applications(appid={value})/repair": "least=DelegatedWork",
+ "/applications/{id}/addkey": "least=DelegatedWork",
+ "/applications/{id}/authorization/resourceSchema": "",
+ "/applications/{id}/authorization/resourceSchema/environmentAttributes": "",
+ "/applications/{id}/authorization/resourceSchema/ingest": "",
+ "/applications/{id}/authorization/resourceSchema/principalAttributes": "",
+ "/applications/{id}/authorization/resourceSchema/resources": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/actions": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/attributes": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/parents": "",
+ "/applications/{id}/authorization/roleDefinitions": "",
+ "/applications/{id}/authorization/roleDefinitions/{id}/inheritsPermissionsFrom": "",
+ "/applications/{id}/extendlifecycle": "",
+ "/applications/{id}/onPremisesPublishing/segmentsConfiguration/microsoft.graph.ipSegmentConfiguration/applicationSegments": "least=DelegatedWork,Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig": "least=DelegatedWork,Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig/{trustedHostPairwiseBrokerId}/perResourceAllowedScopes": "least=DelegatedWork,Application",
+ "/applications/{id}/removekey": "least=DelegatedWork",
+ "/applications/{id}/repair": "least=DelegatedWork,Application",
+ "/applicationtemplates/{id}/instantiate": "least=DelegatedWork",
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": "",
+ "/schemaextensions": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/addkey": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/addpassword": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/addtokensigningcertificate": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/createpasswordsinglesignoncredentials": "least=DelegatedWork,Application;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals(appid={value})/deletepasswordsinglesignoncredentials": "least=DelegatedWork,Application;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals(appid={value})/extendlifecycle": "",
+ "/serviceprincipals(appid={value})/getpasswordsinglesignoncredentials": "least=DelegatedWork;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals(appid={value})/permanentDelete": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/removekey": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/removepassword": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/updatepasswordsinglesignoncredentials": "least=DelegatedWork,Application;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals/{id}/addkey": "least=DelegatedWork",
+ "/serviceprincipals/{id}/addpassword": "least=DelegatedWork",
+ "/serviceprincipals/{id}/addtokensigningcertificate": "least=DelegatedWork",
+ "/serviceprincipals/{id}/authorization": "",
+ "/serviceprincipals/{id}/authorization/elevateToUserAccessAdministrator": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/createpasswordsinglesignoncredentials": "least=DelegatedWork,Application;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals/{id}/deletepasswordsinglesignoncredentials": "least=DelegatedWork,Application;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals/{id}/extendlifecycle": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/serviceprincipals/{id}/getpasswordsinglesignoncredentials": "least=DelegatedWork;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals/{id}/permanentDelete": "least=DelegatedWork",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups": "",
+ "/serviceprincipals/{id}/removekey": "least=DelegatedWork",
+ "/serviceprincipals/{id}/removepassword": "least=DelegatedWork",
+ "/serviceprincipals/{id}/updatepasswordsinglesignoncredentials": "least=DelegatedWork,Application;AlsoRequires=Directory.Read.All",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/addpassword": "least=DelegatedWork,DelegatedPersonal",
+ "/applications(appid={value})/removepassword": "least=DelegatedWork,DelegatedPersonal",
+ "/applications/{id}/addpassword": "least=DelegatedWork,DelegatedPersonal",
+ "/applications/{id}/removepassword": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/applications(appid={value})/logo": "least=DelegatedWork,DelegatedPersonal",
+ "/applications/{id}/logo": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/tokenissuancepolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/applications(appid={value})/tokenlifetimepolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/applications/{id}/tokenissuancepolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/applications/{id}/tokenlifetimepolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/tokenlifetimepolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/claimsmappingpolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/tokenlifetimepolicies": "least=DelegatedWork;AlsoRequires=Policy.Read.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/owners": "least=DelegatedWork;AlsoRequires=Directory.Read.All",
+ "/applications(appid={value})/sponsors": "least=DelegatedWork;AlsoRequires=User.Read.All,Group.Read.All",
+ "/applications/{id}/owners": "least=DelegatedWork;AlsoRequires=Directory.Read.All",
+ "/applications/{id}/sponsors": "least=DelegatedWork;AlsoRequires=User.Read.All,Group.Read.All",
+ "/serviceprincipals(appid={value})/owners": "least=DelegatedWork;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals(appid={value})/sponsors": "least=DelegatedWork;AlsoRequires=User.Read.All,Group.Read.All",
+ "/serviceprincipals/{id}/owners": "least=DelegatedWork;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals/{id}/sponsors": "least=DelegatedWork;AlsoRequires=User.Read.All,Group.Read.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/applications(appid={value})/owners/{id}": "least=DelegatedWork",
+ "/applications(appid={value})/sponsors/{id}": "",
+ "/applications/{id}/authorization": "",
+ "/applications/{id}/authorization/resourceSchema": "",
+ "/applications/{id}/authorization/resourceSchema/environmentAttributes/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/principalAttributes/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/actions/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/attributes/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/parents/{name}": "",
+ "/applications/{id}/authorization/roleDefinitions/{id}": "",
+ "/applications/{id}/authorization/roleDefinitions/{id}/inheritsPermissionsFrom": "",
+ "/applications/{id}/authorization/roleDefinitions/{id}/inheritsPermissionsFrom/{id}": "",
+ "/applications/{id}/owners/{id}": "least=DelegatedWork",
+ "/applications/{id}/sponsors/{id}": "",
+ "/applications/{id}/tokenissuancepolicies/{id}": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/applications/{id}/tokenlifetimepolicies/{id}": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies/{id}": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies/{id}": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/owners/{id}": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/sponsors/{id}": "",
+ "/serviceprincipals(appid={value})/tokenlifetimepolicies/{id}": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/claimsmappingpolicies/{id}": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies/{id}": "least=DelegatedWork;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/owners/{id}": "least=DelegatedWork",
+ "/serviceprincipals/{id}/sponsors/{id}": "",
+ "/serviceprincipals/{id}/tokenlifetimepolicies/{id}": "least=DelegatedWork;AlsoRequires=Policy.Read.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/setverifiedpublisher": "least=DelegatedWork",
+ "/applications(appid={value})/unsetverifiedpublisher": "least=DelegatedWork",
+ "/applications/{id}/setverifiedpublisher": "least=DelegatedWork",
+ "/applications/{id}/unsetverifiedpublisher": "least=DelegatedWork",
+ "/applications/validatepartner": "",
+ "/groups/{id}/deletepasswordsinglesignoncredentials": "",
+ "/groups/{id}/getpasswordsinglesignoncredentials": "",
+ "/users/{id}/deletepasswordsinglesignoncredentials": "",
+ "/users/{id}/getpasswordsinglesignoncredentials": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/federatedidentitycredentials": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/applications/{id}/extensionproperties/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/applications(appid={value})/owners": "",
+ "/applications(appid={value})/sponsors": "",
+ "/applications/{id}/onPremisesPublishing/segmentsConfiguration/microsoft.graph.ipSegmentConfiguration/applicationSegments": "least=DelegatedWork,Application",
+ "/applications/{id}/owners": "",
+ "/applications/{id}/sponsors": "",
+ "/applications/delta": "",
+ "/serviceprincipals(appid={value})/approleassignedto": "",
+ "/serviceprincipals(appid={value})/approleassignments": "",
+ "/serviceprincipals(appid={value})/createdobjects": "",
+ "/serviceprincipals(appid={value})/inheritedapproleassignments": "",
+ "/serviceprincipals(appid={value})/memberof": "",
+ "/serviceprincipals(appid={value})/ownedobjects": "",
+ "/serviceprincipals(appid={value})/owners": "",
+ "/serviceprincipals(appid={value})/sponsors": "",
+ "/serviceprincipals(appid={value})/transitivememberof": "",
+ "/serviceprincipals/{id}/approleassignedto": "",
+ "/serviceprincipals/{id}/approleassignments": "",
+ "/serviceprincipals/{id}/createdobjects": "",
+ "/serviceprincipals/{id}/inheritedapproleassignments": "",
+ "/serviceprincipals/{id}/memberof": "",
+ "/serviceprincipals/{id}/ownedobjects": "",
+ "/serviceprincipals/{id}/owners": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups": "",
+ "/serviceprincipals/{id}/sponsors": "",
+ "/serviceprincipals/{id}/transitivememberof": "",
+ "/serviceprincipals/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/applications/{id}/authorization/resourceSchema/environmentAttributes/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/principalAttributes/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/actions/{name}": "",
+ "/applications/{id}/authorization/resourceSchema/resources/{name}/attributes/{name}": "",
+ "/applications/{id}/authorization/roleDefinitions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/schemaextensions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/applications/{id}/onPremisesPublishing": "least=DelegatedWork,Application",
+ "/applications/{id}/onPremisesPublishing/segmentsConfiguration/microsoft.graph.ipSegmentConfiguration/applicationSegments/{id}": "least=DelegatedWork,Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig/{trustedHostPairwiseBrokerId}": "least=DelegatedWork,Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig/{trustedHostPairwiseBrokerId}/perResourceAllowedScopes/{resourceAppId}": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})": "least=DelegatedWork",
+ "/serviceprincipals/{id}": "least=DelegatedWork",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/serviceTreeAttributionServices": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/serviceprincipals(appid={value})/approleassignedto": "",
+ "/serviceprincipals(appid={value})/approleassignments": "",
+ "/serviceprincipals/{id}/approleassignedto": "",
+ "/serviceprincipals/{id}/approleassignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/serviceprincipals(appid={value})/approleassignedto/{id}": "",
+ "/serviceprincipals(appid={value})/approleassignments/{id}": "",
+ "/serviceprincipals/{id}/approleassignedto/{id}": "",
+ "/serviceprincipals/{id}/approleassignments/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "Application.ReadWrite.OwnedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage apps that this app creates or owns",
+ "adminDescription": "Allows the app to create other applications, and fully manage those applications (read, update, update application secrets and delete), without a signed-in user. It cannot update any apps that it is not an owner of.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications": "least=Application",
+ "/applications(appid={value})/federatedidentitycredentials": "least=Application",
+ "/applications(appid={value})/tokenissuancepolicies": "least=Application;AlsoRequires=Policy.Read.All",
+ "/applications(appid={value})/tokenlifetimepolicies": "least=Application;AlsoRequires=Policy.Read.All",
+ "/applications/{id}/extensionproperties": "least=Application",
+ "/applications/{id}/federatedidentitycredentials": "least=Application",
+ "/applications/{id}/onPremisesPublishing/segmentsConfiguration/microsoft.graph.ipSegmentConfiguration/applicationSegments": "least=Application",
+ "/applications/{id}/tokenissuancepolicies": "least=Application;AlsoRequires=Policy.Read.All",
+ "/applications/{id}/tokenlifetimepolicies": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals": "least=Application",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/tokenlifetimepolicies": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/claimsmappingpolicies": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/synchronization/jobs": "least=Application",
+ "/serviceprincipals/{id}/tokenlifetimepolicies": "least=Application;AlsoRequires=Policy.Read.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/applications(appid={value})": "least=Application",
+ "/applications(appid={value})/federatedidentitycredentials/{id}": "least=Application",
+ "/applications/{id}": "least=Application",
+ "/applications/{id}/federatedidentitycredentials/{id}": "least=Application",
+ "/applications/{id}/onPremisesPublishing": "least=Application",
+ "/applications/{id}/onPremisesPublishing/segmentsConfiguration/microsoft.graph.ipSegmentConfiguration/applicationSegments/{id}": "least=Application",
+ "/serviceprincipals(appid={value})": "least=Application",
+ "/serviceprincipals/{id}": "least=Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/addkey": "least=Application",
+ "/applications(appid={value})/addpassword": "least=Application",
+ "/applications(appid={value})/extendlifecycle": "least=Application",
+ "/applications(appid={value})/owners": "least=Application;AlsoRequires=Directory.Read.All",
+ "/applications(appid={value})/removekey": "least=Application",
+ "/applications(appid={value})/removepassword": "least=Application",
+ "/applications(appid={value})/repair": "least=Application",
+ "/applications(appid={value})/sponsors": "least=Application;AlsoRequires=User.Read.All,Group.Read.All",
+ "/applications/{id}}/repair": "least=Application",
+ "/applications/{id}/addkey": "least=Application",
+ "/applications/{id}/addpassword": "least=Application",
+ "/applications/{id}/extendlifecycle": "least=Application",
+ "/applications/{id}/owners": "least=Application;AlsoRequires=Directory.Read.All",
+ "/applications/{id}/removekey": "least=Application",
+ "/applications/{id}/removepassword": "least=Application",
+ "/applications/{id}/sponsors": "least=Application;AlsoRequires=User.Read.All,Group.Read.All",
+ "/applications/{id}/synchronization/acquireaccesstoken": "least=Application",
+ "/applicationtemplates/{id}/instantiate": "least=Application",
+ "/serviceprincipals(appid={value})/addkey": "least=Application",
+ "/serviceprincipals(appid={value})/addpassword": "least=Application",
+ "/serviceprincipals(appid={value})/addtokensigningcertificate": "least=Application",
+ "/serviceprincipals(appid={value})/extendlifecycle": "",
+ "/serviceprincipals(appid={value})/getpasswordsinglesignoncredentials": "least=Application;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals(appid={value})/owners": "least=Application;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals(appid={value})/permanentDelete": "least=Application",
+ "/serviceprincipals(appid={value})/removekey": "least=Application",
+ "/serviceprincipals(appid={value})/removepassword": "least=Application",
+ "/serviceprincipals(appid={value})/sponsors": "least=Application;AlsoRequires=User.Read.All,Group.Read.All",
+ "/serviceprincipals/{id}/addkey": "least=Application",
+ "/serviceprincipals/{id}/addpassword": "least=Application",
+ "/serviceprincipals/{id}/addtokensigningcertificate": "least=Application",
+ "/serviceprincipals/{id}/extendlifecycle": "",
+ "/serviceprincipals/{id}/getpasswordsinglesignoncredentials": "least=Application;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals/{id}/owners": "least=Application;AlsoRequires=Directory.Read.All",
+ "/serviceprincipals/{id}/permanentDelete": "least=Application",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups": "",
+ "/serviceprincipals/{id}/removekey": "least=Application",
+ "/serviceprincipals/{id}/removepassword": "least=Application",
+ "/serviceprincipals/{id}/sponsors": "least=Application;AlsoRequires=User.Read.All,Group.Read.All",
+ "/serviceprincipals/{id}/synchronization/acquireaccesstoken": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/pause": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/provisionondemand": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/restart": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema/directories/{id}/discover": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema/parseexpression": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/start": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/validateconnectivity": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/validatecredentials": "least=Application",
+ "/serviceprincipals/{id}/synchronization/templates/{id}/schema/parseexpression": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/applications(appid={value})/logo": "least=Application",
+ "/applications/{id}/logo": "least=Application",
+ "/serviceprincipals/{id}/synchronization/secrets": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/synchronization/connectivityparameters": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/applications(appid={value})/owners/{id}": "least=Application",
+ "/applications(appid={value})/sponsors/{id}": "least=Application",
+ "/applications(appid={value})/tokenissuancepolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All",
+ "/applications(appid={value})/tokenlifetimepolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All",
+ "/applications/{id}/owners/{id}": "least=Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig/{trustedHostPairwiseBrokerId}": "least=Application",
+ "/applications/{id}/pairwisebrokerembeddedappconfig/{trustedHostPairwiseBrokerId}/perResourceAllowedScopes/{resourceAppId}": "least=Application",
+ "/applications/{id}/sponsors/{id}": "least=Application",
+ "/applications/{id}/tokenissuancepolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All",
+ "/applications/{id}/tokenlifetimepolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals(appid={value})/owners/{id}": "least=Application",
+ "/serviceprincipals(appid={value})/sponsors/{id}": "least=Application",
+ "/serviceprincipals(appid={value})/tokenlifetimepolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/claimsmappingpolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All",
+ "/serviceprincipals/{id}/owners/{id}": "least=Application",
+ "/serviceprincipals/{id}/sponsors/{id}": "least=Application",
+ "/serviceprincipals/{id}/tokenlifetimepolicies/{id}": "least=Application;AlsoRequires=Policy.Read.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/applications/{id}/extensionproperties/{id}": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/applications(appid={value})/owners": "least=Application",
+ "/applications(appid={value})/sponsors": "least=Application",
+ "/applications/{id}/owners": "least=Application",
+ "/applications/{id}/sponsors": "least=Application",
+ "/applications/{id}/synchronization/templates": "least=Application",
+ "/applications/{id}/synchronization/templates/{id}/schema/filteroperators": "least=Application",
+ "/applications/{id}/synchronization/templates/{id}/schema/functions": "least=Application",
+ "/applications/delta": "least=Application",
+ "/serviceprincipals(appid={value})/approleassignedto": "",
+ "/serviceprincipals(appid={value})/approleassignments": "",
+ "/serviceprincipals(appid={value})/delegatedpermissionclassifications": "",
+ "/serviceprincipals(appid={value})/inheritedapproleassignments": "",
+ "/serviceprincipals(appid={value})/ownedobjects": "",
+ "/serviceprincipals(appid={value})/owners": "",
+ "/serviceprincipals(appid={value})/sponsors": "",
+ "/serviceprincipals/{id}/approleassignedto": "",
+ "/serviceprincipals/{id}/approleassignments": "",
+ "/serviceprincipals/{id}/createdobjects": "",
+ "/serviceprincipals/{id}/delegatedpermissionclassifications": "",
+ "/serviceprincipals/{id}/inheritedapproleassignments": "",
+ "/serviceprincipals/{id}/memberof": "",
+ "/serviceprincipals/{id}/ownedobjects": "",
+ "/serviceprincipals/{id}/owners": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups": "",
+ "/serviceprincipals/{id}/sponsors": "",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema/filteroperators": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema/functions": "least=Application",
+ "/serviceprincipals/{id}/synchronization/templates": "least=Application",
+ "/serviceprincipals/{id}/synchronization/templates/{id}": "least=Application",
+ "/serviceprincipals/{id}/synchronization/templates/{id}/schema": "least=Application",
+ "/serviceprincipals/{id}/synchronization/templates/{id}/schema/filteroperators": "least=Application",
+ "/serviceprincipals/{id}/synchronization/templates/{id}/schema/functions": "least=Application",
+ "/serviceprincipals/delta": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/applications/{id}/synchronization/templates/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/applications/{id}/synchronization/templates/{id}/schema": "least=Application",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/serviceTreeAttributionServices": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AppRegistration.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Register new applications",
+ "adminDescription": "Allows the app to create new registrations for applications on behalf of the signed-in user.",
+ "userDisplayName": "Register new applications",
+ "userDescription": "Allows the app to create new registrations for applications on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Register new applications",
+ "adminDescription": "Allows the app to create new registrations for applications without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "AppRoleAssignment.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage app permission grants and app role assignments",
+ "adminDescription": "Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, on behalf of the signed-in user.",
+ "userDisplayName": "Manage app permission grants and app role assignments",
+ "userDescription": "Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage app permission grants and app role assignments",
+ "adminDescription": "Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/approleassignments": "least=DelegatedWork,Application",
+ "/users/{id}/approleassignments": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/groups/{id}/approleassignments/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/approleassignedto/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/approleassignments/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/approleassignedto/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/approleassignments/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/approleassignments/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/approleassignedresources": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/approleassignedresources": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/serviceprincipals(appid={value})/approleassignedto": "least=DelegatedWork,Application;AlsoRequires=Application.Read.All,Directory.Read.All",
+ "/serviceprincipals(appid={value})/approleassignments": "least=DelegatedWork,Application;AlsoRequires=Application.Read.All,Directory.Read.All",
+ "/serviceprincipals(appid={value})/inheritedapproleassignments": "least=DelegatedWork,Application;AlsoRequires=Application.Read.All,Directory.Read.All",
+ "/serviceprincipals/{id}/approleassignedto": "least=DelegatedWork,Application;AlsoRequires=Application.Read.All,Directory.Read.All",
+ "/serviceprincipals/{id}/approleassignments": "least=DelegatedWork,Application;AlsoRequires=Application.Read.All,Directory.Read.All",
+ "/serviceprincipals/{id}/inheritedapproleassignments": "least=DelegatedWork,Application;AlsoRequires=Application.Read.All,Directory.Read.All"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "ApprovalSolution.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's approval items, approval requests and approval responses.",
+ "adminDescription": "Allows the app to read the signed-in user's approval items, approval requests and approval responses (created by the user or assigned to the user). Doesn't include permission to create, cancel, or update anything.",
+ "userDisplayName": "Read your approval items, approval requests and approval responses ",
+ "userDescription": "Allows the app to read your approval items, approval requests and approval responses (created by you or assigned to you). Doesn't include permission to create, cancel, or update anything.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/approval": "least=DelegatedWork",
+ "/solutions/approval/approvalitems": "least=DelegatedWork",
+ "/solutions/approval/approvalitems/{id}": "least=DelegatedWork",
+ "/solutions/approval/approvalitems/{id}/requests": "least=DelegatedWork",
+ "/solutions/approval/approvalitems/{id}/requests/{id}": "least=DelegatedWork",
+ "/solutions/approval/approvalitems/{id}/responses": "least=DelegatedWork",
+ "/solutions/approval/approvalitems/{id}/responses/{id}": "least=DelegatedWork",
+ "/solutions/approval/operations/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/approval/provision": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EasyApprovalsFC"
+ }
+ },
+ "ApprovalSolution.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read approvals data with a subscription.",
+ "adminDescription": "Allows the app to read approvals event information for all users in your organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EasyApprovalsFC"
+ }
+ },
+ "ApprovalSolution.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create and cancel user's approval items. Read user's approval items, requests, responses.",
+ "adminDescription": "Allows the app to create approvals on behalf of the signed-in user, cancel approvals created by the user and read any of the user's approvals (created by the user or assigned to the user).",
+ "userDisplayName": "Create and cancel your approval items. Read user's approval items, requests, responses.",
+ "userDescription": "Allows you to create approvals, cancel approvals created by you and read any of your approvals (created by you or assigned to you).",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/approval": "",
+ "/solutions/approval/approvalitems/{id}": "",
+ "/solutions/approval/approvalitems/{id}/requests": "",
+ "/solutions/approval/approvalitems/{id}/requests/{id}": "",
+ "/solutions/approval/approvalitems/{id}/responses/{id}": "",
+ "/solutions/approval/operations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/solutions/approval/approvalitems": "least=DelegatedWork",
+ "/solutions/approval/approvalitems/{id}/responses": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/approval/approvalitems/{id}/cancel": "least=DelegatedWork",
+ "/solutions/approval/provision": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EasyApprovalsFC"
+ }
+ },
+ "ApprovalSolution.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read approvals data and create, update, or remove approval item subscriptions.",
+ "adminDescription": "Allows the app to read approvals event information for all users in your organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EasyApprovalsFC"
+ }
+ },
+ "ApprovalSolutionResponse.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Respond to a user's approval. Read user's approval items, requests, responses.",
+ "adminDescription": "Allows the app to create approvals on behalf of the signed-in user, cancel approvals created by the user and read any of the user's approvals (created by the user or assigned to the user).",
+ "userDisplayName": "Respond to a user's approval. Read user's approval items, requests, responses.",
+ "userDescription": "Allows you to create approvals, cancel approvals created by you and read any of your approvals (created by you or assigned to you).",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/approval": "",
+ "/solutions/approval/approvalitems": "",
+ "/solutions/approval/approvalitems/{id}": "",
+ "/solutions/approval/approvalitems/{id}/requests": "",
+ "/solutions/approval/approvalitems/{id}/requests/{id}": "",
+ "/solutions/approval/approvalitems/{id}/responses/{id}": "",
+ "/solutions/approval/operations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/approval/provision": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/solutions/approval/approvalitems/{id}/responses": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EasyApprovalsFC"
+ }
+ },
+ "AttackSimulation.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read attack simulation data of an organization",
+ "adminDescription": "Allows the app to read attack simulation and training data for an organization for the signed-in user.",
+ "userDisplayName": "Read attack simulation data of an organization",
+ "userDescription": "Allows the app to read attack simulation and training data for an organization on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read attack simulation data of an organization",
+ "adminDescription": "Allows the app to read attack simulation and training data for an organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/getattacksimulationrepeatoffenders": "least=DelegatedWork,Application",
+ "/reports/getattacksimulationsimulationusercoverage": "least=DelegatedWork,Application",
+ "/reports/getattacksimulationtrainingusercoverage": "least=DelegatedWork,Application",
+ "/reports/security/getattacksimulationrepeatoffenders": "least=DelegatedWork,Application",
+ "/reports/security/getattacksimulationsimulationusercoverage": "least=DelegatedWork,Application",
+ "/reports/security/getattacksimulationtrainingusercoverage": "least=DelegatedWork,Application",
+ "/security/attacksimulation/endUserNotifications": "least=DelegatedWork,Application",
+ "/security/attacksimulation/endUserNotifications/{id}/endUserNotificationDetail": "least=DelegatedWork,Application",
+ "/security/attacksimulation/landingPages": "least=DelegatedWork,Application",
+ "/security/attacksimulation/landingPages/{id}": "least=DelegatedWork,Application",
+ "/security/attacksimulation/landingPages/{id}/details": "least=DelegatedWork,Application",
+ "/security/attacksimulation/loginPages": "least=DelegatedWork,Application",
+ "/security/attacksimulation/loginPages/{id}": "least=DelegatedWork,Application",
+ "/security/attacksimulation/operations/{id}": "least=DelegatedWork,Application",
+ "/security/attacksimulation/payloads": "least=DelegatedWork,Application",
+ "/security/attacksimulation/payloads/{id}": "least=DelegatedWork,Application",
+ "/security/attacksimulation/simulationautomations": "least=DelegatedWork,Application",
+ "/security/attacksimulation/simulationautomations/{id}": "least=DelegatedWork,Application",
+ "/security/attacksimulation/simulationautomations/{id}/runs": "least=DelegatedWork,Application",
+ "/security/attacksimulation/simulations": "least=DelegatedWork,Application",
+ "/security/attacksimulation/simulations/{id}": "least=DelegatedWork,Application",
+ "/security/attacksimulation/simulations/{id}/landingPage": "least=DelegatedWork,Application",
+ "/security/attacksimulation/simulations/{id}/loginPage": "least=DelegatedWork,Application",
+ "/security/attacksimulation/simulations/{id}/payload": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns/{id}": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns/{id}/endUserNotificationSetting": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns/{id}/excludedAccountTarget": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns/{id}/includedAccountTarget": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns/{id}/report/campaignUsers": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns/{id}/report/overview": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns/{id}/trainingSetting": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainings": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainings/{id}": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainings/{id}/languageDetails": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "astgraph"
+ }
+ },
+ "AttackSimulation.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read, create, and update attack simulation data of an organization",
+ "adminDescription": "Allows the app to read, create, and update attack simulation and training data for an organization for the signed-in user.",
+ "userDisplayName": "Read, create, and update attack simulation data of an organization",
+ "userDescription": "Allows the app to read, create, and update attack simulation and training data for an organization on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read, create, and update all attack simulation data of an organization",
+ "adminDescription": "Allows the app to read, create, and update attack simulation and training data for an organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/attacksimulation/simulations": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/attacksimulation/simulations/{id}": "least=DelegatedWork,Application",
+ "/security/attacksimulation/trainingCampaigns/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "astgraph"
+ }
+ },
+ "AuditActivity.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read activity audit log from the audit store.",
+ "adminDescription": "Read activity audit log from the audit store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 1
+ },
+ "Application": {
+ "adminDisplayName": "Read activity audit log from the audit store.",
+ "adminDescription": "Read activity audit log from the audit store.",
+ "userDisplayName": "Read activity audit log from the audit store.",
+ "userDescription": "Read activity audit log from the audit store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{userId}/dataSecurityAndGovernance/activities/auditActivities/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "AuditActivity.Write": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Upload activity audit logs to the audit store.",
+ "adminDescription": "Allows the application to upload bulk activity audit logs to the audit store.",
+ "userDisplayName": "Upload activity audit logs to the audit store.",
+ "userDescription": "Allows the application to upload bulk activity audit logs to the audit store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Upload activity audit logs to the audit store.",
+ "adminDescription": "Allows the application to upload bulk activity audit logs to the audit store.",
+ "userDisplayName": "Upload activity audit logs to the audit store.",
+ "userDescription": "Allows the application to upload bulk activity audit logs to the audit store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/dataSecurityAndGovernance/activities/auditActivities": "least=Application,DelegatedWork",
+ "/users/{userId}/dataSecurityAndGovernance/activities/auditActivities": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "AuditLog.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read audit log data",
+ "adminDescription": "Allows the app to read and query your audit log activities, on behalf of the signed-in user.",
+ "userDisplayName": "Read audit log data",
+ "userDescription": "Allows the app to read and query your audit log activities, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all audit log data",
+ "adminDescription": "Allows the app to read and query your audit log activities, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/auditlogs/directoryaudits": "least=DelegatedWork,Application",
+ "/auditlogs/directoryaudits/{id}": "least=DelegatedWork,Application",
+ "/auditlogs/provisioning": "",
+ "/auditlogs/signins": "least=DelegatedWork,Application",
+ "/auditlogs/signins/{id}": "least=DelegatedWork,Application",
+ "/auditlogs/signups": "least=DelegatedWork,Application",
+ "/auditlogs/signups/{id}": "least=DelegatedWork,Application",
+ "/reports/authenticationmethods/userregistrationdetails": "least=DelegatedWork,Application",
+ "/reports/authenticationmethods/userregistrationdetails/{id}": "least=DelegatedWork,Application",
+ "/reports/conditionalaccess/getconditionalaccessimpactanalyzerdata": "least=DelegatedWork,Application",
+ "/reports/conditionalaccess/getconditionalaccessperpolicyhighvalueidentityimpact": "least=DelegatedWork,Application",
+ "/reports/conditionalaccess/getconditionalaccessperpolicyimpactsummary": "least=DelegatedWork,Application",
+ "/reports/conditionalaccess/protectedapps": "least=DelegatedWork,Application",
+ "/reports/conditionalaccess/securityalerts": "least=DelegatedWork,Application",
+ "/reports/conditionalaccess/unprotectedapps": "least=DelegatedWork,Application",
+ "/reports/correlations": "",
+ "/reports/correlations/{id}": "",
+ "/reports/correlations/{id}/identities": "",
+ "/reports/correlations/{id}/identities/{id}": "",
+ "/reports/getAppManagementAuditSummary": "least=DelegatedWork,Application",
+ "/reports/reconciliations/provisioning": "least=DelegatedWork,Application",
+ "/reports/reconciliations/provisioning/{id}": "least=DelegatedWork,Application",
+ "/reports/reconciliations/provisioning/{id}/identities": "least=DelegatedWork,Application",
+ "/reports/reconciliations/provisioning/{id}/identities/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/agentSignInSessions": "least=DelegatedWork,Application",
+ "/users/{id}/agentSignInSessions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/authenticationmethods/usersregisteredbyfeature": "least=DelegatedWork",
+ "/reports/authenticationmethods/usersregisteredbymethod": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ixrdev"
+ }
+ },
+ "AuditLogsQuery-CRM.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read audit logs data from Dynamics CRM workload",
+ "adminDescription": "Allows the app to read and query audit logs from Dynamics CRM workload, on behalf of a signed-in user.",
+ "userDisplayName": "Read audit logs data from Dynamics CRM workload",
+ "userDescription": "Allows the app to read and query audit logs from Dynamics CRM workload, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read audit logs data from Dynamics CRM service",
+ "adminDescription": "Allows the app to read and query audit logs from Dynamics CRM service.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/auditLog/queries": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/auditLog/queries/{id}": "",
+ "/security/auditLog/queries/{id}/records": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ipauditengsg"
+ }
+ },
+ "AuditLogsQuery-Endpoint.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read audit logs data from Endpoint Data Loss Prevention workload",
+ "adminDescription": "Allows the app to read and query audit logs from Endpoint Data Loss Prevention workload, on behalf of a signed-in user.",
+ "userDisplayName": "Read audit logs data from Endpoint Data Loss Prevention workload",
+ "userDescription": "Allows the app to read and query audit logs from Endpoint Data Loss Prevention workload, on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read audit logs data from Endpoint Data Loss Prevention workload",
+ "adminDescription": "Allows the app to read and query audit logs from Endpoint Data Loss Prevention workload.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/auditLog/queries": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/auditLog/queries/{id}": "",
+ "/security/auditLog/queries/{id}/records": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ipauditengsg"
+ }
+ },
+ "AuditLogsQuery-Entra.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read audit logs data from Entra service",
+ "adminDescription": "Allows the app to read and query audit logs from Entra service, on behalf of a signed-in user.",
+ "userDisplayName": "Read audit logs data from Entra service",
+ "userDescription": "Allows the app to read and query audit logs from Entra service, on behalf of you.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read audit logs data from Entra service",
+ "adminDescription": "Allows the app to read and query audit logs from Entra service.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/auditLog/queries": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/auditLog/queries/{id}": "least=DelegatedWork,Application",
+ "/security/auditLog/queries/{id}/records": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ipauditengsg"
+ }
+ },
+ "AuditLogsQuery-Exchange.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read audit logs data from Exchange workload",
+ "adminDescription": "Allows the app to read and query audit logs from Exchange workload, on behalf of a signed-in user.",
+ "userDisplayName": "Read audit logs data from Exchange workload",
+ "userDescription": "Allows the app to read and query audit logs from Exchange workload, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read audit logs data from Exchange service",
+ "adminDescription": "Allows the app to read and query audit logs from Exchange service.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/auditLog/queries": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/auditLog/queries/{id}": "",
+ "/security/auditLog/queries/{id}/records": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ipauditengsg"
+ }
+ },
+ "AuditLogsQuery-OneDrive.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read audit logs data from OneDrive workload",
+ "adminDescription": "Allows the app to read and query audit logs from OneDrive workload, on behalf of a signed-in user.",
+ "userDisplayName": "Read audit logs data from OneDrive workload",
+ "userDescription": "Allows the app to read and query audit logs from OneDrive workload, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read audit logs data from OneDrive service",
+ "adminDescription": "Allows the app to read and query audit logs from OneDrive service.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/auditLog/queries": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/auditLog/queries/{id}": "",
+ "/security/auditLog/queries/{id}/records": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ipauditengsg"
+ }
+ },
+ "AuditLogsQuery-SharePoint.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read audit logs data from SharePoint workload",
+ "adminDescription": "Allows the app to read and query audit logs from SharePoint workload, on behalf of a signed-in user.",
+ "userDisplayName": "Read audit logs data from SharePoint workload",
+ "userDescription": "Allows the app to read and query audit logs from SharePoint workload, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read audit logs data from SharePoint service",
+ "adminDescription": "Allows the app to read and query audit logs from SharePoint service.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/auditLog/queries": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/auditLog/queries/{id}": "",
+ "/security/auditLog/queries/{id}/records": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ipauditengsg"
+ }
+ },
+ "AuditLogsQuery.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read audit logs data from all services",
+ "adminDescription": "Allows the app to read and query audit logs from all services, on behalf of a signed-in user",
+ "userDisplayName": "Read audit logs data from all services",
+ "userDescription": "Allows the app to read and query audit logs from all services, on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read audit logs data from all services",
+ "adminDescription": "Allows the app to read and query audit logs from all services.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/auditLog/queries": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/auditLog/queries/{id}": "",
+ "/security/auditLog/queries/{id}/records": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ipauditengsg"
+ }
+ },
+ "AuthenticationContext.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all authentication context information",
+ "adminDescription": "Allows the app to read all authentication context information in your organization on behalf of the signed-in user.",
+ "userDisplayName": "Read all authentication context information",
+ "userDescription": "Allows the app to read all authentication context information in your organization on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all authentication context information",
+ "adminDescription": "Allows the app to read the authentication context information in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationcontextclassreferences": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/authenticationcontextclassreferences/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cagraphscopeapproval"
+ }
+ },
+ "AuthenticationContext.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all authentication context information",
+ "adminDescription": "Allows the app to read and update all authentication context information in your organization on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all authentication context information",
+ "userDescription": "Allows the app to read and update all authentication context information in your organization on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all authentication context information",
+ "adminDescription": "Allows the app to read and update the authentication context information in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationcontextclassreferences": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationcontextclassreferences/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationcontextclassreferences": "",
+ "/identity/conditionalaccess/authenticationcontextclassreferences/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cagraphscopeapproval"
+ }
+ },
+ "BackupRestore-Configuration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read backup configuration policies",
+ "adminDescription": "Allows the app to read the backup configuration, and list of Microsoft 365 service resources to be backed up, on behalf of the signed in user.",
+ "userDisplayName": "Read backup configuration policies",
+ "userDescription": "Allows the app to read the backup configuration, and list of Microsoft 365 service resources to be backed up, on your behalf.",
+ "requiresAdminConsent": true
+ },
+ "Application": {
+ "adminDisplayName": "Read backup configuration policies",
+ "adminDescription": "Allows the app to read all backup configurations, and lists of Microsoft 365 service resources to be backed up, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/entraProtectionPolicies": "least=DelegatedWork,Application",
+ "/backupRestore/exchangeProtectionPolicies": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies": "least=DelegatedWork,Application",
+ "/backupRestore/protectionPolicies": "least=DelegatedWork,Application",
+ "/backupRestore/sharePointProtectionPolicies": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/entraProtectionPolicies/{policyId}": "least=DelegatedWork,Application",
+ "/backupRestore/exchangeProtectionPolicies/{policyId}": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}": "least=DelegatedWork,Application",
+ "/backupRestore/protectionPolicies/{policyId}": "least=DelegatedWork,Application",
+ "/backupRestore/sharePointProtectionPolicies/{policyId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxProtectionUnits": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveProtectionUnits": "least=DelegatedWork,Application",
+ "/backupRestore/sharePointProtectionPolicies/{policyId}/siteProtectionUnits": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxInclusionRules": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveInclusionRules": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteInclusionRules": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxInclusionRules/{inclusionRuleId}": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveInclusionRules/{inclusionRuleId}": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteInclusionRules/{inclusionRuleId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/driveProtectionUnits": "least=DelegatedWork,Application",
+ "/backupRestore/mailboxProtectionUnits": "least=DelegatedWork,Application",
+ "/backupRestore/protectionUnits": "least=DelegatedWork,Application",
+ "/backupRestore/siteProtectionUnits": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/protectionUnits/{protectionUnitId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxProtectionUnitsBulkAdditionJobs": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveProtectionUnitsBulkAdditionJobs": "least=DelegatedWork,Application",
+ "/backupRestore/sharePointProtectionPolicies/{policyId}/siteProtectionUnitsBulkAdditionJobs": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxProtectionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveProtectionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "least=DelegatedWork,Application",
+ "/backupRestore/sharePointProtectionPolicies/{policyId}/siteProtectionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/reports/getStatisticsByPolicy(policyId='{policyId}')": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/reports/getStatisticsByWorkload(workloadId='{workloadId}')": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxExclusionUnits": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveExclusionUnits": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteExclusionUnits": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxExclusionUnitsBulkAdditionJobs": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxExclusionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveExclusionUnitsBulkAdditionJobs": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveExclusionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteExclusionUnitsBulkAdditionJobs": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteExclusionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EnhancedRestoreAdmin"
+ }
+ },
+ "BackupRestore-Configuration.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and edit backup configuration policies",
+ "adminDescription": "Allows the app to read and update the backup configuration, and list of Microsoft 365 service resources to be backed up, on behalf of the signed in user.",
+ "userDisplayName": "Read and edit backup configuration policies",
+ "userDescription": "Allows the app to read and update the backup configuration, and list of Microsoft 365 service resources to be backed up, on your behalf.",
+ "requiresAdminConsent": true
+ },
+ "Application": {
+ "adminDisplayName": "Read and edit backup configuration policies",
+ "adminDescription": "Allows the app to read and update the backup configuration, and list of Microsoft 365 service resources to be backed up, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/protectionPolicies": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/protectionPolicies/{policyId}/activate": "least=DelegatedWork,Application",
+ "/backupRestore/protectionPolicies/{policyId}/deactivate": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/entraProtectionPolicies": "least=DelegatedWork,Application",
+ "/backupRestore/exchangeProtectionPolicies": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies": "least=DelegatedWork,Application",
+ "/backupRestore/sharePointProtectionPolicies": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/backupRestore/entraProtectionPolicies/{policyId}": "least=DelegatedWork,Application",
+ "/backupRestore/exchangeProtectionPolicies/{policyId}": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}": "least=DelegatedWork,Application",
+ "/backupRestore/protectionPolicies/{policyId}": "least=DelegatedWork,Application",
+ "/backupRestore/sharePointProtectionPolicies/{policyId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxInclusionRules": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveInclusionRules": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteInclusionRules": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxInclusionRules/{inclusionRuleId}": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveInclusionRules/{inclusionRuleId}": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteInclusionRules/{inclusionRuleId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxInclusionRules/{inclusionRuleId}/deleteAndUnprotect": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxInclusionRules/{inclusionRuleId}/run": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveInclusionRules/{inclusionRuleId}/deleteAndUnprotect": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveInclusionRules/{inclusionRuleId}/run": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteInclusionRules/{inclusionRuleId}/deleteAndUnprotect": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteInclusionRules/{inclusionRuleId}/run": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxProtectionUnits": "",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveProtectionUnits": "",
+ "/backupRestore/sharePointProtectionPolicies/{policyId}/siteProtectionUnits": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/driveProtectionUnits": "",
+ "/backupRestore/mailboxProtectionUnits": "",
+ "/backupRestore/protectionUnits": "",
+ "/backupRestore/siteProtectionUnits": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/protectionUnits/{protectionUnitId}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/backupRestore/driveProtectionUnits/{driveProtectionUnitId}": "least=DelegatedWork",
+ "/backupRestore/mailboxProtectionUnits/{mailboxProtectionUnitId}": "least=DelegatedWork",
+ "/backupRestore/siteProtectionUnits/{siteProtectionUnitId}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxProtectionUnitsBulkAdditionJobs": "",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveProtectionUnitsBulkAdditionJobs": "",
+ "/backupRestore/sharePointProtectionPolicies/{policyId}/siteProtectionUnitsBulkAdditionJobs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxProtectionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveProtectionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "",
+ "/backupRestore/sharePointProtectionPolicies/{policyId}/siteProtectionUnitsBulkAdditionJobs/{bulkAdditionJobId}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxProtectionUnitsBulkAdditionJobs": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveProtectionUnitsBulkAdditionJobs": "least=DelegatedWork,Application",
+ "/backupRestore/sharePointProtectionPolicies/{policyId}/siteProtectionUnitsBulkAdditionJobs": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/protectionUnits/{protectionUnitId}/cancelOffboard": "least=DelegatedWork",
+ "/backupRestore/protectionUnits/{protectionUnitId}/offboard": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxExclusionUnits": "",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveExclusionUnits": "",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteExclusionUnits": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxExclusionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveExclusionUnitsBulkAdditionJobs/{bulkAdditionJobId}": "",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteExclusionUnitsBulkAdditionJobs/{bulkAdditionJobId}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/solutions/backupRestore/exchangeProtectionPolicies/{policyId}/mailboxExclusionUnitsBulkAdditionJobs": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessProtectionPolicies/{policyId}/driveExclusionUnitsBulkAdditionJobs": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointProtectionPolicies/{policyId}/siteExclusionUnitsBulkAdditionJobs": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EnhancedRestoreAdmin"
+ }
+ },
+ "BackupRestore-Control.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the status of the M365 backup service",
+ "adminDescription": "Allows the app to read the status of M365 backup service (enable/disable), on behalf of the signed in user.",
+ "userDisplayName": "Read the status of the M365 backup service",
+ "userDescription": "Allows the app to read the status of M365 backup service (enable/disable), on your behalf.",
+ "requiresAdminConsent": true
+ },
+ "Application": {
+ "adminDisplayName": "Read the status of the M365 backup service",
+ "adminDescription": "Allows the app to read the status of M365 backup service (enable/disable), without signed in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/serviceApps": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/serviceApps/{serviceAppId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EnhancedRestoreAdmin"
+ }
+ },
+ "BackupRestore-Control.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Update or read the status of the M365 backup service",
+ "adminDescription": "Allows the app to update or read the status of M365 backup service (enable/disable), on behalf of the signed in user.",
+ "userDisplayName": "Update or read the status of the M365 backup service",
+ "userDescription": "Allows the app to update or read the status of M365 backup service (enable/disable), on your behalf.",
+ "requiresAdminConsent": true
+ },
+ "Application": {
+ "adminDisplayName": "Update or read the status of the M365 backup service",
+ "adminDescription": "Allows the app to update or read the status of M365 backup service (enable/disable), without signed in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/serviceApps": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/serviceApps/{serviceAppId}/activate": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/serviceApps/{serviceAppId}/deactivate": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/backupRestore/serviceApps/{serviceAppId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/serviceApps/{serviceAppId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/enable": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/emailNotificationsSetting": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/backupRestore/emailNotificationsSetting": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EnhancedRestoreAdmin"
+ }
+ },
+ "BackupRestore-Restore.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read restore sessions",
+ "adminDescription": "Allows the app to read restore sessions, on behalf of the signed in user.",
+ "userDisplayName": "Read restore sessions",
+ "userDescription": "Allows the app to read restore sessions, on your behalf.",
+ "requiresAdminConsent": true
+ },
+ "Application": {
+ "adminDisplayName": "Read all restore sessions",
+ "adminDescription": "Allows the app to read all restore sessions, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/exchangeRestoreSessions": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessRestoreSessions": "least=DelegatedWork,Application",
+ "/backupRestore/restoreSessions": "least=DelegatedWork,Application",
+ "/backupRestore/sharepointRestoreSessions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/restoreSessions/{restoreSessionId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/exchangeRestoreSessions/{restoreSessionId}/mailboxRestoreArtifacts": "least=DelegatedWork,Application",
+ "/backupRestore/exchangeRestoreSessions/{restoreSessionId}/mailboxRestoreArtifactsBulkAdditionRequests": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessRestoreSessions/{restoreSessionId}/driveRestoreArtifacts": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessRestoreSessions/{restoreSessionId}/driveRestoreArtifactsBulkAdditionRequests": "least=DelegatedWork,Application",
+ "/backupRestore/sharepointRestoreSessions/{restoreSessionId}/siteRestoreArtifacts": "least=DelegatedWork,Application",
+ "/backupRestore/sharepointRestoreSessions/{restoreSessionId}/siteRestoreArtifactsBulkAdditionRequests": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/restoreSessions": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EnhancedRestoreAdmin"
+ }
+ },
+ "BackupRestore-Restore.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read restore sessions and start restore sessions from backups",
+ "adminDescription": "Allows the app to search the backup snapshots for Microsoft 365 resources, and restore Microsoft 365 resources from a backed up snapshot, on behalf of the signed in user.",
+ "userDisplayName": "Read restore sessions and start restore sessions from backups",
+ "userDescription": "Allows the app to restore Microsoft 365 resources from a backed up snapshot, on your behalf.",
+ "requiresAdminConsent": true
+ },
+ "Application": {
+ "adminDisplayName": "Read restore all sessions and start restore sessions from backups",
+ "adminDescription": "Allows the app to restore Microsoft 365 resources from a backed up snapshot, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/restoreSessions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/exchangeRestoreSessions": "least=DelegatedWork,Application",
+ "/backupRestore/oneDriveForBusinessRestoreSessions": "least=DelegatedWork,Application",
+ "/backupRestore/sharepointRestoreSessions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/restoreSessions/{restoreSessionId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/exchangeRestoreSessions/{restoreSessionId}/mailboxRestoreArtifacts": "",
+ "/backupRestore/exchangeRestoreSessions/{restoreSessionId}/mailboxRestoreArtifactsBulkAdditionRequests": "",
+ "/backupRestore/oneDriveForBusinessRestoreSessions/{restoreSessionId}/driveRestoreArtifacts": "",
+ "/backupRestore/oneDriveForBusinessRestoreSessions/{restoreSessionId}/driveRestoreArtifactsBulkAdditionRequests": "",
+ "/backupRestore/sharepointRestoreSessions/{restoreSessionId}/siteRestoreArtifacts": "",
+ "/backupRestore/sharepointRestoreSessions/{restoreSessionId}/siteRestoreArtifactsBulkAdditionRequests": "",
+ "/solutions/backupRestore/oneDriveForBusinessRestoreSessions/{restoreSessionId}/granularDriveRestoreArtifacts": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharepointRestoreSessions/{restoreSessionId}/granularSiteRestoreArtifacts": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/restoreSessions/{restoreSessionId}/activate": "least=DelegatedWork,Application",
+ "/backupRestore/restoreSessions/{restoreSessionId}/deactivate": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessBrowseSessions": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessBrowseSessions/{browseSessionId}/browse": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointBrowseSessions": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointBrowseSessions/{browseSessionId}/browse": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/browseSessions": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessBrowseSessions": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/oneDriveForBusinessBrowseSessions/{browseSessionId}": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/restoreSessions": "",
+ "/solutions/backupRestore/sharePointBrowseSessions": "least=DelegatedWork,Application",
+ "/solutions/backupRestore/sharePointBrowseSessions/{browseSessionId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EnhancedRestoreAdmin"
+ }
+ },
+ "BackupRestore-Search.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Search for metadata properties in all backup snapshots",
+ "adminDescription": "Allows the app to search the backup snapshots for Microsoft 365 resources, on behalf of the signed in user.",
+ "userDisplayName": "Search for metadata properties in backup snapshots",
+ "userDescription": "Allows the app to search the backup snapshots for Microsoft 365 resources, on your behalf.",
+ "requiresAdminConsent": true
+ },
+ "Application": {
+ "adminDisplayName": "Search for metadata properties in all backup snapshots",
+ "adminDescription": "Allows the app to search all backup snapshots for Microsoft 365 resources, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/restorePoints": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/backupRestore/restorePoints/{restorePointId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/backupRestore/restorePoints/search": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/backupRestore/restorePoints": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/backupRestore/restorePoints/search": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EnhancedRestoreAdmin"
+ }
+ },
+ "BitlockerKey.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read BitLocker keys",
+ "adminDescription": "Allows the app to read BitLocker keys on behalf of the signed-in user, for their owned devices. Allows read of the recovery key.",
+ "userDisplayName": "Read your BitLocker keys",
+ "userDescription": "Allows the app to read BitLocker keys for your owned devices. Allows read of the recovery key.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all BitLocker keys",
+ "adminDescription": "Allows an app to read BitLocker keys for all devices, without a signed-in user. Allows read of the recovery key.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/informationprotection/bitlocker/recoverykeys": "",
+ "/informationprotection/bitlocker/recoverykeys/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "BitlockerKey.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read BitLocker keys basic information",
+ "adminDescription": "Allows the app to read BitLocker keys on behalf of the signed-in user, for their owned devices. Does not allow read of the recovery key itself.",
+ "userDisplayName": "Read your BitLocker keys basic information",
+ "userDescription": "Allows the app to read basic BitLocker key properties for your owned devices. Does not allow read of the recovery key itself.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all BitLocker keys basic information",
+ "adminDescription": "Allows an app to read basic BitLocker key properties for all devices, without a signed-in user. Does not allow read of the recovery key.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/informationprotection/bitlocker/recoverykeys": "least=DelegatedWork,Application",
+ "/informationprotection/bitlocker/recoverykeys/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "Bookings.Manage.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage bookings information",
+ "adminDescription": "Allows an app to read, write and manage bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user.",
+ "userDisplayName": "Manage bookings information",
+ "userDescription": "Allows an app to read, write and manage bookings appointments, businesses, customers, services, and staff on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage bookings information",
+ "adminDescription": "Allows an app to read, write and manage bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/bookingcurrencies": "",
+ "/bookingcurrencies/{id}": "",
+ "/solutions/bookingcurrencies": "",
+ "/solutions/bookingcurrencies/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses": "least=DelegatedWork",
+ "/solutions/bookingbusinesses": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/getstaffavailability": "",
+ "/solutions/bookingbusinesses/{id}/getstaffavailability": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/bookingbusinesses": "",
+ "/bookingbusinesses/{id}": "",
+ "/bookingbusinesses/{id}/appointments": "",
+ "/bookingbusinesses/{id}/appointments/{id}": "",
+ "/bookingbusinesses/{id}/calendarview": "",
+ "/bookingbusinesses/{id}/customers": "",
+ "/bookingbusinesses/{id}/customers/{id}": "",
+ "/bookingbusinesses/{id}/customquestions": "",
+ "/bookingbusinesses/{id}/customquestions/{id}": "",
+ "/bookingbusinesses/{id}/services": "",
+ "/bookingbusinesses/{id}/services/{id}": "",
+ "/bookingbusinesses/{id}/staffmembers": "",
+ "/bookingbusinesses/{id}/staffmembers/{id}": "",
+ "/solutions/bookingbusinesses": "",
+ "/solutions/bookingbusinesses/{id}": "",
+ "/solutions/bookingbusinesses/{id}/appointments": "",
+ "/solutions/bookingbusinesses/{id}/appointments/{id}": "",
+ "/solutions/bookingbusinesses/{id}/calendarview": "",
+ "/solutions/bookingbusinesses/{id}/customers": "",
+ "/solutions/bookingbusinesses/{id}/customers/{id}": "",
+ "/solutions/bookingbusinesses/{id}/customquestions": "",
+ "/solutions/bookingbusinesses/{id}/customquestions/{id}": "",
+ "/solutions/bookingbusinesses/{id}/services": "",
+ "/solutions/bookingbusinesses/{id}/services/{id}": "",
+ "/solutions/bookingbusinesses/{id}/staffmembers": "",
+ "/solutions/bookingbusinesses/{id}/staffmembers/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/appointments": "",
+ "/bookingbusinesses/{id}/appointments/{id}/cancel": "",
+ "/bookingbusinesses/{id}/customers": "",
+ "/bookingbusinesses/{id}/customquestions": "",
+ "/bookingbusinesses/{id}/publish": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/services": "",
+ "/bookingbusinesses/{id}/staffmembers": "",
+ "/bookingbusinesses/{id}/unpublish": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/appointments": "",
+ "/solutions/bookingbusinesses/{id}/appointments/{id}/cancel": "",
+ "/solutions/bookingbusinesses/{id}/customers": "",
+ "/solutions/bookingbusinesses/{id}/customquestions": "",
+ "/solutions/bookingbusinesses/{id}/publish": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/services": "",
+ "/solutions/bookingbusinesses/{id}/staffmembers": "",
+ "/solutions/bookingbusinesses/{id}/unpublish": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/appointments/{id}": "",
+ "/bookingbusinesses/{id}/customers/{id}": "",
+ "/bookingbusinesses/{id}/customquestions/{id}": "",
+ "/bookingbusinesses/{id}/services/{id}": "",
+ "/bookingbusinesses/{id}/staffmembers/{id}": "",
+ "/solutions/bookingbusinesses/{id}/appointments/{id}": "",
+ "/solutions/bookingbusinesses/{id}/customers/{id}": "",
+ "/solutions/bookingbusinesses/{id}/customquestions/{id}": "",
+ "/solutions/bookingbusinesses/{id}/services/{id}": "",
+ "/solutions/bookingbusinesses/{id}/staffmembers/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}": "",
+ "/solutions/bookingbusinesses/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Bookings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read bookings information",
+ "adminDescription": "Allows an app to read bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user.",
+ "userDisplayName": "Read bookings information",
+ "userDescription": "Allows an app to read bookings appointments, businesses, customers, services, and staff on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Bookings related resources.",
+ "adminDescription": "Allows an app to read Bookings appointments, businesses, customers, services, and staff without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/bookingcurrencies": "least=DelegatedWork",
+ "/bookingcurrencies/{id}": "least=DelegatedWork",
+ "/solutions/bookingcurrencies": "least=DelegatedWork",
+ "/solutions/bookingcurrencies/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/bookingbusinesses": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}": "least=DelegatedWork",
+ "/bookingbusinesses/{id}/appointments": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/appointments/{id}": "least=DelegatedWork",
+ "/bookingbusinesses/{id}/calendarview": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/customers": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/customers/{id}": "least=DelegatedWork",
+ "/bookingbusinesses/{id}/customquestions": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/customquestions/{id}": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/services": "least=DelegatedWork",
+ "/bookingbusinesses/{id}/services/{id}": "least=DelegatedWork",
+ "/bookingbusinesses/{id}/staffmembers": "least=DelegatedWork",
+ "/bookingbusinesses/{id}/staffmembers/{id}": "least=DelegatedWork",
+ "/solutions/bookingbusinesses": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}/appointments": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}/appointments/{id}": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}/calendarview": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/customers": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/customers/{id}": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}/customquestions": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/customquestions/{id}": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/services": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}/services/{id}": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}/staffmembers": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}/staffmembers/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/appointments": "",
+ "/bookingbusinesses/{id}/getstaffavailability": "",
+ "/solutions/bookingbusinesses/{id}/appointments": "",
+ "/solutions/bookingbusinesses/{id}/getstaffavailability": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/appointments/{id}": "",
+ "/bookingbusinesses/{id}/customers/{id}": "",
+ "/solutions/bookingbusinesses/{id}/appointments/{id}": "",
+ "/solutions/bookingbusinesses/{id}/customers/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Bookings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write bookings information",
+ "adminDescription": "Allows an app to read and write bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user. Does not allow create, delete and publish of booking businesses.",
+ "userDisplayName": "Read and write bookings information",
+ "userDescription": "Allows an app to read and write Bookings appointments, businesses, customers, services, and staff on your behalf. Does not allow create, delete and publish of booking businesses.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write bookings information",
+ "adminDescription": "Allows an app to read and write bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user. Does not allow create, delete and publish of booking businesses.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/bookingcurrencies": "",
+ "/bookingcurrencies/{id}": "",
+ "/solutions/bookingcurrencies": "",
+ "/solutions/bookingcurrencies/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/bookingbusinesses": "",
+ "/bookingbusinesses/{id}": "",
+ "/bookingbusinesses/{id}/appointments": "",
+ "/bookingbusinesses/{id}/appointments/{id}": "",
+ "/bookingbusinesses/{id}/calendarview": "",
+ "/bookingbusinesses/{id}/customers": "",
+ "/bookingbusinesses/{id}/customers/{id}": "",
+ "/bookingbusinesses/{id}/customquestions": "",
+ "/bookingbusinesses/{id}/customquestions/{id}": "",
+ "/bookingbusinesses/{id}/services": "",
+ "/bookingbusinesses/{id}/services/{id}": "",
+ "/bookingbusinesses/{id}/staffmembers": "",
+ "/bookingbusinesses/{id}/staffmembers/{id}": "",
+ "/solutions/bookingbusinesses": "",
+ "/solutions/bookingbusinesses/{id}": "",
+ "/solutions/bookingbusinesses/{id}/appointments": "",
+ "/solutions/bookingbusinesses/{id}/appointments/{id}": "",
+ "/solutions/bookingbusinesses/{id}/calendarview": "",
+ "/solutions/bookingbusinesses/{id}/customers": "",
+ "/solutions/bookingbusinesses/{id}/customers/{id}": "",
+ "/solutions/bookingbusinesses/{id}/customquestions": "",
+ "/solutions/bookingbusinesses/{id}/customquestions/{id}": "",
+ "/solutions/bookingbusinesses/{id}/services": "",
+ "/solutions/bookingbusinesses/{id}/services/{id}": "",
+ "/solutions/bookingbusinesses/{id}/staffmembers": "",
+ "/solutions/bookingbusinesses/{id}/staffmembers/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/getstaffavailability": "",
+ "/solutions/bookingbusinesses/{id}/getstaffavailability": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/appointments": "",
+ "/bookingbusinesses/{id}/appointments/{id}/cancel": "",
+ "/bookingbusinesses/{id}/calendarview": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/customers": "",
+ "/bookingbusinesses/{id}/customquestions": "least=Application",
+ "/bookingbusinesses/{id}/services": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/staffmembers": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/appointments": "",
+ "/solutions/bookingbusinesses/{id}/appointments/{id}/cancel": "least=Application",
+ "/solutions/bookingbusinesses/{id}/calendarview": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/customers": "",
+ "/solutions/bookingbusinesses/{id}/customquestions": "least=Application",
+ "/solutions/bookingbusinesses/{id}/services": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/staffmembers": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/appointments/{id}": "",
+ "/bookingbusinesses/{id}/customers/{id}": "",
+ "/bookingbusinesses/{id}/customquestions/{id}": "least=Application",
+ "/bookingbusinesses/{id}/services/{id}": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/staffmembers/{id}": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/appointments/{id}": "",
+ "/solutions/bookingbusinesses/{id}/customers/{id}": "",
+ "/solutions/bookingbusinesses/{id}/customquestions/{id}": "least=Application",
+ "/solutions/bookingbusinesses/{id}/services/{id}": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/staffmembers/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "BookingsAppointment.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write booking appointments",
+ "adminDescription": "Allows an app to read and write bookings appointments and customers, and additionally allows read businesses information, services, and staff on behalf of the signed-in user.",
+ "userDisplayName": "Read and write booking appointments",
+ "userDescription": "Allows an app to read and write bookings appointments and customers, and additionally allows read businesses information, services, and staff on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all Bookings related resources.",
+ "adminDescription": "Allows an app to read and write Bookings appointments and customers, and additionally allows reading businesses, services, and staff without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/bookingbusinesses": "",
+ "/bookingcurrencies": "",
+ "/bookingcurrencies/{id}": "",
+ "/solutions/bookingbusinesses": "",
+ "/solutions/bookingcurrencies": "",
+ "/solutions/bookingcurrencies/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}": "least=Application",
+ "/bookingbusinesses/{id}/calendarview": "",
+ "/bookingbusinesses/{id}/customers": "",
+ "/bookingbusinesses/{id}/customquestions/{id}": "",
+ "/bookingbusinesses/{id}/services": "least=Application",
+ "/bookingbusinesses/{id}/services/{id}": "least=Application",
+ "/bookingbusinesses/{id}/staffmembers": "least=Application",
+ "/bookingbusinesses/{id}/staffmembers/{id}": "least=Application",
+ "/solutions/bookingbusinesses/{id}": "least=Application",
+ "/solutions/bookingbusinesses/{id}/calendarview": "",
+ "/solutions/bookingbusinesses/{id}/customers": "",
+ "/solutions/bookingbusinesses/{id}/customquestions/{id}": "",
+ "/solutions/bookingbusinesses/{id}/services": "least=Application",
+ "/solutions/bookingbusinesses/{id}/services/{id}": "least=Application",
+ "/solutions/bookingbusinesses/{id}/staffmembers": "least=Application",
+ "/solutions/bookingbusinesses/{id}/staffmembers/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/appointments": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/appointments": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/appointments/{id}": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/customers/{id}": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/appointments/{id}": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/customers/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/appointments/{id}/cancel": "least=DelegatedWork,Application",
+ "/bookingbusinesses/{id}/customers": "least=DelegatedWork,Application",
+ "/solutions/bookingbusinesses/{id}/customers": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/customquestions": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}/customquestions": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/customquestions/{id}": "least=DelegatedWork",
+ "/solutions/bookingbusinesses/{id}/customquestions/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/bookingbusinesses/{id}/appointments/{id}/cancel": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Bookmark.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all bookmarks that the user can access",
+ "adminDescription": "Allows an app to read all bookmarks that the signed-in user can access.",
+ "userDisplayName": "Read all bookmarks that you have access to",
+ "userDescription": "Allows the app to read all bookmarks you can access.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/search/query": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mssearchgraphapi"
+ }
+ },
+ "BrowserSiteLists.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read browser site lists for your organization",
+ "adminDescription": "Allows an app to read the browser site lists configured for your organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read browser site lists for your organization",
+ "userDescription": "Allows an app to read the browser site lists configured for your organization, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all browser site lists for your organization",
+ "adminDescription": "Allows an app to read all browser site lists configured for your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/edge/internetexplorermode/sitelists": "least=DelegatedWork,Application",
+ "/admin/edge/internetexplorermode/sitelists/{id}": "least=DelegatedWork,Application",
+ "/admin/edge/internetexplorermode/sitelists/{id}/sharedcookies": "least=DelegatedWork,Application",
+ "/admin/edge/internetexplorermode/sitelists/{id}/sharedcookies/{id}": "least=DelegatedWork,Application",
+ "/admin/edge/internetexplorermode/sitelists/{id}/sites": "least=DelegatedWork,Application",
+ "/admin/edge/internetexplorermode/sitelists/{id}/sites/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EdgeSiteManagement"
+ }
+ },
+ "BrowserSiteLists.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write browser site lists for your organization",
+ "adminDescription": "Allows an app to read and write the browser site lists configured for your organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write browser site lists for your organization",
+ "userDescription": "Allows an app to read and write the browser site lists configured for your organization, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all browser site lists for your organization",
+ "adminDescription": "Allows an app to read and write all browser site lists configured for your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/admin/edge/internetexplorermode/sitelists": "least=DelegatedWork,Application",
+ "/admin/edge/internetexplorermode/sitelists/{id}/sharedcookies": "least=DelegatedWork,Application",
+ "/admin/edge/internetexplorermode/sitelists/{id}/sites": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/edge/internetexplorermode/sitelists/{id}": "least=DelegatedWork,Application",
+ "/admin/edge/internetexplorermode/sitelists/{id}/sharedcookies/{id}": "least=DelegatedWork,Application",
+ "/admin/edge/internetexplorermode/sitelists/{id}/sites/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/edge/internetexplorermode/sitelists/{id}/publish": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "EdgeSiteManagement"
+ }
+ },
+ "BusinessScenarioConfig.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read business scenario configurations",
+ "adminDescription": "Allows the app to read the configurations of your organization's business scenarios, on behalf of the signed-in user.",
+ "userDisplayName": "Read business scenario configurations",
+ "userDescription": "Allows the app to read the configurations of your organization's business scenarios, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/businessscenarios": "",
+ "/solutions/businessscenarios(uniquename={value})": "",
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration/localizations": "",
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration/localizations/{id}": "",
+ "/solutions/businessscenarios/{id}": "",
+ "/solutions/businessscenarios/{id}/planner": "",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration": "",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration/localizations": "",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration/localizations/{id}": "",
+ "/solutions/businessscenarios/{id}/planner/taskconfiguration": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "BusinessScenarioConfig.Read.OwnedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read business scenario configurations this app creates or owns",
+ "adminDescription": "Allows the app to read the configurations of business scenarios it owns, on behalf of the signed-in user.",
+ "userDisplayName": "Read business scenario configurations this app creates or owns",
+ "userDescription": "Allows the app to read the configurations of business scenarios it owns, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all business scenario configurations this app creates or owns",
+ "adminDescription": "Allows the app to read the configurations of business scenarios it owns, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/businessscenarios": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios(uniquename={value})": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration/localizations": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration/localizations/{id}": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration/localizations": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration/localizations/{id}": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner/taskconfiguration": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "BusinessScenarioConfig.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write business scenario configurations",
+ "adminDescription": "Allows the app to read and write the configurations of your organization's business scenarios, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write business scenario configurations",
+ "userDescription": "Allows the app to read and write the configurations of your organization's business scenarios, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/solutions/businessscenarios": "",
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration/localizations": "",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration/localizations": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/businessscenarios(uniquename={value})": "",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration": "",
+ "/solutions/businessscenarios/{id}/planner/taskconfiguration": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration/localizations/{id}": "",
+ "/solutions/businessscenarios/{id}": "",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration/localizations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/businessscenarios/{id}/planner": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "BusinessScenarioConfig.ReadWrite.OwnedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write business scenario configurations this app creates or owns",
+ "adminDescription": "Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write business scenario configurations this app creates or owns",
+ "userDescription": "Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all business scenario configurations this app creates or owns",
+ "adminDescription": "Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/solutions/businessscenarios": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration/localizations": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration/localizations": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/businessscenarios(uniquename={value})": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner/taskconfiguration": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/businessscenarios(uniquename={value})/planner/planconfiguration/localizations/{id}": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner/planconfiguration/localizations/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/businessscenarios/{id}/planner": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "BusinessScenarioData.Read.OwnedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all data for business scenarios this app creates or owns",
+ "adminDescription": "Allows the app to read all data associated with the business scenarios it owns. Data access will be attributed to the signed-in user.",
+ "userDisplayName": "Read data for business scenarios this app creates or owns",
+ "userDescription": "Allows the app to read all data associated with the business scenarios it owns. Data access will be attributed to you.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read data for all business scenarios this app creates or owns",
+ "adminDescription": "Allows the app to read the data associated with the business scenarios it owns, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/businessscenarios/{id}/planner/getplan": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/businessscenarios/{id}/planner/tasks": "least=DelegatedWork,Application",
+ "/solutions/businessscenarios/{id}/planner/tasks/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "BusinessScenarioData.ReadWrite.OwnedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all data for business scenarios this app creates or owns",
+ "adminDescription": "Allows the app to fully manage all data associated with the business scenarios it owns. Data access and changes will be attributed to the signed-in user.",
+ "userDisplayName": "Read and write data for business scenarios this app creates or owns",
+ "userDescription": "Allows the app to fully manage all data associated with the business scenarios it owns. These changes will be attributed to you.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write data for all business scenarios this app creates or owns",
+ "adminDescription": "Allows the app to fully manage the data associated with the business scenarios it owns, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/businessscenarios/{id}/planner/getplan": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/solutions/businessscenarios/{id}/planner/tasks": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/businessscenarios/{id}/planner/tasks/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "Calendars.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user calendars ",
+ "adminDescription": "Allows the app to read events in user calendars . ",
+ "userDisplayName": "Read your calendars ",
+ "userDescription": "Allows the app to read events in your calendars. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user calendars ",
+ "adminDescription": "Allows the app to read events in user calendars . ",
+ "userDisplayName": "Read your calendars ",
+ "userDescription": "Allows the app to read events in your calendars. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read calendars in all mailboxes",
+ "adminDescription": "Allows the app to read events of all calendars without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/getstaffavailability": "",
+ "/solutions/bookingbusinesses/{id}/getstaffavailability": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/calendar/events/{id}": "",
+ "/groups/{id}/calendar/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/calendar/events/{id}/instances": "",
+ "/groups/{id}/calendar/events/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/calendarview": "",
+ "/groups/{id}/events/{id}": "",
+ "/groups/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/events/{id}/instances": "",
+ "/groups/{id}/events/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/calendarview": "",
+ "/me/calendar/events": "",
+ "/me/calendar/events/{id}": "",
+ "/me/calendar/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/instances": "",
+ "/me/calendar/events/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups": "",
+ "/me/calendargroups/{id}": "",
+ "/me/calendargroups/{id}/calendars": "",
+ "/me/calendargroups/{id}/calendars/{id}/calendarview": "",
+ "/me/calendargroups/{id}/calendars/{id}/events": "",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}": "",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/instances": "",
+ "/me/calendargroups/{id}/calendars/{id}/events/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars": "",
+ "/me/calendars/{id}/calendarview": "",
+ "/me/calendars/{id}/calendarview/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events": "",
+ "/me/calendars/{id}/events/{id}": "",
+ "/me/calendars/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/instances": "",
+ "/me/calendars/{id}/events/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendarview/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events": "",
+ "/me/events/{id}": "",
+ "/me/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/instances": "",
+ "/me/events/delta": "least=Application",
+ "/users/{id}/calendar/calendarview": "",
+ "/users/{id}/calendar/events": "",
+ "/users/{id}/calendar/events/{id}": "",
+ "/users/{id}/calendar/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/instances": "",
+ "/users/{id}/calendar/events/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups": "",
+ "/users/{id}/calendargroups/{id}": "",
+ "/users/{id}/calendargroups/{id}/calendars": "",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/calendarview": "",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events": "",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}": "",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/instances": "",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars": "",
+ "/users/{id}/calendars/{id}/calendarview": "",
+ "/users/{id}/calendars/{id}/calendarview/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events": "",
+ "/users/{id}/calendars/{id}/events/{id}": "",
+ "/users/{id}/calendars/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/instances": "",
+ "/users/{id}/calendars/{id}/events/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendarview": "",
+ "/users/{id}/calendarview/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events": "",
+ "/users/{id}/events/{id}": "",
+ "/users/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/instances": "",
+ "/users/{id}/events/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/reminderview(startdatetime={value},enddatetime={value})": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/settings/workHoursAndLocations": "",
+ "/me/settings/workHoursAndLocations/occurrencesView(startDateTime={value},endDateTime={value})": "least=DelegatedWork",
+ "/me/settings/workHoursAndLocations/recurrences": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations": "",
+ "/users/{id}/settings/workHoursAndLocations/occurrencesView(startDateTime={value},endDateTime={value})": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations/recurrences": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/calendar/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/calendar/getschedule": "",
+ "/users/{id}/calendar/getschedule": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/search/query": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Calendars.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all users' work hours and locations",
+ "adminDescription": "Allows the app to read work hours and locations settings, recurrences, and occurrences for all users in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/settings/workHoursAndLocations": "least=Application",
+ "/users/{id}/settings/workHoursAndLocations/occurrencesView(startDateTime={value},endDateTime={value})": "least=Application",
+ "/users/{id}/settings/workHoursAndLocations/recurrences": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Calendars.Read.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user and shared calendars",
+ "adminDescription": "Allows the app to read events in all calendars that the user can access, including delegate and shared calendars.",
+ "userDisplayName": "Read calendars you can access",
+ "userDescription": "Allows the app to read events in all calendars that you can access, including delegate and shared calendars. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user and shared calendars",
+ "adminDescription": "Allows the app to read events in all calendars that the user can access, including delegate and shared calendars.",
+ "userDisplayName": "Read calendars you can access",
+ "userDescription": "Allows the app to read events in all calendars that you can access, including delegate and shared calendars. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/calendargroups/{id}/calendars": "",
+ "/me/calendars": "",
+ "/users/{id}/calendargroups/{id}/calendars": "",
+ "/users/{id}/calendars": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/findmeetinglocations": "least=DelegatedWork",
+ "/me/findmeetingtimes": "least=DelegatedWork",
+ "/users/{id}/findmeetingtimes": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Calendars.ReadBasic": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read basic details of user calendars",
+ "adminDescription": "Allows the app to read events in user calendars, except for properties such as body, attachments, and extensions.",
+ "userDisplayName": "Read basic details of your calendars",
+ "userDescription": "Allows the app to read events in your calendars, except for properties such as body, attachments, and extensions.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read basic details of user calendars",
+ "adminDescription": "Allows the app to read events in user calendars, except for properties such as body, attachments, and extensions.",
+ "userDisplayName": "Read basic details of your calendars",
+ "userDescription": "Allows the app to read events in your calendars, except for properties such as body, attachments, and extensions.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/calendar/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/calendar/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/calendar/events/delta": "",
+ "/groups/{id}/calendarview": "least=DelegatedPersonal,Application",
+ "/groups/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/events/delta": "",
+ "/me/calendar/calendarview": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/delta": "",
+ "/me/calendargroups": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/calendarview": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/delta": "",
+ "/me/calendars": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/calendarview": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/calendarview/delta": "",
+ "/me/calendars/{id}/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/delta": "",
+ "/me/calendars/delta": "",
+ "/me/calendarview/delta": "",
+ "/me/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/calendar/calendarview": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/delta": "",
+ "/users/{id}/calendargroups": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/calendarview": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/delta": "",
+ "/users/{id}/calendars": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/calendarview": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/calendarview/delta": "",
+ "/users/{id}/calendars/{id}/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/delta": "",
+ "/users/{id}/calendars/delta": "",
+ "/users/{id}/calendarview": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendarview/delta": "",
+ "/users/{id}/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/instances": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/delta": "",
+ "/users/{id}/reminderview(startdatetime={value},enddatetime={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/calendar/getschedule": "least=DelegatedWork,Application",
+ "/users/{id}/calendar/getschedule": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Calendars.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read basic details of calendars in all mailboxes ",
+ "adminDescription": "Allows the app to read events of all calendars, except for properties such as body, attachments, and extensions, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Calendars.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Have full access to user calendars ",
+ "adminDescription": "Allows the app to create, read, update, and delete events in user calendars. ",
+ "userDisplayName": "Have full access to your calendars ",
+ "userDescription": "Allows the app to read, update, create and delete events in your calendars. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Have full access to user calendars ",
+ "adminDescription": "Allows the app to create, read, update, and delete events in user calendars. ",
+ "userDisplayName": "Have full access to your calendars ",
+ "userDescription": "Allows the app to read, update, create and delete events in your calendars. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write calendars in all mailboxes",
+ "adminDescription": "Allows the app to create, read, update, and delete events of all calendars without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/bookingbusinesses/{id}/getstaffavailability": "least=Application",
+ "/solutions/bookingbusinesses/{id}/getstaffavailability": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/groups/{id}/calendar/calendarpermissions/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/calendarpermissions/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/calendar/calendarpermissions/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/calendar/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/calendar/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/calendar/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/accept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/decline": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/dismissreminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/snoozereminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendar/events/{id}/tentativelyaccept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/accept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/decline": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/dismissreminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/snoozereminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars/{id}/events/{id}/tentativelyaccept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/accept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/decline": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/dismissreminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/snoozereminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events/{id}/tentativelyaccept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/accept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/attachments/createuploadsession": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/decline": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/dismissreminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/snoozereminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events/{id}/tentativelyaccept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/attachments/createuploadsession": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/accept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/decline": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/dismissreminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/snoozereminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events/{id}/tentativelyaccept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/accept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/decline": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/dismissreminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/snoozereminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/{id}/tentativelyaccept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/accept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/decline": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/dismissreminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/snoozereminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events/{id}/tentativelyaccept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/accept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/attachments/createuploadsession": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/cancel": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/decline": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/dismissreminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/snoozereminder": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/tentativelyaccept": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/attachments/createuploadsession": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/calendar/events/delta": "",
+ "/groups/{id}/calendarview": "",
+ "/groups/{id}/events/delta": "",
+ "/me/calendar/calendarview": "",
+ "/me/calendar/events/delta": "",
+ "/me/calendargroups/{id}/calendars/{id}/calendarview": "",
+ "/me/calendargroups/{id}/calendars/{id}/events": "",
+ "/me/calendargroups/{id}/calendars/{id}/events/delta": "",
+ "/me/calendars/{id}/calendarview": "",
+ "/me/calendars/{id}/calendarview/delta": "",
+ "/me/calendars/{id}/events/delta": "",
+ "/me/calendars/delta": "",
+ "/me/calendarview/delta": "",
+ "/me/events/delta": "",
+ "/users/{id}/calendar/calendarview": "",
+ "/users/{id}/calendar/events/delta": "",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/calendarview": "",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events": "",
+ "/users/{id}/calendargroups/{id}/calendars/{id}/events/delta": "",
+ "/users/{id}/calendars/{id}/calendarview": "",
+ "/users/{id}/calendars/{id}/calendarview/delta": "",
+ "/users/{id}/calendars/{id}/events/delta": "",
+ "/users/{id}/calendars/delta": "",
+ "/users/{id}/calendarview": "",
+ "/users/{id}/calendarview/delta": "",
+ "/users/{id}/events/delta": "",
+ "/users/{id}/reminderview(startdatetime={value},enddatetime={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/places/{id}/checkIns/{calendarEventId}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/settings/workHoursAndLocations": "",
+ "/me/settings/workHoursAndLocations/occurrencesView(startDateTime={value},endDateTime={value})": "",
+ "/me/settings/workHoursAndLocations/recurrences": "",
+ "/users/{id}/settings/workHoursAndLocations": "",
+ "/users/{id}/settings/workHoursAndLocations/occurrencesView(startDateTime={value},endDateTime={value})": "",
+ "/users/{id}/settings/workHoursAndLocations/recurrences": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/calendar/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendargroups/{id}/calendars": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/calendars/{id}/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendar/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendargroups/{id}/calendars": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/calendars/{id}/events": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/calendar/getschedule": "",
+ "/me/calendar/permanentDelete": "least=DelegatedWork,Application",
+ "/users/{id}/calendar/getschedule": "",
+ "/users/{id}/calendar/permanentDelete": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/places/{id}/checkIns": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/settings/workHoursAndLocations/occurrences": "least=DelegatedWork",
+ "/me/settings/workHoursAndLocations/occurrences/setCurrentLocation": "least=DelegatedWork",
+ "/me/settings/workHoursAndLocations/recurrences": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations/occurrences": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations/occurrences/setCurrentLocation": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations/recurrences": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/settings/workHoursAndLocations/occurrences/{id}": "least=DelegatedWork",
+ "/me/settings/workHoursAndLocations/recurrences/{id}": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations/occurrences/{id}": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations/recurrences/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/settings/workHoursAndLocations/occurrences/{id}": "least=DelegatedWork",
+ "/me/settings/workHoursAndLocations/recurrences/{id}": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations/occurrences/{id}": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations/recurrences/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/me/settings/workHoursAndLocations": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Calendars.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all users' work hours and locations",
+ "adminDescription": "Allows the app to read, create, update, and delete work hours and locations settings, recurrences, and occurrences for all users in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/settings/workHoursAndLocations": "",
+ "/users/{id}/settings/workHoursAndLocations/occurrencesView(startDateTime={value},endDateTime={value})": "",
+ "/users/{id}/settings/workHoursAndLocations/recurrences": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/settings/workHoursAndLocations/occurrences": "least=Application",
+ "/users/{id}/settings/workHoursAndLocations/occurrences/setCurrentLocation": "least=Application",
+ "/users/{id}/settings/workHoursAndLocations/recurrences": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/settings/workHoursAndLocations/occurrences/{id}": "least=Application",
+ "/users/{id}/settings/workHoursAndLocations/recurrences/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/settings/workHoursAndLocations/occurrences/{id}": "least=Application",
+ "/users/{id}/settings/workHoursAndLocations/recurrences/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/settings/workHoursAndLocations": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Calendars.ReadWrite.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user and shared calendars",
+ "adminDescription": "Allows the app to create, read, update and delete events in all calendars in the organization user has permissions to access. This includes delegate and shared calendars.",
+ "userDisplayName": "Read and write to your and shared calendars",
+ "userDescription": "Allows the app to read, update, create and delete events in all calendars in your organization you have permissions to access. This includes delegate and shared calendars.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/findmeetinglocations": "",
+ "/me/findmeetingtimes": "",
+ "/users/{id}/findmeetingtimes": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "CallDelegation.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read delegation settings",
+ "adminDescription": "Allows the app to read delegation settings of you",
+ "userDisplayName": "Read your delegation settings",
+ "userDescription": "Allows you to read your delegation settings",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/communications/callSettings/delegates": "least=DelegatedWork",
+ "/me/communications/callSettings/delegates/{delegateId}": "least=DelegatedWork",
+ "/me/communications/callSettings/delegators": "least=DelegatedWork",
+ "/me/communications/callSettings/delegators/{delegatorId}": "least=DelegatedWork",
+ "/users/{userId}/communications/callSettings/delegates": "least=DelegatedWork",
+ "/users/{userId}/communications/callSettings/delegates/{delegateId}": "least=DelegatedWork",
+ "/users/{userId}/communications/callSettings/delegators": "least=DelegatedWork",
+ "/users/{userId}/communications/callSettings/delegators/{delegatorId}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "CallDelegation.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read delegation settings",
+ "adminDescription": "Allows the app to read delegation settings of you",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{userId}/communications/callSettings/delegates": "least=Application",
+ "/users/{userId}/communications/callSettings/delegates/{delegateId}": "least=Application",
+ "/users/{userId}/communications/callSettings/delegators": "least=Application",
+ "/users/{userId}/communications/callSettings/delegators/{delegatorId}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "CallDelegation.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write delegation settings",
+ "adminDescription": "Allows the app to read and write delegation settings of you",
+ "userDisplayName": "Read and write your delegation settings",
+ "userDescription": "Allows the app to read and write delegation settings for you",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/communications/callSettings/delegates": "",
+ "/me/communications/callSettings/delegates/{delegateId}": "",
+ "/me/communications/callSettings/delegators": "",
+ "/me/communications/callSettings/delegators/{delegatorId}": "",
+ "/users/{userId}/communications/callSettings/delegates": "",
+ "/users/{userId}/communications/callSettings/delegates/{delegateId}": "",
+ "/users/{userId}/communications/callSettings/delegators": "",
+ "/users/{userId}/communications/callSettings/delegators/{delegatorId}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/communications/callSettings/delegates": "least=DelegatedWork",
+ "/users/{userId}/communications/callSettings/delegates": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/me/communications/callSettings/delegates/{delegateId}": "least=DelegatedWork",
+ "/users/{userId}/communications/callSettings/delegates/{delegateId}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/communications/callSettings/delegates/{delegateId}": "least=DelegatedWork",
+ "/users/{userId}/communications/callSettings/delegates/{delegateId}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "CallDelegation.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write delegation settings",
+ "adminDescription": "Allows the app to read and write delegation settings of you",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{userId}/communications/callSettings/delegates": "",
+ "/users/{userId}/communications/callSettings/delegates/{delegateId}": "",
+ "/users/{userId}/communications/callSettings/delegators": "",
+ "/users/{userId}/communications/callSettings/delegators/{delegatorId}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{userId}/communications/callSettings/delegates": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{userId}/communications/callSettings/delegates/{delegateId}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{userId}/communications/callSettings/delegates/{delegateId}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "CallEvents-Emergency.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all emergency call events",
+ "adminDescription": "Allows the app to read emergency call event information for all users in your organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "CallEvents.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read call event data",
+ "adminDescription": "Allows the app to read call event information for an organization for the signed-in user.",
+ "userDisplayName": "Read call event data",
+ "userDescription": "Allows the app to read call event information for an organization on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "CallEvents.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all call events",
+ "adminDescription": "Allows the app to read call event information for all users in your organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "CallRecord-PstnCalls.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read PSTN and direct routing call log data",
+ "adminDescription": "Allows the app to read all PSTN and direct routing call log data without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/communications/callrecords/getdirectroutingcalls": "least=Application",
+ "/communications/callrecords/getpstnblockeduserslog(fromdatetime={value},todatetime={value})": "least=Application",
+ "/communications/callrecords/getpstncalls": "least=Application",
+ "/communications/callrecords/getpstnonlinemeetingdialoutreport(fromdatetime={value},todatetime={value})": "least=Application",
+ "/communications/callrecords/getsmslog(fromdatetime={value},todatetime={value})": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gabbateamsg"
+ }
+ },
+ "CallRecordings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all recordings of calls. ",
+ "adminDescription": "Allows the app to read all recordings of calls, on behalf of the signed-in user.",
+ "userDisplayName": "Read all recordings of calls.",
+ "userDescription": "Allows the app to read all recordings of calls, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all recordings of calls.",
+ "adminDescription": "Allows the app to read all recordings of all calls, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/adhocCalls/{id}/recordings": "least=DelegatedWork",
+ "/me/adhocCalls/{id}/recordings/{id}": "least=DelegatedWork",
+ "/me/adhocCalls/{id}/recordings/{id}/content": "least=DelegatedWork",
+ "/users/{id}/adhocCalls/{id}/recordings": "least=DelegatedWork",
+ "/users/{id}/adhocCalls/{id}/recordings/{id}": "least=DelegatedWork",
+ "/users/{id}/adhocCalls/{id}/recordings/{id}/content": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/adhocCalls/{id}/recordings": "least=Application",
+ "/users/{id}/adhocCalls/{id}/recordings/{id}": "least=Application",
+ "/users/{id}/adhocCalls/{id}/recordings/{id}/content": "least=Application",
+ "/users/{id}/adhocCalls/getAllRecordings": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "CallRecords.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all call records",
+ "adminDescription": "Allows the app to read call records for all calls and online meetings without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/communications/callrecords/{id}": "least=Application",
+ "/communications/callrecords/{id}/sessions": "least=Application",
+ "/communications/callrecords/getdirectroutingcalls": "",
+ "/communications/callrecords/getpstnblockeduserslog(fromdatetime={value},todatetime={value})": "",
+ "/communications/callrecords/getpstncalls": "",
+ "/communications/callrecords/getpstnonlinemeetingdialoutreport(fromdatetime={value},todatetime={value})": "",
+ "/communications/callrecords/getsmslog(fromdatetime={value},todatetime={value})": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gabbateamsg"
+ }
+ },
+ "Calls.AccessMedia.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Access media streams in a call as an app",
+ "adminDescription": "Allows the app to get direct access to media streams in a call, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/app/calls/{id}": "",
+ "/communications/calls/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/app/calls/{id}/cancelmediaprocessing": "",
+ "/app/calls/{id}/changescreensharingrole": "least=Application",
+ "/app/calls/{id}/mute": "",
+ "/app/calls/{id}/playprompt": "",
+ "/app/calls/{id}/recordresponse": "least=Application",
+ "/app/calls/{id}/subscribetotone": "least=Application",
+ "/app/calls/{id}/unmute": "",
+ "/app/calls/{id}/updaterecordingstatus": "least=Application",
+ "/communications/calls/{id}/cancelmediaprocessing": "",
+ "/communications/calls/{id}/changescreensharingrole": "least=Application",
+ "/communications/calls/{id}/joincontentsharingaudiogroup": "least=Application",
+ "/communications/calls/{id}/keepalive": "",
+ "/communications/calls/{id}/leavecontentsharingaudiogroup": "least=Application",
+ "/communications/calls/{id}/mute": "",
+ "/communications/calls/{id}/playprompt": "",
+ "/communications/calls/{id}/recordresponse": "least=Application",
+ "/communications/calls/{id}/sendDtmfTones": "least=Application",
+ "/communications/calls/{id}/subscribetotone": "least=Application",
+ "/communications/calls/{id}/unmute": "",
+ "/communications/calls/{id}/updaterecordingstatus": "least=Application",
+ "/communications/calls/logteleconferencedevicequality": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/app/calls/{id}/participants": "",
+ "/communications/calls/{id}/participants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "Calls.AccessMedia.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Calls.Initiate.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Initiate outgoing 1 to 1 calls from the app",
+ "adminDescription": "Allows the app to place outbound calls to a single user and transfer calls to users in your organization's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/app/calls": "",
+ "/app/calls/{id}/cancelmediaprocessing": "least=Application",
+ "/app/calls/{id}/mute": "least=Application",
+ "/app/calls/{id}/playprompt": "least=Application",
+ "/app/calls/{id}/redirect": "least=Application",
+ "/app/calls/{id}/transfer": "least=Application",
+ "/app/calls/{id}/unmute": "least=Application",
+ "/communications/calls": "",
+ "/communications/calls/{id}/cancelmediaprocessing": "least=Application",
+ "/communications/calls/{id}/keepalive": "least=Application",
+ "/communications/calls/{id}/mute": "least=Application",
+ "/communications/calls/{id}/playprompt": "least=Application",
+ "/communications/calls/{id}/redirect": "least=Application",
+ "/communications/calls/{id}/transfer": "least=Application",
+ "/communications/calls/{id}/unmute": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/app/calls/{id}": "least=Application",
+ "/communications/calls/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/app/calls/{id}/participants": "least=Application",
+ "/communications/calls/{id}/contentsharingsessions": "",
+ "/communications/calls/{id}/contentsharingsessions/{id}": "",
+ "/communications/calls/{id}/participants": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "Calls.InitiateGroupCall.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Initiate outgoing group calls from the app",
+ "adminDescription": "Allows the app to place outbound calls to multiple users and add participants to meetings in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/app/calls": "",
+ "/app/calls/{id}/addlargegalleryview": "",
+ "/app/calls/{id}/participants/configuremixer": "least=Application",
+ "/app/calls/{id}/participants/invite": "least=Application",
+ "/communications/calls": "",
+ "/communications/calls/{id}/addlargegalleryview": "",
+ "/communications/calls/{id}/participants/configuremixer": "least=Application",
+ "/communications/calls/{id}/participants/invite": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/app/calls/{id}/audioroutinggroups": "",
+ "/communications/calls/{id}/audioroutinggroups": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/app/calls/{id}/audioroutinggroups/{id}": "",
+ "/communications/calls/{id}/audioroutinggroups/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/communications/calls/{id}/contentsharingsessions": "",
+ "/communications/calls/{id}/contentsharingsessions/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "Calls.JoinGroupCall.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Join group calls and meetings as an app",
+ "adminDescription": "Allows the app to join group calls and scheduled meetings in your organization, without a signed-in user. The app will be joined with the privileges of a directory user to meetings in your organization.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/app/calls": "",
+ "/app/calls/{id}/addlargegalleryview": "",
+ "/app/calls/{id}/answer": "least=Application",
+ "/app/calls/{id}/lowerHand": "",
+ "/app/calls/{id}/participants/{id}/admitFromLobby": "",
+ "/app/calls/{id}/participants/{id}/lowerHand": "",
+ "/app/calls/{id}/participants/{id}/mute": "least=Application",
+ "/app/calls/{id}/participants/{id}/removeFromLobby": "",
+ "/app/calls/{id}/participants/admitAllFromLobby": "",
+ "/app/calls/{id}/participants/configuremixer": "",
+ "/app/calls/{id}/participants/lowerAllHands": "",
+ "/app/calls/{id}/participants/muteall": "least=Application",
+ "/app/calls/{id}/raiseHand": "",
+ "/app/calls/{id}/startRecording": "least=Application",
+ "/app/calls/{id}/startTranscription": "least=Application",
+ "/app/calls/{id}/stopRecording": "least=Application",
+ "/app/calls/{id}/stopTranscription": "least=Application",
+ "/app/calls/{id}/updaterecordingstatus": "",
+ "/communications/calls": "",
+ "/communications/calls/{id}/addlargegalleryview": "",
+ "/communications/calls/{id}/answer": "least=Application",
+ "/communications/calls/{id}/lowerHand": "",
+ "/communications/calls/{id}/participants/{id}/admitFromLobby": "",
+ "/communications/calls/{id}/participants/{id}/lowerHand": "",
+ "/communications/calls/{id}/participants/{id}/mute": "least=Application",
+ "/communications/calls/{id}/participants/{id}/removeFromLobby": "",
+ "/communications/calls/{id}/participants/{id}/startholdmusic": "",
+ "/communications/calls/{id}/participants/{id}/stopholdmusic": "",
+ "/communications/calls/{id}/participants/admitAllFromLobby": "",
+ "/communications/calls/{id}/participants/configuremixer": "",
+ "/communications/calls/{id}/participants/lowerAllHands": "",
+ "/communications/calls/{id}/participants/muteall": "least=Application",
+ "/communications/calls/{id}/raiseHand": "",
+ "/communications/calls/{id}/startRecording": "least=Application",
+ "/communications/calls/{id}/startTranscription": "least=Application",
+ "/communications/calls/{id}/stopRecording": "least=Application",
+ "/communications/calls/{id}/stopTranscription": "least=Application",
+ "/communications/calls/{id}/updaterecordingstatus": "",
+ "/communications/calls/57dab8b1894c409ab240bd8beae78896/answer": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/app/calls/{id}/audioroutinggroups": "least=Application",
+ "/communications/calls/{id}/audioroutinggroups": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/app/calls/{id}/audioroutinggroups/{id}": "least=Application",
+ "/communications/calls/{id}/audioroutinggroups/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/app/calls/{id}/participants/{id}": "least=Application",
+ "/communications/calls/{id}/participants/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/communications/calls/{id}/contentsharingsessions": "",
+ "/communications/calls/{id}/contentsharingsessions/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "Calls.JoinGroupCallasGuest.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/app/calls/{id}/participants/{id}": "",
+ "/communications/calls/{id}/participants/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/app/calls/{id}/lowerHand": "least=Application",
+ "/app/calls/{id}/participants/{id}/admitFromLobby": "least=Application",
+ "/app/calls/{id}/participants/{id}/lowerHand": "least=Application",
+ "/app/calls/{id}/participants/{id}/mute": "",
+ "/app/calls/{id}/participants/{id}/removeFromLobby": "least=Application",
+ "/app/calls/{id}/participants/admitAllFromLobby": "least=Application",
+ "/app/calls/{id}/participants/configuremixer": "",
+ "/app/calls/{id}/participants/lowerAllHands": "least=Application",
+ "/app/calls/{id}/participants/muteall": "",
+ "/app/calls/{id}/raiseHand": "least=Application",
+ "/communications/calls/{id}/lowerHand": "least=Application",
+ "/communications/calls/{id}/participants/{id}/admitFromLobby": "least=Application",
+ "/communications/calls/{id}/participants/{id}/lowerHand": "least=Application",
+ "/communications/calls/{id}/participants/{id}/mute": "",
+ "/communications/calls/{id}/participants/{id}/removeFromLobby": "least=Application",
+ "/communications/calls/{id}/participants/{id}/startholdmusic": "least=Application",
+ "/communications/calls/{id}/participants/{id}/stopholdmusic": "least=Application",
+ "/communications/calls/{id}/participants/admitAllFromLobby": "least=Application",
+ "/communications/calls/{id}/participants/configuremixer": "",
+ "/communications/calls/{id}/participants/lowerAllHands": "least=Application",
+ "/communications/calls/{id}/participants/muteall": "",
+ "/communications/calls/{id}/raiseHand": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "Calls.JoinGroupCallAsGuest.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Join group calls and meetings as a guest",
+ "adminDescription": "Allows the app to anonymously join group calls and scheduled meetings in your organization, without a signed-in user. The app will be joined as a guest to meetings in your organization.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/app/calls": "",
+ "/app/calls/{id}/addlargegalleryview": "least=Application",
+ "/app/calls/{id}/answer": "",
+ "/communications/calls": "",
+ "/communications/calls/{id}/addlargegalleryview": "least=Application",
+ "/communications/calls/{id}/answer": "",
+ "/communications/calls/57dab8b1894c409ab240bd8beae78896/answer": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/communications/calls/{id}/contentsharingsessions": "least=Application",
+ "/communications/calls/{id}/contentsharingsessions/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "Calls.JoinGroupCalls.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/app/calls": "least=Application",
+ "/communications/calls": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Calls.ReportSyntheticMedia.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Report synthetic media detections in calls",
+ "adminDescription": "Allows the app to report synthetic media detections for participants in calls, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/app/calls/{id}/participants/{id}/reportsyntheticmedia": "least=Application",
+ "/communications/calls/{id}/participants/{id}/reportsyntheticmedia": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "CallTranscripts.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all transcripts of calls. ",
+ "adminDescription": "Allows the app to read all transcripts of calls, on behalf of the signed-in user.",
+ "userDisplayName": "Read all transcripts of calls.",
+ "userDescription": "Allows the app to read all transcripts of calls, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all transcripts of calls.",
+ "adminDescription": "Allows the app to read all transcripts of all calls, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/adhocCalls/{id}/transcripts": "least=DelegatedWork",
+ "/me/adhocCalls/{id}/transcripts/{id}": "least=DelegatedWork",
+ "/me/adhocCalls/{id}/transcripts/{id}/content": "least=DelegatedWork",
+ "/me/adhocCalls/{id}/transcripts/{id}/metadataContent": "least=DelegatedWork",
+ "/users/{id}/adhocCalls/{id}/transcripts": "least=DelegatedWork",
+ "/users/{id}/adhocCalls/{id}/transcripts/{id}": "least=DelegatedWork",
+ "/users/{id}/adhocCalls/{id}/transcripts/{id}/content": "least=DelegatedWork",
+ "/users/{id}/adhocCalls/{id}/transcripts/{id}/metadataContent": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/adhocCalls/{id}/transcripts": "least=Application",
+ "/users/{id}/adhocCalls/{id}/transcripts/{id}": "least=Application",
+ "/users/{id}/adhocCalls/{id}/transcripts/{id}/content": "least=Application",
+ "/users/{id}/adhocCalls/{id}/transcripts/{id}/metadataContent": "least=Application",
+ "/users/{id}/adhocCalls/getAllTranscripts": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "CaseManagement.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read cases, relations, tasks, attachments and activities",
+ "adminDescription": "Allows the app to read all cases, relations, tasks, attachments and activities, on behalf of the signed-in user.",
+ "userDisplayName": "Read all cases, relations, tasks, attachments and activities",
+ "userDescription": "Allows the app to read all cases, relations, tasks, attachments and activities that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all cases, relations, tasks, attachments and activities",
+ "adminDescription": "Allows the app to read all cases, relations, tasks, attachments and activities, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/caseManagement/cases": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/activities": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/activities/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/activities/microsoft.graph.security.caseManagement.auditLog": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/activities/microsoft.graph.security.caseManagement.comment": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/attachments": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/attachments/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/attachments/{id}/content": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/relations": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/relations/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.incidentRelation": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.recommendationRelation": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.workspaceIndicatorRelation": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/tasks": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/tasks/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/microsoft.graph.security.caseManagement.exposureCase": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/microsoft.graph.security.caseManagement.genericCase": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/microsoft.graph.security.caseManagement.incidentCase": "least=DelegatedWork,Application",
+ "/security/caseManagement/caseTypeConfigurations": "least=DelegatedWork,Application",
+ "/security/caseManagement/caseTypeConfigurations/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/caseTypeConfigurations/{id}/customFields": "least=DelegatedWork,Application",
+ "/security/caseManagement/caseTypeConfigurations/{id}/customFields/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/caseTypeConfigurations/{id}/slaPolicies": "least=DelegatedWork,Application",
+ "/security/caseManagement/caseTypeConfigurations/{id}/slaPolicies/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/caseTypeConfigurations/{id}/statuses": "least=DelegatedWork,Application",
+ "/security/caseManagement/caseTypeConfigurations/{id}/statuses/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CaseManagement-SG"
+ }
+ },
+ "CaseManagement.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write to cases, relations, tasks, attachments and activities",
+ "adminDescription": "Allows the app to read and write to all cases, relations, tasks, attachments and activities, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write to all cases, relations, tasks, attachments and activities",
+ "userDescription": "Allows the app to read and write to all cases, relations, tasks, attachments and activities that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write to all cases, relations, tasks, attachments and activities",
+ "adminDescription": "Allows the app to read and write to all cases, relations, tasks, attachments and activities, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/caseManagement/cases": "",
+ "/security/caseManagement/cases/{id}": "",
+ "/security/caseManagement/cases/{id}/activities": "",
+ "/security/caseManagement/cases/{id}/activities/{id}": "",
+ "/security/caseManagement/cases/{id}/activities/microsoft.graph.security.caseManagement.auditLog": "",
+ "/security/caseManagement/cases/{id}/activities/microsoft.graph.security.caseManagement.comment": "",
+ "/security/caseManagement/cases/{id}/attachments": "",
+ "/security/caseManagement/cases/{id}/attachments/{id}": "",
+ "/security/caseManagement/cases/{id}/attachments/{id}/content": "",
+ "/security/caseManagement/cases/{id}/relations": "",
+ "/security/caseManagement/cases/{id}/relations/{id}": "",
+ "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.incidentRelation": "",
+ "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.recommendationRelation": "",
+ "/security/caseManagement/cases/{id}/relations/microsoft.graph.security.caseManagement.workspaceIndicatorRelation": "",
+ "/security/caseManagement/cases/{id}/tasks": "",
+ "/security/caseManagement/cases/{id}/tasks/{id}": "",
+ "/security/caseManagement/cases/microsoft.graph.security.caseManagement.exposureCase": "",
+ "/security/caseManagement/cases/microsoft.graph.security.caseManagement.genericCase": "",
+ "/security/caseManagement/cases/microsoft.graph.security.caseManagement.incidentCase": "",
+ "/security/caseManagement/caseTypeConfigurations": "",
+ "/security/caseManagement/caseTypeConfigurations/{id}": "",
+ "/security/caseManagement/caseTypeConfigurations/{id}/customFields": "",
+ "/security/caseManagement/caseTypeConfigurations/{id}/customFields/{id}": "",
+ "/security/caseManagement/caseTypeConfigurations/{id}/slaPolicies": "",
+ "/security/caseManagement/caseTypeConfigurations/{id}/slaPolicies/{id}": "",
+ "/security/caseManagement/caseTypeConfigurations/{id}/statuses": "",
+ "/security/caseManagement/caseTypeConfigurations/{id}/statuses/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/caseManagement/cases": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/activities": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/attachments": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/relations": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/tasks": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/caseManagement/cases/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/activities/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/attachments/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/relations/{id}": "least=DelegatedWork,Application",
+ "/security/caseManagement/cases/{id}/tasks/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/security/caseManagement/cases/{id}/attachments/{id}/content": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CaseManagement-SG"
+ }
+ },
+ "ChangeManagement.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Change Management items",
+ "adminDescription": "Allows to read all Change Management items.",
+ "userDisplayName": "Read Change Management items",
+ "userDescription": "Allows to read all Change Management items.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 1
+ },
+ "Application": {
+ "adminDisplayName": "Read Change Management items",
+ "adminDescription": "Allows to read all Change Management items.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/productchanges": "least=DelegatedWork,Application",
+ "/identity/productchanges/{id}": "least=DelegatedWork,Application",
+ "/identity/productchanges/microsoft.graph.announcement": "least=DelegatedWork,Application",
+ "/identity/productchanges/microsoft.graph.announcement/{id}": "least=DelegatedWork,Application",
+ "/identity/productchanges/microsoft.graph.roadmap": "least=DelegatedWork,Application",
+ "/identity/productchanges/microsoft.graph.roadmap/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cmh-msgraph"
+ }
+ },
+ "Channel.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create channels",
+ "adminDescription": "Create channels in any team, on behalf of the signed-in user.",
+ "userDisplayName": "Create channels",
+ "userDescription": "Create channels in any team, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Create channels",
+ "adminDescription": "Create channels in any team, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Channel.Create.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Channel.Delete.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete channels",
+ "adminDescription": "Delete channels in any team, on behalf of the signed-in user.",
+ "userDisplayName": "Delete channels",
+ "userDescription": "Delete channels in any team, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Delete channels",
+ "adminDescription": "Delete channels in any team, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}": "least=DelegatedWork",
+ "/teams/{id}/incomingchannels/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Channel.Delete.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Channel.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the names and descriptions of channels",
+ "adminDescription": "Read channel names and channel descriptions, on behalf of the signed-in user.",
+ "userDisplayName": "Read the names and descriptions of channels",
+ "userDescription": "Read channel names and channel descriptions, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read the names and descriptions of all channels",
+ "adminDescription": "Read all channel names and channel descriptions, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/allchannels": "least=DelegatedWork,Application",
+ "/teams/{id}/channels": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}": "least=DelegatedWork",
+ "/teams/{id}/incomingchannels": "least=DelegatedWork,Application",
+ "/teams/{id}/primarychannel": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/deletedchannels": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMember.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the members of channels",
+ "adminDescription": "Read the members of channels, on behalf of the signed-in user.",
+ "userDisplayName": "Read the members of teams and channels",
+ "userDescription": "Read the members of channels, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read the members of all channels",
+ "adminDescription": "Read the members of all channels, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/allMembers": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/allMembers/{id}": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/doesuserhaveaccess": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/members": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/members/{id}": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/sharedwithteams": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/joinedUsers": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/joinedUsers/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/joinedUsers": "least=Application",
+ "/teams/{id}/channels/{id}/joinedUsers/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMember.Read.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read the members of channels of a team",
+ "adminDescription": "Read the members of channels of a team, without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/allMembers": "least=Application",
+ "/teams/{id}/channels/{id}/allMembers/{id}": "least=Application",
+ "/teams/{id}/channels/{id}/doesuserhaveaccess": "least=Application",
+ "/teams/{id}/channels/{id}/members": "least=Application",
+ "/teams/{id}/channels/{id}/members/{id}": "least=Application",
+ "/teams/{id}/channels/{id}/sharedwithteams": "least=Application",
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=Application",
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMember.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "userDisplayName": "",
+ "userDescription": "",
+ "requiresAdminConsent": false
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {}
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMember.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Add and remove members from channels",
+ "adminDescription": "Add and remove members from channels, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner.",
+ "userDisplayName": "Add and remove members from teams and channels",
+ "userDescription": "Add and remove members from channels, on your behalf. Also allows changing a member's role, for example from owner to non-owner.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Add and remove members from all channels",
+ "adminDescription": "Add and remove members from all channels, without a signed-in user. Also allows changing a member's role, for example from owner to non-owner.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/allMembers": "",
+ "/teams/{id}/channels/{id}/allMembers/{id}": "",
+ "/teams/{id}/channels/{id}/doesuserhaveaccess": "",
+ "/teams/{id}/channels/{id}/joinedUsers": "",
+ "/teams/{id}/channels/{id}/joinedUsers/{id}": "",
+ "/teams/{id}/channels/{id}/members": "",
+ "/teams/{id}/channels/{id}/members/{id}": "",
+ "/teams/{id}/channels/{id}/sharedwithteams": "",
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}": "",
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/members": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/joinedUsers": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/joinedUsers/add": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/joinedUsers": "least=Application",
+ "/teams/{id}/channels/{id}/joinedUsers/add": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/members/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMember.ReadWrite.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write the members of channels of a team",
+ "adminDescription": "Read and write the members of channels of a team, without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/allMembers": "",
+ "/teams/{id}/channels/{id}/allMembers/{id}": "",
+ "/teams/{id}/channels/{id}/doesuserhaveaccess": "",
+ "/teams/{id}/channels/{id}/members": "",
+ "/teams/{id}/channels/{id}/members/{id}": "",
+ "/teams/{id}/channels/{id}/sharedwithteams": "",
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}": "",
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}/allowedmembers": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/members": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/members/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/sharedwithteams/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMessage.Edit": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Edit user's channel messages",
+ "adminDescription": "Allows an app to edit channel messages in Microsoft Teams, on behalf of the signed-in user.",
+ "userDisplayName": "Edit your channel messages",
+ "userDescription": "Allows the app to edit channel messages in Microsoft Teams, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMessage.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user channel messages",
+ "adminDescription": "Allows an app to read a channel's messages in Microsoft Teams, on behalf of the signed-in user.",
+ "userDisplayName": "Read your channel messages",
+ "userDescription": "Allows the app to read a channel's messages in Microsoft Teams, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all channel messages",
+ "adminDescription": "Allows the app to read all channel messages in Microsoft Teams",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/messages": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/hostedcontents": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/hostedcontents/{id}": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/replies": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents/{id}": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/delta": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/getallmessages": "least=Application",
+ "/teams/{id}/channels/getAllRetainedMessages": "least=Application",
+ "/teamwork/deletedteams/{id}/channels/getallmessages": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMessage.Read.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/messages": "least=Application",
+ "/teams/{id}/channels/{id}/messages/{id}": "least=Application",
+ "/teams/{id}/channels/{id}/messages/{id}/hostedcontents": "least=Application",
+ "/teams/{id}/channels/{id}/messages/{id}/hostedcontents/{id}": "least=Application",
+ "/teams/{id}/channels/{id}/messages/{id}/replies": "least=Application",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}": "least=Application",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents": "least=Application",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents/{id}": "least=Application",
+ "/teams/{id}/channels/{id}/messages/delta": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMessage.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user channel messages",
+ "adminDescription": "Allows the app to read and write channel messages, on behalf of the signed-in user. This doesn't allow the app to edit the policyViolation of a channel message.",
+ "userDisplayName": "Read and write user channel messages",
+ "userDescription": "Allows the app to read and write channel messages, on your behalf. This doesn't allow the app to edit the policyViolation of a channel message.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/(team-id)/channels/{id}/messages/{id}": "least=DelegatedWork",
+ "/teams/(team-id)/channels/{id}/messages/{id}/replies/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/softdelete": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/undosoftdelete": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/softdelete": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/undosoftdelete": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMessage.Send": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Send channel messages",
+ "adminDescription": "Allows an app to send channel messages in Microsoft Teams, on behalf of the signed-in user.",
+ "userDisplayName": "Send channel messages",
+ "userDescription": "Allows the app to send channel messages in Microsoft Teams, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/messages": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/replies": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/setreaction": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/unsetreaction": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/setreaction": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/unsetreaction": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelMessage.UpdatePolicyViolation.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Flag channel messages for violating policy",
+ "adminDescription": "Allows the app to update Microsoft Teams channel messages by patching a set of Data Loss Prevention (DLP) policy violation properties to handle the output of DLP processing.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/(team-id)/channels/{id}/messages/{id}": "least=Application",
+ "/teams/(team-id)/channels/{id}/messages/{id}/replies/{id}": "least=Application",
+ "/teams/{id}/channels/{id}/messages/{id}": "least=Application",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the names, descriptions, and settings of channels",
+ "adminDescription": "Read all channel names, channel descriptions, and channel settings, on behalf of the signed-in user.",
+ "userDisplayName": "Read the names, descriptions, and settings of channels",
+ "userDescription": "Read all channel names, channel descriptions, and channel settings, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read the names, descriptions, and settings of all channels",
+ "adminDescription": "Read all channel names, channel descriptions, and channel settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/allchannels": "",
+ "/teams/{id}/channels": "",
+ "/teams/{id}/channels/{id}": "",
+ "/teams/{id}/incomingchannels": "",
+ "/teams/{id}/primarychannel": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelSettings.Read.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels": "least=Application",
+ "/teams/{id}/channels/{id}": "least=Application",
+ "/teams/{id}/primarychannel": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the names, descriptions, and settings of channels",
+ "adminDescription": "Read and write the names, descriptions, and settings of all channels, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write the names, descriptions, and settings of channels",
+ "userDescription": "Read and write the names, descriptions, and settings of all channels, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write the names, descriptions, and settings of all channels",
+ "adminDescription": "Read and write the names, descriptions, and settings of all channels, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/allchannels": "",
+ "/teams/{id}/channels": "",
+ "/teams/{id}/incomingchannels": "",
+ "/teams/{id}/primarychannel": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/provisionemail": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/removeemail": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/archive": "least=DelegatedWork,Application",
+ "/teams/{id}/channels/{id}/unarchive": "least=DelegatedWork,Application",
+ "/teams/{id}/deletedchannels/{id}/restore": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChannelSettings.ReadWrite.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels": "",
+ "/teams/{id}/primarychannel": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create chats",
+ "adminDescription": "Allows the app to create chats on behalf of the signed-in user.",
+ "userDisplayName": "Create chats",
+ "userDescription": "Allows the app to create chats on your behalf. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Create chats",
+ "adminDescription": "Allows the app to create chats without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.Manage.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}": "",
+ "/chats/{id}/operations": "",
+ "/chats/{id}/operations/{id}": "",
+ "/chats/{id}/permissiongrants": "",
+ "/me/chats/{id}": "",
+ "/users/{id}/chats/{id}": "",
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": "",
+ "/chats/{id}/members": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}": "",
+ "/chats/{id}/members/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.ManageDeletion.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete and recover deleted chats",
+ "adminDescription": "Allows the app to delete and recover deleted chats, on behalf of the signed-in user.",
+ "userDisplayName": "Delete and recover deleted chats",
+ "userDescription": "Allows the app to delete and recover deleted chats, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Delete and recover deleted chats",
+ "adminDescription": "Allows the app to delete and recover deleted chats, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/chats/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/deletedchats/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teamwork/deletedchats/{id}/undodelete": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.ManageDeletion.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Delete and recover deleted chat",
+ "adminDescription": "Allows the app to delete and recover deleted chat, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/chats/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/deletedchats/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teamwork/deletedchats/{id}/undodelete": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user chat messages",
+ "adminDescription": "Allows an app to read 1 on 1 or group chats threads, on behalf of the signed-in user.",
+ "userDisplayName": "Read your chat messages",
+ "userDescription": "Allows an app to read your 1 on 1 or group chat messages in Microsoft Teams, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats": "",
+ "/chats/{id}": "",
+ "/chats/{id}/members": "",
+ "/chats/{id}/members/{id}": "",
+ "/chats/{id}/messages": "least=DelegatedWork",
+ "/chats/{id}/messages/{id}": "least=DelegatedWork",
+ "/chats/{id}/messages/{id}/hostedcontents": "least=DelegatedWork",
+ "/chats/{id}/messages/{id}/hostedcontents/{id}": "least=DelegatedWork",
+ "/chats/{id}/operations": "",
+ "/chats/{id}/operations/{id}": "",
+ "/chats/{id}/pinnedmessages": "least=DelegatedWork",
+ "/me/chats": "",
+ "/me/chats/{id}": "",
+ "/me/chats/{id}/messages": "least=DelegatedWork",
+ "/me/chats/{id}/messages/{id}": "least=DelegatedWork",
+ "/users/{id}/chats": "",
+ "/users/{id}/chats/{id}": "",
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": "",
+ "/users/{id}/chats/{id}/messages": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/messages/{id}": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/search/query": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all chat messages",
+ "adminDescription": "Allows the app to read all 1-to-1 or group chat messages in Microsoft Teams.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats": "",
+ "/chats/{id}": "",
+ "/chats/{id}/members": "",
+ "/chats/{id}/members/{id}": "",
+ "/chats/{id}/messages": "",
+ "/chats/{id}/messages/{id}": "",
+ "/chats/{id}/messages/{id}/hostedcontents": "",
+ "/chats/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/chats/{id}/operations": "",
+ "/chats/{id}/operations/{id}": "",
+ "/chats/{id}/pinnedmessages": "",
+ "/me/chats": "",
+ "/me/chats/{id}": "",
+ "/me/chats/{id}/messages": "",
+ "/me/chats/{id}/messages/{id}": "",
+ "/users/{id}/chats/{id}": "",
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": "",
+ "/users/{id}/chats/{id}/messages": "",
+ "/users/{id}/chats/{id}/messages/{id}": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/users/{id}/chats/getallmessages": "least=Application",
+ "/users/{id}/chats/getAllRetainedMessages": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.Read.WhereInstalled": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all chat messages for chats where the associated Teams application is installed.",
+ "adminDescription": "Allows the app to read all one-to-one or group chat messages in Microsoft Teams for chats where the associated Teams application is installed, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.ReadBasic": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read names and members of user chat threads",
+ "adminDescription": "Allows an app to read the members and descriptions of one-to-one and group chat threads, on behalf of the signed-in user.",
+ "userDisplayName": "Read names and members of your chat threads",
+ "userDescription": "Allows an app to read the members and descriptions of one-to-one and group chat threads, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats": "least=DelegatedWork",
+ "/chats/{id}": "least=DelegatedWork",
+ "/chats/{id}/members": "least=DelegatedWork",
+ "/chats/{id}/members/{id}": "least=DelegatedWork",
+ "/chats/{id}/operations": "least=DelegatedWork",
+ "/chats/{id}/operations/{id}": "least=DelegatedWork",
+ "/me/chats": "least=DelegatedWork",
+ "/me/chats/{id}": "least=DelegatedWork",
+ "/users/{id}/chats": "least=DelegatedWork",
+ "/users/{id}/chats/{id}": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read names and members of all chat threads",
+ "adminDescription": "Read names and members of all one-to-one and group chats in Microsoft Teams, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats": "least=Application",
+ "/chats/{id}": "least=Application",
+ "/chats/{id}/members": "",
+ "/chats/{id}/members/{id}": "",
+ "/chats/{id}/operations": "",
+ "/chats/{id}/operations/{id}": "",
+ "/me/chats": "least=Application",
+ "/me/chats/{id}": "",
+ "/users/{id}/chats": "least=Application",
+ "/users/{id}/chats/{id}": "",
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.ReadBasic.WhereInstalled": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read names and members of all chat threads where the associated Teams application is installed.",
+ "adminDescription": "Allows the app to read names and members of all one-to-one and group chats in Microsoft Teams where the associated Teams application is installed, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/chats/{id}": "least=Application",
+ "/users/{id}/chats/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user chat messages",
+ "adminDescription": "Allows an app to read and write 1 on 1 or group chats threads, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your chat messages",
+ "userDescription": "Allows an app to read and write your 1 on 1 or group chat messages in Microsoft Teams, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats": "",
+ "/chats/{id}/members": "",
+ "/chats/{id}/messages": "",
+ "/chats/{id}/pinnedmessages": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}": "least=DelegatedWork",
+ "/chats/{id}/messages/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/hideforuser": "least=DelegatedWork",
+ "/chats/{id}/markchatreadforuser": "least=DelegatedWork",
+ "/chats/{id}/markchatunreadforuser": "least=DelegatedWork",
+ "/chats/{id}/unhideforuser": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/messages/{id}/setreaction": "",
+ "/users/{id}/chats/{id}/messages/{id}/softdelete": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/messages/{id}/undosoftdelete": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/messages/{id}/unsetreaction": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/members/{id}": "",
+ "/chats/{id}/messages/{id}/hostedcontents": "",
+ "/chats/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/chats/{id}/operations": "",
+ "/chats/{id}/operations/{id}": "",
+ "/me/chats": "",
+ "/me/chats/{id}": "",
+ "/me/chats/{id}/messages": "",
+ "/me/chats/{id}/messages/{id}": "",
+ "/users/{id}/chats": "",
+ "/users/{id}/chats/{id}": "",
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": "",
+ "/users/{id}/chats/{id}/messages": "",
+ "/users/{id}/chats/{id}/messages/{id}": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/chats/{id}/pinnedmessages/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all chat messages",
+ "adminDescription": "Allows an app to read and write all chat messages in Microsoft Teams, on behalf of the signed-in user.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all chat messages",
+ "adminDescription": "Allows an app to read and write all chat messages in Microsoft Teams, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats": "",
+ "/chats/{id}/members/{id}": "",
+ "/chats/{id}/messages": "",
+ "/chats/{id}/messages/{id}/hostedcontents": "",
+ "/chats/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/chats/{id}/operations": "",
+ "/chats/{id}/operations/{id}": "",
+ "/me/chats": "",
+ "/me/chats/{id}": "",
+ "/me/chats/{id}/messages": "",
+ "/me/chats/{id}/messages/{id}": "",
+ "/users/{id}/chats": "",
+ "/users/{id}/chats/{id}": "",
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": "",
+ "/users/{id}/chats/{id}/messages": "",
+ "/users/{id}/chats/{id}/messages/{id}": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/users/{id}/chats/getallmessages": "",
+ "/users/{id}/chats/getAllRetainedMessages": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}": "",
+ "/chats/{id}/messages/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/members": "",
+ "/chats/{id}/pinnedmessages": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/chats/{id}/pinnedmessages/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/removeAllAccessForUser": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.ReadWrite.WhereInstalled": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all chat messages for chats where the associated Teams application is installed.",
+ "adminDescription": "Allows the app to read and write all chat messages in Microsoft Teams for chats where the associated Teams application is installed, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Chat.UpdatePolicyViolation.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Flag chat messages for violating policy",
+ "adminDescription": "Allows the app to update Microsoft Teams 1-to-1 or group chat messages by patching a set of Data Loss Prevention (DLP) policy violation properties to handle the output of DLP processing.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}/messages/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMember.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the members of chats",
+ "adminDescription": "Read the members of chats, on behalf of the signed-in user.",
+ "userDisplayName": "Read the members of chats",
+ "userDescription": "Read the members of chats, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/members": "",
+ "/chats/{id}/members/{id}": "",
+ "/users/{id}/chats/{id}/members": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/members/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMember.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read the members of all chats",
+ "adminDescription": "Read the members of all chats, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/members": "least=Application",
+ "/chats/{id}/members/{id}": "least=Application",
+ "/users/{id}/chats/{id}/members": "least=Application",
+ "/users/{id}/chats/{id}/members/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMember.Read.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/members": "",
+ "/chats/{id}/members/{id}": "",
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMember.Read.WhereInstalled": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read the members of all chats where the associated Teams application is installed.",
+ "adminDescription": "Allows the app to read the members of all chats where the associated Teams application is installed, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMember.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Add and remove members from chats",
+ "adminDescription": "Add and remove members from chats, on behalf of the signed-in user.",
+ "userDisplayName": "Add and remove members from chats",
+ "userDescription": "Add and remove members from chats, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/members": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/members/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMember.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Add and remove members from all chats",
+ "adminDescription": "Add and remove members from all chats, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/members": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/members/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/chats/{id}/members": "",
+ "/users/{id}/chats/{id}/members/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMember.ReadWrite.WhereInstalled": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Add and remove members from all chats where the associated Teams application is installed.",
+ "adminDescription": "Allows the app to add and remove members from all chats where the associated Teams application is installed, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMessage.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all chat messages",
+ "adminDescription": "Allows the app to read all one-to-one and group chats messages in Microsoft Teams, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/pinnedmessages": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMessage.Read.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/messages": "least=Application",
+ "/chats/{id}/messages/{id}": "least=Application",
+ "/chats/{id}/messages/{id}/hostedcontents": "least=Application",
+ "/chats/{id}/messages/{id}/hostedcontents/{id}": "least=Application",
+ "/chats/{id}/messages/{id}/hostedcontents/{id}/$value": "least=Application",
+ "/me/chats/{id}/messages": "least=Application",
+ "/me/chats/{id}/messages/{id}": "least=Application",
+ "/users/{id}/chats/{id}/messages": "least=Application",
+ "/users/{id}/chats/{id}/messages/{id}": "least=Application",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents": "least=Application",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatMessage.Send": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Send user chat messages",
+ "adminDescription": "Allows an app to send one-to-one and group chat messages in Microsoft Teams, on behalf of the signed-in user.",
+ "userDisplayName": "Send chat messages",
+ "userDescription": "Allows an app to send one-to-one and group chat messages in Microsoft Teams, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}}/messages/forwardToChat": "least=DelegatedWork",
+ "/chats/{id}}/messages/replyWithQuote": "least=DelegatedWork",
+ "/chats/{id}/messages": "least=DelegatedWork",
+ "/chats/{id}/pinnedmessages": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/{id}/forwardToChat": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/messages/forwardToChat": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/messages/{id}/setreaction": "least=DelegatedWork",
+ "/users/{id}/chats/{id}/messages/{id}/unsetreaction": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatSettings.Read.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}": "",
+ "/chats/{id}/operations": "least=Application",
+ "/chats/{id}/operations/{id}": "least=Application",
+ "/me/chats/{id}": "",
+ "/users/{id}/chats/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ChatSettings.ReadWrite.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}": "least=Application",
+ "/chats/{id}/operations": "",
+ "/chats/{id}/operations/{id}": "",
+ "/me/chats/{id}": "",
+ "/users/{id}/chats/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "CloudApp-Discovery.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read discovered cloud applications data",
+ "adminDescription": "Allows the app to read details of discovered cloud apps in the organization, on behalf of the signed in user.",
+ "userDisplayName": "Read discovered cloud application data",
+ "userDescription": "Allows the app to read details of discovered cloud apps in the organization, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all discovered cloud applications data",
+ "adminDescription": "Allows the app to read all details of discovered cloud apps in the organization, without a signed-in user.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/dataDiscovery/cloudAppDiscovery/uploadedStreams": "least=DelegatedWork,Application",
+ "/security/dataDiscovery/cloudAppDiscovery/uploadedStreams/{id}/aggregatedAppsDetails": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mdagraphapiredmond"
+ }
+ },
+ "CloudPC.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Cloud PCs",
+ "adminDescription": "Allows the app to read the properties of Cloud PCs on behalf of the signed-in user.",
+ "userDisplayName": "Read Cloud PCs",
+ "userDescription": "Allows the app to read the properties of Cloud PCs, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Cloud PCs",
+ "adminDescription": "Allows the app to read the properties of Cloud PCs, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/manageddevices/{id}/getcloudpcreviewstatus": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/auditevents": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/auditevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/auditevents/getauditactivitytypes": "least=DelegatedWork,Application",
+ "/deviceManagement/virtualEndpoint/cloudApps": "least=DelegatedWork,Application",
+ "/deviceManagement/virtualEndpoint/cloudApps/{id}": "least=DelegatedWork,Application",
+ "/deviceManagement/virtualEndpoint/cloudApps/retrieveDiscoveredApps(sourceId={value},provisioningPolicyId={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/microsoft.graph.cloudpcagentpool/retrievereprovisionschedule": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/microsoft.graph.cloudpcpoolfailbackoperation": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/microsoft.graph.cloudpcpoolfailoveroperation": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/microsoft.graph.cloudpcpoolreprovisionoperation": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/microsoft.graph.cloudpcpoolsyncmetadataoperation": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/microsoft.graph.cloudpcagentpool": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/microsoft.graph.cloudpcflexpool": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/getcloudpcconnectivityhistory": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/getCloudPcLaunchInfo": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/retrieveflexcloudpcaccessconfiguration": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/retrieveflexcloudpcconfigurationdetail": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualEndpoint/cloudPcs/{id}/retrieveFrontlineCloudPcDetail": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/retrievecloudpccountbystatus": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/deviceimages": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/deviceimages/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/deviceimages/getsourceimages": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/externalpartnersettings": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/externalpartnersettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/galleryimages": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/galleryimages/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualEndpoint/managedLicenses": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/managedlicenses/retrievemanagedlicenseoperation(operationrequestid={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/onpremisesconnections": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/onpremisesconnections/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/organizationConfiguration": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/cloudPCUserSettingsPersistence": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/cloudPCUserSettingsPersistence/retrieveUserSettingsPersistenceProfiles(configurationId={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/cloudPCUserSettingsPersistence/retrieveUserSettingsPersistenceProfileUsage(configurationId={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/reports/getrealtimeremoteconnectionlatency(cloudpcid={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/reports/getrealtimeremoteconnectionstatus(cloudpcid={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/serviceplans": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles/retrievedevicesettingstate(cloudpcid={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles/retrievesettingcategories": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles/retrievesettingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles/retrievesettingtemplates": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/shareduseserviceplans": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/shareduseserviceplans/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/snapshots": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/snapshots/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/snapshots/getstorageaccounts(subscriptionid={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/snapshots/getsubscriptions": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/supportedregions": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/usersettings": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/usersettings/{id}": "least=DelegatedWork,Application",
+ "/me/cloudpcs/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/cloudpc/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/cloudpc/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/cloudpc/roledefinitions": "",
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "",
+ "/rolemanagement/devicemanagement/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement/roledefinitions": "",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": "",
+ "/rolemanagement/exchange/roledefinitions": "",
+ "/rolemanagement/exchange/roledefinitions/{id}": "",
+ "/users/{id}/cloudpcs/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/monitoring/adminhighlights": "least=DelegatedWork",
+ "/devicemanagement/monitoring/adminhighlights/{id}": "least=DelegatedWork",
+ "/devicemanagement/monitoring/adminhighlights/retrieveAdminHighlightActions": "least=DelegatedWork",
+ "/devicemanagement/monitoring/alertrecords": "least=DelegatedWork",
+ "/devicemanagement/monitoring/alertrecords/{id}": "least=DelegatedWork",
+ "/devicemanagement/monitoring/alertrecords/getportalnotifications": "least=DelegatedWork",
+ "/devicemanagement/monitoring/alertrules": "least=DelegatedWork",
+ "/devicemanagement/monitoring/alertrules/{id}": "least=DelegatedWork",
+ "/devicemanagement/virtualendpoint/acquireazuremapsaccesstoken": "least=DelegatedWork",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/getsupportedcloudpcremoteactions": "least=DelegatedWork",
+ "/devicemanagement/virtualendpoint/crosscloudgovernmentorganizationmapping": "least=DelegatedWork",
+ "/devicemanagement/virtualendpoint/geteffectivepermissions": "least=DelegatedWork",
+ "/me/cloudpcpools": "",
+ "/me/cloudpcpools/{id}": "",
+ "/me/cloudpcs": "least=DelegatedWork",
+ "/me/cloudpcs/{id}/getcloudpclaunchinfo": "least=DelegatedWork",
+ "/me/cloudpcs/{id}/retrievecloudpclaunchdetail": "least=DelegatedWork",
+ "/me/cloudpcs/{id}/retrieveflexcloudpcaccessconfiguration": "",
+ "/tenantrelationships/managedtenants/cloudpcconnections": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/cloudpcconnections/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/cloudpcdevices": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/cloudpcdevices/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/cloudpcsoverview": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/cloudpcsoverview/{id}": "least=DelegatedWork",
+ "/users/{id}/cloudpcpools": "",
+ "/users/{id}/cloudpcpools/{id}": "",
+ "/users/{id}/cloudpcs": "least=DelegatedWork",
+ "/users/{id}/cloudpcs/{id}/getcloudpclaunchinfo": "least=DelegatedWork",
+ "/users/{id}/cloudpcs/{id}/retrievecloudpclaunchdetail": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/organizationsettings": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/reports/getdailyaggregatedremoteconnectionreports": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/reports/getremoteconnectionhistoricalreports": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/reports/getshareduselicenseusagereport": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/reports/gettotalaggregatedremoteconnectionreports": "least=DelegatedWork,Application",
+ "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcPerformanceMetricsReport": "least=DelegatedWork,Application",
+ "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcSettingStatusReport": "least=DelegatedWork,Application",
+ "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcTroubleshootReports": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpcgraph"
+ }
+ },
+ "CloudPC.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Cloud PCs",
+ "adminDescription": "Allows the app to read and write the properties of Cloud PCs on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Cloud PCs",
+ "userDescription": "Allows the app to read and write the properties of Cloud PCs, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Cloud PCs",
+ "adminDescription": "Allows the app to read and write the properties of Cloud PCs, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/manageddevices/{id}/getcloudpcremoteactionresults": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/getcloudpcreviewstatus": "",
+ "/devicemanagement/virtualendpoint/auditevents": "",
+ "/devicemanagement/virtualendpoint/auditevents/{id}": "",
+ "/devicemanagement/virtualendpoint/auditevents/getauditactivitytypes": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments/{id}": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/microsoft.graph.cloudpcagentpool/retrievereprovisionschedule": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/{id}": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/microsoft.graph.cloudpcpoolfailbackoperation": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/microsoft.graph.cloudpcpoolfailoveroperation": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/microsoft.graph.cloudpcpoolreprovisionoperation": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations/microsoft.graph.cloudpcpoolsyncmetadataoperation": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/microsoft.graph.cloudpcagentpool": "",
+ "/devicemanagement/virtualendpoint/cloudpcpools/microsoft.graph.cloudpcflexpool": "",
+ "/devicemanagement/virtualendpoint/cloudpcs": "",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}": "",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/getcloudpcconnectivityhistory": "",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/getCloudPcLaunchInfo": "",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/retrieveflexcloudpcaccessconfiguration": "",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/retrieveflexcloudpcconfigurationdetail": "",
+ "/devicemanagement/virtualEndpoint/cloudPcs/{id}/retrieveFrontlineCloudPcDetail": "",
+ "/devicemanagement/virtualendpoint/cloudpcs/retrievecloudpccountbystatus": "",
+ "/devicemanagement/virtualendpoint/deviceimages/getsourceimages": "",
+ "/devicemanagement/virtualendpoint/galleryimages": "",
+ "/devicemanagement/virtualendpoint/galleryimages/{id}": "",
+ "/devicemanagement/virtualEndpoint/managedLicenses": "",
+ "/devicemanagement/virtualendpoint/managedlicenses/retrievemanagedlicenseoperation(operationrequestid={value})": "",
+ "/devicemanagement/virtualendpoint/onpremisesconnections": "",
+ "/devicemanagement/virtualendpoint/onpremisesconnections/{id}": "",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/userSettingsPersistenceDetail": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/userSettingsPersistenceDetail/retrieveUserSettingsPersistenceProfiles(configurationId={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/userSettingsPersistenceDetail/retrieveUserSettingsPersistenceProfileUsage(configurationId={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/retrieveUserProvisioningPolicies(userId={value})": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/reports/exportjobs/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/reports/getrealtimeremoteconnectionlatency(cloudpcid={value})": "",
+ "/devicemanagement/virtualendpoint/reports/getrealtimeremoteconnectionstatus(cloudpcid={value})": "",
+ "/devicemanagement/virtualendpoint/serviceplans": "",
+ "/devicemanagement/virtualendpoint/shareduseserviceplans": "",
+ "/devicemanagement/virtualendpoint/shareduseserviceplans/{id}": "",
+ "/devicemanagement/virtualendpoint/snapshots": "",
+ "/devicemanagement/virtualendpoint/snapshots/{id}": "",
+ "/devicemanagement/virtualendpoint/snapshots/getstorageaccounts(subscriptionid={value})": "",
+ "/devicemanagement/virtualendpoint/snapshots/getsubscriptions": "",
+ "/devicemanagement/virtualendpoint/supportedregions": "",
+ "/me/cloudpcs/{id}": "",
+ "/rolemanagement/exchange/roledefinitions": "",
+ "/rolemanagement/exchange/roledefinitions/{id}": "",
+ "/users/{id}/cloudpcs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/manageddevices/{id}/setcloudpcreviewstatus": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/bulkreprovisioncloudpc": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/bulkrestorecloudpc": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/bulksetcloudpcreviewstatus": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudApps": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudApps/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudApps/publish": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudApps/reset": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudApps/unpublish": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/microsoft.graph.cloudpcagentpool/schedulereprovisiontask": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/operations": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/changeuseraccounttype": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/endgraceperiod": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/poweroff": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/poweron": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/reboot": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/relocate": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/rename": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/reprovision": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/resize": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/restore": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/retrypartneragentinstallation": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/setdevicename": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/start": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/stop": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/troubleshoot": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/deviceimages/{id}/retryUpload": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/deviceimages/{id}/reupload": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/managedlicenses/submitmanagedlicenseoperation": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/onpremisesconnections/{id}/updateaddomainpassword": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/assignments/{id}/userSettingsPersistenceDetail/batchCleanupUserSettingsPersistenceProfile": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/retry": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/selfdeprovision": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}/selfprovision": "least=DelegatedWork,Application",
+ "/deviceManagement/virtualEndpoint/report/retrieveCloudPcClientAppUsageReport": "least=DelegatedWork,Application",
+ "/deviceManagement/virtualEndpoint/report/retrieveCloudPcRecommendationReports": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/reports/exportjobs": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/reports/getdailyaggregatedremoteconnectionreports": "",
+ "/devicemanagement/virtualendpoint/reports/getremoteconnectionhistoricalreports": "",
+ "/devicemanagement/virtualendpoint/reports/getshareduselicenseusagereport": "",
+ "/devicemanagement/virtualendpoint/reports/gettotalaggregatedremoteconnectionreports": "",
+ "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcPerformanceMetricsReport": "",
+ "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcRecommendationReports": "least=DelegatedWork,Application",
+ "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcSettingStatusReport": "",
+ "/deviceManagement/virtualEndpoint/reports/retrieveCloudPcTroubleshootReports": "",
+ "/devicemanagement/virtualendpoint/settingprofiles/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles/reorder": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles/uploadimage": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/usersettings/{id}/assign": "least=DelegatedWork,Application",
+ "/me/cloudpcs/{id}/reboot": "least=DelegatedWork,Application",
+ "/me/cloudpcs/{id}/rename": "least=DelegatedWork,Application",
+ "/me/cloudpcs/{id}/reprovision": "least=DelegatedWork,Application",
+ "/me/cloudpcs/{id}/troubleshoot": "least=DelegatedWork,Application",
+ "/users/{id}/cloudpcs/{id}/reboot": "least=DelegatedWork,Application",
+ "/users/{id}/cloudpcs/{id}/rename": "least=DelegatedWork,Application",
+ "/users/{id}/cloudpcs/{id}/reprovision": "least=DelegatedWork,Application",
+ "/users/{id}/cloudpcs/{id}/troubleshoot": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}/assignments/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/cloudpcpools/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/externalpartnersettings": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/usersettings": "least=DelegatedWork,Application",
+ "/rolemanagement/cloudpc/roledefinitions": "",
+ "/rolemanagement/devicemanagement/roledefinitions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/externalpartnersettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/organizationsettings": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/organizationConfiguration": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/cloudpcs/{id}/getsupportedcloudpcremoteactions": "least=Application",
+ "/me/cloudpcs/{id}/getfrontlinecloudpcaccessstate": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/monitoring/alertrules": "least=DelegatedWork",
+ "/devicemanagement/virtualendpoint/crosscloudgovernmentorganizationmapping": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement/monitoring/alertrules/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/deviceimages/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/usersettings/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/cloudpc/roleassignments/{id}": "",
+ "/rolemanagement/devicemanagement/roleassignments/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/monitoring/alertrecords": "",
+ "/devicemanagement/monitoring/alertrecords/{id}": "",
+ "/devicemanagement/monitoring/alertrecords/getportalnotifications": "",
+ "/devicemanagement/virtualendpoint/acquireazuremapsaccesstoken": "",
+ "/devicemanagement/virtualendpoint/geteffectivepermissions": "",
+ "/me/cloudpcpools": "",
+ "/me/cloudpcpools/{id}": "",
+ "/me/cloudpcs": "",
+ "/me/cloudpcs/{id}/getcloudpclaunchinfo": "",
+ "/me/cloudpcs/{id}/retrievecloudpclaunchdetail": "",
+ "/me/cloudpcs/{id}/retrieveflexcloudpcaccessconfiguration": "",
+ "/tenantrelationships/managedtenants/cloudpcconnections": "",
+ "/tenantrelationships/managedtenants/cloudpcconnections/{id}": "",
+ "/tenantrelationships/managedtenants/cloudpcdevices": "",
+ "/tenantrelationships/managedtenants/cloudpcdevices/{id}": "",
+ "/tenantrelationships/managedtenants/cloudpcsoverview": "",
+ "/tenantrelationships/managedtenants/cloudpcsoverview/{id}": "",
+ "/users/{id}/cloudpcpools": "",
+ "/users/{id}/cloudpcpools/{id}": "",
+ "/users/{id}/cloudpcs": "",
+ "/users/{id}/cloudpcs/{id}/getcloudpclaunchinfo": "",
+ "/users/{id}/cloudpcs/{id}/retrievecloudpclaunchdetail": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/monitoring/adminhighlights/{id}/dismiss": "least=DelegatedWork",
+ "/devicemanagement/monitoring/alertrecords/{id}/setportalnotificationassent": "least=DelegatedWork",
+ "/devicemanagement/virtualendpoint/onpremisesconnections": "least=DelegatedWork",
+ "/devicemanagement/virtualendpoint/onpremisesconnections/{id}/runhealthchecks": "least=DelegatedWork",
+ "/me/cloudpcs/{id}/start": "least=DelegatedWork",
+ "/me/cloudpcs/{id}/stop": "least=DelegatedWork",
+ "/users/{id}/cloudpcs/{id}/start": "least=DelegatedWork",
+ "/users/{id}/cloudpcs/{id}/stop": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/onpremisesconnections/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/cloudApps/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/provisioningpolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/virtualendpoint/settingprofiles/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/virtualendpoint/deviceimages": "least=DelegatedWork,Application",
+ "/rolemanagement/cloudpc/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement/roleassignments": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpcgraph"
+ }
+ },
+ "Community.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Viva Engage communities",
+ "adminDescription": "Allows the app to list Viva Engage communities, and to read their properties on behalf of the signed-in user.",
+ "userDisplayName": "Read all Viva Engage communities",
+ "userDescription": "Allows the app to list Viva Engage communities, and to read their properties on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all Viva Engage communities",
+ "adminDescription": "Allows the app to list Viva Engage communities, and to read their properties without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/communities": "least=DelegatedWork,Application",
+ "/employeeexperience/communities/{id}": "least=DelegatedWork,Application",
+ "/employeeexperience/engagementasyncoperations": "least=DelegatedWork,Application",
+ "/employeeexperience/engagementasyncoperations/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ve-msgraph-owners"
+ }
+ },
+ "Community.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all Viva Engage communities",
+ "adminDescription": "Allows the app to create Viva Engage communities and read all community properties on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all Viva Engage communities",
+ "userDescription": "Allows the app to create Viva Engage communities and read all community properties on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all Viva Engage communities",
+ "adminDescription": "Allows the app to create Viva Engage communities, read all community properties, update community properties, and delete communities without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/employeeexperience/communities": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/communities": "",
+ "/employeeexperience/communities/{id}": "",
+ "/employeeexperience/engagementasyncoperations": "",
+ "/employeeexperience/engagementasyncoperations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/employeeexperience/communities/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/employeeexperience/communities/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ve-msgraph-owners"
+ }
+ },
+ "ConfigurationMonitoring.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Configuration Monitoring entities",
+ "adminDescription": "Allows the app to read all Configuration Monitoring entities on behalf of the signed-in user.",
+ "userDisplayName": "Read all Configuration Monitoring entities",
+ "userDescription": "Allows the app to read all Configuration Monitoring entities on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Configuration Monitoring entities",
+ "adminDescription": "Allows the app to read all Configuration Monitoring entities, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationDrifts": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationDrifts/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationMonitoringResults": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationMonitoringResults/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationMonitors": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationMonitors/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationMonitors/{id}/configurationBaseline": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationSnapshotJobs": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationSnapshotJobs/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationSnapshots/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationTemplates": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationTemplates/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationTemplates/{id}/versions/{version}/referencedExternalMonitors/{tenantId}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationDriftFetchJobs": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationDriftFetchJobs/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationDriftFetchJobs/{id}/results": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationDrifts": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationDrifts/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitorFetchJobs": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitorFetchJobs/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitorFetchJobs/{id}/results": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResultFetchJobs": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResultFetchJobs/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResultFetchJobs/{id}/results": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResults": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResults/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitors": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationApplications": "least=DelegatedWork",
+ "/admin/configurationManagement/configurationApplications/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/configurationManagement/externalTenants/configurationDriftFetchJobs": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitorFetchJobs": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResultFetchJobs": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mtafc"
+ }
+ },
+ "ConfigurationMonitoring.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all Configuration Monitoring entities",
+ "adminDescription": "Allows the app to read and write all Configuration Monitoring entities on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all Configuration Monitoring entities",
+ "userDescription": "Allows the app to read and write all Configuration Monitoring entities on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all Configuration Monitoring entities",
+ "adminDescription": "Allows the app to read and write all Configuration Monitoring entities, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationDrifts": "",
+ "/admin/configurationManagement/configurationDrifts/{id}": "",
+ "/admin/configurationManagement/configurationMonitoringResults": "",
+ "/admin/configurationManagement/configurationMonitoringResults/{id}": "",
+ "/admin/configurationManagement/configurationMonitors": "",
+ "/admin/configurationManagement/configurationMonitors/{id}": "",
+ "/admin/configurationManagement/configurationMonitors/{id}/configurationBaseline": "",
+ "/admin/configurationManagement/configurationSnapshotJobs": "",
+ "/admin/configurationManagement/configurationSnapshotJobs/{id}": "",
+ "/admin/configurationManagement/configurationSnapshots/{id}": "",
+ "/admin/configurationManagement/configurationTemplates": "",
+ "/admin/configurationManagement/configurationTemplates/{id}": "",
+ "/admin/configurationManagement/configurationTemplates/{id}/versions/{version}/referencedExternalMonitors/{tenantId}": "",
+ "/admin/configurationManagement/externalTenants/configurationDriftFetchJobs": "",
+ "/admin/configurationManagement/externalTenants/configurationDriftFetchJobs/{id}": "",
+ "/admin/configurationManagement/externalTenants/configurationDriftFetchJobs/{id}/results": "",
+ "/admin/configurationManagement/externalTenants/configurationDrifts": "",
+ "/admin/configurationManagement/externalTenants/configurationDrifts/{id}": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitorFetchJobs": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitorFetchJobs/{id}": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitorFetchJobs/{id}/results": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResultFetchJobs": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResultFetchJobs/{id}": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResultFetchJobs/{id}/results": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResults": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResults/{id}": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitors": "",
+ "/admin/configurationManagement/externalTenants/configurationMonitors/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationApplications": "",
+ "/admin/configurationManagement/configurationApplications/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationDrifts/{id}/remediate": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationMonitors": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationMonitors/{id}/validate": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationSnapshots/createSnapshot": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationTemplates": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationTemplates/{id}/versions/{version}/referencedExternalMonitors/{tenantId}/monitors/$ref": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationDriftFetchJobs": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitorFetchJobs": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitoringResultFetchJobs": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitors": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationApplications": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationMonitors/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationTemplates/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationApplications/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationMonitors/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationTemplates/{id}": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/configurationTemplates/{id}/versions/{version}/referencedExternalMonitors/{tenantId}/monitors/{monitorId}/$ref": "least=DelegatedWork,Application",
+ "/admin/configurationManagement/externalTenants/configurationMonitors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/admin/configurationManagement/configurationApplications/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mtafc"
+ }
+ },
+ "ConsentRequest.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read consent requests",
+ "adminDescription": "Allows the app to read consent requests and approvals on behalf of the signed-in user.",
+ "userDisplayName": "Read consent requests",
+ "userDescription": "Allows the app to read consent requests and approvals, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all consent requests",
+ "adminDescription": "Allows the app to read consent requests and approvals without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/appconsent/appconsentrequests": "least=DelegatedWork,Application",
+ "/identitygovernance/appconsent/appconsentrequests/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests": "least=DelegatedWork,Application",
+ "/identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests/filterbycurrentuser(on={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/appconsent/appconsentrequests/filterbycurrentuser(on={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadaccessreviews"
+ }
+ },
+ "ConsentRequest.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write consent requests",
+ "adminDescription": "Allows the app to read app consent requests and approvals, and deny or approve those requests on behalf of the signed-in user.",
+ "userDisplayName": "Read and write consent requests",
+ "userDescription": "Allows the app to read app consent requests for your approval, and deny or approve those request on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all consent requests",
+ "adminDescription": "Allows the app to read app consent requests and approvals, and deny or approve those requests without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/appconsent/appconsentrequests": "",
+ "/identitygovernance/appconsent/appconsentrequests/{id}": "",
+ "/identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests": "",
+ "/identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests/{id}": "",
+ "/identitygovernance/appconsent/appconsentrequests/{id}/userconsentrequests/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/appconsent/appconsentrequests/filterbycurrentuser(on={value})": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadaccessreviews"
+ }
+ },
+ "Contacts-OnPremisesSyncBehavior.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and update the on-premises sync behavior of contacts",
+ "adminDescription": "Allows the app to read and update the on-premises sync behavior of contacts a user has permissions to, including their own and shared contacts.",
+ "userDisplayName": "Read and update the on-premises sync behavior of your own and shared contacts",
+ "userDescription": "Allows the app to update the on-premises sync behavior of contacts you have permissions to access, including your own and shared contacts.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and update the on-premises sync behavior of contacts",
+ "adminDescription": "Allows the app to update the on-premises sync behavior of all contacts in all mailboxes without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/contacts/{id}/onPremisesSyncBehavior": "least=DelegatedWork,Application",
+ "/me/contacts/onPremisesSyncBehavior": "least=DelegatedWork,Application",
+ "/users/{id}/contacts/{id}/onPremisesSyncBehavior": "least=DelegatedWork,Application",
+ "/users/{id}/contacts/onPremisesSyncBehavior": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ddsappperm"
+ }
+ },
+ "Contacts.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user contacts ",
+ "adminDescription": "Allows the app to read user contacts. ",
+ "userDisplayName": "Read your contacts ",
+ "userDescription": "Allows the app to read contacts in your contact folders. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user contacts ",
+ "adminDescription": "Allows the app to read user contacts. ",
+ "userDisplayName": "Read your contacts ",
+ "userDescription": "Allows the app to read contacts in your contact folders. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read contacts in all mailboxes",
+ "adminDescription": "Allows the app to read all contacts in all mailboxes without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/contactfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/childfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/childfolders/{id}/.../contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/childfolders/{id}/.../contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/contacts/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/distributionlists": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/distributionlists/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/childfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/childfolders/{id}/.../contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/childfolders/{id}/.../contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/childfolders/{id}/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/childfolders/{id}/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/contacts/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/delta": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/distributionlists": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/distributionlists/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/contactfolders/{id}/contacts/{id}/photo": "least=DelegatedWork",
+ "/me/contacts/{id}/photo": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/contactfolders/{id}/contacts/{id}/photo": "least=DelegatedWork,Application",
+ "/users/{id}/contacts/{id}/photo": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Contacts.Read.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user and shared contacts",
+ "adminDescription": "Allows the app to read contacts a user has permissions to access, including their own and shared contacts.",
+ "userDisplayName": "Read your and shared contacts",
+ "userDescription": "Allows the app to read contacts you have permissions to access, including your own and shared contacts.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Contacts.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Have full access to user contacts ",
+ "adminDescription": "Allows the app to create, read, update, and delete user contacts. ",
+ "userDisplayName": "Have full access of your contacts ",
+ "userDescription": "Allows the app to read, update, create and delete contacts in your contact folders. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Have full access to user contacts ",
+ "adminDescription": "Allows the app to create, read, update, and delete user contacts. ",
+ "userDisplayName": "Have full access of your contacts ",
+ "userDescription": "Allows the app to read, update, create and delete contacts in your contact folders. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write contacts in all mailboxes",
+ "adminDescription": "Allows the app to create, read, update, and delete all contacts in all mailboxes without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/contactfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/childfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/distributionlists": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/childfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/distributionlists": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/contactfolders/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/childfolders/{id}/.../contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/distributionlists/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/childfolders/{id}/.../contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/childfolders/{id}/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/distributionlists/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/distributionlists/{id}/addMembers": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/distributionlists/{id}/deleteMembers": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/distributionlists/{id}/addMembers": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/distributionlists/{id}/deleteMembers": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/contactfolders/{id}/childfolders/{id}/.../contacts": "",
+ "/me/contactfolders/{id}/contacts/delta": "",
+ "/me/contactfolders/delta": "",
+ "/users/{id}/contactfolders/{id}/childfolders/{id}/.../contacts": "",
+ "/users/{id}/contactfolders/{id}/childfolders/{id}/contacts": "",
+ "/users/{id}/contactfolders/{id}/contacts/delta": "",
+ "/users/{id}/contactfolders/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/me/contactfolders/{id}/contacts/{id}/photo": "least=DelegatedWork",
+ "/me/contacts/{id}/photo": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/contactfolders/{id}/contacts/{id}/photo": "least=DelegatedWork,Application",
+ "/users/{id}/contacts/{id}/photo": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/contactfolders/{id}/childfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/contacts/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contactfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/contacts/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/childfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/contacts/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contactfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/contacts/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Contacts.ReadWrite.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user and shared contacts",
+ "adminDescription": "Allows the app to create, read, update, and delete contacts a user has permissions to, including their own and shared contacts.",
+ "userDisplayName": "Read and write to your and shared contacts",
+ "userDescription": "Allows the app to read, update, create, and delete contacts you have permissions to access, including your own and shared contacts.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Content.Process.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Process content for data security, governance and compliance",
+ "adminDescription": "Allows the app to process and evaluate content for data security, governance and compliance outcomes at tenant scope.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Process content for data security, governance and compliance",
+ "adminDescription": "Allows the app to process and evaluate content for data security, governance and compliance outcomes at tenant scope.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/dataSecurityAndGovernance/contentUploadSession": "",
+ "/me/dataSecurityAndGovernance/processContent": "",
+ "/security/dataSecurityAndGovernance/processContent": "least=Application,DelegatedWork",
+ "/security/dataSecurityAndGovernance/processContentAsync": "least=Application,DelegatedWork",
+ "/users/{userId}/dataSecurityAndGovernance/contentUploadSession": "",
+ "/users/{userId}/dataSecurityAndGovernance/processContent": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "Content.Process.User": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Process content for data security, governance and compliance",
+ "adminDescription": "Allows the app to process and evaluate content for data security, governance and compliance outcomes for a user.",
+ "userDisplayName": "Process content for data security, governance and compliance",
+ "userDescription": "Allows the app to process and evaluate content for data security, governance and compliance outcomes for a user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Process content for data security, governance and compliance",
+ "adminDescription": "Allows the app to process and evaluate content for data security, governance and compliance outcomes for a user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/dataSecurityAndGovernance/contentUploadSession": "",
+ "/me/dataSecurityAndGovernance/processContent": "least=Application,DelegatedWork",
+ "/users/{userId}/dataSecurityAndGovernance/contentUploadSession": "",
+ "/users/{userId}/dataSecurityAndGovernance/processContent": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "ContentActivity.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read contents activity audit log from the audit store.",
+ "adminDescription": "Read contents activity audit log from the audit store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 1
+ },
+ "Application": {
+ "adminDisplayName": "Read contents activity audit log from the audit store.",
+ "adminDescription": "Read contents activity audit log from the audit store.",
+ "userDisplayName": "Read contents activity audit log from the audit store.",
+ "userDescription": "Read contents activity audit log from the audit store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{userId}/dataSecurityAndGovernance/activities/contentActivities/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "ContentActivity.Write": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Upload contents activity audit logs to the audit store.",
+ "adminDescription": "Allows the application to upload bulk contents activity audit logs to the audit store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Upload content activity audit logs to the audit store.",
+ "adminDescription": "Allows the application to upload bulk contents activity audit logs to the audit store.",
+ "userDisplayName": "Upload contents activity audit logs to the audit store.",
+ "userDescription": "Allows the application to upload bulk contents activity audit logs to the audit store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{userId}/dataSecurityAndGovernance/activities/contentActivities": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "CopilotPackages.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all packages information",
+ "adminDescription": "Allows the user to read the packages information",
+ "userDisplayName": "Read all packages information",
+ "userDescription": "Allows the app to read packages information.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all packages information",
+ "adminDescription": "Allows the app to read packages information without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/admin/catalog/packages": "least=DelegatedWork,Application",
+ "/copilot/admin/catalog/packages/{packageId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365adminsvcdevteam"
+ }
+ },
+ "CopilotPackages.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and update all packages information",
+ "adminDescription": "Allows the user to read and update the packages information",
+ "userDisplayName": "Read and update all packages information",
+ "userDescription": "Allows the app to read and update packages information.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and update all packages information",
+ "adminDescription": "Allows the app to read and update packages information without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/admin/catalog/packages": "least=DelegatedWork,Application",
+ "/copilot/admin/catalog/packages/{packageId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/admin/catalog/packages": "least=DelegatedWork,Application",
+ "/copilot/admin/catalog/packages/{packageId}/block": "least=DelegatedWork,Application",
+ "/copilot/admin/catalog/packages/{packageId}/reassign": "least=DelegatedWork,Application",
+ "/copilot/admin/catalog/packages/{packageId}/unblock": "least=DelegatedWork,Application",
+ "/copilot/admin/catalog/packages/{packageId}/update": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/copilot/admin/catalog/packages/{packageId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/copilot/admin/catalog/packages/{packageId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365adminsvcdevteam"
+ }
+ },
+ "CopilotPolicySettings.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Copilot policy settings",
+ "adminDescription": "Allows the app to read Copilot policy settings for the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read Copilot policy settings",
+ "userDescription": "Allows the app to read Copilot policy settings for your organization on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Copilot policy settings",
+ "adminDescription": "Allows the app to read Copilot policy settings for the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/admin/policySettings/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365adminsvcdevteam"
+ }
+ },
+ "CopilotPolicySettings.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Copilot policy settings",
+ "adminDescription": "Allows the app to read and write Copilot policy settings for the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Copilot policy settings",
+ "userDescription": "Allows the app to read and write Copilot policy settings for your organization on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Copilot policy settings",
+ "adminDescription": "Allows the app to read and write Copilot policy settings for the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/admin/policySettings/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/copilot/admin/policySettings/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365adminsvcdevteam"
+ }
+ },
+ "CopilotSettings-LimitedMode.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organization-wide copilot limited mode setting",
+ "adminDescription": "Allows the app to read organization-wide copilot limited mode setting on behalf of the signed-in user.",
+ "userDisplayName": "Read organization-wide copilot limited mode setting",
+ "userDescription": "Allows the app to read organization-wide copilot limited mode setting on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/admin/settings/limitedMode": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365adminsvcdevteam"
+ }
+ },
+ "CopilotSettings-LimitedMode.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write organization-wide copilot limited mode setting",
+ "adminDescription": "Allows the app to read and write organization-wide copilot limited mode setting on behalf of the signed-in user.",
+ "userDisplayName": "Read and write organization-wide copilot limited mode setting",
+ "userDescription": "Allows the app to read and write organization-wide copilot limited mode setting on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/copilot/admin/settings/limitedMode": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365adminsvcdevteam"
+ }
+ },
+ "CopilotTools.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Microsoft Copilot tools",
+ "adminDescription": "Allows the app to read all Microsoft Copilot tools on behalf of the signed-in user.",
+ "userDisplayName": "Read all Microsoft Agent365 Copilot tools",
+ "userDescription": "Allows the app to read all Microsoft Copilot tools on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/agents/discoverCopilotTools": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mcpplat"
+ }
+ },
+ "CrossTenantContentMigration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all cross tenant content migration job details",
+ "adminDescription": "Allows the app to read your tenant's all cross tenant content migration job details on behalf of the signed-in user.",
+ "userDisplayName": "Read all cross tenant content migration job details",
+ "userDescription": "Allows the app to read your tenant's all cross tenant content migration job details on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all cross tenant content migration job details",
+ "adminDescription": "Allows the app to read your tenant's all cross tenant content migration job details without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/migrations/crosstenantmigrationjobs": "least=DelegatedWork,Application",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')": "least=DelegatedWork,Application",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')/users": "least=DelegatedWork,Application",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')/users('{id}')": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "xtmigrationmsgraph"
+ }
+ },
+ "CrossTenantContentMigration.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all cross tenant content migration job details",
+ "adminDescription": "Allows the app to read and write your tenant's all cross tenant content migration job details on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all cross tenant content migration job details",
+ "userDescription": "Allows the app to read and write your tenant's all cross tenant content migration job details on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all cross tenant content migration job details",
+ "adminDescription": "Allows the app to read and write your tenant's all cross tenant content migration job details without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/migrations/crosstenantmigrationjobs": "least=DelegatedWork,Application",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')/cancel": "least=DelegatedWork,Application",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')/migrate": "least=DelegatedWork,Application",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')/users('{id}')/cancel": "least=DelegatedWork,Application",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')/validate": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/migrations/crosstenantmigrationjobs": "",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')": "",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')/users": "",
+ "/solutions/migrations/crosstenantmigrationjobs('{id}')/users('{id}')": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "xtmigrationmsgraph"
+ }
+ },
+ "CrossTenantInformation.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read cross-tenant basic information",
+ "adminDescription": "Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on behalf of the signed-in user.",
+ "userDisplayName": "Read cross-tenant basic information",
+ "userDescription": "Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read cross-tenant basic information",
+ "adminDescription": "Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/findtenantinformationbydomainname(domainname={value})": "least=DelegatedWork,Application",
+ "/tenantrelationships/findtenantinformationbytenantid(tenantid={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadusersandtenants"
+ }
+ },
+ "CrossTenantUserProfileSharing.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read shared cross-tenant user profile and export data",
+ "adminDescription": "Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.",
+ "userDisplayName": "Read shared cross-tenant user profile and export data",
+ "userDescription": "Allows the application to list and query shared user profile information associated with the current tenant on your behalf. It also permits the application to export your external user data (e.g. customer content or system-generated logs), associated with the current tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read shared cross-tenant user profile and export data",
+ "adminDescription": "Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.",
+ "userDisplayName": "Read shared cross-tenant user profile and export data",
+ "userDescription": "Allows the application to list and query shared user profile information associated with the current tenant on your behalf. It also permits the application to export your external user data (e.g. customer content or system-generated logs), associated with the current tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/inboundshareduserprofiles/{id}": "least=DelegatedWork",
+ "/directory/outboundshareduserprofiles": "least=DelegatedWork",
+ "/directory/outboundshareduserprofiles/{id}": "least=DelegatedWork",
+ "/directory/outboundshareduserprofiles/{id}/tenants": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "XTUPSperms"
+ }
+ },
+ "CrossTenantUserProfileSharing.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all shared cross-tenant user profiles and export their data",
+ "adminDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.",
+ "userDisplayName": "Read any shared cross-tenant user profiles and export data",
+ "userDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on your behalf. It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read all shared cross-tenant user profiles and export their data",
+ "adminDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.",
+ "userDisplayName": "Read any shared cross-tenant user profiles and export data",
+ "userDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on your behalf. It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all shared cross-tenant user profiles and export their data",
+ "adminDescription": "Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/inboundshareduserprofiles": "least=DelegatedWork,Application",
+ "/directory/inboundshareduserprofiles/{id}": "least=Application",
+ "/directory/outboundshareduserprofiles": "least=Application",
+ "/directory/outboundshareduserprofiles/{id}": "least=Application",
+ "/directory/outboundshareduserprofiles/{id}/tenants": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/inboundshareduserprofiles/{id}/exportpersonaldata": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "XTUPSperms"
+ }
+ },
+ "CrossTenantUserProfileSharing.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read shared cross-tenant user profile and export or delete data",
+ "adminDescription": "Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.",
+ "userDisplayName": "Read shared cross-tenant user profile and export or delete data",
+ "userDescription": "Allows the application to list and query shared user profile information associated with the current tenant on your behalf. It also permits the application to export and remove your external user data (e.g. customer content or system-generated logs), associated with the current tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/inboundshareduserprofiles/{id}": "",
+ "/directory/outboundshareduserprofiles": "",
+ "/directory/outboundshareduserprofiles/{id}": "",
+ "/directory/outboundshareduserprofiles/{id}/tenants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/inboundshareduserprofiles/{id}/removepersonaldata": "least=DelegatedWork",
+ "/directory/outboundshareduserprofiles/{id}/tenants/{id}/removepersonaldata": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "XTUPSperms"
+ }
+ },
+ "CrossTenantUserProfileSharing.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all shared cross-tenant user profiles and export or delete their data",
+ "adminDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.",
+ "userDisplayName": "Read any shared cross-tenant user profiles and export or delete data",
+ "userDescription": "Allows the application to list and query any shared user profile information associated with the current tenant on your behalf. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all shared cross-tenant user profiles and export or delete their data",
+ "adminDescription": "Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/inboundshareduserprofiles": "",
+ "/directory/inboundshareduserprofiles/{id}": "",
+ "/directory/outboundshareduserprofiles": "",
+ "/directory/outboundshareduserprofiles/{id}": "",
+ "/directory/outboundshareduserprofiles/{id}/tenants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/inboundshareduserprofiles/{id}/exportpersonaldata": "",
+ "/directory/inboundshareduserprofiles/{id}/removepersonaldata": "least=Application",
+ "/directory/outboundshareduserprofiles/{id}/tenants/{id}/removepersonaldata": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "XTUPSperms"
+ }
+ },
+ "CustomAuthenticationExtension.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all identity custom authentication extensions",
+ "adminDescription": "Allows the app to read your organization's custom authentication extensions, on behalf of the signed-in user.",
+ "userDisplayName": "Read all identity custom authentication extensions",
+ "userDescription": "Allows the app to read your organization's custom authentication extensions, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity custom authentication extensions",
+ "adminDescription": "Allows the app to read your organization's custom authentication extnesions, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/customAuthenticationExtensions": "least=DelegatedWork,Application",
+ "/identity/customAuthenticationExtensions/{id}": "least=DelegatedWork,Application",
+ "/identity/customAuthenticationExtensions/microsoft.graph.onAccountTakeoverProtectionStartCustomExtension": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/customAuthenticationExtensions/{id}/validateAuthenticationConfiguration": "least=DelegatedWork,Application",
+ "/identity/customAuthenticationExtensions/validateAuthenticationConfiguration": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "CustomAuthenticationExtension.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all identity custom authentication extensions",
+ "adminDescription": "Allows the app to read and write your organization's custom authentication extnesions, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all identity custom authentication extensions",
+ "userDescription": "Allows the app to read and write your organization's custom authentication extensions, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all identity custom authentication extensions",
+ "adminDescription": "Allows the app to read and write your organization's custom authentication extnesions, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identity/customAuthenticationExtensions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/customAuthenticationExtensions/microsoft.graph.onAccountTakeoverProtectionStartCustomExtension": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/customAuthenticationExtensions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/customAuthenticationExtensions/{id}/validateAuthenticationConfiguration": "",
+ "/identity/customAuthenticationExtensions/validateAuthenticationConfiguration": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "CustomDetection.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read custom detection rules",
+ "adminDescription": "Allows the app to read custom detection rules on behalf of the signed-in user.",
+ "userDisplayName": "Read custom detection rules",
+ "userDescription": "Allows the app to read custom detection rules on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all custom detection rules",
+ "adminDescription": "Allows the app to read custom detection rules without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/rules/detectionRules": "least=DelegatedWork,Application",
+ "/security/rules/detectionRules/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365dmsg"
+ }
+ },
+ "CustomDetection.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write custom detection rules",
+ "adminDescription": "Allows the app to read and write custom detection rules on behalf of the signed-in user.",
+ "userDisplayName": "Read and write custom detection rules",
+ "userDescription": "Allows the app to read and write custom detection rules on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all custom detection rules",
+ "adminDescription": "Allows the app to read and write custom detection rules without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/security/rules/detectionRules": "least=DelegatedWork,Application",
+ "/security/rules/detectionRules/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365dmsg"
+ }
+ },
+ "CustomSecAttributeAssignment.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read custom security attribute assignments",
+ "adminDescription": "Allows the app to read custom security attribute assignments for all principals in the tenant on behalf of a signed in user.",
+ "userDisplayName": "Read custom security attribute assignments",
+ "userDescription": "Allows the app to read custom security attribute assignments for all principals in the tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read custom security attribute assignments",
+ "adminDescription": "Allows the app to read custom security attribute assignments for all principals in the tenant without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "CustomSecAttributeAssignment.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write custom security attribute assignments",
+ "adminDescription": "Allows the app to read and write custom security attribute assignments for all principals in the tenant on behalf of a signed in user.",
+ "userDisplayName": "Read and write custom security attribute assignments",
+ "userDescription": "Allows the app to read and write custom security attribute assignments for all principals in the tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write custom security attribute assignments",
+ "adminDescription": "Allows the app to read and write custom security attribute assignments for all principals in the tenant without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "CustomSecAttributeAuditLogs.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all custom security attribute audit logs",
+ "adminDescription": "Allows the app to read audit logs for events that contain information about custom security attributes, on behalf of the signed-in user.",
+ "userDisplayName": "Read custom security attribute audit logs",
+ "userDescription": "Allows the app to read custom security attributes audit logs on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all custom security attribute audit logs",
+ "adminDescription": "Allows the app to read all audit logs for events that contain information about custom security attributes, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/auditlogs/customsecurityattributeaudits": "least=DelegatedWork,Application",
+ "/auditlogs/customsecurityattributeaudits/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ixrdev"
+ }
+ },
+ "CustomSecAttributeDefinition.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read custom security attribute definitions",
+ "adminDescription": "Allows the app to read custom security attribute definitions for the tenant on behalf of a signed in user.",
+ "userDisplayName": "Read custom security attribute definitions",
+ "userDescription": "Allows the app to read custom security attribute definitions for the tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read custom security attribute definitions",
+ "adminDescription": "Allows the app to read custom security attribute definitions for the tenant without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/attributesets": "least=DelegatedWork,Application",
+ "/directory/attributesets/{id}": "least=DelegatedWork,Application",
+ "/directory/customsecurityattributedefinitions": "least=DelegatedWork,Application",
+ "/directory/customsecurityattributedefinitions/{id}": "least=DelegatedWork,Application",
+ "/directory/customsecurityattributedefinitions/{id}/allowedvalues": "least=DelegatedWork,Application",
+ "/directory/customsecurityattributedefinitions/{id}/allowedvalues/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "CustomSecAttributeDefinition.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write custom security attribute definitions",
+ "adminDescription": "Allows the app to read and write custom security attribute definitions for the tenant on behalf of a signed in user.",
+ "userDisplayName": "Read and write custom security attribute definitions",
+ "userDescription": "Allows the app to read and write custom security attribute definitions for the tenant on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write custom security attribute definitions",
+ "adminDescription": "Allows the app to read and write custom security attribute definitions for the tenant without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/directory/attributesets": "least=DelegatedWork,Application",
+ "/directory/customsecurityattributedefinitions": "least=DelegatedWork,Application",
+ "/directory/customsecurityattributedefinitions/{id}/allowedvalues": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/attributesets/{id}": "least=DelegatedWork,Application",
+ "/directory/customsecurityattributedefinitions/{id}": "least=DelegatedWork,Application",
+ "/directory/customsecurityattributedefinitions/{id}/allowedvalues/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "CustomSecAttributeProvisioning.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the provisioning configuration of all active custom security attributes",
+ "adminDescription": "Allows the app to read the provisioning configuration of all active custom security attributes on behalf of a signed in user.",
+ "userDisplayName": "Read the provisioning configuration of all active custom security attributes",
+ "userDescription": "Allows the app to read the provisioning configuration of all active custom security attributes on behalf of a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read the provisioning configuration of all active custom security attributes",
+ "adminDescription": "Allows the app to read the provisioning configuration of all active custom security attributes without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/servicePrincipals/{servicePrincipalId}/synchronization/jobs/{jobId}/schema": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "syncfabricadmins"
+ }
+ },
+ "CustomSecAttributeProvisioning.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and edit the provisioning configuration of all active custom security attributes",
+ "adminDescription": "Allows the app to read and edit the provisioning configuration of all active custom security attributes on behalf of a signed in user.",
+ "userDisplayName": "Read and edit the provisioning configuration of all active custom security attributes",
+ "userDescription": "Allows the app to read and edit the provisioning configuration of all active custom security attributes on behalf of a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and edit the provisioning configuration of all active custom security attributes",
+ "adminDescription": "Allows the app to read and edit the provisioning configuration of all active custom security attributes without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PUT"
+ ],
+ "paths": {
+ "/servicePrincipals/{servicePrincipalId}/synchronization/jobs/{jobId}/schema": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/servicePrincipals/{servicePrincipalId}/synchronization/jobs/{jobId}/schema": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "syncfabricadmins"
+ }
+ },
+ "CustomTags.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all custom tags data",
+ "adminDescription": "Read custom tags data on behalf of the signed-in user",
+ "userDisplayName": "Read all custom tags data",
+ "userDescription": "Read custom tags data on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all custom tags data",
+ "adminDescription": "Read custom tags data, without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/userTags": "least=DelegatedWork,Application",
+ "/security/userTags/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CustomTagsGraph"
+ }
+ },
+ "CustomTags.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write custom tags data",
+ "adminDescription": "Read and write custom tags data on behalf of the signed-in user",
+ "userDisplayName": "Read and write all custom tags data",
+ "userDescription": "Read and write custom tags data on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write custom tags data",
+ "adminDescription": "Read and write custom tags data, without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/userTags": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/userTags/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CustomTagsGraph"
+ }
+ },
+ "DelegatedAdminRelationship.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Delegated Admin relationships with customers",
+ "adminDescription": "Allows the app to read details of delegated admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups on behalf of the signed-in user.",
+ "userDisplayName": "Read Delegated Admin relationships with customers",
+ "userDescription": "Allows the app to read details of Delegated Admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Delegated Admin relationships with customers",
+ "adminDescription": "Allows the app to read details of delegated admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/delegatedadmincustomers": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadmincustomers/{id}": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadmincustomers/{id}/servicemanagementdetails": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}/accessassignments": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}/accessassignments/{id}": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}/operations": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}/operations/{id}": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}/requests": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}/requests/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "smrtsec"
+ }
+ },
+ "DelegatedAdminRelationship.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage Delegated Admin relationships with customers",
+ "adminDescription": "Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers as well as role assignments to security groups for active Delegated Admin relationships on behalf of the signed-in user.",
+ "userDisplayName": "Manage Delegated Admin relationships with customers",
+ "userDescription": "Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers and role assignments to security groups for active Delegated Admin relationships on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage Delegated Admin relationships with customers",
+ "adminDescription": "Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers and role assignments to security groups for active Delegated Admin relationships without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/delegatedadmincustomers": "",
+ "/tenantrelationships/delegatedadmincustomers/{id}": "",
+ "/tenantrelationships/delegatedadmincustomers/{id}/servicemanagementdetails": "",
+ "/tenantrelationships/delegatedadminrelationships/{id}/operations": "",
+ "/tenantrelationships/delegatedadminrelationships/{id}/operations/{id}": "",
+ "/tenantrelationships/delegatedadminrelationships/{id}/requests/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/tenantrelationships/delegatedadminrelationships": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}/accessassignments": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}/requests": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/tenantrelationships/delegatedadminrelationships/{id}": "least=DelegatedWork,Application",
+ "/tenantrelationships/delegatedadminrelationships/{id}/accessassignments/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "smrtsec"
+ }
+ },
+ "DelegatedPermissionGrant.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage all delegated permission grants",
+ "adminDescription": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), on behalf of the signed in user.",
+ "userDisplayName": "Manage all delegated permission grants",
+ "userDescription": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), on your behalf. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Manage all delegated permission grants",
+ "adminDescription": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/serviceprincipals(appid={value})/inheritedoauth2permissiongrants": "",
+ "/serviceprincipals(appid={value})/oauth2permissiongrants": "",
+ "/serviceprincipals/{id}/inheritedoauth2permissiongrants": "",
+ "/serviceprincipals/{id}/oauth2permissiongrants": "",
+ "/users/{id}/oauth2permissiongrants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/inheritedoauth2permissiongrants": "",
+ "/me/oauth2permissiongrants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/oauth2permissiongrants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/oauth2permissiongrants/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/oauth2permissiongrants/delta": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ssp"
+ }
+ },
+ "Device-CloudLicensing.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read individually owned Cloud Licensing resources for devices",
+ "adminDescription": "Allows the app to read Cloud Licensing resources for devices owned by the signed-in user-including allotments, assignments and usageRights-on their behalf.",
+ "userDisplayName": "Read your Cloud Licensing resources for devices",
+ "userDescription": "Allows the app to read Cloud Licensing resources for devices owned by you-including allotments, assignments and usageRights-on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devices/{id}/cloudLicensing/assignments": "least=DelegatedWork",
+ "/devices/{id}/cloudLicensing/assignments/{id}": "least=DelegatedWork",
+ "/devices/{id}/cloudLicensing/assignments/{id}/allotment": "least=DelegatedWork",
+ "/devices/{id}/cloudLicensing/usageRights": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}/assignments": "least=DelegatedWork",
+ "/devices/{id}/cloudLicensing/waitingMembers": "least=DelegatedWork",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}": "least=DelegatedWork",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}/allotment": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cloudlicensing"
+ }
+ },
+ "Device-CloudLicensing.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Cloud Licensing resources for devices",
+ "adminDescription": "Allows the app to read all Cloud Licensing resources for devices-including allotments, assignments, and usageRights-on behalf of the signed-in user.",
+ "userDisplayName": "Read your Cloud Licensing resources for devices",
+ "userDescription": "Allows the app to read all Cloud Licensing resources for devices-including allotments, assignments, and usageRights-on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Cloud Licensing resources for devices.",
+ "adminDescription": "Allows the app to read all Cloud Licensing resources for devices, including allotments, assignments and usageRights.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devices/{id}/cloudLicensing/assignments": "least=Application",
+ "/devices/{id}/cloudLicensing/assignments/{id}": "least=Application",
+ "/devices/{id}/cloudLicensing/assignments/{id}/allotment": "least=Application",
+ "/devices/{id}/cloudLicensing/usageRights": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}/assignments": "least=Application",
+ "/devices/{id}/cloudLicensing/waitingMembers": "least=Application",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}": "least=Application",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}/allotment": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cloudlicensing"
+ }
+ },
+ "Device.Command": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Communicate with user devices",
+ "adminDescription": "Allows the app to launch another app or communicate with another app on a user's device on behalf of the signed-in user.",
+ "userDisplayName": "Communicate with your other devices",
+ "userDescription": "Allows the app to launch another app or communicate with another app on a device that you own.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Communicate with user devices",
+ "adminDescription": "Allows the app to launch another app or communicate with another app on a user's device on behalf of the signed-in user.",
+ "userDisplayName": "Communicate with your other devices",
+ "userDescription": "Allows the app to launch another app or communicate with another app on a device that you own.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/devices/{id}/commands": "least=DelegatedPersonal",
+ "/users/{id}/devices/{id}/commands": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/devices/{id}/commands/{id}": "least=DelegatedPersonal",
+ "/me/devices/{id}/commands/{id}/responsepayload": "least=DelegatedPersonal",
+ "/users/{id}/devices/{id}/commands/{id}": "least=DelegatedPersonal",
+ "/users/{id}/devices/{id}/commands/{id}/responsepayload": "least=DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "afsadmins"
+ }
+ },
+ "Device.CreateFromOwnedTemplate": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create a device from a device template owned by the signed-in user.",
+ "adminDescription": "Allows the app to create a device from a device template owned by the signed-in user.",
+ "userDisplayName": "Create a device from a device template you own.",
+ "userDescription": "Allows the app to create a device from a device template you own.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/templates/deviceTemplates/{id}/createDeviceFromTemplate": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "Device.ProvisionForVDI": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Provision a device for a virtual desktop infrastructure provider.",
+ "adminDescription": "Allows the onboarded VDI app to provision a device on behalf of a signed-in user.",
+ "userDisplayName": "Provision a device for a virtual desktop infrastructure provider.",
+ "userDescription": "Allows the onboarded VDI app to provision a device.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devices/provision": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "Device.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user devices",
+ "adminDescription": "Allows the app to read a user's list of devices on behalf of the signed-in user.",
+ "userDisplayName": "View your list of devices",
+ "userDescription": "Allows the app to see your list of devices.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 1
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user devices",
+ "adminDescription": "Allows the app to read a user's list of devices on behalf of the signed-in user.",
+ "userDisplayName": "View your list of devices",
+ "userDescription": "Allows the app to see your list of devices.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 1
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/devices": "least=DelegatedPersonal",
+ "/users/{id}/devices": "least=DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "Device.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all devices",
+ "adminDescription": "Allows the app to read your organization's devices' configuration information on behalf of the signed-in user.",
+ "userDisplayName": "Read all devices",
+ "userDescription": "Allows the app to read devices' configuration information on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read all devices",
+ "adminDescription": "Allows the app to read your organization's devices' configuration information on behalf of the signed-in user.",
+ "userDisplayName": "Read all devices",
+ "userDescription": "Allows the app to read devices' configuration information on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all devices",
+ "adminDescription": "Allows the app to read your organization's devices' configuration information without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devices": "least=DelegatedWork,Application",
+ "/devices(deviceid={value})": "least=DelegatedWork,Application",
+ "/devices(deviceid={value})/memberof": "least=DelegatedWork,Application",
+ "/devices(deviceid={value})/registeredowners": "least=DelegatedWork,Application",
+ "/devices(deviceid={value})/registeredusers": "least=DelegatedWork,Application",
+ "/devices(deviceid={value})/transitivememberof": "least=DelegatedWork,Application",
+ "/devices(deviceid={value})/usagerights": "least=DelegatedWork,Application",
+ "/devices/{id}": "least=DelegatedWork,Application",
+ "/devices/{id}/cloudLicensing/assignments": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/devices/{id}/cloudLicensing/usageRights": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/devices/{id}/cloudLicensing/waitingMembers": "",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/devices/{id}/memberof": "least=DelegatedWork,Application",
+ "/devices/{id}/organizationalUnitParent": "least=DelegatedWork,Application",
+ "/devices/{id}/registeredowners": "least=DelegatedWork,Application",
+ "/devices/{id}/registeredusers": "least=DelegatedWork,Application",
+ "/devices/{id}/transitivememberof": "least=DelegatedWork,Application",
+ "/devices/{id}/usagerights": "least=DelegatedWork,Application",
+ "/devices/delta": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "Device.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write devices",
+ "adminDescription": "Allows the app to read and write all device properties without a signed in user. Does not allow device creation, device deletion or update of device alternative security identifiers.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devices": "",
+ "/devices(deviceid={value})/memberof": "",
+ "/devices(deviceid={value})/registeredowners": "",
+ "/devices(deviceid={value})/registeredusers": "",
+ "/devices(deviceid={value})/transitivememberof": "",
+ "/devices(deviceid={value})/usagerights": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/devices/{id}/cloudLicensing/usageRights": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/devices/{id}/cloudLicensing/waitingMembers": "",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/devices/{id}/memberof": "",
+ "/devices/{id}/registeredowners": "",
+ "/devices/{id}/registeredusers": "",
+ "/devices/{id}/transitivememberof": "",
+ "/devices/{id}/usagerights": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devices(deviceid={value})": "least=Application",
+ "/devices/{id}": "least=Application",
+ "/devices/{id}/cloudLicensing/assignments/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/devices/{id}/cloudLicensing/assignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devices/{id}/cloudLicensing/assignments/reprocessAssignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/devices/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "DeviceLocalCredential.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read device local credential passwords",
+ "adminDescription": "Allows the app to read device local credential properties including passwords, on behalf of the signed-in user.",
+ "userDisplayName": "Read device local credential passwords",
+ "userDescription": "Allows the app to read device local credential properties including passwords, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read device local credential passwords",
+ "adminDescription": "Allows the app to read device local credential properties including passwords, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicelocalcredentials": "",
+ "/devicelocalcredentials/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cdrsmon"
+ }
+ },
+ "DeviceLocalCredential.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read device local credential properties",
+ "adminDescription": "Allows the app to read device local credential properties excluding passwords, on behalf of the signed-in user.",
+ "userDisplayName": "Read device local credential properties",
+ "userDescription": "Allows the app to read device local credential properties excluding passwords, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read device local credential properties",
+ "adminDescription": "Allows the app to read device local credential properties excluding passwords, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicelocalcredentials": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cdrsmon"
+ }
+ },
+ "DeviceManagementApps.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Microsoft Intune apps",
+ "adminDescription": "Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.",
+ "userDisplayName": "Read Microsoft Intune apps",
+ "userDescription": "Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Microsoft Intune apps",
+ "adminDescription": "Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/deviceappmanagement": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/deploymentsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/deploymentsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/deviceappmanagementtasks": "",
+ "/deviceappmanagement/deviceappmanagementtasks/{id}": "",
+ "/deviceappmanagement/enterprisecodesigningcertificates": "least=DelegatedWork,Application",
+ "/deviceappmanagement/enterprisecodesigningcertificates/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/devicestatuses": "",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/devicestatuses/{id}": "",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/groupassignments": "",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/groupassignments/{id}": "",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/userstatuses": "",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/userstatuses/{id}": "",
+ "/deviceappmanagement/iosmanagedappprotections": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/deploymentsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedapppolicies": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedapppolicies/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/operations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/operations/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/getuseridswithflaggedappregistration": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappstatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappstatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebookcategories": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebookcategories/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/categories": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/categories/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/devicestates": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/devicestates/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/installsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/userstatesummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/userstatesummary/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappcategories": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappcategories/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/devicestatussummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/userstatussummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/categories": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/categories/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/files": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/devicestatuses/{id}/app": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/installsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.iosvppapp/assignedlicenses": "",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.iosvppapp/assignedlicenses/{id}": "",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.macosvppapp/assignedlicenses": "",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.macosvppapp/assignedlicenses/{id}": "",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.managedmobilelobapp/contentversions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.managedmobilelobapp/contentversions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.microsoftstoreforbusinessapp/containedapps": "",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.microsoftstoreforbusinessapp/containedapps/{id}": "",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.mobilelobapp/contentversions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.mobilelobapp/contentversions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.windowsuniversalappx/committedcontainedapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.windowsuniversalappx/committedcontainedapps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/relationships": "",
+ "/deviceappmanagement/mobileapps/{id}/relationships/{id}": "",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}/app": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/symanteccodesigningcertificate": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/deploymentsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions/{id}": "",
+ "/deviceappmanagement/wdacsupplementalpolicies": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/deploysummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}/policy": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations": "",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionwipeactions": "",
+ "/deviceappmanagement/windowsinformationprotectionwipeactions/{id}": "",
+ "/deviceappmanagement/windowsmanagedappprotections": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/apps": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/apps/{id}": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assignments": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assignments/{id}": "",
+ "/devicemanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/auditevents": "least=DelegatedWork,Application",
+ "/devicemanagement/auditevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/auditevents/getauditactivitytypes": "least=DelegatedWork,Application",
+ "/devicemanagement/auditevents/getauditcategories": "least=DelegatedWork,Application",
+ "/devicemanagement/configmanagercollections": "",
+ "/devicemanagement/configmanagercollections/{id}": "",
+ "/devicemanagement/configmanagercollections/getpolicysummary": "",
+ "/devicemanagement/intunebrandingprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/intunebrandingprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intunebrandingprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/intunebrandingprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reports": "",
+ "/devicemanagement/reports/cachedreportconfigurations": "",
+ "/devicemanagement/reports/cachedreportconfigurations/{id}": "",
+ "/devicemanagement/reports/exportjobs": "",
+ "/devicemanagement/reports/exportjobs/{id}": "",
+ "/devicemanagement/reports/reportschedules": "",
+ "/devicemanagement/reports/reportschedules/{id}": "",
+ "/devicemanagement/windowsinformationprotectionapplearningsummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsinformationprotectionapplearningsummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsinformationprotectionnetworklearningsummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsinformationprotectionnetworklearningsummaries/{id}": "least=DelegatedWork,Application",
+ "/users": "",
+ "/users/{id}": "",
+ "/users/{id}/getmanagedappdiagnosticstatuses": "least=DelegatedWork,Application",
+ "/users/{id}/getmanagedapppolicies": "least=DelegatedWork,Application",
+ "/users/{id}/ismanagedappuserblocked": "",
+ "/users/getmanagedappblockedusers": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/reports/getcachedreport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancereport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getcompliancesettingnoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getconfigurationsettingnoncompliancereport": "",
+ "/devicemanagement/reports/getdevicemanagementintentpersettingcontributingprofiles": "",
+ "/devicemanagement/reports/getdevicemanagementintentsettingsreport": "",
+ "/devicemanagement/reports/getdevicenoncompliancereport": "",
+ "/devicemanagement/reports/getdevicepoliciescompliancereport": "",
+ "/devicemanagement/reports/getdevicepolicysettingscompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbypolicyplatformcompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbysettingreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliancepolicysettingreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliancepolicysettingsreport": "",
+ "/devicemanagement/reports/getdeviceswithoutcompliancepolicyreport": "",
+ "/devicemanagement/reports/gethistoricalreport": "",
+ "/devicemanagement/reports/getmobileapplicationmanagementappconfigurationreport": "",
+ "/devicemanagement/reports/getmobileapplicationmanagementappregistrationsummaryreport": "",
+ "/devicemanagement/reports/getnoncompliantdevicesandsettingsreport": "",
+ "/devicemanagement/reports/getpolicynoncompliancemetadata": "",
+ "/devicemanagement/reports/getpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getreportfilters": "",
+ "/devicemanagement/reports/getsettingcomplianceaggreport": "",
+ "/devicemanagement/reports/getsettingnoncompliancereport": "",
+ "/users/{id}/wipemanagedappregistrationsbyazureaddeviceid": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementApps.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Microsoft Intune apps",
+ "adminDescription": "Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.",
+ "userDisplayName": "Read and write Microsoft Intune apps",
+ "userDescription": "Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Microsoft Intune apps",
+ "adminDescription": "Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/deviceappmanagement": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/deploymentsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/deploymentsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/deploymentsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/installsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/devicestatussummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/userstatussummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/installsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/symanteccodesigningcertificate": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/deploymentsummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/deploysummary": "least=DelegatedWork,Application",
+ "/devicemanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/reports": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/deviceappmanagement/androidmanagedappprotections": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/deviceappmanagementtasks": "",
+ "/deviceappmanagement/enterprisecodesigningcertificates": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/operations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebookcategories": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/categories": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/devicestates": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/userstatesummary": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappcategories": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/categories": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/files": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.iosvppapp/assignedlicenses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.macosvppapp/assignedlicenses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.managedmobilelobapp/contentversions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.microsoftstoreforbusinessapp/containedapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.mobilelobapp/contentversions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.windowsuniversalappx/committedcontainedapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/relationships": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions": "",
+ "/deviceappmanagement/wdacsupplementalpolicies": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionwipeactions": "",
+ "/deviceappmanagement/windowsmanagedappprotections": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/apps": "",
+ "/devicemanagement/auditevents": "least=DelegatedWork,Application",
+ "/devicemanagement/configmanagercollections": "",
+ "/devicemanagement/intunebrandingprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/intunebrandingprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/cachedreportconfigurations": "",
+ "/devicemanagement/reports/exportjobs": "",
+ "/devicemanagement/reports/reportschedules": "",
+ "/devicemanagement/windowsinformationprotectionapplearningsummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsinformationprotectionnetworklearningsummaries": "least=DelegatedWork,Application",
+ "/users": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/deviceappmanagement/androidmanagedappprotections/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/deviceappmanagementtasks/{id}": "",
+ "/deviceappmanagement/enterprisecodesigningcertificates/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/ioslobappprovisioningconfigurations/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/operations/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebookcategories/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/categories/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/devicestates/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/userstatesummary/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/userstatesummary/{id}/devicestates/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappcategories/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/categories/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/containedapps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/devicestatuses/{id}/app": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.iosvppapp/assignedlicenses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.macosvppapp/assignedlicenses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.managedmobilelobapp/contentversions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.microsoftstoreforbusinessapp/containedapps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.mobilelobapp/contentversions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/microsoft.graph.windowsuniversalappx/committedcontainedapps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/relationships/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}/app": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions/{id}": "",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}/policy": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionwipeactions/{id}": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/apps/{id}": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assignments/{id}": "",
+ "/devicemanagement/auditevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configmanagercollections/{id}": "",
+ "/devicemanagement/intunebrandingprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intunebrandingprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/cachedreportconfigurations/{id}": "",
+ "/devicemanagement/reports/exportjobs/{id}": "",
+ "/devicemanagement/reports/reportschedules/{id}": "",
+ "/devicemanagement/windowsinformationprotectionapplearningsummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsinformationprotectionnetworklearningsummaries/{id}": "least=DelegatedWork,Application",
+ "/users/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/deviceappmanagement/androidmanagedappprotections/{id}/assignments": "",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/assignments": "",
+ "/deviceappmanagement/managedapppolicies": "",
+ "/deviceappmanagement/managedapppolicies/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies": "",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies": "",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}": "",
+ "/deviceappmanagement/managedappregistrations/getuseridswithflaggedappregistration": "",
+ "/deviceappmanagement/managedappstatuses": "",
+ "/deviceappmanagement/managedappstatuses/{id}": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assignments": "",
+ "/devicemanagement/auditevents/getauditactivitytypes": "",
+ "/devicemanagement/auditevents/getauditcategories": "",
+ "/devicemanagement/configmanagercollections/getpolicysummary": "",
+ "/users/{id}/getmanagedappdiagnosticstatuses": "",
+ "/users/{id}/getmanagedapppolicies": "",
+ "/users/{id}/ismanagedappuserblocked": "",
+ "/users/getmanagedappblockedusers": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/deviceappmanagement/deviceappmanagementtasks/{id}/updatestatus": "",
+ "/deviceappmanagement/managedapppolicies/{id}/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedapppolicies/{id}/targetapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}/targetapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}/targetapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedebooks/{id}/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileappconfigurations/{id}/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}/commit": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/contentversions/{id}/files/{id}/renewupload": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/devicestatuses/{id}/app/revokealllicenses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/devicestatuses/{id}/app/revokedevicelicense": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/devicestatuses/{id}/app/revokeuserlicense": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/revokealllicenses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/revokedevicelicense": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/revokeuserlicense": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}/app/revokealllicenses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}/app/revokedevicelicense": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/{id}/userstatuses/{id}/app/revokeuserlicense": "least=DelegatedWork,Application",
+ "/deviceappmanagement/mobileapps/validatexml": "least=DelegatedWork,Application",
+ "/deviceappmanagement/syncmicrosoftstoreforbusinessapps": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/targetapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/wdacsupplementalpolicies/{id}/devicestatuses/{id}/policy/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}/wipe": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assign": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/targetapps": "",
+ "/devicemanagement/intunebrandingprofiles/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getcachedreport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancereport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getcompliancesettingnoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getconfigurationsettingnoncompliancereport": "",
+ "/devicemanagement/reports/getdevicemanagementintentpersettingcontributingprofiles": "",
+ "/devicemanagement/reports/getdevicemanagementintentsettingsreport": "",
+ "/devicemanagement/reports/getdevicenoncompliancereport": "",
+ "/devicemanagement/reports/getdevicepoliciescompliancereport": "",
+ "/devicemanagement/reports/getdevicepolicysettingscompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbypolicyplatformcompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbysettingreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliancepolicysettingreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliancepolicysettingsreport": "",
+ "/devicemanagement/reports/getdeviceswithoutcompliancepolicyreport": "",
+ "/devicemanagement/reports/gethistoricalreport": "",
+ "/devicemanagement/reports/getmobileapplicationmanagementappconfigurationreport": "",
+ "/devicemanagement/reports/getmobileapplicationmanagementappregistrationsummaryreport": "",
+ "/devicemanagement/reports/getnoncompliantdevicesandsettingsreport": "",
+ "/devicemanagement/reports/getpolicynoncompliancemetadata": "",
+ "/devicemanagement/reports/getpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getreportfilters": "",
+ "/devicemanagement/reports/getsettingcomplianceaggreport": "",
+ "/devicemanagement/reports/getsettingnoncompliancereport": "",
+ "/users/{id}/unblockmanagedapps": "",
+ "/users/{id}/wipeandblockmanagedapps": "",
+ "/users/{id}/wipemanagedappregistrationsbydevicetag": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementCloudCA.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Microsoft Cloud PKI objects",
+ "adminDescription": "Allows the app to read certification authority information on behalf of the signed-in user.",
+ "userDisplayName": "Read Microsoft Cloud PKI objects",
+ "userDescription": "Allows the app to read certification authority information on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Microsoft Cloud PKI objects",
+ "adminDescription": "Allows the app to read certification authority information without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/deviceManagement/cloudCertificationAuthority": "least=DelegatedWork,Application",
+ "/deviceManagement/cloudCertificationAuthority/{id}": "least=DelegatedWork,Application",
+ "/deviceManagement/cloudCertificationAuthority/{id}/cloudCertificationAuthorityLeafCertificate": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementCloudCA.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Microsoft Cloud PKI objects",
+ "adminDescription": "Allows the app to read and write certification authority information on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Microsoft Cloud PKI objects",
+ "userDescription": "Allows the app to read and write certification authority information on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Microsoft Cloud PKI objects",
+ "adminDescription": "Allows the app to read and write certification authority information without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/deviceManagement/cloudCertificationAuthority": "",
+ "/deviceManagement/cloudCertificationAuthority/{id}": "",
+ "/deviceManagement/cloudCertificationAuthority/{id}/cloudCertificationAuthorityLeafCertificate": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/deviceManagement/cloudCertificationAuthority": "least=DelegatedWork,Application",
+ "/deviceManagement/cloudCertificationAuthority({id})": "least=DelegatedWork,Application",
+ "/deviceManagement/cloudCertificationAuthority({id})/changeCloudCertificationAuthorityStatus": "least=DelegatedWork,Application",
+ "/deviceManagement/cloudCertificationAuthority({id})/cloudCertificationAuthorityLeafCertificate": "least=DelegatedWork,Application",
+ "/deviceManagement/cloudCertificationAuthority({id})/revokeCloudCertificationAuthorityCertificate": "least=DelegatedWork,Application",
+ "/deviceManagement/cloudCertificationAuthority({id})/revokeLeafCertificate": "least=DelegatedWork,Application",
+ "/deviceManagement/cloudCertificationAuthority({id})/uploadExternallySignedCertificationAuthorityCertificate": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/deviceManagement/cloudCertificationAuthority/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementConfiguration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Microsoft Intune Device Configuration and Policies",
+ "adminDescription": "Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.",
+ "userDisplayName": "Read Microsoft Intune Device Configuration and Policies",
+ "userDescription": "Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Microsoft Intune device configuration and policies",
+ "adminDescription": "Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/createremotehelpsessionresponse": "",
+ "/createremotehelpsessionresponse/{id}": "",
+ "/deviceappmanagement": "",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/apps": "",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}": "",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/assignments": "",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}": "",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/deploymentsummary": "",
+ "/deviceappmanagement/defaultmanagedappprotections": "",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}": "",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/apps": "",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}": "",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/deploymentsummary": "",
+ "/deviceappmanagement/deviceappmanagementtasks": "least=DelegatedWork,Application",
+ "/deviceappmanagement/deviceappmanagementtasks/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/apps": "",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}": "",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/assignments": "",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}": "",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/deploymentsummary": "",
+ "/deviceappmanagement/managedapppolicies": "",
+ "/deviceappmanagement/managedapppolicies/{id}": "",
+ "/deviceappmanagement/managedappregistrations": "",
+ "/deviceappmanagement/managedappregistrations/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies": "",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies": "",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}/operations": "",
+ "/deviceappmanagement/managedappregistrations/{id}/operations/{id}": "",
+ "/deviceappmanagement/managedappregistrations/getuseridswithflaggedappregistration": "",
+ "/deviceappmanagement/managedappstatuses": "",
+ "/deviceappmanagement/managedappstatuses/{id}": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}": "",
+ "/deviceappmanagement/policysets": "least=DelegatedWork,Application",
+ "/deviceappmanagement/policysets/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/policysets/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/policysets/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/policysets/{id}/items": "least=DelegatedWork,Application",
+ "/deviceappmanagement/policysets/{id}/items/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/sideloadingkeys": "",
+ "/deviceappmanagement/sideloadingkeys/{id}": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/apps": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/deploymentsummary": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens": "",
+ "/deviceappmanagement/vpptokens/{id}": "",
+ "/deviceappmanagement/vpptokens/getlicensesforapp": "",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionwipeactions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionwipeactions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagementapp": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagementapp/healthstates": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagementapp/healthstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement": "",
+ "/devicemanagement/advancedthreatprotectiononboardingstatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/advancedthreatprotectiononboardingstatesummary/advancedthreatprotectiononboardingdevicesettingstates": "least=DelegatedWork,Application",
+ "/devicemanagement/advancedthreatprotectiononboardingstatesummary/advancedthreatprotectiononboardingdevicesettingstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/androiddeviceownerenrollmentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/androiddeviceownerenrollmentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkappconfigurationschemas": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkappconfigurationschemas/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkenrollmentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkenrollmentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworksettings": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreappconfigurationschemas": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreappconfigurationschemas/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/applepushnotificationcertificate": "",
+ "/devicemanagement/assignmentfilters": "least=DelegatedWork,Application",
+ "/devicemanagement/assignmentfilters/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/assignmentfilters/{id}/getsupportedproperties": "least=DelegatedWork,Application",
+ "/devicemanagement/assignmentfilters/getplatformsupportedproperties": "least=DelegatedWork,Application",
+ "/devicemanagement/assignmentfilters/getstate": "least=DelegatedWork,Application",
+ "/devicemanagement/carttoclassassociations": "least=DelegatedWork,Application",
+ "/devicemanagement/carttoclassassociations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/categories": "least=DelegatedWork,Application",
+ "/devicemanagement/categories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/categories/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/categories/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/certificateconnectordetails": "least=DelegatedWork,Application",
+ "/devicemanagement/certificateconnectordetails/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/chromeosonboardingsettings": "least=DelegatedWork,Application",
+ "/devicemanagement/chromeosonboardingsettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/cloudpcconnectivityissues": "least=DelegatedWork,Application",
+ "/devicemanagement/cloudpcconnectivityissues/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/getfilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/getoemwarranty": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/appdiagnostics": "least=DelegatedWork,Application",
+ "/devicemanagement/comanagementeligibledevices": "least=DelegatedWork,Application",
+ "/devicemanagement/comanagementeligibledevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancecategories": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancecategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancemanagementpartners": "",
+ "/devicemanagement/compliancemanagementpartners/{id}": "",
+ "/devicemanagement/compliancepolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/scheduledactionsforrule": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancesettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/conditionalaccesssettings": "",
+ "/devicemanagement/configmanagercollections": "least=DelegatedWork,Application",
+ "/devicemanagement/configmanagercollections/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configmanagercollections/getpolicysummary": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationcategories": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationcategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/settings/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/settings/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}/settingtemplates": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationsettings": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationsettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/datasharingconsents": "",
+ "/devicemanagement/datasharingconsents/{id}": "least=DelegatedWork",
+ "/devicemanagement/detectedapps": "",
+ "/devicemanagement/detectedapps/{id}": "",
+ "/devicemanagement/devicecategories": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/getdevicesscheduledtoretire": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicydevicestatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicysettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicysettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationconflictsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationconflictsummary/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationdevicestatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationrestrictedappsviolations": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationrestrictedappsviolations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/getomasettingplaintextvalue": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/getomasettingplaintextvalue": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/microsoft.graph.androidforworkpkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/microsoft.graph.androidforworkpkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/microsoft.graph.androidforworkscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/microsoft.graph.androidforworkscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidcertificateprofilebase/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownercertificateprofilebase/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerenterprisewificonfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerpkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownervpnconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androideasemailprofileconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androideasemailprofileconfiguration/smimesigningcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidenterprisewificonfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkeasemailprofilebase/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkenterprisewificonfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkvpnconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidpkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidpkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidvpnconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilecertificateprofilebase/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofileeasemailprofilebase/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofileenterprisewificonfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofileenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilepkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilepkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilescepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilescepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilevpnconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownercertificateprofilebase/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerenterprisewificonfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerpkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosdevicefeaturesconfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosdevicefeaturesconfiguration/singlesignonextensionpkinitcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.ioseasemailprofileconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.ioseasemailprofileconfiguration/smimeencryptioncertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.ioseasemailprofileconfiguration/smimesigningcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosenterprisewificonfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosenterprisewificonfiguration/rootcertificatesforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iospkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iospkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosvpnconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosdevicefeaturesconfiguration/singlesignonextensionpkinitcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosenterprisewificonfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosenterprisewificonfiguration/rootcertificatesforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosvpnconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macospkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macospkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosscepcertificateprofile/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windows10generalconfiguration/privacyaccesscontrols": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windows10generalconfiguration/privacyaccesscontrols/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windows10vpnconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsdomainjoinconfiguration/networkaccessconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsdomainjoinconfiguration/networkaccessconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/getomasettingplaintextvalue": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/microsoft.graph.windowsphone81scepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/microsoft.graph.windowsphone81scepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/microsoft.graph.windowsphone81scepcertificateprofile/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows10importedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows10importedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows10pkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows10pkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows81scepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows81scepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows81scepcertificateprofile/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windowsphone81importedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windowsphone81importedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificateforclientvalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/identitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/rootcertificateforclientvalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/rootcertificatesforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/rootcertificatesforservervalidation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/secondaryidentitycertificateforclientauthentication": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/secondaryrootcertificateforclientvalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationsallmanageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationsallmanageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationuserstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations": "",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}": "",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assignments": "",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/getremediationhistory": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/areglobalscriptsavailable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/getremediationsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementpartners": "",
+ "/devicemanagement/devicemanagementpartners/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/getfilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/getoemwarranty": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/appdiagnostics": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/getfilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/getoemwarranty": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/appdiagnostics": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/userrunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/userrunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/domainjoinconnectors": "least=DelegatedWork,Application",
+ "/devicemanagement/domainjoinconnectors/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}/devicestates": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}/devicestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeconnectors": "",
+ "/devicemanagement/exchangeconnectors/{id}": "",
+ "/devicemanagement/exchangeonpremisespolicies/{id}": "",
+ "/devicemanagement/exchangeonpremisespolicy": "",
+ "/devicemanagement/exchangeonpremisespolicy/conditionalaccesssettings": "",
+ "/devicemanagement/getallowedremoteassistanceactions": "",
+ "/devicemanagement/getassignedroledetails": "least=DelegatedWork,Application",
+ "/devicemanagement/getcomanageddevicessummary": "least=DelegatedWork,Application",
+ "/devicemanagement/getcomanagementeligibledevicessummary": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicycategories": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicycategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/definition": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/definitionvalue": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/children": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/children/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitionfile": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitions": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/parent": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/definitions": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/definitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/microsoft.graph.grouppolicyuploadeddefinitionfile/grouppolicyoperations": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/microsoft.graph.grouppolicyuploadeddefinitionfile/grouppolicyoperations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/nextversiondefinition": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/presentations": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/presentations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/previousversiondefinition": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicydefinitionfiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicydefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicydefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}/grouppolicysettingmappings": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}/grouppolicysettingmappings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}/unsupportedgrouppolicyextensions": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}/unsupportedgrouppolicyextensions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyobjectfiles": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyobjectfiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyuploadeddefinitionfiles": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyuploadeddefinitionfiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/userrunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/userrunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwarepasswordinfo": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwarepasswordinfo/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/compare": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicestates": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicestatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/getcustomizedsettings": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/userstates": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/userstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/userstatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/iosupdatestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/iosupdatestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}/updatestatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}/updatestatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddeviceencryptionstates": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddeviceencryptionstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddeviceoverview": "",
+ "/devicemanagement/manageddevices": "",
+ "/devicemanagement/manageddevices/{id}": "",
+ "/devicemanagement/manageddevices/{id}/getfilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/getoemwarranty": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/appdiagnostics": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}/getmanagementconditionstatementexpressionstring": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}/managementconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}/managementconditions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}/managementconditions/getmanagementconditionsforplatform": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/getmanagementconditionstatementsforplatform": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/getmanagementconditionsforplatform": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditionstatements": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditionstatements/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditionstatements/{id}/getmanagementconditionstatementexpressionstring": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditionstatements/getmanagementconditionstatementsforplatform": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelhealththresholds": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelhealththresholds/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelserverlogcollectionresponses": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelserverlogcollectionresponses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelconfiguration": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests": "",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}": "",
+ "/devicemanagement/mobilethreatdefenseconnectors": "",
+ "/devicemanagement/mobilethreatdefenseconnectors/{id}": "",
+ "/devicemanagement/ndesconnectors": "least=DelegatedWork,Application",
+ "/devicemanagement/ndesconnectors/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/oemwarrantyinformationonboarding": "least=DelegatedWork,Application",
+ "/devicemanagement/oemwarrantyinformationonboarding/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalpolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalpolicies/getapprovableoperations": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalpolicies/getoperationsallowedapproval": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalpolicies/getoperationsrequiringapproval": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests/getmyrequestbyid": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests/getmyrequests": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteactionaudits": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteactionaudits/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancepartners": "",
+ "/devicemanagement/remoteassistancepartners/{id}": "",
+ "/devicemanagement/remoteassistancesettings": "",
+ "/devicemanagement/reports": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/cachedreportconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/cachedreportconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/exportjobs": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/exportjobs/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/reportschedules": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/reportschedules/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceoperations": "",
+ "/devicemanagement/resourceoperations/{id}": "",
+ "/devicemanagement/resourceoperations/{id}/getscopesforuser": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablepolicysettings": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablepolicysettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablesettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roleassignments": "",
+ "/devicemanagement/roleassignments/{id}": "",
+ "/devicemanagement/roledefinitions": "",
+ "/devicemanagement/roledefinitions/{id}": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/hascustomrolescopetag": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition": "",
+ "/devicemanagement/rolescopetags": "least=DelegatedWork,Application",
+ "/devicemanagement/rolescopetags/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/rolescopetags/hascustomrolescopetag": "least=DelegatedWork,Application",
+ "/devicemanagement/scopedforresource": "least=DelegatedWork,Application",
+ "/devicemanagement/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/softwareupdatestatussummary": "least=DelegatedWork,Application",
+ "/devicemanagement/templates": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}/recommendedsettings": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}/recommendedsettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/compare": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/categorydevicestatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/categorydevicestatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/devicestates": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/devicestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/devicestatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/migratableto": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/migratableto/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/migratableto/{id}/compare": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templatesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/templatesettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/tenantattachrbac": "least=DelegatedWork,Application",
+ "/devicemanagement/tenantattachrbac/getstate": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomaly": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomaly/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomalydevice": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomalydevice/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformance": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformance": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthosversionperformance": "",
+ "/devicemanagement/userexperienceanalyticsapphealthosversionperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthoverview": "",
+ "/devicemanagement/userexperienceanalyticsbaselines": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/apphealthmetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/batteryhealthmetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/bestpracticesmetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/rebootanalyticsmetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/resourceperformancemetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/workfromanywheremetrics": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthappimpact": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthappimpact/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthcapacitydetails": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthosperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthosperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthruntimedetails": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticscategories/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicemetrichistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicemetrichistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance": "",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance/summarizedeviceperformancedevices": "",
+ "/devicemanagement/userexperienceanalyticsdevicescope": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescopes": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescopes/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescores": "",
+ "/devicemanagement/userexperienceanalyticsdevicescores/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartuphistory": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartuphistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocesses": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocesses/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocessperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocessperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicetimelineevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsimpactingprocess": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsimpactingprocess/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmetrichistory": "",
+ "/devicemanagement/userexperienceanalyticsmetrichistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticsmetrichistory/{id}/userexperienceanalyticsmetric": "",
+ "/devicemanagement/userexperienceanalyticsmodelscores": "",
+ "/devicemanagement/userexperienceanalyticsmodelscores/{id}": "",
+ "/devicemanagement/userexperienceanalyticsnotautopilotreadydevice": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsnotautopilotreadydevice/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsoverview": "",
+ "/devicemanagement/userexperienceanalyticsregressionsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsregressionsummary/summarizedeviceregressionperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsremoteconnection": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsremoteconnection/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsresourceperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsresourceperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsscorehistory": "",
+ "/devicemanagement/userexperienceanalyticsscorehistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticssummarizeddevicescopes": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywherehardwarereadinessmetric": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices/{id}": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance/{id}": "",
+ "/devicemanagement/userpfxcertificates": "least=DelegatedWork,Application",
+ "/devicemanagement/userpfxcertificates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/driverinventories": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/driverinventories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsfeatureupdateprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsfeatureupdateprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsfeatureupdateprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsfeatureupdateprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation": "",
+ "/devicemanagement/windowsmalwareinformation/{id}": "",
+ "/devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates": "",
+ "/devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}": "",
+ "/devicemanagement/windowsqualityupdateprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsqualityupdateprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsqualityupdateprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsqualityupdateprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsupdatecatalogitems": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsupdatecatalogitems/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaartifacts": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaartifacts/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaconnector": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotadeployments": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotadeployments/{id}": "least=DelegatedWork,Application",
+ "/extendremotehelpsessionresponse": "",
+ "/extendremotehelpsessionresponse/{id}": "",
+ "/officeconfiguration/clientconfigurations": "least=DelegatedWork,Application",
+ "/officeconfiguration/clientconfigurations/{id}": "least=DelegatedWork,Application",
+ "/onpremencryptedpayloads": "least=DelegatedWork,Application",
+ "/onpremencryptedpayloads/{id}": "least=DelegatedWork,Application",
+ "/organization": "",
+ "/organization/{id}": "",
+ "/pfxrecryptionrequests": "least=DelegatedWork,Application",
+ "/pfxrecryptionrequests/{id}": "least=DelegatedWork,Application",
+ "/pfxusercertificates": "least=DelegatedWork,Application",
+ "/pfxusercertificates/{id}": "least=DelegatedWork,Application",
+ "/remotehelpsessionretrieveresponse": "",
+ "/remotehelpsessionretrieveresponse/{id}": "",
+ "/reports": "least=DelegatedWork,Application",
+ "/reports/deviceconfigurationdeviceactivity": "least=DelegatedWork,Application",
+ "/reports/deviceconfigurationuseractivity": "least=DelegatedWork,Application",
+ "/requestremotehelpsessionaccessresponse": "",
+ "/requestremotehelpsessionaccessresponse/{id}": "",
+ "/rolemanagement": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement": "least=DelegatedWork,Application",
+ "/users": "",
+ "/users/{id}": "",
+ "/users/{id}/exportdeviceandappmanagementdata": "",
+ "/users/{id}/ismanagedappuserblocked": "least=DelegatedWork,Application",
+ "/users/getmanagedappblockedusers": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/deviceappmanagement/policysets/getpolicysets": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagementapp/setasmanagedinstaller": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings/addapps": "least=DelegatedWork,Application",
+ "/devicemanagement/assignmentfilters/enable": "least=DelegatedWork,Application",
+ "/devicemanagement/certificateconnectordetails/{id}/gethealthmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/certificateconnectordetails/{id}/gethealthmetrictimeseries": "least=DelegatedWork,Application",
+ "/devicemanagement/chromeosonboardingsettings/connect": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/activatedeviceesim": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/deprovision": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/disable": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/enrollnowaction": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/initiatemobiledevicemanagementkeyrecovery": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/initiateondemandproactiveremediation": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/reenable": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/rotatelocaladminpassword": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/downloadappdiagnostics": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/executeaction": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/movedevicestoou": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/setscheduledactions": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/reorder": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/getnoncompliantdevicestoretire": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/activatedeviceesim": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/deprovision": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/disable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/enrollnowaction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/initiatemobiledevicemanagementkeyrecovery": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/initiateondemandproactiveremediation": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/reenable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/removedevicefirmwareconfigurationinterfacemanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rotatelocaladminpassword": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/createenrollmentnotificationconfiguration": "",
+ "/devicemanagement/devicehealthscripts/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/activatedeviceesim": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/deprovision": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/disable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/enrollnowaction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/initiatemobiledevicemanagementkeyrecovery": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/initiateondemandproactiveremediation": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/reenable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/removedevicefirmwareconfigurationinterfacemanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rotatelocaladminpassword": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/getglobalscripthighestavailableversion": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/updateglobalscript": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/enableglobalscripts": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementpartners/{id}/terminate": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/activatedeviceesim": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/deprovision": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/activatedeviceesim": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/deprovision": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/disable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/enrollnowaction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/initiatemobiledevicemanagementkeyrecovery": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/initiateondemandproactiveremediation": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/reenable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rotatelocaladminpassword": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/downloadappdiagnostics": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/executeaction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/movedevicestoou": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/disable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/enrollnowaction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/initiatemobiledevicemanagementkeyrecovery": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/initiateondemandproactiveremediation": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}/createdownloadurl": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/reenable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/removedevicefirmwareconfigurationinterfacemanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rotatelocaladminpassword": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/activatedeviceesim": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/deprovision": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/disable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/enrollnowaction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/initiatemobiledevicemanagementkeyrecovery": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/initiateondemandproactiveremediation": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/reenable": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rotatelocaladminpassword": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/downloadappdiagnostics": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/executeaction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/movedevicestoou": "least=DelegatedWork,Application",
+ "/devicemanagement/enableandroiddeviceadministratorenrollment": "least=DelegatedWork,Application",
+ "/devicemanagement/evaluateassignmentfilter": "least=DelegatedWork,Application",
+ "/devicemanagement/getassignmentfiltersstatusdetails": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}/updatescopetags": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/assignhardwareconfiguration": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/activatedeviceesim": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/deprovision": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/disable": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/enrollnowaction": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/initiatemobiledevicemanagementkeyrecovery": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/initiateondemandproactiveremediation": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/reenable": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/rotatelocaladminpassword": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/downloadappdiagnostics": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/executeaction": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/movedevicestoou": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelserverlogcollectionresponses/{id}/createdownloadurl": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelserverlogcollectionresponses/{id}/generatedownloadurl": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/createserverlogcollectionrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/generateserverlogcollectionrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/gethealthmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/gethealthmetrictimeseries": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/requestupgrade": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}/createdownloadurl": "",
+ "/devicemanagement/oemwarrantyinformationonboarding/{id}/disable": "least=DelegatedWork,Application",
+ "/devicemanagement/oemwarrantyinformationonboarding/{id}/enable": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests/{id}/approve": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests/{id}/cancelapproval": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests/{id}/reject": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests/cancelmyrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests/getrequeststatus": "least=DelegatedWork,Application",
+ "/devicemanagement/reportremoteassistance": "",
+ "/devicemanagement/reportremotehelpsessionstarttime": "",
+ "/devicemanagement/reports/getcachedreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancesummaryreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getcompliancesettingnoncompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancesummaryreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getconfigurationsettingnoncompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicemanagementintentpersettingcontributingprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicemanagementintentsettingsreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicenoncompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicepoliciescompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicepolicysettingscompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicesstatusbypolicyplatformcompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicesstatusbysettingreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicestatusbycompliacepolicyreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicestatusbycompliancepolicysettingreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicestatussummarybycompliacepolicyreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdevicestatussummarybycompliancepolicysettingsreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getdeviceswithoutcompliancepolicyreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getgrouppolicysettingsdevicesettingsreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/gethistoricalreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getmobileapplicationmanagementappconfigurationreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getmobileapplicationmanagementappregistrationsummaryreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getnoncompliantdevicesandsettingsreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getpolicynoncompliancemetadata": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getpolicynoncompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getpolicynoncompliancesummaryreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getremoteassistancemonitoractivesessionsreport": "",
+ "/devicemanagement/reports/getremoteassistancemonitoravgsessiontimereport": "",
+ "/devicemanagement/reports/getremoteassistancemonitortotalsessionsreport": "",
+ "/devicemanagement/reports/getremoteassistancesessionsreport": "",
+ "/devicemanagement/reports/getreportfilters": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getsettingcomplianceaggreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getsettingnoncompliancereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getzebrafotadeploymentreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablepolicysettings/{id}/clone": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}/reorder": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/getrolescopetagsbyid": "least=DelegatedWork,Application",
+ "/devicemanagement/rolescopetags/getrolescopetagsbyid": "least=DelegatedWork,Application",
+ "/devicemanagement/tenantattachrbac/enable": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescope/triggerdevicescopeaction": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescopes/{id}/triggerdevicescopeaction": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/executeaction": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/syncinventory": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaconnector/approvefotaapps": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaconnector/connect": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaconnector/hasactivedeployments": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotadeployments/{id}/cancel": "least=DelegatedWork,Application",
+ "/users/{id}/wipemanagedappregistrationsbyazureaddeviceid": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/devicecompliancescripts/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicehealthscriptstates": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement/devicecompliancescripts/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicehealthscriptstates/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement/devicehealthscripts/{id}/runsummary": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/aggregatedpolicycompliances": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/devicecompliancepolicysettingstatesummaries/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementConfiguration.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Microsoft Intune Device Configuration and Policies",
+ "adminDescription": "Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.",
+ "userDisplayName": "Read and write Microsoft Intune Device Configuration and Policies",
+ "userDescription": "Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Microsoft Intune device configuration and policies",
+ "adminDescription": "Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/createremotehelpsessionresponse": "",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/apps": "",
+ "/deviceappmanagement/defaultmanagedappprotections": "",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/apps": "",
+ "/deviceappmanagement/deviceappmanagementtasks": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/apps": "",
+ "/deviceappmanagement/managedappregistrations": "",
+ "/deviceappmanagement/managedappregistrations/{id}/operations": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles": "",
+ "/deviceappmanagement/policysets": "least=DelegatedWork,Application",
+ "/deviceappmanagement/policysets/{id}/assignments": "least=DelegatedWork,Application",
+ "/deviceappmanagement/policysets/{id}/items": "least=DelegatedWork,Application",
+ "/deviceappmanagement/sideloadingkeys": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/apps": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens": "",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles": "",
+ "/deviceappmanagement/windowsinformationprotectionwipeactions": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/apps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagementapp/healthstates": "least=DelegatedWork,Application",
+ "/devicemanagement/advancedthreatprotectiononboardingstatesummary/advancedthreatprotectiononboardingdevicesettingstates": "least=DelegatedWork,Application",
+ "/devicemanagement/androiddeviceownerenrollmentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkappconfigurationschemas": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkenrollmentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreappconfigurationschemas": "least=DelegatedWork,Application",
+ "/devicemanagement/assignmentfilters": "least=DelegatedWork,Application",
+ "/devicemanagement/carttoclassassociations": "least=DelegatedWork,Application",
+ "/devicemanagement/categories": "least=DelegatedWork,Application",
+ "/devicemanagement/categories/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/certificateconnectordetails": "least=DelegatedWork,Application",
+ "/devicemanagement/chromeosonboardingsettings": "least=DelegatedWork,Application",
+ "/devicemanagement/cloudpcconnectivityissues": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/comanagementeligibledevices": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancecategories": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancemanagementpartners": "",
+ "/devicemanagement/compliancepolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/scheduledactionsforrule": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/configmanagercollections": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationcategories": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/settings/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}/settingtemplates": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationsettings": "least=DelegatedWork,Application",
+ "/devicemanagement/datasharingconsents": "",
+ "/devicemanagement/detectedapps": "",
+ "/devicemanagement/devicecategories": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicysettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/assignments": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationconflictsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationrestrictedappsviolations": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/microsoft.graph.androidforworkpkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/microsoft.graph.androidforworkscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerpkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidpkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilepkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilescepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerpkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosenterprisewificonfiguration/rootcertificatesforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iospkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosenterprisewificonfiguration/rootcertificatesforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosimportedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macospkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosscepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windows10generalconfiguration/privacyaccesscontrols": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsdomainjoinconfiguration/networkaccessconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/microsoft.graph.windowsphone81scepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows10importedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows10pkcscertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows81scepcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windowsphone81importedpfxcertificateprofile/manageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/rootcertificatesforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/userstatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationsallmanageddevicecertificatestates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations": "",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assignments": "",
+ "/devicemanagement/devicehealthscripts": "",
+ "/devicemanagement/devicehealthscripts/{id}/assignments": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates": "",
+ "/devicemanagement/devicemanagementpartners": "",
+ "/devicemanagement/devicemanagementscripts/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicehealthscriptstates": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/userrunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/domainjoinconnectors": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}/devicestates": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeconnectors": "",
+ "/devicemanagement/grouppolicycategories": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/children": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitions": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/definitions": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/microsoft.graph.grouppolicyuploadeddefinitionfile/grouppolicyoperations": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/presentations": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicydefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}/grouppolicysettingmappings": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}/unsupportedgrouppolicyextensions": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyobjectfiles": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyuploadeddefinitionfiles": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/devicerunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/userrunstates": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwarepasswordinfo": "least=DelegatedWork,Application",
+ "/devicemanagement/intents": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicesettingstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicestates": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/userstates": "least=DelegatedWork,Application",
+ "/devicemanagement/iosupdatestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}/updatestatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddeviceencryptionstates": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices": "",
+ "/devicemanagement/managementconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}/managementconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditionstatements": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelhealththresholds": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelserverlogcollectionresponses": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests": "",
+ "/devicemanagement/mobilethreatdefenseconnectors": "",
+ "/devicemanagement/ndesconnectors": "least=DelegatedWork,Application",
+ "/devicemanagement/oemwarrantyinformationonboarding": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteactionaudits": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancepartners": "",
+ "/devicemanagement/reports/cachedreportconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/exportjobs": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/reportschedules": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceoperations": "",
+ "/devicemanagement/reusablepolicysettings": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/roleassignments": "",
+ "/devicemanagement/roledefinitions": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/rolescopetags": "least=DelegatedWork,Application",
+ "/devicemanagement/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/templates": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}/recommendedsettings": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}/settingdefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/categorydevicestatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/devicestates": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/migratableto": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/settings": "least=DelegatedWork,Application",
+ "/devicemanagement/templatesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomaly": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomalydevice": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthosversionperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthappimpact": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthosperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicemetrichistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescopes": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescores": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartuphistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocesses": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocessperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsimpactingprocess": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmetrichistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmodelscores": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsnotautopilotreadydevice": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsremoteconnection": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsresourceperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsscorehistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userpfxcertificates": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/driverinventories": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsfeatureupdateprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsfeatureupdateprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation": "",
+ "/devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates": "",
+ "/devicemanagement/windowsqualityupdateprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsqualityupdateprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsupdatecatalogitems": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaartifacts": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotadeployments": "least=DelegatedWork,Application",
+ "/extendremotehelpsessionresponse": "",
+ "/officeconfiguration/clientconfigurations": "least=DelegatedWork,Application",
+ "/onpremencryptedpayloads": "least=DelegatedWork,Application",
+ "/pfxrecryptionrequests": "least=DelegatedWork,Application",
+ "/pfxusercertificates": "least=DelegatedWork,Application",
+ "/remotehelpsessionretrieveresponse": "",
+ "/requestremotehelpsessionaccessresponse": "",
+ "/users": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/createremotehelpsessionresponse/{id}": "",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/apps/{id}": "",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/assignments/{id}": "",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}": "",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/apps/{id}": "",
+ "/deviceappmanagement/deviceappmanagementtasks/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/apps/{id}": "",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/assignments/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}/operations/{id}": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments/{id}": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}": "",
+ "/deviceappmanagement/policysets/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/policysets/{id}/items/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/sideloadingkeys/{id}": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/apps/{id}": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments/{id}": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/settings/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/exemptapplockerfiles/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/protectedapplockerfiles/{id}": "",
+ "/deviceappmanagement/windowsinformationprotectionwipeactions/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/apps/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagementapp/healthstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/advancedthreatprotectiononboardingstatesummary/advancedthreatprotectiononboardingdevicesettingstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/androiddeviceownerenrollmentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkappconfigurationschemas/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkenrollmentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreappconfigurationschemas/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/assignmentfilters/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/carttoclassassociations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/categories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/categories/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/certificateconnectordetails/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/chromeosonboardingsettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/cloudpcconnectivityissues/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/comanagementeligibledevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancecategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancemanagementpartners/{id}": "",
+ "/devicemanagement/compliancepolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancesettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configmanagercollections/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationcategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/settings/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicytemplates/{id}/settingtemplates/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationsettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/datasharingconsents/{id}": "",
+ "/devicemanagement/detectedapps/{id}": "",
+ "/devicemanagement/devicecategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/scheduledactionsforrule/{id}/scheduledactionconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicysettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicysettingstatesummaries/{id}/devicecompliancesettingstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/assignments/{id}": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationconflictsummary/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationrestrictedappsviolations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/microsoft.graph.androidforworkpkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/microsoft.graph.androidforworkscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidcertificateprofilebase/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownercertificateprofilebase/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidpkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilecertificateprofilebase/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofileenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilepkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilescepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownercertificateprofilebase/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerpkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iospkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosenterprisewificonfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosenterprisewificonfiguration/rootcertificatesforservervalidation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosimportedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macospkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosscepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/microsoft.graph.macosscepcertificateprofile/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windows10generalconfiguration/privacyaccesscontrols/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsdomainjoinconfiguration/networkaccessconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/microsoft.graph.windowsphone81scepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/microsoft.graph.windowsphone81scepcertificateprofile/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows10importedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows10pkcscertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows81scepcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windows81scepcertificateprofile/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/microsoft.graph.windowsphone81importedpfxcertificateprofile/manageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificateforclientvalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/rootcertificateforclientvalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/rootcertificatesforservervalidation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/secondaryrootcertificateforclientvalidation": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/userstatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationsallmanageddevicecertificatestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}": "",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}": "",
+ "/devicemanagement/devicehealthscripts/{id}": "",
+ "/devicemanagement/devicehealthscripts/{id}/assignments/{id}": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementpartners/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/devicehealthscriptstates/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/userrunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/domainjoinconnectors/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}/devicestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeconnectors/{id}": "",
+ "/devicemanagement/grouppolicycategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/definition": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/definitionvalue": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/children/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/parent": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/definitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile/microsoft.graph.grouppolicyuploadeddefinitionfile/grouppolicyoperations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/nextversiondefinition": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/presentations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/previousversiondefinition": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicydefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}/grouppolicysettingmappings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/{id}/unsupportedgrouppolicyextensions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyobjectfiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyuploadeddefinitionfiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/devicerunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/userrunstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwarepasswordinfo/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/categories/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicesettingstatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/userstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/iosupdatestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/macossoftwareupdateaccountsummaries/{id}/categorysummaries/{id}/updatestatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddeviceencryptionstates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}": "",
+ "/devicemanagement/managementconditions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}/managementconditions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/managementconditionstatements/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelhealththresholds/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelserverlogcollectionresponses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelconfiguration": "least=DelegatedWork,Application",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}": "",
+ "/devicemanagement/mobilethreatdefenseconnectors/{id}": "",
+ "/devicemanagement/ndesconnectors/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/oemwarrantyinformationonboarding/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalpolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalrequests/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteactionaudits/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancepartners/{id}": "",
+ "/devicemanagement/reports/cachedreportconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/exportjobs/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/reportschedules/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceoperations/{id}": "",
+ "/devicemanagement/reusablepolicysettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablesettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roleassignments/{id}": "",
+ "/devicemanagement/roledefinitions/{id}": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition": "",
+ "/devicemanagement/rolescopetags/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}/recommendedsettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/categories/{id}/settingdefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/categorydevicestatesummaries/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/devicestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/migratableto/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/templatesettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomaly/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomalydevice/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthosversionperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthappimpact/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthosperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicemetrichistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescope": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescopes/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescores/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartuphistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocesses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocessperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsimpactingprocess/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmetrichistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmetrichistory/{id}/userexperienceanalyticsmetric": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmodelscores/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsnotautopilotreadydevice/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsremoteconnection/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsresourceperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsscorehistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userpfxcertificates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/driverinventories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsfeatureupdateprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsfeatureupdateprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation/{id}": "",
+ "/devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}": "",
+ "/devicemanagement/windowsqualityupdateprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsqualityupdateprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsupdatecatalogitems/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaartifacts/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotadeployments/{id}": "least=DelegatedWork,Application",
+ "/extendremotehelpsessionresponse/{id}": "",
+ "/officeconfiguration/clientconfigurations/{id}": "least=DelegatedWork,Application",
+ "/onpremencryptedpayloads/{id}": "least=DelegatedWork,Application",
+ "/pfxrecryptionrequests/{id}": "least=DelegatedWork,Application",
+ "/pfxusercertificates/{id}": "least=DelegatedWork,Application",
+ "/remotehelpsessionretrieveresponse/{id}": "",
+ "/requestremotehelpsessionaccessresponse/{id}": "",
+ "/users/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/deviceappmanagement": "",
+ "/deviceappmanagement/androidmanagedappprotections/{id}/deploymentsummary": "",
+ "/deviceappmanagement/defaultmanagedappprotections/{id}/deploymentsummary": "",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/deploymentsummary": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/deploymentsummary": "",
+ "/deviceappmanagement/windowsmanagementapp": "least=DelegatedWork,Application",
+ "/devicemanagement": "",
+ "/devicemanagement/advancedthreatprotectiononboardingstatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworksettings": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/applepushnotificationcertificate": "",
+ "/devicemanagement/conditionalaccesssettings": "",
+ "/devicemanagement/devicecompliancepolicies/{id}/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicydevicestatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationdevicestatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/rootcertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosscepcertificateprofile/rootcertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/rootcertificateforservervalidation/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/rootcertificatesforservervalidation/{id}/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/devicestatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/rootcertificate/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/userstatusoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurationuserstatesummaries": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/runsummary": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeonpremisespolicies/{id}": "",
+ "/devicemanagement/exchangeonpremisespolicy": "",
+ "/devicemanagement/exchangeonpremisespolicy/conditionalaccesssettings": "",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/category/definitionfile": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/definitionvalues/{id}/presentationvalues/{id}/presentation/definition/definitionfile": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicydefinitionfiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/runsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/devicestatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/userstatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddeviceoverview": "",
+ "/devicemanagement/remoteassistancesettings": "",
+ "/devicemanagement/reports": "least=DelegatedWork,Application",
+ "/devicemanagement/softwareupdatestatussummary": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/microsoft.graph.securitybaselinetemplate/devicestatesummary": "least=DelegatedWork,Application",
+ "/devicemanagement/tenantattachrbac": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/apphealthmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/batteryhealthmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/bestpracticesmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/rebootanalyticsmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/resourceperformancemetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/workfromanywheremetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthcapacitydetails": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthruntimedetails": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticscategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsregressionsummary": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywherehardwarereadinessmetric": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaconnector": "least=DelegatedWork,Application",
+ "/organization/{id}": "",
+ "/reports": "least=DelegatedWork,Application",
+ "/rolemanagement": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/deviceappmanagement/androidmanagedappprotections/{id}/assignments": "",
+ "/deviceappmanagement/iosmanagedappprotections/{id}/assignments": "",
+ "/deviceappmanagement/managedapppolicies": "",
+ "/deviceappmanagement/managedapppolicies/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies": "",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}": "",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies": "",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}": "",
+ "/deviceappmanagement/managedappregistrations/getuseridswithflaggedappregistration": "",
+ "/deviceappmanagement/managedappstatuses": "",
+ "/deviceappmanagement/managedappstatuses/{id}": "",
+ "/deviceappmanagement/mdmwindowsinformationprotectionpolicies/{id}/assignments": "",
+ "/deviceappmanagement/targetedmanagedappconfigurations/{id}/assignments": "",
+ "/deviceappmanagement/vpptokens/getlicensesforapp": "",
+ "/deviceappmanagement/windowsinformationprotectionpolicies/{id}/assignments": "",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assignments": "",
+ "/devicemanagement/applepushnotificationcertificate/downloadapplepushnotificationcertificatesigningrequest": "",
+ "/devicemanagement/assignmentfilters/{id}/getsupportedproperties": "",
+ "/devicemanagement/assignmentfilters/getplatformsupportedproperties": "",
+ "/devicemanagement/assignmentfilters/getstate": "",
+ "/devicemanagement/comanageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/comanageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/configmanagercollections/getpolicysummary": "",
+ "/devicemanagement/devicecompliancepolicies/getdevicesscheduledtoretire": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "",
+ "/devicemanagement/deviceconfigurations/{id}/getomasettingplaintextvalue": "",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/getomasettingplaintextvalue": "",
+ "/devicemanagement/deviceconfigurations/{id}/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownerenterprisewificonfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androiddeviceownervpnconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androideasemailprofileconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androideasemailprofileconfiguration/smimesigningcertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidenterprisewificonfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkeasemailprofilebase/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkenterprisewificonfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidforworkvpnconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidvpnconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofileeasemailprofilebase/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofileenterprisewificonfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.androidworkprofilevpnconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.aospdeviceownerenterprisewificonfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosdevicefeaturesconfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosdevicefeaturesconfiguration/singlesignonextensionpkinitcertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.ioseasemailprofileconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.ioseasemailprofileconfiguration/smimeencryptioncertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.ioseasemailprofileconfiguration/smimesigningcertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosenterprisewificonfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.iosvpnconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosdevicefeaturesconfiguration/singlesignonextensionpkinitcertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosenterprisewificonfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macosvpnconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.macoswirednetworkconfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windows10vpnconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/getomasettingplaintextvalue": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsphone81vpnconfiguration/identitycertificate": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswifienterpriseeapconfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/identitycertificateforclientauthentication": "",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowswirednetworkconfiguration/secondaryidentitycertificateforclientauthentication": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "",
+ "/devicemanagement/devicehealthscripts/{id}/getremediationhistory": "",
+ "/devicemanagement/devicehealthscripts/areglobalscriptsavailable": "",
+ "/devicemanagement/devicehealthscripts/getremediationsummary": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/getallowedremoteassistanceactions": "",
+ "/devicemanagement/getassignedroledetails": "",
+ "/devicemanagement/getcomanageddevicessummary": "",
+ "/devicemanagement/getcomanagementeligibledevicessummary": "",
+ "/devicemanagement/intents/{id}/compare": "",
+ "/devicemanagement/intents/{id}/getcustomizedsettings": "",
+ "/devicemanagement/manageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/manageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}/getmanagementconditionstatementexpressionstring": "",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/{id}/managementconditions/getmanagementconditionsforplatform": "",
+ "/devicemanagement/managementconditions/{id}/managementconditionstatements/getmanagementconditionstatementsforplatform": "",
+ "/devicemanagement/managementconditions/getmanagementconditionsforplatform": "",
+ "/devicemanagement/managementconditionstatements/{id}/getmanagementconditionstatementexpressionstring": "",
+ "/devicemanagement/managementconditionstatements/getmanagementconditionstatementsforplatform": "",
+ "/devicemanagement/operationapprovalpolicies/getapprovableoperations": "",
+ "/devicemanagement/operationapprovalpolicies/getoperationsallowedapproval": "",
+ "/devicemanagement/operationapprovalpolicies/getoperationsrequiringapproval": "",
+ "/devicemanagement/operationapprovalrequests/getmyrequestbyid": "",
+ "/devicemanagement/operationapprovalrequests/getmyrequests": "",
+ "/devicemanagement/resourceoperations/{id}/getscopesforuser": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/hascustomrolescopetag": "",
+ "/devicemanagement/rolescopetags/hascustomrolescopetag": "",
+ "/devicemanagement/scopedforresource": "",
+ "/devicemanagement/templates/{id}/compare": "",
+ "/devicemanagement/templates/{id}/migratableto/{id}/compare": "",
+ "/devicemanagement/tenantattachrbac/getstate": "",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance/summarizedeviceperformancedevices": "",
+ "/devicemanagement/userexperienceanalyticsdevicetimelineevents/{id}": "",
+ "/devicemanagement/userexperienceanalyticsregressionsummary/summarizedeviceregressionperformance": "",
+ "/devicemanagement/userexperienceanalyticsremoteconnection/summarizedeviceremoteconnection": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsresourceperformance/summarizedeviceresourceperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticssummarizeworkfromanywheredevices": "",
+ "/devicemanagement/verifywindowsenrollmentautodiscovery": "",
+ "/organization": "",
+ "/users/{id}/exportdeviceandappmanagementdata": "",
+ "/users/{id}/ismanagedappuserblocked": "",
+ "/users/getmanagedappblockedusers": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/deviceappmanagement/deviceappmanagementtasks/{id}/updatestatus": "least=DelegatedWork,Application",
+ "/deviceappmanagement/managedapppolicies/{id}/assign": "",
+ "/deviceappmanagement/managedapppolicies/{id}/targetapps": "",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}/assign": "",
+ "/deviceappmanagement/managedappregistrations/{id}/appliedpolicies/{id}/targetapps": "",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}/assign": "",
+ "/deviceappmanagement/managedappregistrations/{id}/intendedpolicies/{id}/targetapps": "",
+ "/deviceappmanagement/policysets/{id}/update": "least=DelegatedWork,Application",
+ "/deviceappmanagement/policysets/getpolicysets": "",
+ "/deviceappmanagement/syncmicrosoftstoreforbusinessapps": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens/{id}/revokelicenses": "",
+ "/deviceappmanagement/vpptokens/{id}/synclicenses": "",
+ "/deviceappmanagement/vpptokens/synclicensecounts": "",
+ "/deviceappmanagement/windowsinformationprotectiondeviceregistrations/{id}/wipe": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/assign": "least=DelegatedWork,Application",
+ "/deviceappmanagement/windowsmanagedappprotections/{id}/targetapps": "least=DelegatedWork,Application",
+ "/devicemanagement/androiddeviceownerenrollmentprofiles/{id}/createtoken": "least=DelegatedWork,Application",
+ "/devicemanagement/androiddeviceownerenrollmentprofiles/{id}/revoketoken": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkenrollmentprofiles/{id}/createtoken": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworkenrollmentprofiles/{id}/revoketoken": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworksettings/completesignup": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworksettings/requestsignupurl": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworksettings/syncapps": "least=DelegatedWork,Application",
+ "/devicemanagement/androidforworksettings/unbind": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings/approveapps": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings/completesignup": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings/creategoogleplaywebtoken": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings/createzerotouchwebtoken": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings/requestsignupurl": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings/setandroiddeviceownerfullymanagedenrollmentstate": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings/syncapps": "least=DelegatedWork,Application",
+ "/devicemanagement/androidmanagedstoreaccountenterprisesettings/unbind": "least=DelegatedWork,Application",
+ "/devicemanagement/applepushnotificationcertificate/generateapplepushnotificationcertificatesigningrequest": "",
+ "/devicemanagement/assignmentfilters/validatefilter": "least=DelegatedWork,Application",
+ "/devicemanagement/certificateconnectordetails/{id}/gethealthmetrics": "",
+ "/devicemanagement/certificateconnectordetails/{id}/gethealthmetrictimeseries": "",
+ "/devicemanagement/chromeosonboardingsettings/disconnect": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/createdevicelogcollectionrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/requestremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/rotatebitlockerkeys": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/sendcustomnotificationtocompanyportal": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/wipe": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancepolicies/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/configurationpolicies/{id}/createcopy": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/{id}/scheduleactionsforrules": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/getnoncompliantdevicestoretire": "",
+ "/devicemanagement/devicecompliancepolicies/setscheduledretirestate": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancepolicies/validatecompliancescript": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/createdevicelogcollectionrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/requestremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rotatebitlockerkeys": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/sendcustomnotificationtocompanyportal": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/wipe": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/extendfeatureupdatespause": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/extendqualityupdatespause": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/extendfeatureupdatespause": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/groupassignments/{id}/deviceconfiguration/extendqualityupdatespause": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/extendfeatureupdatespause": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceconfigurations/{id}/microsoft.graph.windowsdomainjoinconfiguration/networkaccessconfigurations/{id}/extendqualityupdatespause": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assign": "",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/setpriority": "",
+ "/devicemanagement/devicehealthscripts/{id}/assign": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/createdevicelogcollectionrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/requestremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rotatebitlockerkeys": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/sendcustomnotificationtocompanyportal": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/wipe": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/getglobalscripthighestavailableversion": "",
+ "/devicemanagement/devicehealthscripts/{id}/updateglobalscript": "",
+ "/devicemanagement/devicehealthscripts/enableglobalscripts": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/createdevicelogcollectionrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/createdevicelogcollectionrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/requestremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rotatebitlockerkeys": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/sendcustomnotificationtocompanyportal": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/wipe": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}/createdownloadurl": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/requestremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rotatebitlockerkeys": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/sendcustomnotificationtocompanyportal": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/createdevicelogcollectionrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/requestremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rotatebitlockerkeys": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/sendcustomnotificationtocompanyportal": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/wipe": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/wipe": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceshellscripts/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/embeddedsimactivationcodepools/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/enableandroiddeviceadministratorenrollment": "",
+ "/devicemanagement/exchangeconnectors/{id}/sync": "",
+ "/devicemanagement/getassignmentfiltersstatusdetails": "",
+ "/devicemanagement/grouppolicyconfigurations/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyconfigurations/{id}/updatedefinitionvalues": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicymigrationreports/createmigrationreport": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/addlanguagefiles": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/remove": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/removelanguagefiles": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/updatelanguagefiles": "least=DelegatedWork,Application",
+ "/devicemanagement/grouppolicyuploadeddefinitionfiles/{id}/uploadnewversion": "least=DelegatedWork,Application",
+ "/devicemanagement/hardwareconfigurations/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/createcopy": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/migratetotemplate": "least=DelegatedWork,Application",
+ "/devicemanagement/intents/{id}/updatesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/createdevicelogcollectionrequest": "",
+ "/devicemanagement/manageddevices/{id}/requestremoteassistance": "",
+ "/devicemanagement/manageddevices/{id}/rotatebitlockerkeys": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/sendcustomnotificationtocompanyportal": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/wipe": "",
+ "/devicemanagement/microsofttunnelserverlogcollectionresponses/{id}/createdownloadurl": "",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/gethealthmetrics": "",
+ "/devicemanagement/microsofttunnelsites/{id}/microsofttunnelservers/{id}/gethealthmetrictimeseries": "",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}/createdownloadurl": "",
+ "/devicemanagement/operationapprovalrequests/getrequeststatus": "",
+ "/devicemanagement/remoteassistancepartners/{id}/beginonboarding": "",
+ "/devicemanagement/remoteassistancepartners/{id}/disconnect": "",
+ "/devicemanagement/reports/getcachedreport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancereport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getcompliancesettingnoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getconfigurationsettingnoncompliancereport": "",
+ "/devicemanagement/reports/getdevicemanagementintentpersettingcontributingprofiles": "",
+ "/devicemanagement/reports/getdevicemanagementintentsettingsreport": "",
+ "/devicemanagement/reports/getdevicenoncompliancereport": "",
+ "/devicemanagement/reports/getdevicepoliciescompliancereport": "",
+ "/devicemanagement/reports/getdevicepolicysettingscompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbypolicyplatformcompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbysettingreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliancepolicysettingreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliancepolicysettingsreport": "",
+ "/devicemanagement/reports/getdeviceswithoutcompliancepolicyreport": "",
+ "/devicemanagement/reports/getgrouppolicysettingsdevicesettingsreport": "",
+ "/devicemanagement/reports/gethistoricalreport": "",
+ "/devicemanagement/reports/getmobileapplicationmanagementappconfigurationreport": "",
+ "/devicemanagement/reports/getmobileapplicationmanagementappregistrationsummaryreport": "",
+ "/devicemanagement/reports/getnoncompliantdevicesandsettingsreport": "",
+ "/devicemanagement/reports/getpolicynoncompliancemetadata": "",
+ "/devicemanagement/reports/getpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getremoteassistancemonitoractivesessionsreport": "",
+ "/devicemanagement/reports/getremoteassistancemonitoravgsessiontimereport": "",
+ "/devicemanagement/reports/getremoteassistancemonitortotalsessionsreport": "",
+ "/devicemanagement/reports/getremoteassistancesessionsreport": "",
+ "/devicemanagement/reports/getreportfilters": "",
+ "/devicemanagement/reports/getsettingcomplianceaggreport": "",
+ "/devicemanagement/reports/getsettingnoncompliancereport": "",
+ "/devicemanagement/reports/getzebrafotadeploymentreport": "",
+ "/devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/reusablepolicysettings/{id}/referencingconfigurationpolicies/{id}/createcopy": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/getrolescopetagsbyid": "",
+ "/devicemanagement/rolescopetags/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/rolescopetags/getrolescopetagsbyid": "",
+ "/devicemanagement/templates/{id}/createinstance": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/migratableto/{id}/createinstance": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/{id}/migratableto/importoffice365deviceconfigurationpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/templates/importoffice365deviceconfigurationpolicies": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsdriverupdateprofiles/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsfeatureupdateprofiles/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsqualityupdateprofiles/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/zebrafotaconnector/disconnect": "least=DelegatedWork,Application",
+ "/officeconfiguration/clientconfigurations/{id}/assign": "least=DelegatedWork,Application",
+ "/officeconfiguration/clientconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/officeconfiguration/clientconfigurations/microsoft.management.services.api.updatepriorities": "least=DelegatedWork,Application",
+ "/organization/{id}/setmobiledevicemanagementauthority": "",
+ "/users/{id}/unblockmanagedapps": "least=DelegatedWork,Application",
+ "/users/{id}/wipeandblockmanagedapps": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/deviceappmanagement/policysets/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/aggregatedpolicycompliances": "",
+ "/tenantrelationships/managedtenants/devicecompliancepolicysettingstatesummaries/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementManagedDevices.PrivilegedOperations.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Perform user-impacting remote actions on Microsoft Intune devices",
+ "adminDescription": "Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune.",
+ "userDisplayName": "Perform user-impacting remote actions on Microsoft Intune devices",
+ "userDescription": "Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Perform user-impacting remote actions on Microsoft Intune devices",
+ "adminDescription": "Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/comanageddevices/{id}/bypassactivationlock": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/cleanwindowsdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/deleteuserfromsharedappledevice": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/disablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/enablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/locatedevice": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/logoutsharedappledeviceactiveuser": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/playlostmodesound": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/rebootnow": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/recoverpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/remotelock": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/resetpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/retire": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/revokeapplevpplicenses": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/rotatefilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/setdevicename": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/shutdown": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/syncdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/triggerconfigurationmanageraction": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/updatewindowsdeviceaccount": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/windowsdefenderscan": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/windowsdefenderupdatesignatures": "least=DelegatedWork,Application",
+ "/devicemanagement/comanageddevices/{id}/wipe": "",
+ "/devicemanagement/comanageddevices/executeaction": "",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/bypassactivationlock": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/cleanwindowsdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/deleteuserfromsharedappledevice": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/disablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/locatedevice": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/logoutsharedappledeviceactiveuser": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/rebootnow": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/recoverpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/remotelock": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/resetpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/retire": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/shutdown": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/syncdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/updatewindowsdeviceaccount": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/bypassactivationlock": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/cleanwindowsdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/deleteuserfromsharedappledevice": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/disablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/locatedevice": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/logoutsharedappledeviceactiveuser": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/rebootnow": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/recoverpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/remotelock": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/resetpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/retire": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/shutdown": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/syncdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/updatewindowsdeviceaccount": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/windowsdefenderscan": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/windowsdefenderupdatesignatures": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/wipe": "",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/removealldevicesfrommanagement": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsdefenderscan": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsdefenderupdatesignatures": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/wipe": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/bypassactivationlock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/cleanwindowsdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/deleteuserfromsharedappledevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/disablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/enablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/locatedevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/logoutsharedappledeviceactiveuser": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/playlostmodesound": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rebootnow": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/recoverpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/remotelock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/resetpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/retire": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/revokeapplevpplicenses": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rotatefilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/setdevicename": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/shutdown": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/syncdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/triggerconfigurationmanageraction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/updatewindowsdeviceaccount": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderscan": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderupdatesignatures": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/wipe": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/bypassactivationlock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/cleanwindowsdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/deleteuserfromsharedappledevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/disablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/enablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/locatedevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/logoutsharedappledeviceactiveuser": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/playlostmodesound": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rebootnow": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/recoverpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/remotelock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/resetpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/retire": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/revokeapplevpplicenses": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rotatefilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/setdevicename": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/shutdown": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/syncdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/triggerconfigurationmanageraction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/updatewindowsdeviceaccount": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderscan": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderupdatesignatures": "least=DelegatedWork,Application",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/wipe": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/bypassactivationlock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/cleanwindowsdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/deleteuserfromsharedappledevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/bypassactivationlock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/cleanwindowsdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/deleteuserfromsharedappledevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/disablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/enablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/locatedevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/logoutsharedappledeviceactiveuser": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/playlostmodesound": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rebootnow": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/recoverpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/remotelock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/resetpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/retire": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/revokeapplevpplicenses": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rotatefilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/setdevicename": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/shutdown": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/syncdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/triggerconfigurationmanageraction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/updatewindowsdeviceaccount": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/windowsdefenderscan": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/windowsdefenderupdatesignatures": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/wipe": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/executeaction": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/disablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/enablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/locatedevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logoutsharedappledeviceactiveuser": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/playlostmodesound": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rebootnow": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/recoverpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/remotelock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/resetpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/retire": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/revokeapplevpplicenses": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rotatefilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/setdevicename": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/shutdown": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/syncdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/triggerconfigurationmanageraction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/updatewindowsdeviceaccount": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/bypassactivationlock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/cleanwindowsdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/deleteuserfromsharedappledevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/disablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/enablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/locatedevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/logoutsharedappledeviceactiveuser": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/playlostmodesound": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rebootnow": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/recoverpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/remotelock": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/resetpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/retire": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/revokeapplevpplicenses": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rotatefilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/setdevicename": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/shutdown": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/syncdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/triggerconfigurationmanageraction": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/updatewindowsdeviceaccount": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/windowsdefenderscan": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/windowsdefenderupdatesignatures": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/wipe": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/executeaction": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderscan": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsdefenderupdatesignatures": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/wipe": "",
+ "/devicemanagement/manageddevices/{id}/bypassactivationlock": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/cleanwindowsdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/deleteuserfromsharedappledevice": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/disablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/enablelostmode": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/locatedevice": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/logoutsharedappledeviceactiveuser": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/playlostmodesound": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/rebootnow": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/recoverpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/remotelock": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/resetpasscode": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/retire": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/revokeapplevpplicenses": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/rotatefilevaultkey": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/setdevicename": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/shutdown": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/syncdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/triggerconfigurationmanageraction": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/updatewindowsdeviceaccount": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/windowsdefenderscan": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/windowsdefenderupdatesignatures": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/wipe": "",
+ "/devicemanagement/manageddevices/executeaction": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/manageddevices/{id}/getsyncstatus": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementManagedDevices.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Microsoft Intune devices",
+ "adminDescription": "Allows the app to read the properties of devices managed by Microsoft Intune.",
+ "userDisplayName": "Read devices Microsoft Intune devices",
+ "userDescription": "Allows the app to read the properties of devices managed by Microsoft Intune.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Microsoft Intune devices",
+ "adminDescription": "Allows the app to read the properties of devices managed by Microsoft Intune, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/deviceappmanagement/windowsmanagementapp": "",
+ "/deviceappmanagement/windowsmanagementapp/healthstates": "",
+ "/deviceappmanagement/windowsmanagementapp/healthstates/{id}": "",
+ "/devicemanagement": "",
+ "/devicemanagement/applepushnotificationcertificate": "",
+ "/devicemanagement/autopilotevents": "least=DelegatedWork,Application",
+ "/devicemanagement/autopilotevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/autopilotevents/{id}/policystatusdetails": "least=DelegatedWork,Application",
+ "/devicemanagement/autopilotevents/{id}/policystatusdetails/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/cloudpcconnectivityissues": "",
+ "/devicemanagement/cloudpcconnectivityissues/{id}": "",
+ "/devicemanagement/comanageddevices": "",
+ "/devicemanagement/comanageddevices/{id}": "",
+ "/devicemanagement/comanageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/comanageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/comanageddevices/appdiagnostics": "",
+ "/devicemanagement/comanagementeligibledevices": "",
+ "/devicemanagement/comanagementeligibledevices/{id}": "",
+ "/devicemanagement/detectedapps": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/devicecategory": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate/detectedmalwarestate": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate/detectedmalwarestate/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecategories": "",
+ "/devicemanagement/devicecategories/{id}": "",
+ "/devicemanagement/devicecompliancescripts": "",
+ "/devicemanagement/devicecompliancescripts/{id}": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "",
+ "/devicemanagement/devicecompliancescripts/{id}/runsummary": "",
+ "/devicemanagement/devicecustomattributeshellscripts": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assignments": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assignments/{id}": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments/{id}": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/runsummary": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates/{id}": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "",
+ "/devicemanagement/devicemanagementscripts/{id}/assignments": "",
+ "/devicemanagement/devicemanagementscripts/{id}/assignments/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/appdiagnostics": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/appdiagnostics": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/groupassignments": "",
+ "/devicemanagement/devicemanagementscripts/{id}/groupassignments/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/runsummary": "",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates": "",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates": "",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/deviceshellscripts": "",
+ "/devicemanagement/deviceshellscripts/{id}": "",
+ "/devicemanagement/deviceshellscripts/{id}/assignments": "",
+ "/devicemanagement/deviceshellscripts/{id}/assignments/{id}": "",
+ "/devicemanagement/deviceshellscripts/{id}/devicerunstates": "",
+ "/devicemanagement/deviceshellscripts/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/deviceshellscripts/{id}/groupassignments": "",
+ "/devicemanagement/deviceshellscripts/{id}/groupassignments/{id}": "",
+ "/devicemanagement/deviceshellscripts/{id}/runsummary": "",
+ "/devicemanagement/deviceshellscripts/{id}/userrunstates": "",
+ "/devicemanagement/deviceshellscripts/{id}/userrunstates/{id}": "",
+ "/devicemanagement/getcomanageddevicessummary": "",
+ "/devicemanagement/getcomanagementeligibledevicessummary": "",
+ "/devicemanagement/manageddeviceoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/manageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/manageddevices/appdiagnostics": "",
+ "/devicemanagement/mobileapptroubleshootingevents": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/oemwarrantyinformationonboarding": "",
+ "/devicemanagement/oemwarrantyinformationonboarding/{id}": "",
+ "/devicemanagement/remoteactionaudits": "",
+ "/devicemanagement/remoteactionaudits/{id}": "",
+ "/devicemanagement/reports": "",
+ "/devicemanagement/reports/cachedreportconfigurations": "",
+ "/devicemanagement/reports/cachedreportconfigurations/{id}": "",
+ "/devicemanagement/reports/exportjobs": "",
+ "/devicemanagement/reports/exportjobs/{id}": "",
+ "/devicemanagement/reports/reportschedules": "",
+ "/devicemanagement/reports/reportschedules/{id}": "",
+ "/devicemanagement/tenantattachrbac": "",
+ "/devicemanagement/tenantattachrbac/getstate": "",
+ "/devicemanagement/troubleshootingevents": "least=DelegatedWork,Application",
+ "/devicemanagement/troubleshootingevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomaly": "",
+ "/devicemanagement/userexperienceanalyticsanomaly/{id}": "",
+ "/devicemanagement/userexperienceanalyticsanomalydevice": "",
+ "/devicemanagement/userexperienceanalyticsanomalydevice/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthosversionperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthosversionperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsapphealthoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/apphealthmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/batteryhealthmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/bestpracticesmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/rebootanalyticsmetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/resourceperformancemetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/workfromanywheremetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthappimpact": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthappimpact/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthcapacitydetails": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthosperformance": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthosperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthruntimedetails": "",
+ "/devicemanagement/userexperienceanalyticscategories/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicemetrichistory": "",
+ "/devicemanagement/userexperienceanalyticsdevicemetrichistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance/summarizedeviceperformancedevices": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescope": "",
+ "/devicemanagement/userexperienceanalyticsdevicescopes": "",
+ "/devicemanagement/userexperienceanalyticsdevicescopes/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicescores": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicescores/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartuphistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartuphistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocesses": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocesses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocessperformance": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocessperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity": "",
+ "/devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicetimelineevents/{id}": "",
+ "/devicemanagement/userexperienceanalyticsimpactingprocess": "",
+ "/devicemanagement/userexperienceanalyticsimpactingprocess/{id}": "",
+ "/devicemanagement/userexperienceanalyticsmetrichistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmetrichistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmetrichistory/{id}/userexperienceanalyticsmetric": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmodelscores": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsmodelscores/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsnotautopilotreadydevice": "",
+ "/devicemanagement/userexperienceanalyticsnotautopilotreadydevice/{id}": "",
+ "/devicemanagement/userexperienceanalyticsoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsregressionsummary": "",
+ "/devicemanagement/userexperienceanalyticsregressionsummary/summarizedeviceregressionperformance": "",
+ "/devicemanagement/userexperienceanalyticsremoteconnection": "",
+ "/devicemanagement/userexperienceanalyticsremoteconnection/{id}": "",
+ "/devicemanagement/userexperienceanalyticsresourceperformance": "",
+ "/devicemanagement/userexperienceanalyticsresourceperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsscorehistory": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsscorehistory/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticssummarizeddevicescopes": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywherehardwarereadinessmetric": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation/{id}/windowsdevicesprotectionstate/{id}": "least=DelegatedWork,Application",
+ "/reports": "",
+ "/users": "",
+ "/users/{id}": "",
+ "/users/{id}/getmanageddeviceswithappfailures": "least=DelegatedWork,Application",
+ "/users/{id}/getmanageddeviceswithfailedorpendingapps": "least=DelegatedWork,Application",
+ "/users/{id}/mobileappintentandstates": "least=DelegatedWork,Application",
+ "/users/{id}/mobileappintentandstates/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/deviceappmanagement/windowsmanagementapp/setasmanagedinstaller": "",
+ "/devicemanagement/comanageddevices/{id}/activatedeviceesim": "",
+ "/devicemanagement/comanageddevices/{id}/deprovision": "",
+ "/devicemanagement/comanageddevices/{id}/disable": "",
+ "/devicemanagement/comanageddevices/{id}/enrollnowaction": "",
+ "/devicemanagement/comanageddevices/{id}/initiatemobiledevicemanagementkeyrecovery": "",
+ "/devicemanagement/comanageddevices/{id}/initiateondemandproactiveremediation": "",
+ "/devicemanagement/comanageddevices/{id}/reenable": "",
+ "/devicemanagement/comanageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement": "",
+ "/devicemanagement/comanageddevices/{id}/rotatelocaladminpassword": "",
+ "/devicemanagement/comanageddevices/downloadappdiagnostics": "",
+ "/devicemanagement/comanageddevices/executeaction": "",
+ "/devicemanagement/comanageddevices/movedevicestoou": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/activatedeviceesim": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/deprovision": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/disable": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/enrollnowaction": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/initiatemobiledevicemanagementkeyrecovery": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/initiateondemandproactiveremediation": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/reenable": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/removedevicefirmwareconfigurationinterfacemanagement": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rotatelocaladminpassword": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/activatedeviceesim": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/deprovision": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/disable": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/enrollnowaction": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/initiatemobiledevicemanagementkeyrecovery": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/initiateondemandproactiveremediation": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/reenable": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/removedevicefirmwareconfigurationinterfacemanagement": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rotatelocaladminpassword": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/activatedeviceesim": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/deprovision": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/activatedeviceesim": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/deprovision": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/disable": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/enrollnowaction": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/initiatemobiledevicemanagementkeyrecovery": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/initiateondemandproactiveremediation": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/reenable": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rotatelocaladminpassword": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/downloadappdiagnostics": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/executeaction": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/movedevicestoou": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/disable": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/enrollnowaction": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/initiatemobiledevicemanagementkeyrecovery": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/initiateondemandproactiveremediation": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}/createdownloadurl": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/reenable": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/removedevicefirmwareconfigurationinterfacemanagement": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rotatelocaladminpassword": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/activatedeviceesim": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/deprovision": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/disable": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/enrollnowaction": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/initiatemobiledevicemanagementkeyrecovery": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/initiateondemandproactiveremediation": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/reenable": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rotatelocaladminpassword": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/downloadappdiagnostics": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/executeaction": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/movedevicestoou": "",
+ "/devicemanagement/manageddevices/{id}/activatedeviceesim": "",
+ "/devicemanagement/manageddevices/{id}/deprovision": "",
+ "/devicemanagement/manageddevices/{id}/disable": "",
+ "/devicemanagement/manageddevices/{id}/enrollnowaction": "",
+ "/devicemanagement/manageddevices/{id}/initiatemobiledevicemanagementkeyrecovery": "",
+ "/devicemanagement/manageddevices/{id}/initiateondemandproactiveremediation": "",
+ "/devicemanagement/manageddevices/{id}/reenable": "",
+ "/devicemanagement/manageddevices/{id}/removedevicefirmwareconfigurationinterfacemanagement": "",
+ "/devicemanagement/manageddevices/{id}/rotatelocaladminpassword": "",
+ "/devicemanagement/manageddevices/downloadappdiagnostics": "",
+ "/devicemanagement/manageddevices/executeaction": "",
+ "/devicemanagement/manageddevices/movedevicestoou": "",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}/createdownloadurl": "least=DelegatedWork,Application",
+ "/devicemanagement/oemwarrantyinformationonboarding/{id}/disable": "",
+ "/devicemanagement/oemwarrantyinformationonboarding/{id}/enable": "",
+ "/devicemanagement/reports/getcachedreport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancereport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getcompliancesettingnoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getconfigurationsettingnoncompliancereport": "",
+ "/devicemanagement/reports/getdevicemanagementintentpersettingcontributingprofiles": "",
+ "/devicemanagement/reports/getdevicemanagementintentsettingsreport": "",
+ "/devicemanagement/reports/getdevicenoncompliancereport": "",
+ "/devicemanagement/reports/getdevicepoliciescompliancereport": "",
+ "/devicemanagement/reports/getdevicepolicysettingscompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbypolicyplatformcompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbysettingreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliancepolicysettingreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliancepolicysettingsreport": "",
+ "/devicemanagement/reports/getdeviceswithoutcompliancepolicyreport": "",
+ "/devicemanagement/reports/gethistoricalreport": "",
+ "/devicemanagement/reports/getnoncompliantdevicesandsettingsreport": "",
+ "/devicemanagement/reports/getpolicynoncompliancemetadata": "",
+ "/devicemanagement/reports/getpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getreportfilters": "",
+ "/devicemanagement/reports/getsettingcomplianceaggreport": "",
+ "/devicemanagement/reports/getsettingnoncompliancereport": "",
+ "/devicemanagement/tenantattachrbac/enable": "",
+ "/devicemanagement/userexperienceanalyticsdevicescope/triggerdevicescopeaction": "",
+ "/devicemanagement/userexperienceanalyticsdevicescopes/{id}/triggerdevicescopeaction": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/devicecompliancepolicysettingstatesummaries": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/manageddevicecompliances": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/manageddevicecompliances/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/manageddevicecompliancetrends": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/manageddevicecompliancetrends/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/windowsdevicemalwarestates": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/windowsdevicemalwarestates/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/windowsprotectionstates": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/windowsprotectionstates/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementManagedDevices.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Microsoft Intune devices",
+ "adminDescription": "Allows the app to read and write the properties of devices managed by Microsoft Intune. Does not allow high impact operations such as remote wipe and password reset on the device's owner.",
+ "userDisplayName": "Read and write Microsoft Intune devices",
+ "userDescription": "Allows the app to read and write the properties of devices managed by Microsoft Intune. Does not allow high impact operations such as remote wipe and password reset on the device's owner.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Microsoft Intune devices",
+ "adminDescription": "Allows the app to read and write the properties of devices managed by Microsoft Intune, without a signed-in user. Does not allow high impact operations such as remote wipe and password reset on the device's owner",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/deviceappmanagement/windowsmanagementapp": "",
+ "/devicemanagement": "",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/devicecategory": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/runsummary": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/runsummary": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate": "",
+ "/devicemanagement/devicemanagementscripts/{id}/runsummary": "",
+ "/devicemanagement/deviceshellscripts/{id}/runsummary": "",
+ "/devicemanagement/manageddeviceoverview": "least=DelegatedWork,Application",
+ "/devicemanagement/reports": "",
+ "/devicemanagement/tenantattachrbac": "",
+ "/devicemanagement/userexperienceanalyticsapphealthoverview": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/apphealthmetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/batteryhealthmetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/bestpracticesmetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/rebootanalyticsmetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/resourceperformancemetrics": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/workfromanywheremetrics": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthcapacitydetails": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthruntimedetails": "",
+ "/devicemanagement/userexperienceanalyticscategories/{id}": "",
+ "/devicemanagement/userexperienceanalyticsoverview": "",
+ "/devicemanagement/userexperienceanalyticsregressionsummary": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywherehardwarereadinessmetric": "",
+ "/devicemanagement/windowsmalwareinformation/{id}/windowsdevicesprotectionstate/{id}": "least=DelegatedWork,Application",
+ "/reports": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/deviceappmanagement/windowsmanagementapp/healthstates": "",
+ "/devicemanagement/autopilotevents": "least=DelegatedWork,Application",
+ "/devicemanagement/autopilotevents/{id}/policystatusdetails": "least=DelegatedWork,Application",
+ "/devicemanagement/cloudpcconnectivityissues": "",
+ "/devicemanagement/comanageddevices": "",
+ "/devicemanagement/comanagementeligibledevices": "",
+ "/devicemanagement/detectedapps": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate/detectedmalwarestate": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecategories": "",
+ "/devicemanagement/devicecompliancescripts": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates": "",
+ "/devicemanagement/devicecustomattributeshellscripts": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assignments": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates": "",
+ "/devicemanagement/devicemanagementscripts/{id}/assignments": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate": "",
+ "/devicemanagement/devicemanagementscripts/{id}/groupassignments": "",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates": "",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates": "",
+ "/devicemanagement/deviceshellscripts": "",
+ "/devicemanagement/deviceshellscripts/{id}/assignments": "",
+ "/devicemanagement/deviceshellscripts/{id}/devicerunstates": "",
+ "/devicemanagement/deviceshellscripts/{id}/groupassignments": "",
+ "/devicemanagement/deviceshellscripts/{id}/userrunstates": "",
+ "/devicemanagement/manageddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests": "least=DelegatedWork,Application",
+ "/devicemanagement/oemwarrantyinformationonboarding": "",
+ "/devicemanagement/remoteactionaudits": "",
+ "/devicemanagement/reports/cachedreportconfigurations": "",
+ "/devicemanagement/reports/exportjobs": "",
+ "/devicemanagement/reports/reportschedules": "",
+ "/devicemanagement/troubleshootingevents": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomaly": "",
+ "/devicemanagement/userexperienceanalyticsanomalydevice": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformance": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformance": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails": "",
+ "/devicemanagement/userexperienceanalyticsapphealthosversionperformance": "",
+ "/devicemanagement/userexperienceanalyticsbaselines": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthappimpact": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthosperformance": "",
+ "/devicemanagement/userexperienceanalyticsdevicemetrichistory": "",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance": "",
+ "/devicemanagement/userexperienceanalyticsdevicescopes": "",
+ "/devicemanagement/userexperienceanalyticsdevicescores": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartuphistory": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocesses": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocessperformance": "",
+ "/devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity": "",
+ "/devicemanagement/userexperienceanalyticsimpactingprocess": "",
+ "/devicemanagement/userexperienceanalyticsmetrichistory": "",
+ "/devicemanagement/userexperienceanalyticsmodelscores": "",
+ "/devicemanagement/userexperienceanalyticsnotautopilotreadydevice": "",
+ "/devicemanagement/userexperienceanalyticsremoteconnection": "",
+ "/devicemanagement/userexperienceanalyticsresourceperformance": "",
+ "/devicemanagement/userexperienceanalyticsscorehistory": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance": "",
+ "/devicemanagement/windowsmalwareinformation": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates": "least=DelegatedWork,Application",
+ "/users": "",
+ "/users/{id}/mobileappintentandstates": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/deviceappmanagement/windowsmanagementapp/healthstates/{id}": "",
+ "/devicemanagement/autopilotevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/autopilotevents/{id}/policystatusdetails/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/cloudpcconnectivityissues/{id}": "",
+ "/devicemanagement/comanageddevices/{id}": "",
+ "/devicemanagement/comanagementeligibledevices/{id}": "",
+ "/devicemanagement/detectedapps/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/windowsprotectionstate/detectedmalwarestate/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecategories/{id}": "",
+ "/devicemanagement/devicecompliancescripts/{id}": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assignments/{id}": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/groupassignments/{id}": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/userrunstates/{id}": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice": "",
+ "/devicemanagement/devicemanagementscripts/{id}/assignments/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/windowsprotectionstate/detectedmalwarestate/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/groupassignments/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}": "",
+ "/devicemanagement/devicemanagementscripts/{id}/userrunstates/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/deviceshellscripts/{id}": "",
+ "/devicemanagement/deviceshellscripts/{id}/assignments/{id}": "",
+ "/devicemanagement/deviceshellscripts/{id}/devicerunstates/{id}": "",
+ "/devicemanagement/deviceshellscripts/{id}/groupassignments/{id}": "",
+ "/devicemanagement/deviceshellscripts/{id}/userrunstates/{id}": "",
+ "/devicemanagement/manageddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/oemwarrantyinformationonboarding/{id}": "",
+ "/devicemanagement/remoteactionaudits/{id}": "",
+ "/devicemanagement/reports/cachedreportconfigurations/{id}": "",
+ "/devicemanagement/reports/exportjobs/{id}": "",
+ "/devicemanagement/reports/reportschedules/{id}": "",
+ "/devicemanagement/troubleshootingevents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/userexperienceanalyticsanomaly/{id}": "",
+ "/devicemanagement/userexperienceanalyticsanomalydevice/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversion/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondetails/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyappversiondeviceid/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthapplicationperformancebyosversion/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdevicemodelperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthdeviceperformancedetails/{id}": "",
+ "/devicemanagement/userexperienceanalyticsapphealthosversionperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbaselines/{id}/devicebootperformancemetrics/metricvalues/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthappimpact/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceappimpact/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthdeviceruntimehistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthmodelperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsbatteryhealthosperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicemetrichistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicescope": "",
+ "/devicemanagement/userexperienceanalyticsdevicescopes/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicescores/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartuphistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocesses/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdevicestartupprocessperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsdeviceswithoutcloudidentity/{id}": "",
+ "/devicemanagement/userexperienceanalyticsimpactingprocess/{id}": "",
+ "/devicemanagement/userexperienceanalyticsmetrichistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticsmetrichistory/{id}/userexperienceanalyticsmetric": "",
+ "/devicemanagement/userexperienceanalyticsmodelscores/{id}": "",
+ "/devicemanagement/userexperienceanalyticsnotautopilotreadydevice/{id}": "",
+ "/devicemanagement/userexperienceanalyticsremoteconnection/{id}": "",
+ "/devicemanagement/userexperienceanalyticsresourceperformance/{id}": "",
+ "/devicemanagement/userexperienceanalyticsscorehistory/{id}": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremetrics/{id}/metricdevices/{id}": "",
+ "/devicemanagement/userexperienceanalyticsworkfromanywheremodelperformance/{id}": "",
+ "/devicemanagement/windowsmalwareinformation/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsmalwareinformation/{id}/devicemalwarestates/{id}": "least=DelegatedWork,Application",
+ "/users/{id}": "",
+ "/users/{id}/mobileappintentandstates/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/comanageddevices/{id}/createdevicelogcollectionrequest": "",
+ "/devicemanagement/comanageddevices/{id}/requestremoteassistance": "",
+ "/devicemanagement/comanageddevices/{id}/rotatebitlockerkeys": "",
+ "/devicemanagement/comanageddevices/{id}/sendcustomnotificationtocompanyportal": "",
+ "/devicemanagement/comanageddevices/{id}/wipe": "",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/requestremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/requestremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/users/{id}/manageddevices/{id}/wipe": "least=DelegatedWork,Application",
+ "/devicemanagement/detectedapps/{id}/manageddevices/{id}/wipe": "least=DelegatedWork,Application",
+ "/devicemanagement/devicecompliancescripts/{id}/assign": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/createdevicelogcollectionrequest": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/requestremoteassistance": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/rotatebitlockerkeys": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/sendcustomnotificationtocompanyportal": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/wipe": "",
+ "/devicemanagement/devicecustomattributeshellscripts/{id}/assign": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/createdevicelogcollectionrequest": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/requestremoteassistance": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/rotatebitlockerkeys": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/sendcustomnotificationtocompanyportal": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/wipe": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/createdevicelogcollectionrequest": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/createdevicelogcollectionrequest": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/requestremoteassistance": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/rotatebitlockerkeys": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/sendcustomnotificationtocompanyportal": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/wipe": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/logcollectionrequests/{id}/createdownloadurl": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/requestremoteassistance": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/rotatebitlockerkeys": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/sendcustomnotificationtocompanyportal": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/createdevicelogcollectionrequest": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/requestremoteassistance": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/rotatebitlockerkeys": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/sendcustomnotificationtocompanyportal": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/wipe": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/wipe": "",
+ "/devicemanagement/deviceshellscripts/{id}/assign": "",
+ "/devicemanagement/manageddevices/{id}/createdevicelogcollectionrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/requestremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/manageddevices/{id}/rotatebitlockerkeys": "",
+ "/devicemanagement/manageddevices/{id}/sendcustomnotificationtocompanyportal": "",
+ "/devicemanagement/manageddevices/{id}/wipe": "least=DelegatedWork,Application",
+ "/devicemanagement/mobileapptroubleshootingevents/{id}/applogcollectionrequests/{id}/createdownloadurl": "",
+ "/devicemanagement/reports/getcachedreport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancereport": "",
+ "/devicemanagement/reports/getcompliancepolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getcompliancesettingnoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getconfigurationpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getconfigurationsettingnoncompliancereport": "",
+ "/devicemanagement/reports/getdevicemanagementintentpersettingcontributingprofiles": "",
+ "/devicemanagement/reports/getdevicemanagementintentsettingsreport": "",
+ "/devicemanagement/reports/getdevicenoncompliancereport": "",
+ "/devicemanagement/reports/getdevicepoliciescompliancereport": "",
+ "/devicemanagement/reports/getdevicepolicysettingscompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbypolicyplatformcompliancereport": "",
+ "/devicemanagement/reports/getdevicesstatusbysettingreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatusbycompliancepolicysettingreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliacepolicyreport": "",
+ "/devicemanagement/reports/getdevicestatussummarybycompliancepolicysettingsreport": "",
+ "/devicemanagement/reports/getdeviceswithoutcompliancepolicyreport": "",
+ "/devicemanagement/reports/gethistoricalreport": "",
+ "/devicemanagement/reports/getnoncompliantdevicesandsettingsreport": "",
+ "/devicemanagement/reports/getpolicynoncompliancemetadata": "",
+ "/devicemanagement/reports/getpolicynoncompliancereport": "",
+ "/devicemanagement/reports/getpolicynoncompliancesummaryreport": "",
+ "/devicemanagement/reports/getreportfilters": "",
+ "/devicemanagement/reports/getsettingcomplianceaggreport": "",
+ "/devicemanagement/reports/getsettingnoncompliancereport": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/comanageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/comanageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "",
+ "/devicemanagement/devicecompliancescripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/detectedapps/{id}/manageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/getfilevaultkey": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/getoemwarranty": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/devicemanagementscripts/{id}/devicerunstates/{id}/manageddevice/users/{id}/manageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/getcomanageddevicessummary": "",
+ "/devicemanagement/getcomanagementeligibledevicessummary": "",
+ "/devicemanagement/manageddevices/{id}/getfilevaultkey": "",
+ "/devicemanagement/manageddevices/{id}/getoemwarranty": "",
+ "/devicemanagement/tenantattachrbac/getstate": "",
+ "/devicemanagement/userexperienceanalyticsdeviceperformance/summarizedeviceperformancedevices": "",
+ "/devicemanagement/userexperienceanalyticsdevicetimelineevents/{id}": "",
+ "/devicemanagement/userexperienceanalyticsregressionsummary/summarizedeviceregressionperformance": "",
+ "/devicemanagement/userexperienceanalyticsremoteconnection/summarizedeviceremoteconnection": "",
+ "/devicemanagement/userexperienceanalyticsresourceperformance/summarizedeviceresourceperformance": "",
+ "/devicemanagement/userexperienceanalyticssummarizeworkfromanywheredevices": "least=DelegatedWork,Application",
+ "/reports/manageddeviceenrollmentfailuredetails": "least=DelegatedWork,Application",
+ "/reports/manageddeviceenrollmenttopfailures": "least=DelegatedWork,Application",
+ "/users/{id}/getmanageddeviceswithappfailures": "",
+ "/users/{id}/getmanageddeviceswithfailedorpendingapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/devicecompliancepolicysettingstatesummaries": "",
+ "/tenantrelationships/managedtenants/manageddevicecompliances": "",
+ "/tenantrelationships/managedtenants/manageddevicecompliances/{id}": "",
+ "/tenantrelationships/managedtenants/manageddevicecompliancetrends": "",
+ "/tenantrelationships/managedtenants/manageddevicecompliancetrends/{id}": "",
+ "/tenantrelationships/managedtenants/windowsdevicemalwarestates": "",
+ "/tenantrelationships/managedtenants/windowsdevicemalwarestates/{id}": "",
+ "/tenantrelationships/managedtenants/windowsprotectionstates": "",
+ "/tenantrelationships/managedtenants/windowsprotectionstates/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementRBAC.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Microsoft Intune RBAC settings",
+ "adminDescription": "Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.",
+ "userDisplayName": "Read Microsoft Intune RBAC settings",
+ "userDescription": "Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Microsoft Intune RBAC settings",
+ "adminDescription": "Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement": "",
+ "/devicemanagement/getassignedroledetails": "",
+ "/devicemanagement/geteffectivepermissions": "least=DelegatedWork,Application",
+ "/devicemanagement/geteffectivepermissionsscope={value}": "least=DelegatedWork,Application",
+ "/devicemanagement/operationapprovalpolicies": "",
+ "/devicemanagement/operationapprovalpolicies/{id}": "",
+ "/devicemanagement/operationapprovalpolicies/getapprovableoperations": "",
+ "/devicemanagement/operationapprovalpolicies/getoperationsallowedapproval": "",
+ "/devicemanagement/operationapprovalpolicies/getoperationsrequiringapproval": "",
+ "/devicemanagement/operationapprovalrequests": "",
+ "/devicemanagement/operationapprovalrequests/{id}": "",
+ "/devicemanagement/operationapprovalrequests/getmyrequestbyid": "",
+ "/devicemanagement/operationapprovalrequests/getmyrequests": "",
+ "/devicemanagement/resourceoperations": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceoperations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceoperations/{id}/getscopesforuser": "",
+ "/devicemanagement/roleassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assignments": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assignments/{id}": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/hascustomrolescopetag": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition": "least=DelegatedWork,Application",
+ "/devicemanagement/rolescopetags": "",
+ "/devicemanagement/rolescopetags/{id}": "",
+ "/devicemanagement/rolescopetags/hascustomrolescopetag": "",
+ "/devicemanagement/scopedforresource": "",
+ "/rolemanagement": "",
+ "/rolemanagement/cloudpc/roleassignments": "",
+ "/rolemanagement/cloudpc/roleassignments/{id}": "",
+ "/rolemanagement/cloudpc/roledefinitions": "least=DelegatedWork,Application",
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement": "",
+ "/rolemanagement/devicemanagement/roleassignments": "",
+ "/rolemanagement/devicemanagement/roleassignments/{id}": "",
+ "/rolemanagement/devicemanagement/roledefinitions": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/operationapprovalrequests/{id}/approve": "",
+ "/devicemanagement/operationapprovalrequests/{id}/cancelapproval": "",
+ "/devicemanagement/operationapprovalrequests/{id}/reject": "",
+ "/devicemanagement/operationapprovalrequests/cancelmyrequest": "",
+ "/devicemanagement/operationapprovalrequests/getrequeststatus": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/getrolescopetagsbyid": "",
+ "/devicemanagement/rolescopetags/getrolescopetagsbyid": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementRBAC.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Microsoft Intune RBAC settings",
+ "adminDescription": "Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.",
+ "userDisplayName": "Read and write Microsoft Intune RBAC settings",
+ "userDescription": "Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Microsoft Intune RBAC settings",
+ "adminDescription": "Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement": "",
+ "/rolemanagement": "",
+ "/rolemanagement/devicemanagement": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/getassignedroledetails": "",
+ "/devicemanagement/geteffectivepermissions": "",
+ "/devicemanagement/operationapprovalpolicies/getapprovableoperations": "",
+ "/devicemanagement/operationapprovalpolicies/getoperationsallowedapproval": "",
+ "/devicemanagement/operationapprovalpolicies/getoperationsrequiringapproval": "",
+ "/devicemanagement/operationapprovalrequests/getmyrequestbyid": "",
+ "/devicemanagement/operationapprovalrequests/getmyrequests": "",
+ "/devicemanagement/resourceoperations/{id}/getscopesforuser": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/hascustomrolescopetag": "",
+ "/devicemanagement/rolescopetags/hascustomrolescopetag": "",
+ "/devicemanagement/scopedforresource": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/operationapprovalpolicies": "",
+ "/devicemanagement/operationapprovalrequests": "",
+ "/devicemanagement/resourceoperations": "least=DelegatedWork,Application",
+ "/devicemanagement/roleassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assignments": "",
+ "/devicemanagement/rolescopetags": "",
+ "/rolemanagement/cloudpc/roledefinitions": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement/roledefinitions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement/operationapprovalpolicies/{id}": "",
+ "/devicemanagement/operationapprovalrequests/{id}": "",
+ "/devicemanagement/resourceoperations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assignments/{id}": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/roledefinition": "least=DelegatedWork,Application",
+ "/devicemanagement/rolescopetags/{id}": "",
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/operationapprovalrequests/getrequeststatus": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/{id}/assign": "",
+ "/devicemanagement/roledefinitions/{id}/roleassignments/{id}/microsoft.graph.deviceandappmanagementroleassignment/rolescopetags/getrolescopetagsbyid": "",
+ "/devicemanagement/rolescopetags/{id}/assign": "",
+ "/devicemanagement/rolescopetags/getrolescopetagsbyid": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/rolemanagement/cloudpc/roleassignments": "",
+ "/rolemanagement/devicemanagement/roleassignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/rolemanagement/cloudpc/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/devicemanagement/roleassignments/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementScripts.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Microsoft Intune Scripts",
+ "adminDescription": "Allows the app to read Microsoft Intune device compliance scripts, device management scripts, device shell scripts, device custom attribute shell scripts and device health scripts on behalf of the signed in user.",
+ "userDisplayName": "Read Microsoft Intune Scripts",
+ "userDescription": "Allows the app to read Microsoft Intune device compliance scripts, device management scripts, device shell scripts, device custom attripute shell scripts and device health scripts.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Microsoft Intune Scripts",
+ "adminDescription": "Allows the app to read Microsoft Intune device compliance scripts, device management scripts, device shell scripts, device custom attribute shell scripts and device health scripts, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/deviceManagement/deviceComplianceScripts": "",
+ "/deviceManagement/deviceComplianceScripts/{id}": "",
+ "/deviceManagement/deviceComplianceScripts/{id}/Assignments": "",
+ "/devicemanagement/devicehealthscripts": "",
+ "/devicemanagement/devicehealthscripts/{id}": "",
+ "/devicemanagement/devicehealthscripts/{id}/assignments": "",
+ "/devicemanagement/devicehealthscripts/{id}/deviceRunStates": "",
+ "/devicemanagement/devicehealthscripts/{id}/getRemediationHistory": "",
+ "/devicemanagement/devicehealthscripts/{id}/runSummary": "",
+ "/devicemanagement/devicehealthscripts/areGlobalScriptsAvailable": "",
+ "/devicemanagement/devicehealthscripts/getRemediationSummary": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementScripts.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Microsoft Intune Scripts",
+ "adminDescription": "Allows the app to read and write Microsoft Intune device compliance scripts, device management scripts, device shell scripts, device custom attribute shell scripts and device health scripts on behalf of the signed in user.",
+ "userDisplayName": "Read and write Microsoft Intune Scripts",
+ "userDescription": "Allows the app to read and write Microsoft Intune device compliance scripts, device management scripts, device shell scripts, device custom attripute shell scripts and device health scripts.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Microsoft Intune Scripts",
+ "adminDescription": "Allows the app to read and write Microsoft Intune device compliance scripts, device management scripts, device shell scripts, device custom attribute shell scripts and device health scripts, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/deviceManagement/deviceComplianceScripts": "",
+ "/deviceManagement/deviceComplianceScripts/{id}": "",
+ "/deviceManagement/deviceComplianceScripts/{id}/Assignments": "",
+ "/devicemanagement/devicehealthscripts": "",
+ "/devicemanagement/devicehealthscripts/{id}": "",
+ "/devicemanagement/devicehealthscripts/{id}/assignments": "",
+ "/devicemanagement/devicehealthscripts/{id}/devicerunstates": "",
+ "/devicemanagement/devicehealthscripts/{id}/getRemediationHistory": "",
+ "/devicemanagement/devicehealthscripts/{id}/runSummary": "",
+ "/devicemanagement/devicehealthscripts/areGlobalScriptsAvailable": "",
+ "/devicemanagement/devicehealthscripts/getRemediationSummary": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/deviceManagement/deviceComplianceScripts": "",
+ "/deviceManagement/deviceComplianceScripts/{id}/assign": "",
+ "/devicemanagement/devicehealthscripts": "",
+ "/devicemanagement/devicehealthscripts/{id}/assign": "",
+ "/devicemanagement/devicehealthscripts/{id}/getGlobalScriptHighestAvailableVersion": "",
+ "/devicemanagement/devicehealthscripts/{id}/updateGlobalScript": "",
+ "/devicemanagement/devicehealthscripts/enableGlobalScripts": "",
+ "/devicemanagement/devicehealthscripts/extractParametersFromScript": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/deviceManagement/deviceComplianceScripts/{id}": "",
+ "/deviceManagement/deviceHealthScripts/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementServiceConfig.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Microsoft Intune configuration",
+ "adminDescription": "Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration.",
+ "userDisplayName": "Read Microsoft Intune configuration",
+ "userDescription": "Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Microsoft Intune configuration",
+ "adminDescription": "Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/createremotehelpsessionresponse": "least=DelegatedWork,Application",
+ "/createremotehelpsessionresponse/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/sideloadingkeys": "least=DelegatedWork,Application",
+ "/deviceappmanagement/sideloadingkeys/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens/getlicensesforapp": "least=DelegatedWork,Application",
+ "/devicemanagement": "",
+ "/devicemanagement/appleuserinitiatedenrollmentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/appleuserinitiatedenrollmentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancemanagementpartners": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancemanagementpartners/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/conditionalaccesssettings": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/defaultiosenrollmentprofile": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/defaultmacosenrollmentprofile": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/enrollmentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}/exportmobileconfig": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/getencryptionpublickey": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/getexpiringvpptokencount": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementpartners": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementpartners/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeconnectors": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeconnectors/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeonpremisespolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeonpremisespolicy": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeonpremisespolicy/conditionalaccesssettings": "least=DelegatedWork,Application",
+ "/devicemanagement/getallowedremoteassistanceactions": "least=DelegatedWork,Application",
+ "/devicemanagement/getsuggestedenrollmentlimit": "least=DelegatedWork,Application",
+ "/devicemanagement/importeddeviceidentities": "least=DelegatedWork,Application",
+ "/devicemanagement/importeddeviceidentities/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/importedwindowsautopilotdeviceidentities": "least=DelegatedWork,Application",
+ "/devicemanagement/importedwindowsautopilotdeviceidentities/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/mobilethreatdefenseconnectors": "least=DelegatedWork,Application",
+ "/devicemanagement/mobilethreatdefenseconnectors/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/notificationmessagetemplates": "least=DelegatedWork,Application",
+ "/devicemanagement/notificationmessagetemplates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages": "least=DelegatedWork,Application",
+ "/devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancepartners": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancepartners/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/reports": "",
+ "/devicemanagement/resourceaccessprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceaccessprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceaccessprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceaccessprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/telecomexpensemanagementpartners": "least=DelegatedWork,Application",
+ "/devicemanagement/telecomexpensemanagementpartners/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/acceptancestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}/termsandconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/groupassignments/{id}/termsandconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeploymentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeploymentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/intendeddeploymentprofile": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotsettings": "least=DelegatedWork,Application",
+ "/extendremotehelpsessionresponse": "least=DelegatedWork,Application",
+ "/extendremotehelpsessionresponse/{id}": "least=DelegatedWork,Application",
+ "/organization": "least=DelegatedWork,Application",
+ "/organization/{id}": "least=DelegatedWork,Application",
+ "/remotehelpsessionretrieveresponse": "least=DelegatedWork,Application",
+ "/remotehelpsessionretrieveresponse/{id}": "least=DelegatedWork,Application",
+ "/requestremotehelpsessionaccessresponse": "least=DelegatedWork,Application",
+ "/requestremotehelpsessionaccessresponse/{id}": "least=DelegatedWork,Application",
+ "/users": "",
+ "/users/{id}": "",
+ "/users/{id}/exportdeviceandappmanagementdata": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devicemanagement/deponboardingsettings/{id}/generateencryptionpublickey": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/createenrollmentnotificationconfiguration": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementpartners/{id}/terminate": "least=DelegatedWork,Application",
+ "/devicemanagement/importeddeviceidentities/searchexistingidentities": "least=DelegatedWork,Application",
+ "/devicemanagement/reportremoteassistance": "least=DelegatedWork,Application",
+ "/devicemanagement/reportremotehelpsessionstarttime": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getremoteassistancemonitoractivesessionsreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getremoteassistancemonitoravgsessiontimereport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getremoteassistancemonitortotalsessionsreport": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getremoteassistancesessionsreport": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/unassignuserfromdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/unassignuserfromdevice": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceManagementServiceConfig.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Microsoft Intune configuration",
+ "adminDescription": "Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration.",
+ "userDisplayName": "Read and write Microsoft Intune configuration",
+ "userDescription": "Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Microsoft Intune configuration",
+ "adminDescription": "Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/createremotehelpsessionresponse": "least=DelegatedWork,Application",
+ "/deviceappmanagement/sideloadingkeys": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens": "least=DelegatedWork,Application",
+ "/devicemanagement/appleuserinitiatedenrollmentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancemanagementpartners": "least=DelegatedWork,Application",
+ "/devicemanagement/datasharingconsents": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/enrollmentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementpartners": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeconnectors": "least=DelegatedWork,Application",
+ "/devicemanagement/importeddeviceidentities": "least=DelegatedWork,Application",
+ "/devicemanagement/importedwindowsautopilotdeviceidentities": "least=DelegatedWork,Application",
+ "/devicemanagement/mobilethreatdefenseconnectors": "least=DelegatedWork,Application",
+ "/devicemanagement/notificationmessagetemplates": "least=DelegatedWork,Application",
+ "/devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancepartners": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceaccessprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceaccessprofiles/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/telecomexpensemanagementpartners": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/acceptancestatuses": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/assignments": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/groupassignments": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeploymentprofiles": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assignments": "least=DelegatedWork,Application",
+ "/extendremotehelpsessionresponse": "least=DelegatedWork,Application",
+ "/remotehelpsessionretrieveresponse": "least=DelegatedWork,Application",
+ "/requestremotehelpsessionaccessresponse": "least=DelegatedWork,Application",
+ "/users": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/createremotehelpsessionresponse/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/sideloadingkeys/{id}": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/appleuserinitiatedenrollmentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/compliancemanagementpartners/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/datasharingconsents/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/defaultiosenrollmentprofile": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/defaultmacosenrollmentprofile": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/devicemanagementpartners/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeconnectors/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/importeddeviceidentities/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/mobilethreatdefenseconnectors/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/notificationmessagetemplates/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/notificationmessagetemplates/{id}/localizednotificationmessages/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancepartners/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceaccessprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceaccessprofiles/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/telecomexpensemanagementpartners/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/acceptancestatuses/{id}/termsandconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/groupassignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/termsandconditions/{id}/groupassignments/{id}/termsandconditions": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeploymentprofiles/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assignments/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/intendeddeploymentprofile": "least=DelegatedWork,Application",
+ "/extendremotehelpsessionresponse/{id}": "least=DelegatedWork,Application",
+ "/remotehelpsessionretrieveresponse/{id}": "least=DelegatedWork,Application",
+ "/requestremotehelpsessionaccessresponse/{id}": "least=DelegatedWork,Application",
+ "/users/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/deviceappmanagement/vpptokens/{id}/revokelicenses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens/{id}/synclicenses": "least=DelegatedWork,Application",
+ "/deviceappmanagement/vpptokens/synclicensecounts": "least=DelegatedWork,Application",
+ "/devicemanagement/applepushnotificationcertificate/generateapplepushnotificationcertificatesigningrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/appleuserinitiatedenrollmentprofiles/{id}/setpriority": "least=DelegatedWork,Application",
+ "/devicemanagement/datasharingconsents/{id}/consenttodatasharing": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}/setdefaultprofile": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}/updatedeviceprofileassignment": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/generateencryptionpublickey": "",
+ "/devicemanagement/deponboardingsettings/{id}/importedappledeviceidentities/importappledeviceidentitylist": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/shareforschooldatasyncservice": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/syncwithappledeviceenrollmentprogram": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/unshareforschooldatasyncservice": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/uploaddeptoken": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/deviceenrollmentconfigurations/{id}/setpriority": "least=DelegatedWork,Application",
+ "/devicemanagement/enableunlicensedadminstrators": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeconnectors/{id}/sync": "least=DelegatedWork,Application",
+ "/devicemanagement/importeddeviceidentities/importdeviceidentitylist": "least=DelegatedWork,Application",
+ "/devicemanagement/importeddeviceidentities/searchexistingidentities": "",
+ "/devicemanagement/importedwindowsautopilotdeviceidentities/import": "least=DelegatedWork,Application",
+ "/devicemanagement/notificationmessagetemplates/{id}/sendtestmessage": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancepartners/{id}/beginonboarding": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancepartners/{id}/disconnect": "least=DelegatedWork,Application",
+ "/devicemanagement/reports/getremoteassistancemonitoractivesessionsreport": "",
+ "/devicemanagement/reports/getremoteassistancemonitoravgsessiontimereport": "",
+ "/devicemanagement/reports/getremoteassistancemonitortotalsessionsreport": "",
+ "/devicemanagement/reports/getremoteassistancesessionsreport": "",
+ "/devicemanagement/resourceaccessprofiles/{id}/assign": "least=DelegatedWork,Application",
+ "/devicemanagement/resourceaccessprofiles/querybyplatformtype": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/assignresourceaccounttodevice": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/assignusertodevice": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/assignresourceaccounttodevice": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/assignusertodevice": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/unassignresourceaccountfromdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/unassignuserfromdevice": "",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}/updatedeviceproperties": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/unassignresourceaccountfromdevice": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/unassignuserfromdevice": "",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/updatedeviceproperties": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotsettings/sync": "least=DelegatedWork,Application",
+ "/organization/{id}/setmobiledevicemanagementauthority": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/deviceappmanagement/vpptokens/getlicensesforapp": "",
+ "/devicemanagement/applepushnotificationcertificate/downloadapplepushnotificationcertificatesigningrequest": "least=DelegatedWork,Application",
+ "/devicemanagement/deponboardingsettings/{id}/enrollmentprofiles/{id}/exportmobileconfig": "",
+ "/devicemanagement/deponboardingsettings/{id}/getencryptionpublickey": "",
+ "/devicemanagement/deponboardingsettings/getexpiringvpptokencount": "",
+ "/devicemanagement/getallowedremoteassistanceactions": "",
+ "/devicemanagement/getsuggestedenrollmentlimit": "",
+ "/devicemanagement/verifywindowsenrollmentautodiscovery": "least=DelegatedWork,Application",
+ "/organization": "",
+ "/users/{id}/exportdeviceandappmanagementdata": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/devicemanagement": "",
+ "/devicemanagement/applepushnotificationcertificate": "least=DelegatedWork,Application",
+ "/devicemanagement/conditionalaccesssettings": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeonpremisespolicies/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeonpremisespolicy": "least=DelegatedWork,Application",
+ "/devicemanagement/exchangeonpremisespolicy/conditionalaccesssettings": "least=DelegatedWork,Application",
+ "/devicemanagement/remoteassistancesettings": "least=DelegatedWork,Application",
+ "/devicemanagement/reports": "",
+ "/devicemanagement/windowsautopilotsettings": "least=DelegatedWork,Application",
+ "/organization/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/devicemanagement/importedwindowsautopilotdeviceidentities/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}": "least=DelegatedWork,Application",
+ "/devicemanagement/windowsautopilotdeviceidentities/{id}/deploymentprofile/assigneddevices/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphIntuneApprovers"
+ }
+ },
+ "DeviceTemplate.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create device templates.",
+ "adminDescription": "Allows the app to create device templates.",
+ "userDisplayName": "Create device templates.",
+ "userDescription": "Allows the app to create device templates on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Create device templates.",
+ "adminDescription": "Allows the app to create device templates, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/templates/deviceTemplates": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "DeviceTemplate.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all device templates, their owners, and devices created from those device templates.",
+ "adminDescription": "Allows the app to read device templates, their owners, and devices created from those device templates on behalf of the signed-in user.",
+ "userDisplayName": "Read all device templates, their owners, and devices created from those device templates.",
+ "userDescription": "Allows the app to read device templates, their owners, and devices created from those device templates, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all device templates, their owners, and devices created from those device templates.",
+ "adminDescription": "Allows the app to read device templates, their owners, and devices created from those device templates, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/templates/deviceTemplates": "least=DelegatedWork,Application",
+ "/directory/templates/deviceTemplates/{id}": "least=Application",
+ "/directory/templates/deviceTemplates/{id}/deviceinstances": "least=Application",
+ "/directory/templates/deviceTemplates/{id}/owners": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "DeviceTemplate.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all device templates, their owners, and devices created from those device templates.",
+ "adminDescription": "Allows the app to read and write all device templates, their owners, and devices created from those device templates on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all device templates, their owners, and devices created from those device templates.",
+ "userDescription": "Allows the app to read and write all your device templates, their owners, and devices created from those device templates, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all device templates, their owners, and devices created from those device templates.",
+ "adminDescription": "Allows the app to read and write all device templates, their owners, and devices created from those device templates without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/templates/deviceTemplates": "",
+ "/directory/templates/deviceTemplates/{id}": "",
+ "/directory/templates/deviceTemplates/{id}/deviceinstances": "",
+ "/directory/templates/deviceTemplates/{id}/owners": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/templates/deviceTemplates": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/directory/templates/deviceTemplates/{id}": "least=Application,DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/templates/deviceTemplates/{id}/owners/$ref": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "Directory.AccessAsUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Access directory as the signed in user",
+ "adminDescription": "Allows the app to have the same access to information in the directory as the signed-in user.",
+ "userDisplayName": "Access the directory as you",
+ "userDescription": "Allows the app to have the same access to information in your work or school directory as you do.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/devices": "least=DelegatedWork",
+ "/devices(deviceid={value})/registeredowners": "least=DelegatedWork",
+ "/devices(deviceid={value})/registeredusers": "least=DelegatedWork",
+ "/devices/{id}/registeredowners": "least=DelegatedWork",
+ "/devices/{id}/registeredusers": "least=DelegatedWork",
+ "/directory/administrativeunits/{id}/members": "",
+ "/groups/{id}/deletepasswordsinglesignoncredentials": "least=DelegatedWork",
+ "/groups/{id}/getpasswordsinglesignoncredentials": "least=DelegatedWork",
+ "/privilegedapproval": "least=DelegatedWork",
+ "/privilegedroleassignments/{id}/makeeligible": "least=DelegatedWork",
+ "/privilegedroleassignments/{id}/makepermanent": "least=DelegatedWork",
+ "/privilegedroles/{id}/selfactivate": "least=DelegatedWork",
+ "/privilegedroles/{id}/selfdeactivate": "least=DelegatedWork",
+ "/users/{id}/deletepasswordsinglesignoncredentials": "least=DelegatedWork",
+ "/users/{id}/getpasswordsinglesignoncredentials": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/devices(deviceid={value})": "least=DelegatedWork",
+ "/devices/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/devices/{id}/registeredowners/{id}": "least=DelegatedWork",
+ "/devices/{id}/registeredusers/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/privilegedapproval/myrequests": "least=DelegatedWork",
+ "/privilegedoperationevents": "least=DelegatedWork",
+ "/privilegedroleassignments/{id}/roleinfo": "least=DelegatedWork",
+ "/privilegedroleassignments/my": "least=DelegatedWork",
+ "/privilegedroles": "least=DelegatedWork",
+ "/privilegedroles/{id}": "least=DelegatedWork",
+ "/privilegedroles/{id}/assignments": "least=DelegatedWork",
+ "/privilegedroles/{id}/settings": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/privilegedroleassignments": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/privilegedroleassignments/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod/pin/updatepin": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod/pin/updatepin": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "Directory.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read directory data",
+ "adminDescription": "Allows the app to read data in your organization's directory, such as users, groups and apps.",
+ "userDisplayName": "Read directory data",
+ "userDescription": "Allows the app to read data in your organization's directory.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read directory data",
+ "adminDescription": "Allows the app to read data in your organization's directory, such as users, groups and apps, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/cloudLicensing/allotments": "",
+ "/admin/cloudLicensing/allotments/{id}": "",
+ "/admin/cloudLicensing/allotments/{id}/assignments": "",
+ "/admin/cloudLicensing/allotments/{id}/assignments/{id}": "",
+ "/admin/cloudLicensing/allotments/{id}/owner": "",
+ "/admin/cloudLicensing/allotments/{id}/waitingMembers": "",
+ "/admin/cloudLicensing/allotments/{id}/waitingMembers/{id}": "",
+ "/admin/cloudLicensing/assignmentErrors": "",
+ "/admin/cloudLicensing/assignmentErrors/{id}": "",
+ "/admin/cloudLicensing/assignmentErrors/{id}/assignedTo": "",
+ "/admin/cloudLicensing/assignmentErrors/{id}/usageRight": "",
+ "/admin/cloudLicensing/assignments": "",
+ "/admin/cloudLicensing/assignments/{id}": "",
+ "/admin/cloudLicensing/assignments/{id}/allotment": "",
+ "/admin/cloudLicensing/assignments/{id}/assignedTo": "",
+ "/administrativeunits": "",
+ "/administrativeunits/{id}": "",
+ "/administrativeunits/{id}/members": "",
+ "/administrativeunits/{id}/members/{id}": "",
+ "/administrativeunits/{id}/scopedrolemembers": "",
+ "/administrativeunits/{id}/scopedrolemembers/{id}": "",
+ "/administrativeunits/delta": "",
+ "/applications": "",
+ "/applications(appid={value})": "",
+ "/applications/{id}": "",
+ "/applications/{id}/extensionproperties": "",
+ "/applications/delta": "least=DelegatedWork",
+ "/auditlogs/directoryaudits": "",
+ "/auditlogs/directoryaudits/{id}": "",
+ "/auditlogs/provisioning": "",
+ "/contacts": "",
+ "/contacts/{id}": "",
+ "/contacts/{id}/directreports": "",
+ "/contacts/{id}/manager": "",
+ "/contacts/{id}/memberof": "",
+ "/contacts/{id}/transitivememberof": "",
+ "/contacts/{id}/transitivereports/$count": "",
+ "/contacts/delta": "",
+ "/contracts": "",
+ "/contracts/{id}": "",
+ "/dataclassification/jobs": "least=DelegatedWork,Application",
+ "/dataclassification/jobs/{id}": "least=DelegatedWork,Application",
+ "/dataclassification/sensitivetypes": "least=DelegatedWork,Application",
+ "/dataclassification/sensitivetypes/{id}": "least=DelegatedWork,Application",
+ "/devices": "",
+ "/devices(deviceid={value})": "",
+ "/devices(deviceid={value})/memberof": "",
+ "/devices(deviceid={value})/registeredowners": "",
+ "/devices(deviceid={value})/registeredusers": "",
+ "/devices(deviceid={value})/transitivememberof": "",
+ "/devices(deviceid={value})/usagerights": "",
+ "/devices/{id}": "",
+ "/devices/{id}/cloudLicensing/assignments": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/devices/{id}/cloudLicensing/usageRights": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/devices/{id}/cloudLicensing/waitingMembers": "",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/devices/{id}/memberof": "",
+ "/devices/{id}/registeredowners": "",
+ "/devices/{id}/registeredusers": "",
+ "/devices/{id}/transitivememberof": "",
+ "/devices/{id}/usagerights": "",
+ "/directory/administrativeunits": "",
+ "/directory/administrativeunits/{id}": "",
+ "/directory/administrativeunits/{id}/members": "",
+ "/directory/administrativeunits/{id}/members/{id}": "",
+ "/directory/administrativeunits/{id}/scopedrolemembers": "",
+ "/directory/administrativeunits/{id}/scopedrolemembers/{id}": "",
+ "/directoryobjects/{id}": "least=DelegatedWork,Application",
+ "/directoryroles": "",
+ "/directoryroles(roletemplateid={value})": "least=DelegatedWork,Application",
+ "/directoryroles(roletemplateid={value})/members": "least=DelegatedWork,Application",
+ "/directoryroles(roletemplateid={value})/scopedmembers": "least=DelegatedWork,Application",
+ "/directoryroles/{id}": "",
+ "/directoryroles/{id}/members": "",
+ "/directoryroles/{id}/scopedmembers": "",
+ "/directoryroles/delta": "",
+ "/directoryroletemplates": "",
+ "/directoryroletemplates/{id}": "",
+ "/directorysettingtemplates": "",
+ "/directorysettingtemplates/{id}": "",
+ "/domains": "",
+ "/domains/{id}": "",
+ "/domains/{id}/rootDomain": "",
+ "/education/classes/{id}/group": "",
+ "/education/me/user": "",
+ "/education/schools/{id}/administrativeunit": "",
+ "/education/users/{id}/user": "",
+ "/grouplifecyclepolicies": "least=DelegatedWork,Application",
+ "/grouplifecyclepolicies/{id}": "least=DelegatedWork,Application",
+ "/groups": "",
+ "/groups/{id}": "",
+ "/groups/{id}/approleassignments": "least=DelegatedWork,Application",
+ "/groups/{id}/cloudLicensing/assignments": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/groups/{id}/cloudLicensing/usageRights": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/groups/{id}/grouplifecyclepolicies": "least=DelegatedWork,Application",
+ "/groups/{id}/memberof": "",
+ "/groups/{id}/members": "",
+ "/groups/{id}/owners": "",
+ "/groups/{id}/settings": "",
+ "/groups/{id}/settings/{id}": "",
+ "/groups/{id}/transitivememberof": "",
+ "/groups/{id}/transitivemembers": "",
+ "/groups/delta": "",
+ "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": "",
+ "/groupsettings": "",
+ "/groupsettings/{id}": "",
+ "/groupsettingtemplates": "",
+ "/groupsettingtemplates/{id}": "",
+ "/oauth2permissiongrants": "least=DelegatedWork,Application",
+ "/oauth2permissiongrants/{id}": "least=DelegatedWork,Application",
+ "/oauth2permissiongrants/delta": "least=DelegatedWork,Application",
+ "/organization": "",
+ "/policies/adminconsentrequestpolicy": "",
+ "/policies/claimsmappingpolicies/{id}/appliesto": "",
+ "/policies/homerealmdiscoverypolicies/{id}/appliesto": "",
+ "/policies/permissiongrantpolicies/{id}/excludes": "",
+ "/policies/permissiongrantpolicies/{id}/includes": "",
+ "/policies/tokenissuancepolicies/{id}/appliesto": "",
+ "/policies/tokenlifetimepolicies/{id}/appliesto": "",
+ "/rolemanagement/cloudpc/roledefinitions": "",
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "",
+ "/rolemanagement/devicemanagement/roledefinitions": "",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": "",
+ "/rolemanagement/directory/roleassignments": "",
+ "/rolemanagement/directory/roleassignments/{id}": "",
+ "/rolemanagement/directory/roledefinitions": "",
+ "/rolemanagement/directory/roledefinitions/{id}": "",
+ "/rolemanagement/directory/roledefinitions/{id}/assignedprincipals": "",
+ "/rolemanagement/directory/transitiveroleassignments": "",
+ "/rolemanagement/exchange/roleassignments": "",
+ "/rolemanagement/exchange/roleassignments/{id}": "",
+ "/rolemanagement/exchange/roledefinitions": "",
+ "/rolemanagement/exchange/roledefinitions/{id}": "",
+ "/serviceprincipals": "",
+ "/serviceprincipals(appid={value})": "",
+ "/serviceprincipals(appid={value})/createdobjects": "",
+ "/serviceprincipals(appid={value})/delegatedpermissionclassifications": "",
+ "/serviceprincipals(appid={value})/inheritedoauth2permissiongrants": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/memberof": "",
+ "/serviceprincipals(appid={value})/oauth2permissiongrants": "least=DelegatedWork",
+ "/serviceprincipals(appid={value})/ownedobjects": "",
+ "/serviceprincipals(appid={value})/transitivememberof": "",
+ "/serviceprincipals/{id}": "",
+ "/serviceprincipals/{id}/createdobjects": "",
+ "/serviceprincipals/{id}/delegatedpermissionclassifications": "",
+ "/serviceprincipals/{id}/inheritedoauth2permissiongrants": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/memberof": "",
+ "/serviceprincipals/{id}/oauth2permissiongrants": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/ownedobjects": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}": "",
+ "/serviceprincipals/{id}/transitivememberof": "",
+ "/serviceprincipals/delta": "least=DelegatedWork",
+ "/settings": "",
+ "/settings/{id}": "",
+ "/subscribedskus": "",
+ "/subscribedskus/{id}": "",
+ "/teams/{id}": "",
+ "/teams/{id}/channels": "",
+ "/teams/{id}/channels/{id}": "",
+ "/teams/{id}/channels/{id}/tabs": "",
+ "/teams/{id}/channels/{id}/tabs/{id}": "",
+ "/teams/{id}/installedapps": "",
+ "/teams/{id}/installedapps/{id}": "",
+ "/users": "",
+ "/users/{id}": "",
+ "/users/{id}/approleassignedresources": "least=DelegatedWork,Application",
+ "/users/{id}/approleassignments": "least=Application",
+ "/users/{id}/cloudLicensing/assignmentErrors": "",
+ "/users/{id}/cloudLicensing/assignmentErrors/{id}": "",
+ "/users/{id}/cloudLicensing/assignments": "",
+ "/users/{id}/cloudLicensing/assignments/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/users/{id}/cloudLicensing/usageRights": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/waitingMembers": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/users/{id}/createdobjects": "",
+ "/users/{id}/directreports": "",
+ "/users/{id}/joinedteams": "",
+ "/users/{id}/licensedetails": "",
+ "/users/{id}/manager": "",
+ "/users/{id}/memberof": "least=Application",
+ "/users/{id}/oauth2permissiongrants": "least=DelegatedWork,Application",
+ "/users/{id}/owneddevices": "",
+ "/users/{id}/ownedobjects": "",
+ "/users/{id}/registereddevices": "",
+ "/users/{id}/scopedrolememberof": "least=DelegatedWork,Application",
+ "/users/{id}/transitivememberof": "",
+ "/users/{id}/transitivereports/$count": "least=Application",
+ "/users/{id}/usagerights": "",
+ "/users/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps": "",
+ "/applications/{id}/extensionproperties/{id}": "",
+ "/me": "",
+ "/me/approleassignedresources": "least=DelegatedWork",
+ "/me/cloudLicensing/assignmentErrors": "",
+ "/me/cloudLicensing/assignmentErrors/{id}": "",
+ "/me/cloudLicensing/assignments": "",
+ "/me/cloudLicensing/assignments/{id}": "",
+ "/me/cloudLicensing/assignments/{id}/allotment": "",
+ "/me/cloudLicensing/usageRights": "",
+ "/me/cloudLicensing/usageRights/{id}": "",
+ "/me/cloudLicensing/usageRights/{id}/assignments": "",
+ "/me/cloudLicensing/waitingMembers": "",
+ "/me/cloudLicensing/waitingMembers/{id}": "",
+ "/me/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/me/createdobjects": "",
+ "/me/directreports": "",
+ "/me/inheritedoauth2permissiongrants": "least=DelegatedWork",
+ "/me/joinedteams": "",
+ "/me/licensedetails": "",
+ "/me/manager": "",
+ "/me/memberof": "",
+ "/me/oauth2permissiongrants": "least=DelegatedWork",
+ "/me/owneddevices": "",
+ "/me/ownedobjects": "",
+ "/me/registereddevices": "",
+ "/me/scopedrolememberof": "least=DelegatedWork",
+ "/me/transitivememberof": "",
+ "/privilegedroleassignmentrequests": "least=DelegatedWork",
+ "/users/{id}/licenseDetails/getTeamsLicensingDetails": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/owners": "",
+ "/applications/{id}/owners": "",
+ "/serviceprincipals(appid={value})/approleassignedto": "",
+ "/serviceprincipals(appid={value})/approleassignments": "",
+ "/serviceprincipals(appid={value})/inheritedapproleassignments": "",
+ "/serviceprincipals(appid={value})/owners": "",
+ "/serviceprincipals/{id}/approleassignedto": "",
+ "/serviceprincipals/{id}/approleassignments": "",
+ "/serviceprincipals/{id}/inheritedapproleassignments": "",
+ "/serviceprincipals/{id}/owners": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/dataclassification/classifyfile": "least=DelegatedWork,Application",
+ "/dataclassification/classifytext": "least=DelegatedWork,Application",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/directoryobjects/getavailableextensionproperties": "least=DelegatedWork,Application",
+ "/directoryobjects/getbyids": "least=DelegatedWork,Application",
+ "/directoryobjects/validateproperties": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/serviceprincipals(appid={value})/createpasswordsinglesignoncredentials": "",
+ "/serviceprincipals(appid={value})/deletepasswordsinglesignoncredentials": "",
+ "/serviceprincipals(appid={value})/getpasswordsinglesignoncredentials": "",
+ "/serviceprincipals(appid={value})/updatepasswordsinglesignoncredentials": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/createpasswordsinglesignoncredentials": "",
+ "/serviceprincipals/{id}/deletepasswordsinglesignoncredentials": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/serviceprincipals/{id}/getpasswordsinglesignoncredentials": "",
+ "/serviceprincipals/{id}/updatepasswordsinglesignoncredentials": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": "",
+ "/privilegedroleassignmentrequests/my": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "Directory.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write directory data",
+ "adminDescription": "Allows the app to read and write data in your organization's directory, such as users, and groups. It does not allow the app to delete users or groups, or reset user passwords but it does allow modification of recovery properties that may lead to account takeover.",
+ "userDisplayName": "Read and write directory data",
+ "userDescription": "Allows the app to read and write data in your organization's directory, such as other users, groups. It does not allow the app to delete users or groups, or reset user passwords but it does allow modification of recovery properties that may lead to account takeover.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write directory data",
+ "adminDescription": "Allows the app to read and write data in your organization's directory, such as users, and groups, without a signed-in user. It does not allow user or group deletion.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/cloudLicensing/allotments": "",
+ "/admin/cloudLicensing/allotments/{id}": "",
+ "/admin/cloudLicensing/allotments/{id}/owner": "",
+ "/admin/cloudLicensing/allotments/{id}/waitingMembers": "",
+ "/admin/cloudLicensing/allotments/{id}/waitingMembers/{id}": "",
+ "/admin/cloudLicensing/assignmentErrors": "",
+ "/admin/cloudLicensing/assignmentErrors/{id}": "",
+ "/admin/cloudLicensing/assignmentErrors/{id}/assignedTo": "",
+ "/admin/cloudLicensing/assignmentErrors/{id}/usageRight": "",
+ "/admin/cloudLicensing/assignments/{id}/allotment": "",
+ "/admin/cloudLicensing/assignments/{id}/assignedTo": "",
+ "/administrativeunits": "",
+ "/administrativeunits/{id}": "",
+ "/administrativeunits/{id}/members/{id}": "",
+ "/administrativeunits/{id}/scopedrolemembers": "",
+ "/administrativeunits/{id}/scopedrolemembers/{id}": "",
+ "/administrativeunits/delta": "",
+ "/applications(appid={value})": "",
+ "/applications/{id}": "",
+ "/applications/delta": "",
+ "/contacts": "",
+ "/contacts/{id}": "",
+ "/contacts/{id}/directreports": "",
+ "/contacts/{id}/manager": "",
+ "/contacts/{id}/memberof": "",
+ "/contacts/delta": "",
+ "/contracts": "",
+ "/contracts/{id}": "",
+ "/devices": "",
+ "/devices(deviceid={value})": "",
+ "/devices(deviceid={value})/memberof": "",
+ "/devices(deviceid={value})/registeredowners": "",
+ "/devices(deviceid={value})/registeredusers": "",
+ "/devices(deviceid={value})/transitivememberof": "",
+ "/devices(deviceid={value})/usagerights": "",
+ "/devices/{id}": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/devices/{id}/cloudLicensing/usageRights": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}": "",
+ "/devices/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/devices/{id}/cloudLicensing/waitingMembers": "",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/devices/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/devices/{id}/memberof": "",
+ "/devices/{id}/registeredowners": "",
+ "/devices/{id}/registeredusers": "",
+ "/devices/{id}/transitivememberof": "",
+ "/devices/{id}/usagerights": "",
+ "/directory/administrativeunits": "",
+ "/directory/administrativeunits/{id}": "",
+ "/directory/administrativeunits/{id}/members/{id}": "",
+ "/directory/administrativeunits/{id}/scopedrolemembers": "",
+ "/directory/administrativeunits/{id}/scopedrolemembers/{id}": "",
+ "/directoryroles": "",
+ "/directoryroles(roletemplateid={value})": "",
+ "/directoryroles(roletemplateid={value})/members": "",
+ "/directoryroles(roletemplateid={value})/scopedmembers": "",
+ "/directoryroles/{id}": "",
+ "/directoryroles/{id}/members": "",
+ "/directoryroles/{id}/scopedmembers": "",
+ "/directoryroles/delta": "",
+ "/directoryroletemplates": "",
+ "/directoryroletemplates/{id}": "",
+ "/directorysettingtemplates": "",
+ "/directorysettingtemplates/{id}": "",
+ "/groups/{id}/approleassignments": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/groups/{id}/cloudLicensing/usageRights": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/groups/{id}/grouplifecyclepolicies": "",
+ "/groups/{id}/memberof": "",
+ "/groups/{id}/transitivememberof": "",
+ "/groups/delta": "",
+ "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": "",
+ "/groupsettingtemplates": "",
+ "/groupsettingtemplates/{id}": "",
+ "/oauth2permissiongrants/delta": "",
+ "/organization": "",
+ "/rolemanagement/directory/roleassignments": "",
+ "/rolemanagement/directory/roleassignments/{id}": "",
+ "/rolemanagement/directory/transitiveroleassignments": "",
+ "/rolemanagement/exchange/roleassignments": "",
+ "/rolemanagement/exchange/roleassignments/{id}": "",
+ "/rolemanagement/exchange/roledefinitions": "",
+ "/rolemanagement/exchange/roledefinitions/{id}": "",
+ "/serviceprincipals(appid={value})/approleassignedto": "",
+ "/serviceprincipals(appid={value})/approleassignments": "",
+ "/serviceprincipals(appid={value})/createdobjects": "",
+ "/serviceprincipals(appid={value})/inheritedapproleassignments": "",
+ "/serviceprincipals(appid={value})/inheritedoauth2permissiongrants": "",
+ "/serviceprincipals(appid={value})/memberof": "",
+ "/serviceprincipals(appid={value})/oauth2permissiongrants": "",
+ "/serviceprincipals(appid={value})/ownedobjects": "",
+ "/serviceprincipals(appid={value})/transitivememberof": "",
+ "/serviceprincipals/{id}/approleassignedto": "",
+ "/serviceprincipals/{id}/approleassignments": "",
+ "/serviceprincipals/{id}/createdobjects": "",
+ "/serviceprincipals/{id}/inheritedapproleassignments": "",
+ "/serviceprincipals/{id}/inheritedoauth2permissiongrants": "",
+ "/serviceprincipals/{id}/memberof": "",
+ "/serviceprincipals/{id}/oauth2permissiongrants": "",
+ "/serviceprincipals/{id}/ownedobjects": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups": "",
+ "/serviceprincipals/{id}/transitivememberof": "",
+ "/serviceprincipals/delta": "",
+ "/subscribedskus": "",
+ "/subscribedskus/{id}": "",
+ "/users/{id}/cloudLicensing/assignmentErrors": "",
+ "/users/{id}/cloudLicensing/assignmentErrors/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/users/{id}/cloudLicensing/usageRights": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/waitingMembers": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/users/{id}/createdobjects": "",
+ "/users/{id}/directreports": "",
+ "/users/{id}/joinedteams": "",
+ "/users/{id}/licensedetails": "",
+ "/users/{id}/memberof": "",
+ "/users/{id}/owneddevices": "",
+ "/users/{id}/ownedobjects": "",
+ "/users/{id}/registereddevices": "",
+ "/users/{id}/scopedrolememberof": "",
+ "/users/{id}/transitivememberof": "",
+ "/users/{id}/usagerights": "",
+ "/users/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/admin/cloudLicensing/allotments/{id}/assignments": "",
+ "/admin/cloudLicensing/assignments": "",
+ "/administrativeunits/{id}/members": "",
+ "/applications(appid={value})/owners": "",
+ "/applications/{id}/extensionproperties": "",
+ "/applications/{id}/owners": "",
+ "/devices/{id}/cloudLicensing/assignments": "",
+ "/directory/administrativeunits/{id}/members": "",
+ "/grouplifecyclepolicies": "least=DelegatedWork,Application",
+ "/groups": "",
+ "/groups/{id}/cloudLicensing/assignments": "",
+ "/groups/{id}/settings": "",
+ "/groupsettings": "",
+ "/oauth2permissiongrants": "",
+ "/rolemanagement/cloudpc/roledefinitions": "",
+ "/rolemanagement/devicemanagement/roledefinitions": "",
+ "/rolemanagement/directory/roledefinitions": "",
+ "/serviceprincipals(appid={value})/owners": "",
+ "/serviceprincipals/{id}/owners": "",
+ "/settings": "",
+ "/teams/{id}/channels": "",
+ "/teams/{id}/channels/{id}/tabs": "",
+ "/teams/{id}/installedapps": "",
+ "/users": "",
+ "/users/{id}/cloudLicensing/assignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps": "",
+ "/me/cloudLicensing/assignments": "",
+ "/onpremisespublishingprofiles/applicationproxy/connectorgroups/{id}/members": "least=DelegatedWork",
+ "/onpremisespublishingprofiles/applicationproxy/connectors/{id}/memberof": "least=DelegatedWork",
+ "/policies/featurerolloutpolicies": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}": "",
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}": "",
+ "/onpremisespublishingprofiles/{id}/agents/{id}/agentgroups/{id}": "",
+ "/policies/featurerolloutpolicies/{id}/appliesto/{id}": "",
+ "/serviceprincipals(appid={value})/owners/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions": "",
+ "/groups/{id}/deletepasswordsinglesignoncredentials": "",
+ "/groups/{id}/getpasswordsinglesignoncredentials": "",
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/cloudLicensing/assignments/reprocessAssignments": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": "",
+ "/me/invalidateallrefreshtokens": "",
+ "/me/revokesigninsessions": "",
+ "/onpremisespublishingprofiles/{id}/agentgroups/{id}/agents": "",
+ "/onpremisespublishingprofiles/{id}/agents/{id}/agentgroups": "",
+ "/policies/featurerolloutpolicies/{id}/appliesto": "",
+ "/users/{id}/deletepasswordsinglesignoncredentials": "",
+ "/users/{id}/getpasswordsinglesignoncredentials": "",
+ "/users/{id}/invalidateallrefreshtokens": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/applications": "",
+ "/me": "",
+ "/me/cloudLicensing/assignmentErrors": "",
+ "/me/cloudLicensing/assignmentErrors/{id}": "",
+ "/me/cloudLicensing/assignments/{id}/allotment": "",
+ "/me/cloudLicensing/usageRights": "",
+ "/me/cloudLicensing/usageRights/{id}": "",
+ "/me/cloudLicensing/usageRights/{id}/assignments": "",
+ "/me/cloudLicensing/waitingMembers": "",
+ "/me/cloudLicensing/waitingMembers/{id}": "",
+ "/me/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/me/createdobjects": "",
+ "/me/directreports": "",
+ "/me/joinedteams": "",
+ "/me/licensedetails": "",
+ "/me/manager": "",
+ "/me/memberof": "",
+ "/me/owneddevices": "",
+ "/me/ownedobjects": "",
+ "/me/registereddevices": "",
+ "/me/scopedrolememberof": "",
+ "/me/transitivememberof": "",
+ "/onpremisespublishingprofiles/{id}": "",
+ "/onpremisespublishingprofiles/{id}/agents": "",
+ "/onpremisespublishingprofiles/{id}/agents/{id}": "",
+ "/onpremisespublishingprofiles/applicationproxy/connectorgroups": "least=DelegatedWork",
+ "/onpremisespublishingprofiles/applicationproxy/connectorgroups/{id}/applications": "least=DelegatedWork",
+ "/onpremisespublishingprofiles/applicationproxy/connectors": "least=DelegatedWork",
+ "/onpremisespublishingprofiles/applicationproxy/connectors/{id}": "least=DelegatedWork",
+ "/serviceprincipals": "",
+ "/users/{id}/licenseDetails/getTeamsLicensingDetails": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/addkey": "",
+ "/applications(appid={value})/addpassword": "",
+ "/applications(appid={value})/removekey": "",
+ "/applications(appid={value})/removepassword": "",
+ "/applications/{id}/addkey": "",
+ "/applications/{id}/addpassword": "",
+ "/applications/{id}/removekey": "",
+ "/applications/{id}/removepassword": "",
+ "/applicationtemplates/{id}/instantiate": "",
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/cloudLicensing/assignments/reprocessAssignments": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/directoryobjects/validateproperties": "",
+ "/grouplifecyclepolicies/{id}/addgroup": "least=DelegatedWork,Application",
+ "/grouplifecyclepolicies/{id}/removegroup": "least=DelegatedWork,Application",
+ "/grouplifecyclepolicies/renewgroup": "",
+ "/groups/{id}/assignlicense": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/cloudLicensing/assignments/reprocessAssignments": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/groups/{id}/owners": "",
+ "/groups/{id}/renew": "",
+ "/invitations": "",
+ "/onpremisespublishingprofiles/applicationproxy/connectorgroups": "least=DelegatedWork,Application",
+ "/serviceprincipals": "",
+ "/serviceprincipals(appid={value})/addkey": "",
+ "/serviceprincipals(appid={value})/addpassword": "",
+ "/serviceprincipals(appid={value})/addtokensigningcertificate": "",
+ "/serviceprincipals(appid={value})/createpasswordsinglesignoncredentials": "",
+ "/serviceprincipals(appid={value})/deletepasswordsinglesignoncredentials": "",
+ "/serviceprincipals(appid={value})/getpasswordsinglesignoncredentials": "",
+ "/serviceprincipals(appid={value})/removekey": "",
+ "/serviceprincipals(appid={value})/removepassword": "",
+ "/serviceprincipals(appid={value})/updatepasswordsinglesignoncredentials": "",
+ "/serviceprincipals/{id}/addkey": "",
+ "/serviceprincipals/{id}/addpassword": "",
+ "/serviceprincipals/{id}/addtokensigningcertificate": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/createpasswordsinglesignoncredentials": "",
+ "/serviceprincipals/{id}/deletepasswordsinglesignoncredentials": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/serviceprincipals/{id}/getpasswordsinglesignoncredentials": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups": "",
+ "/serviceprincipals/{id}/removekey": "",
+ "/serviceprincipals/{id}/removepassword": "",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema/directories/{id}/discover": "least=DelegatedWork",
+ "/serviceprincipals/{id}/updatepasswordsinglesignoncredentials": "",
+ "/teams": "",
+ "/teams/{id}/archive": "",
+ "/teams/{id}/clone": "",
+ "/teams/{id}/installedapps/{id}/upgrade": "",
+ "/teams/{id}/unarchive": "",
+ "/teams/87654321-0abc-zqf0-321456789q/installedapps": "",
+ "/users/{id}/assignlicense": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/cloudLicensing/assignments/reprocessAssignments": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": "",
+ "/users/{id}/reprocesslicenseassignment": "",
+ "/users/{id}/revokesigninsessions": "",
+ "/users/{id}/sponsors": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/applications(appid={value})/owners/{id}": "",
+ "/applications/{id}/extensionproperties/{id}": "",
+ "/applications/{id}/owners/{id}": "",
+ "/groups/{id}/members/{id}": "",
+ "/groups/{id}/owners/{id}": "",
+ "/serviceprincipals/{id}/owners/{id}": "",
+ "/users/{id}/sponsors/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/applications/{id}/connectorgroup": "least=DelegatedWork",
+ "/me/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/me/cloudLicensing/assignments/{id}/assignedTo/$ref": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/devices(deviceid={value})": "",
+ "/devices/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/group/{id}/settings": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/cloudLicensing/allotments/{id}/assignments/{id}": "",
+ "/admin/cloudLicensing/assignments/{id}": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}": "",
+ "/grouplifecyclepolicies/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/cloudLicensing/assignments/{id}": "",
+ "/groups/{id}/settings/{id}": "",
+ "/groupsettings/{id}": "",
+ "/oauth2permissiongrants/{id}": "",
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": "",
+ "/rolemanagement/directory/roledefinitions/{id}": "",
+ "/serviceprincipals(appid={value})": "",
+ "/serviceprincipals/{id}": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/approvedclientapps/{id}": "",
+ "/serviceprincipals/{id}/remotedesktopsecurityconfiguration/targetdevicegroups/{id}": "",
+ "/settings/{id}": "",
+ "/teams/{id}/channels/{id}": "",
+ "/teams/{id}/channels/{id}/tabs/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}": "",
+ "/teams/{id}": "",
+ "/users/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/admin/cloudLicensing/allotments/{id}/assignments/{id}/allotment/$ref": "",
+ "/admin/cloudLicensing/allotments/{id}/assignments/{id}/assignedTo/$ref": "",
+ "/admin/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/admin/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/devices/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/groups/{id}/team": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/agentgroups": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/agentgroups/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/hybridagentupdaterconfiguration": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/{id}": "",
+ "/onpremisespublishingprofiles/applicationproxy/connectorgroups/{id}": "least=DelegatedWork",
+ "/policies/featurerolloutpolicies/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/policies/adminconsentrequestpolicy": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/schemaextensions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/schemaextensions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/members/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/manager": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "DirectoryRecommendations.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Azure AD recommendations",
+ "adminDescription": "Allows the app to read Azure AD recommendations, on behalf of the signed-in user.",
+ "userDisplayName": "Read Azure AD recommendations",
+ "userDescription": "Allows the app to read Azure AD recommendations, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Azure AD recommendations",
+ "adminDescription": "Allows the app to read all Azure AD recommendations, without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/recommendationConfiguration": "least=DelegatedWork,Application",
+ "/directory/recommendations": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ixrdev"
+ }
+ },
+ "DirectoryRecommendations.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and update Azure AD recommendations",
+ "adminDescription": "Allows the app to read and update Azure AD recommendations, on behalf of the signed-in user. ",
+ "userDisplayName": "Read and update Azure AD recommendations",
+ "userDescription": "Allows the app to read and update Azure AD recommendations, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and update all Azure AD recommendations",
+ "adminDescription": "Allows the app to read and update all Azure AD recommendations, without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/recommendations": "",
+ "/directory/recommendations/{id}": "",
+ "/directory/recommendations/{id}/impactedresources": "",
+ "/directory/recommendations/{id}/impactedresources/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/recommendations/{id}/acceptRisk": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/addTag": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/applyAlternateMitigation": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/complete": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/dismiss": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}/acceptRisk": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}/addTag": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}/applyAlternateMitigation": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}/complete": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}/dismiss": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}/markPlanned": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}/postpone": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}/reactivate": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/{id}/removeTag": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/addTag": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/impactedresources/removeTag": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/markPlanned": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/postpone": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/reactivate": "least=DelegatedWork,Application",
+ "/directory/recommendations/{id}/removeTag": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/recommendationConfiguration": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ixrdev"
+ }
+ },
+ "Domain-InternalFederation.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read internal federation configuration for a domain.",
+ "adminDescription": "Allows the app to read internal federation configuration for a domain.",
+ "userDisplayName": "Read internal federation configuration for a domain.",
+ "userDescription": "Allows the app to read internal federation configuration for a domain.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read internal federation configuration for a domain.",
+ "adminDescription": "Allows the app to read internal federation configuration for a domain.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/domains/{id}/federationConfiguration": "least=DelegatedWork,Application",
+ "/domains/{id}/federationConfiguration/{configurationId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadusersandtenants"
+ }
+ },
+ "Domain-InternalFederation.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create, read, update and delete internal federation configuration for a domain.",
+ "adminDescription": "Allows the app to create, read, update and delete internal federation configuration for a domain.",
+ "userDisplayName": "Create, read, update and delete internal federation configuration for a domain.",
+ "userDescription": "Allows the app to create, read, update and delete internal federation configuration for a domain.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Create, read, update and delete internal federation configuration for a domain.",
+ "adminDescription": "Allows the app to create, read, update and delete internal federation configuration for a domain.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/domains/{id}/federationConfiguration": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/domains/{id}/federationConfiguration/{configurationId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadusersandtenants"
+ }
+ },
+ "Domain.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read domains.",
+ "adminDescription": "Allows the app to read all domain properties on behalf of the signed-in user.",
+ "userDisplayName": "Read domains.",
+ "userDescription": "Allows the app to read all domain properties on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read domains",
+ "adminDescription": "Allows the app to read all domain properties without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/federationconfigurations/graph.samlorwsfedexternaldomainfederation": "least=DelegatedWork,Application",
+ "/domains": "least=DelegatedWork,Application",
+ "/domains/{id}": "least=DelegatedWork,Application",
+ "/domains/{id}/domainnamereferences": "least=DelegatedWork,Application",
+ "/domains/{id}/federationconfiguration/{id}": "",
+ "/domains/{id}/rootDomain": "least=DelegatedWork,Application",
+ "/domains/{id}/serviceconfigurationrecords": "least=DelegatedWork,Application",
+ "/domains/{id}/verificationdnsrecords": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "iamut-dev"
+ }
+ },
+ "Domain.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write domains",
+ "adminDescription": "Allows the app to read and write all domain properties on behalf of the signed-in user. Also allows the app to add, verify and remove domains.",
+ "userDisplayName": "Read and write domains",
+ "userDescription": "Allows the app to read and write all domain properties on your behalf. Also allows the app to add, verify and remove domains.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write domains",
+ "adminDescription": "Allows the app to read and write all domain properties without a signed in user. Also allows the app to add, verify and remove domains.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/directory/federationconfigurations/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/federationconfigurations/graph.samlorwsfedexternaldomainfederation": "",
+ "/domains/{id}/domainnamereferences": "",
+ "/domains/{id}/rootDomain": "",
+ "/domains/{id}/serviceconfigurationrecords": "",
+ "/domains/{id}/verificationdnsrecords": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/domains": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/domains/{id}": "least=DelegatedWork,Application",
+ "/domains/{id}/federationconfiguration/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/domains/{id}/federationconfiguration": "",
+ "/domains/{id}/forcedelete": "least=DelegatedWork,Application",
+ "/domains/{id}/promote": "least=DelegatedWork,Application",
+ "/domains/{id}/verify": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "iamut-dev"
+ }
+ },
+ "eDiscovery.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all eDiscovery objects",
+ "adminDescription": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user.",
+ "userDisplayName": "Read all eDiscovery objects",
+ "userDescription": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all eDiscovery objects",
+ "adminDescription": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects without the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/custodians": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/sitesources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/usersources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/legalholds": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/legalholds/{id}/sitesources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/legalholds/{id}/usersources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/noncustodialdatasources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/reviewsets": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/queries": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/sourcecollections": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/additionalsources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/custodiansources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/tags": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/sitesources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/unifiedgroupsources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/usersources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/legalholds": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}/usersources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/tags": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/legalholds/{id}": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/queries/{id}": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/tags/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/tags/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}/close": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/activate": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/release": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/noncustodialdatasources/{id}/release": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/reopen": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/addtoreviewset": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/export": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/queries/{id}/applytags": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/estimatestatistics": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/close": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/activate": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/applyhold": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/release": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/removehold": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/updateindex": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/applyhold": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/removehold": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/updateindex": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/exportDownload": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}/disablePolicy": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}/enablePolicy": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/applyhold": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/release": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/removehold": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/updateindex": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/applyhold": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/removehold": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/updateindex": "",
+ "/security/cases/ediscoverycases/{id}/reopen": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/addtoreviewset": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/export": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/applytags": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/export": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/estimatestatistics": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/exportReport": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/exportResult": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}/custodians/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/sitesources/{id}": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/usersources/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/unifiedgroupsources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/unifiedgroupsources/{id}": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/noncustodialdatasources/{id}": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/noncustodialdatasources/{id}/datasource": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/operations": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/operations/{id}/microsoft.graph.ediscovery.caseexportoperation/getdownloadurl": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/settings": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/addtoreviewsetoperation": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/lastestimatestatisticsoperation": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/noncustodialsources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/tags/{id}/childtags": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/tags/ashierarchy": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/caseDatasources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/caseDatasources/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/caseDatasources/{id}/locations": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/caseDatasources/{id}/locations/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/lastindexoperation": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/noncustodialsources/{id}/lastindexoperation": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/operations": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/operations/{id}/microsoft.graph.security.ediscoveryexportoperation/getdownloadurl": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/custodian": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}/childtags/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}/parent": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/run": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/lastestimatestatisticsoperation": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/settings": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/tags/ashierarchy": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/cases/ediscoverycases/{id}/caseMembers": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DNRMsGraphSchemaAdmi"
+ }
+ },
+ "eDiscovery.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all eDiscovery objects",
+ "adminDescription": "Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all eDiscovery objects",
+ "userDescription": "Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all eDiscovery objects",
+ "adminDescription": "Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects without the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases": "",
+ "/compliance/ediscovery/cases/{id}/custodians": "",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/sitesources": "",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/usersources": "",
+ "/compliance/ediscovery/cases/{id}/legalholds": "",
+ "/compliance/ediscovery/cases/{id}/legalholds/{id}/sitesources": "",
+ "/compliance/ediscovery/cases/{id}/legalholds/{id}/usersources": "",
+ "/compliance/ediscovery/cases/{id}/noncustodialdatasources": "",
+ "/compliance/ediscovery/cases/{id}/reviewsets": "",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/queries": "",
+ "/compliance/ediscovery/cases/{id}/sourcecollections": "",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/additionalsources": "",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/custodiansources": "",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/noncustodialsources": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/tags": "",
+ "/security/cases/ediscoverycases": "",
+ "/security/cases/ediscoverycases/{id}/custodians": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/sitesources": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/unifiedgroupsources": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/usersources": "",
+ "/security/cases/ediscoverycases/{id}/legalholds": "",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}/usersources": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries": "",
+ "/security/cases/ediscoverycases/{id}/searches": "",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/additionalsources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/custodiansources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/noncustodialsources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/tags": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}": "",
+ "/compliance/ediscovery/cases/{id}/legalholds/{id}": "",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/queries/{id}": "",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}": "",
+ "/compliance/ediscovery/cases/{id}/tags/{id}": "",
+ "/security/cases/ediscoverycases/{id}": "",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}": "",
+ "/security/cases/ediscoverycases/{id}/tags/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}/close": "",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/activate": "",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/release": "",
+ "/compliance/ediscovery/cases/{id}/noncustodialdatasources/{id}/release": "",
+ "/compliance/ediscovery/cases/{id}/reopen": "",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/addtoreviewset": "",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/export": "",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}/queries/{id}/applytags": "",
+ "/compliance/ediscovery/cases/{id}/settings/resettodefault": "least=DelegatedWork,Application",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/estimatestatistics": "",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/purgedata": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/caseDatasources": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/close": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/activate": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/applyhold": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/release": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/removehold": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/updateindex": "",
+ "/security/cases/ediscoverycases/{id}/custodians/applyhold": "",
+ "/security/cases/ediscoverycases/{id}/custodians/removehold": "",
+ "/security/cases/ediscoverycases/{id}/custodians/updateindex": "",
+ "/security/cases/ediscoverycases/{id}/exportDownload": "",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}/disablePolicy": "",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}/enablePolicy": "",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}/retryPolicy": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/legalholds/{id}/sitesources": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/applyhold": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/release": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/removehold": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}/updateindex": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/applyhold": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/removehold": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/updateindex": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reopen": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/addtoreviewset": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/export": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/applytags": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/export": "",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/estimatestatistics": "",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/exportReport": "",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/exportResult": "",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/purgedata": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/settings/resettodefault": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}/custodians/{id}": "",
+ "/compliance/ediscovery/cases/{id}/settings": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}": "",
+ "/security/cases/ediscoverycases/{id}/settings": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/sitesources/{id}": "",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/usersources/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/unifiedgroupsources": "",
+ "/compliance/ediscovery/cases/{id}/custodians/{id}/unifiedgroupsources/{id}": "",
+ "/compliance/ediscovery/cases/{id}/noncustodialdatasources/{id}": "",
+ "/compliance/ediscovery/cases/{id}/noncustodialdatasources/{id}/datasource": "",
+ "/compliance/ediscovery/cases/{id}/operations": "",
+ "/compliance/ediscovery/cases/{id}/operations/{id}/microsoft.graph.ediscovery.caseexportoperation/getdownloadurl": "",
+ "/compliance/ediscovery/cases/{id}/reviewsets/{id}": "",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/addtoreviewsetoperation": "",
+ "/compliance/ediscovery/cases/{id}/sourcecollections/{id}/lastestimatestatisticsoperation": "",
+ "/compliance/ediscovery/cases/{id}/tags/{id}/childtags": "",
+ "/compliance/ediscovery/cases/{id}/tags/ashierarchy": "",
+ "/security/cases/ediscoverycases/{id}/caseDatasources": "",
+ "/security/cases/ediscoverycases/{id}/caseDatasources/{id}": "",
+ "/security/cases/ediscoverycases/{id}/caseDatasources/{id}/locations": "",
+ "/security/cases/ediscoverycases/{id}/caseDatasources/{id}/locations/{id}": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}": "",
+ "/security/cases/ediscoverycases/{id}/custodians/{id}/lastindexoperation": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialdatasources/{id}": "",
+ "/security/cases/ediscoverycases/{id}/noncustodialsources/{id}/lastindexoperation": "",
+ "/security/cases/ediscoverycases/{id}/operations": "",
+ "/security/cases/ediscoverycases/{id}/operations/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/operations/{id}/microsoft.graph.security.ediscoveryexportoperation/getdownloadurl": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/custodian": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}/childtags/{id}": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/files/{id}/tags/{id}/parent": "",
+ "/security/cases/ediscoverycases/{id}/reviewsets/{id}/queries/{id}/run": "",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/lastestimatestatisticsoperation": "",
+ "/security/cases/ediscoverycases/{id}/tags/ashierarchy": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/security/cases/ediscoverycases/{id}/caseDatasources/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/custodiansources/{id}": "least=DelegatedWork,Application",
+ "/security/cases/ediscoverycases/{id}/searches/{id}/noncustodialsources/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/cases/ediscoverycases/{id}/caseMembers": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DNRMsGraphSchemaAdmi"
+ }
+ },
+ "EduAssignments.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read users' class assignments and their grades",
+ "adminDescription": "Allows the app to read assignments and their grades on behalf of the user.",
+ "userDisplayName": "View your assignments and grades",
+ "userDescription": "Allows the app to view your assignments on your behalf including grades.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories": "",
+ "/education/classes/{id}/assignmentcategories/{id}": "",
+ "/education/classes/{id}/assignmentcategories/delta": "",
+ "/education/classes/{id}/assignmentdefaults": "",
+ "/education/classes/{id}/assignments": "",
+ "/education/classes/{id}/assignments/{id}": "",
+ "/education/classes/{id}/assignments/{id}/categories": "",
+ "/education/classes/{id}/assignments/{id}/categories/delta": "",
+ "/education/classes/{id}/assignments/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/{id}/rubric": "",
+ "/education/classes/{id}/assignments/{id}/submissions": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/outcomes": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/delta": "",
+ "/education/classes/{id}/assignmentsettings": "",
+ "/education/classes/{id}/assignmentsettings/gradingschemes/{id}": "",
+ "/education/classes/{id}/getrecentlymodifiedsubmissions": "least=DelegatedWork",
+ "/education/classes/{id}/members/{id}/assignments/delta": "",
+ "/education/me/assignments": "",
+ "/education/me/rubrics": "",
+ "/education/me/rubrics/{id}": "",
+ "/education/users/{id}/assignments": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduAssignments.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all class assignments with grades",
+ "adminDescription": "Allows the app to read all class assignments with grades for all users without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories": "",
+ "/education/classes/{id}/assignmentcategories/{id}": "",
+ "/education/classes/{id}/assignmentcategories/delta": "",
+ "/education/classes/{id}/assignmentdefaults": "",
+ "/education/classes/{id}/assignments": "",
+ "/education/classes/{id}/assignments/{id}": "",
+ "/education/classes/{id}/assignments/{id}/categories": "",
+ "/education/classes/{id}/assignments/{id}/categories/delta": "",
+ "/education/classes/{id}/assignments/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/{id}/rubric": "",
+ "/education/classes/{id}/assignments/{id}/submissions": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/outcomes": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/delta": "",
+ "/education/classes/{id}/assignmentsettings": "",
+ "/education/classes/{id}/getrecentlymodifiedsubmissions": "least=Application",
+ "/education/classes/{id}/members/{id}/assignments/delta": "",
+ "/education/me/assignments": "",
+ "/education/users/{id}/assignments": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduAssignments.ReadBasic": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read users' class assignments information without reading any feedback or outcomes",
+ "adminDescription": "Allows the app to read assignments information on behalf of the user without reading any feedback or outcomes.",
+ "userDisplayName": "View your assignments without reading any feedback or outcomes",
+ "userDescription": "Allows the app to view your assignments on your behalf without reading any feedback or outcomes.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories": "least=DelegatedWork",
+ "/education/classes/{id}/assignmentcategories/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignmentcategories/delta": "least=DelegatedWork",
+ "/education/classes/{id}/assignmentdefaults": "least=DelegatedWork",
+ "/education/classes/{id}/assignments": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/categories": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/categories/delta": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/resources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/resources/{id}/dependentresources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/rubric": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}/dependentresources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/delta": "least=DelegatedWork",
+ "/education/classes/{id}/assignmentsettings": "least=DelegatedWork",
+ "/education/classes/{id}/assignmentsettings/gradingschemes/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/members/{id}/assignments/delta": "least=DelegatedWork",
+ "/education/me/assignments": "least=DelegatedWork",
+ "/education/me/rubrics": "least=DelegatedWork",
+ "/education/me/rubrics/{id}": "least=DelegatedWork",
+ "/education/users/{id}/assignments": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduAssignments.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all class assignments information without reading any feedback or outcomes",
+ "adminDescription": "Allows the app to read all class assignments information for all users without a signed-in user without reading any feedback or outcomes.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories": "least=Application",
+ "/education/classes/{id}/assignmentcategories/{id}": "least=Application",
+ "/education/classes/{id}/assignmentcategories/delta": "least=Application",
+ "/education/classes/{id}/assignmentdefaults": "least=Application",
+ "/education/classes/{id}/assignments": "least=Application",
+ "/education/classes/{id}/assignments/{id}": "least=Application",
+ "/education/classes/{id}/assignments/{id}/categories": "least=Application",
+ "/education/classes/{id}/assignments/{id}/categories/delta": "least=Application",
+ "/education/classes/{id}/assignments/{id}/resources": "least=Application",
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "least=Application",
+ "/education/classes/{id}/assignments/{id}/resources/{id}/dependentresources": "least=Application",
+ "/education/classes/{id}/assignments/{id}/rubric": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}/dependentresources": "least=Application",
+ "/education/classes/{id}/assignments/delta": "least=Application",
+ "/education/classes/{id}/assignmentsettings": "least=Application",
+ "/education/classes/{id}/members/{id}/assignments/delta": "least=Application",
+ "/education/me/assignments": "least=Application",
+ "/education/users/{id}/assignments": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduAssignments.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write users' class assignments and their grades",
+ "adminDescription": "Allows the app to read and write assignments and their grades on behalf of the user.",
+ "userDisplayName": "View and modify your assignments and grades",
+ "userDescription": "Allows the app to view and modify your assignments on your behalf including grades.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories": "",
+ "/education/classes/{id}/assignments": "",
+ "/education/classes/{id}/assignments/{id}/categories": "",
+ "/education/classes/{id}/assignments/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}/dependentresources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources": "least=DelegatedWork",
+ "/education/me/rubrics": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories/{id}": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories/delta": "",
+ "/education/classes/{id}/assignments/{id}/categories/delta": "",
+ "/education/classes/{id}/assignments/{id}/submissions": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/outcomes": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/delta": "",
+ "/education/classes/{id}/getrecentlymodifiedsubmissions": "",
+ "/education/classes/{id}/members/{id}/assignments/delta": "",
+ "/education/me/assignments": "",
+ "/education/users/{id}/assignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentdefaults": "",
+ "/education/classes/{id}/assignmentsettings": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}": "",
+ "/education/classes/{id}/assignmentsettings/gradingschemes/{id}": "",
+ "/education/me/rubrics/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/categories/{id}": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}/dependentresources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/activate": "",
+ "/education/classes/{id}/assignments/{id}/deactivate": "",
+ "/education/classes/{id}/assignments/{id}/publish": "",
+ "/education/classes/{id}/assignments/{id}/setupfeedbackresourcesfolder": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/setupresourcesfolder": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/excuse": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/outcomes": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/reassign": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/return": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/setupresourcesfolder": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submit": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/unsubmit": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/rubric": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/outcomes/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentsettings/gradingschemes": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/gradingscheme/$ref": "",
+ "/education/classes/{id}/assignmentsettings/defaultgradingscheme/$ref": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduAssignments.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Create, read, update and delete all class assignments with grades",
+ "adminDescription": "Allows the app to create, read, update and delete all class assignments with grades for all users without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories": "",
+ "/education/classes/{id}/assignmentcategories/{id}": "",
+ "/education/classes/{id}/assignmentcategories/delta": "",
+ "/education/classes/{id}/assignmentdefaults": "",
+ "/education/classes/{id}/assignments/{id}": "",
+ "/education/classes/{id}/assignments/{id}/categories": "",
+ "/education/classes/{id}/assignments/{id}/categories/delta": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/{id}/rubric": "",
+ "/education/classes/{id}/assignments/{id}/submissions": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/outcomes": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/delta": "",
+ "/education/classes/{id}/assignmentsettings": "",
+ "/education/classes/{id}/getrecentlymodifiedsubmissions": "",
+ "/education/classes/{id}/members/{id}/assignments/delta": "",
+ "/education/me/assignments": "",
+ "/education/users/{id}/assignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/outcomes/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/publish": "",
+ "/education/classes/{id}/assignments/{id}/setupresourcesfolder": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/excuse": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/outcomes": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/reassign": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/return": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submit": "least=Application",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/unsubmit": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments": "",
+ "/education/classes/{id}/assignments/{id}/resources": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/resources/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduAssignments.ReadWriteBasic": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write users' class assignments information without impacting or reading any feedback or outcomes",
+ "adminDescription": "Allows the app to read and write assignments information on behalf of the user without affecting or reading any feedback or outcomes.",
+ "userDisplayName": "View and modify your assignments without impacting or reading any feedback or outcomes",
+ "userDescription": "Allows the app to view and modify your assignments on your behalf without affecting or reading any feedback or outcomes.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories": "least=DelegatedWork",
+ "/education/classes/{id}/assignments": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/activate": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/categories": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/deactivate": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/publish": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/resources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/resources/dependentresources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/dependentresources": "least=DelegatedWork",
+ "/education/me/rubrics": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories": "",
+ "/education/classes/{id}/assignmentcategories/{id}": "",
+ "/education/classes/{id}/assignmentcategories/delta": "",
+ "/education/classes/{id}/assignmentdefaults": "",
+ "/education/classes/{id}/assignments": "",
+ "/education/classes/{id}/assignments/{id}": "",
+ "/education/classes/{id}/assignments/{id}/categories": "",
+ "/education/classes/{id}/assignments/{id}/categories/delta": "",
+ "/education/classes/{id}/assignments/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/resources/dependentresources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/rubric": "",
+ "/education/classes/{id}/assignments/{id}/submissions": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/dependentresources": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/delta": "",
+ "/education/classes/{id}/assignmentsettings": "",
+ "/education/classes/{id}/assignmentsettings/gradingschemes/{id}": "",
+ "/education/classes/{id}/members/{id}/assignments/delta": "",
+ "/education/me/assignments": "",
+ "/education/me/rubrics": "",
+ "/education/me/rubrics/{id}": "",
+ "/education/users/{id}/assignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentdefaults": "least=DelegatedWork",
+ "/education/classes/{id}/assignmentsettings": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignmentsettings/gradingschemes/{id}": "least=DelegatedWork",
+ "/education/me/rubrics/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/categories/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/resources/{id}/dependentresources/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/rubric": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentsettings/gradingschemes": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/gradingscheme/$ref": "least=DelegatedWork",
+ "/education/classes/{id}/assignmentsettings/defaultgradingscheme/$ref": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduAssignments.ReadWriteBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Create, read, update, and delete all class assignments information without accessing or impacting any feedback or outcomes",
+ "adminDescription": "Allows the app to create, read, update, and delete all class assignments information for all users without a signed-in user without accessing or impacting any feedback or outcomes.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignmentcategories": "",
+ "/education/classes/{id}/assignmentcategories/{id}": "",
+ "/education/classes/{id}/assignmentcategories/delta": "",
+ "/education/classes/{id}/assignmentdefaults": "",
+ "/education/classes/{id}/assignments": "",
+ "/education/classes/{id}/assignments/{id}": "",
+ "/education/classes/{id}/assignments/{id}/categories": "",
+ "/education/classes/{id}/assignments/{id}/categories/delta": "",
+ "/education/classes/{id}/assignments/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/resources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/{id}/rubric": "",
+ "/education/classes/{id}/assignments/{id}/submissions": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/resources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submittedresources/{id}/dependentresources": "",
+ "/education/classes/{id}/assignments/delta": "",
+ "/education/classes/{id}/assignmentsettings": "",
+ "/education/classes/{id}/members/{id}/assignments/delta": "",
+ "/education/me/assignments": "",
+ "/education/users/{id}/assignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments": "least=Application",
+ "/education/classes/{id}/assignments/{id}/publish": "least=Application",
+ "/education/classes/{id}/assignments/{id}/resources": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/resources/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduCurricula.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "",
+ "adminDescription": "Allows the app to read the user's modules and resources on behalf of the signed-in user.",
+ "userDisplayName": "Read your class modules and resources",
+ "userDescription": "Allows the app to read modules and resources on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/modules": "least=DelegatedWork",
+ "/education/classes/{id}/modules/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/modules/{id}/resources": "least=DelegatedWork",
+ "/education/classes/{id}/modules/{id}/resources/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduCurricula.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all class modules and resources",
+ "adminDescription": "Allows the app to read all modules and resources, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/modules": "least=Application",
+ "/education/classes/{id}/modules/{id}": "least=Application",
+ "/education/classes/{id}/modules/{id}/resources": "least=Application",
+ "/education/classes/{id}/modules/{id}/resources/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduCurricula.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "",
+ "adminDescription": "Allows the app to read and write user's modules and resources on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your class modules and resources",
+ "userDescription": "Allows the app to read and write modules and resources on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/modules": "least=DelegatedWork",
+ "/education/classes/{id}/modules/{id}/resources": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/modules/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/modules/{id}/resources/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/modules/{id}/pin": "least=DelegatedWork",
+ "/education/classes/{id}/modules/{id}/publish": "least=DelegatedWork",
+ "/education/classes/{id}/modules/{id}/setupresourcesfolder": "least=DelegatedWork",
+ "/education/classes/{id}/modules/{id}/unpin": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduCurricula.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all class modules and resources",
+ "adminDescription": "Allows the app to read and write all modules and resources, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/modules": "least=Application",
+ "/education/classes/{id}/modules/{id}/resources": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}/modules/{id}": "least=Application",
+ "/education/classes/{id}/modules/{id}/resources/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/modules/{id}/pin": "least=Application",
+ "/education/classes/{id}/modules/{id}/publish": "least=Application",
+ "/education/classes/{id}/modules/{id}/setupresourcesfolder": "least=Application",
+ "/education/classes/{id}/modules/{id}/unpin": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduReports-Reading.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all tenant reading assignments, speaker assignments, and Reading Coach passages data.",
+ "adminDescription": "Allows the app to read all tenant users reading assignments, speaker assignments, and Reading Coach passages data without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/reports/readingAssignmentSubmissions": "",
+ "/education/reports/readingCoachPassages": "",
+ "/education/reports/speakerAssignmentSubmissions": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduanalyticsshield"
+ }
+ },
+ "EduReports-Reading.ReadAnonymous.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all tenant reading assignments, speaker assignments, and Reading Coach passages data.",
+ "adminDescription": "Allows the app to read all tenant users reading assignments, speaker assignments, and Reading Coach passages data (excludes student-identifying information) without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/reports/readingAssignmentSubmissions": "least=Application",
+ "/education/reports/readingCoachPassages": "least=Application",
+ "/education/reports/speakerAssignmentSubmissions": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduanalyticsshield"
+ }
+ },
+ "EduReports-Reflect.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all tenant reflect check-ins submissions data",
+ "adminDescription": "Allows the app to read all tenant users reflect check-ins submissions data without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/reports/reflectCheckInResponses": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduanalyticsshield"
+ }
+ },
+ "EduReports-Reflect.ReadAnonymous.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all tenant reflect check-ins submissions data",
+ "adminDescription": "Allows the app to read all tenant users reflect check-ins submissions data (excludes responder-identifying information) without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/reports/reflectCheckInResponses": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduanalyticsshield"
+ }
+ },
+ "EduRoster.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read users' view of the roster",
+ "adminDescription": "Allows the app to read the structure of schools and classes in an organization's roster and education-specific information about users to be read on behalf of the user.",
+ "userDisplayName": "View your school, class and user information",
+ "userDescription": "Allows the app to view information about schools and classes in your organization and education-related information about you and other users on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/group": "",
+ "/education/classes/delta": "",
+ "/education/me/user": "",
+ "/education/schools/{id}/administrativeunit": "",
+ "/education/schools/delta": "",
+ "/education/users/{id}/user": "",
+ "/education/users/delta": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduRoster.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read the organization's roster",
+ "adminDescription": "Allows the app to read the structure of schools and classes in the organization's roster and education-specific information about all users to be read.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes": "least=Application",
+ "/education/classes/{id}": "least=Application",
+ "/education/classes/{id}/group": "least=Application",
+ "/education/classes/{id}/members": "least=Application",
+ "/education/classes/{id}/schools": "least=Application",
+ "/education/classes/{id}/teachers": "least=Application",
+ "/education/classes/delta": "",
+ "/education/me": "least=Application",
+ "/education/me/classes": "least=Application",
+ "/education/me/schools": "least=Application",
+ "/education/me/taughtclasses": "least=Application",
+ "/education/me/user": "least=Application",
+ "/education/schools": "least=Application",
+ "/education/schools/{id}": "least=Application",
+ "/education/schools/{id}/administrativeunit": "least=Application",
+ "/education/schools/{id}/classes": "least=Application",
+ "/education/schools/{id}/users": "least=Application",
+ "/education/schools/delta": "",
+ "/education/users": "least=Application",
+ "/education/users/{id}": "least=Application",
+ "/education/users/{id}/classes": "least=Application",
+ "/education/users/{id}/schools": "least=Application",
+ "/education/users/{id}/taughtclasses": "least=Application",
+ "/education/users/{id}/user": "least=Application",
+ "/education/users/delta": "",
+ "/education/users/schools": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduRoster.ReadBasic": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read a limited subset of users' view of the roster",
+ "adminDescription": "Allows the app to read a limited subset of the properties from the structure of schools and classes in an organization's roster and a limited subset of properties about users to be read on behalf of the user. Includes name, status, education role, email address and photo.",
+ "userDisplayName": "View a limited subset of your school, class and user information",
+ "userDescription": "Allows the app to view minimal information about both schools and classes in your organization and education-related information about you and other users on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes": "least=DelegatedWork",
+ "/education/classes/{id}": "least=DelegatedWork",
+ "/education/classes/{id}/group": "least=DelegatedWork",
+ "/education/classes/{id}/members": "least=DelegatedWork",
+ "/education/classes/{id}/schools": "least=DelegatedWork",
+ "/education/classes/{id}/teachers": "least=DelegatedWork",
+ "/education/classes/delta": "least=DelegatedWork",
+ "/education/me": "least=DelegatedWork",
+ "/education/me/classes": "least=DelegatedWork",
+ "/education/me/schools": "least=DelegatedWork",
+ "/education/me/taughtclasses": "least=DelegatedWork",
+ "/education/me/user": "least=DelegatedWork",
+ "/education/schools": "least=DelegatedWork",
+ "/education/schools/{id}": "least=DelegatedWork",
+ "/education/schools/{id}/administrativeunit": "least=DelegatedWork",
+ "/education/schools/{id}/classes": "least=DelegatedWork",
+ "/education/schools/delta": "least=DelegatedWork",
+ "/education/users/{id}": "least=DelegatedWork",
+ "/education/users/{id}/classes": "least=DelegatedWork",
+ "/education/users/{id}/schools": "least=DelegatedWork",
+ "/education/users/{id}/taughtclasses": "least=DelegatedWork",
+ "/education/users/{id}/user": "least=DelegatedWork",
+ "/education/users/delta": "least=DelegatedWork",
+ "/education/users/schools": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduRoster.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read a limited subset of the organization's roster",
+ "adminDescription": "Allows the app to read a limited subset of properties from both the structure of schools and classes in the organization's roster and education-specific information about all users. Includes name, status, role, email address and photo.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/delta": "least=Application",
+ "/education/schools/delta": "least=Application",
+ "/education/users/delta": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduRoster.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write users' view of the roster",
+ "adminDescription": "Allows the app to read and write the structure of schools and classes in an organization's roster and education-specific information about users to be read and written on behalf of the user.",
+ "userDisplayName": "View and modify your school, class and user information",
+ "userDescription": "Allows the app to view and modify information about schools and classes in your organization and education-related information about you and other users on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/delta": "",
+ "/education/schools/delta": "",
+ "/education/users/delta": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduRoster.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write the organization's roster",
+ "adminDescription": "Allows the app to read and write the structure of schools and classes in the organization's roster and education-specific information about all users to be read and written.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/education/classes": "least=Application",
+ "/education/classes/{id}/members": "least=Application",
+ "/education/classes/{id}/teachers": "least=Application",
+ "/education/schools": "least=Application",
+ "/education/schools/{id}/classes": "least=Application",
+ "/education/schools/{id}/users": "least=Application",
+ "/education/users": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/classes/{id}": "least=Application",
+ "/education/schools/{id}": "least=Application",
+ "/education/users/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/group": "",
+ "/education/classes/{id}/schools": "",
+ "/education/classes/delta": "",
+ "/education/me/classes": "",
+ "/education/me/schools": "",
+ "/education/me/taughtclasses": "",
+ "/education/me/user": "",
+ "/education/schools/{id}/administrativeunit": "",
+ "/education/schools/delta": "",
+ "/education/users/{id}/classes": "",
+ "/education/users/{id}/schools": "",
+ "/education/users/{id}/taughtclasses": "",
+ "/education/users/{id}/user": "",
+ "/education/users/delta": "",
+ "/education/users/schools": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/education/classes/{id}/members/{id}": "least=Application",
+ "/education/classes/{id}/teachers/{id}": "least=Application",
+ "/education/schools/{id}/classes/{id}": "least=Application",
+ "/education/schools/{id}/users/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/education/me": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "eduapipreauth"
+ }
+ },
+ "EduRoster.Write": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "userDisplayName": "",
+ "userDescription": "",
+ "requiresAdminConsent": false
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/classes/{id}/group": "",
+ "/education/me/user": "",
+ "/education/schools/{id}/administrativeunit": "",
+ "/education/users/{id}/user": ""
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "EduRoster.WriteWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/education/schools/delta": "",
+ "/education/users/delta": ""
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "EngagementConversation.Migration.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all Viva Engage conversations",
+ "adminDescription": "Allows the app to create Viva Engage conversations without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/employeeexperience/attachableLinks": "",
+ "/employeeexperience/communities/{id}/microsoft.graph.completeUploadSession": "",
+ "/employeeexperience/communities/{id}/microsoft.graph.createUploadSession": "",
+ "/employeeexperience/conversations": "",
+ "/employeeexperience/conversations/{id}/messages": "",
+ "/employeeexperience/conversations/{id}/messages/{id}/microsoft.graph.addReaction": "",
+ "/employeeExperience/conversations/{id}/messages/{id}/microsoft.graph.engagementConversationMessage/microsoft.graph.markBestReply": "",
+ "/employeeExperience/conversations/{id}/messages/{id}/microsoft.graph.engagementConversationMessage/microsoft.graph.vote": "",
+ "/employeeexperience/conversations/{id}/messages/{id}/microsoft.graph.engagementConversationPollMessage/microsoft.graph.vote": "",
+ "/employeeexperience/conversations/{id}/messages/{id}/replies": "",
+ "/employeeExperience/conversations/{id}/microsoft.graph.engagementConversation/microsoft.graph.vote": "",
+ "/employeeexperience/networkQuestions/completeUploadSession": "",
+ "/employeeexperience/networkQuestions/createUploadSession": "",
+ "/users/{id}/employeeExperience/storyline/microsoft.graph.completeUploadSession": "",
+ "/users/{id}/employeeExperience/storyline/microsoft.graph.createUploadSessions": "",
+ "/users/{id}/employeeExperience/storyline/microsoft.graph.follow": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/engagementasyncoperations/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ve-msgraph-owners"
+ }
+ },
+ "EngagementMeetingConversation.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Teams Q\u0026A conversations",
+ "adminDescription": "Allows an app to read all Teams Q\u0026A conversations and their properties on behalf of the signed-in user",
+ "userDisplayName": "Read all Teams Q\u0026A conversations",
+ "userDescription": "Allows the app to list Teams Q\u0026A conversations, and to read their properties on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all Teams Q\u0026A conversations",
+ "adminDescription": "Allows the app to list Teams Q\u0026A conversations, and to read their properties without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/communications/getAllOnlineMeetingMessages": "least=Application",
+ "/communications/onlineMeetingConversations/conversations/{id}/messages/{id}/reactions": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ve-msgraph-owners"
+ }
+ },
+ "EngagementRole.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read a user's Viva Engage roles ",
+ "adminDescription": "Allows the app to list a user's Viva Engage roles, on behalf of the signed-in user.",
+ "userDisplayName": "Read your Viva Engage roles",
+ "userDescription": "Allows the app to list your Viva Engage roles, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/employeeExperience/assignedRoles": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ve-msgraph-owners"
+ }
+ },
+ "EngagementRole.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Viva Engage roles and role memberships",
+ "adminDescription": "Allows the app to list all Viva Engage roles and role memberships on behalf of the signed-in user.",
+ "userDisplayName": "Read all Viva Engage roles and memberships",
+ "userDescription": "Allows the app to list all Viva Engage roles and role memberships on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Viva Engage roles and role memberships",
+ "adminDescription": "Allows the app to list all Viva Engage roles and role memberships without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeExperience/roles": "least=DelegatedWork,Application",
+ "/employeeExperience/roles/{id}/members": "least=DelegatedWork,Application",
+ "/user/{id}/employeeExperience/assignedRoles": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ve-msgraph-owners"
+ }
+ },
+ "EngagementRole.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Modify Viva Engage role membership",
+ "adminDescription": "Allows the app to assign Viva Engage role to a user, and remove a Viva Engage role from a user behalf of the signed-in user.",
+ "userDisplayName": "Modify Viva Engage role membership",
+ "userDescription": "Allows the app to assign Viva Engage role to a user, and remove a Viva Engage role from a user on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Modify Viva Engage role membership",
+ "adminDescription": "Allows the app to assign Viva Engage role to a user, and remove a Viva Engage role from a user without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/employeeExperience/roles/{id}/members": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeExperience/roles": "",
+ "/employeeExperience/roles/{id}/members": "",
+ "/user/{id}/employeeExperience/assignedRoles": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/employeeExperience/roles/{roleId}/members/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ve-msgraph-owners"
+ }
+ },
+ "EntitlementManagement.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all entitlement management resources",
+ "adminDescription": "Allows the app to read access packages and related entitlement management resources on behalf of the signed-in user.",
+ "userDisplayName": "Read all entitlement management resources",
+ "userDescription": "Allows the app to read access packages and related entitlement management resources that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all entitlement management resources",
+ "adminDescription": "Allows the app to read access packages and related entitlement management resources without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/steps": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/steps/{id}": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignments/additionalaccess(accesspackageid={value},incompatibleaccesspackageid={value})": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackageassignments/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/entitlementmanagement/accesspackages/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/entitlementmanagement/assignmentrequests/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/entitlementmanagement/assignments/additionalaccess(accesspackageid={value},incompatibleaccesspackageid={value})": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/assignments/filterbycurrentuser(on={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicies": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicypresets": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicypresets/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentresourceroles": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentresourceroles/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignments": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackagecustomworkflowextensions": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackagecustomworkflowextensions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackageresourceroles": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackageresources": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageresourceenvironments": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageresourceenvironments/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageresourcerequests": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/accesspackagesincompatiblewith": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/getaccesspackageassignmentpolicypresets": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/incompatibleaccesspackages": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/incompatiblegroups": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagesuggestions/filterbycurrentuser(on={value})": "least=Application",
+ "/identitygovernance/entitlementmanagement/assignmentpolicies": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignmentpolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignmentrequests": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignmentrequests/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignments": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignments/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/availableaccesspackages/{id}/resourcerolescopes": "least=Application",
+ "/identitygovernance/entitlementmanagement/catalogs": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/catalogs/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/dynamicaccessrequests/{id}": "least=Application",
+ "/identityGovernance/entitlementManagement/externalOriginResourceConnectors": "least=DelegatedWork,Application",
+ "/identityGovernance/entitlementManagement/externalOriginResourceConnectors/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/settings": "least=DelegatedWork,Application",
+ "/rolemanagement/entitlementmanagement/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/entitlementmanagement/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/entitlementmanagement/roledefinitions": "least=DelegatedWork,Application",
+ "/rolemanagement/entitlementmanagement/roledefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/accessevaluationdetections": "least=DelegatedWork,Application",
+ "/identitygovernance/accessevaluationdetections/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessevaluationpolicies": "least=DelegatedWork,Application",
+ "/identitygovernance/accessevaluationpolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessguardian/customextensions": "least=DelegatedWork,Application",
+ "/identitygovernance/accessguardian/customextensions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessguardian/customextensions/microsoft.graph.accessremediationextension": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackagecustomworkflowextensions": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/getapplicablepolicyrequirements": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/insights/accessdriftsummary": "least=DelegatedWork,Application",
+ "/identitygovernance/insights/accessdriftsummary/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/insights/accessdriftsummary/{id}/details": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/insights/accessdriftreport/downloadfile": "least=DelegatedWork,Application",
+ "/identitygovernance/insights/accessdriftreport/generatedownloaduri": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igaelmlivesite"
+ }
+ },
+ "EntitlementManagement.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write entitlement management resources",
+ "adminDescription": "Allows the app to request access to and management of access packages and related entitlement management resources on behalf of the signed-in user.",
+ "userDisplayName": "Read and write entitlement management resources",
+ "userDescription": "Allows the app to request access to and management of access packages and related entitlement management resources that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all entitlement management resources",
+ "adminDescription": "Allows the app to read and write access packages and related entitlement management resources without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/steps": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/steps/{id}": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/filterbycurrentuser(on={value})": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignments/additionalaccess(accesspackageid={value},incompatibleaccesspackageid={value})": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignments/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/entitlementmanagement/accesspackages/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/entitlementmanagement/assignmentrequests/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/entitlementmanagement/assignments/additionalaccess(accesspackageid={value},incompatibleaccesspackageid={value})": "",
+ "/identitygovernance/entitlementmanagement/assignments/filterbycurrentuser(on={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages/{id}": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/steps/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicies": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicypresets": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests": "least=Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackagecustomworkflowextensions": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackageresourcerequests": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/incompatibleaccesspackages": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/incompatiblegroups": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignmentpolicies": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignmentrequests": "least=Application",
+ "/identitygovernance/entitlementmanagement/catalogs": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors": "least=DelegatedWork,Application",
+ "/rolemanagement/entitlementmanagement/roleassignments": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentpolicypresets/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignmentpolicies/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignmentrequests/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}": "least=Application",
+ "/rolemanagement/entitlementmanagement/roleassignments/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}/cancel": "",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/getapplicablepolicyrequirements": "",
+ "/identitygovernance/entitlementmanagement/assignmentrequests/{id}/cancel": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}/reprocess": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}/resume": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackageassignments/{id}/reprocess": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accessPackageResources/{id}/refresh": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/accesspackageresourcerolescopes": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/assignmentpolicypresets": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/movetocatalog": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignmentrequests/{id}/reprocess": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/assignments/{id}/reprocess": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/dynamicaccesssessions": "least=Application",
+ "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}/clarify": "least=Application",
+ "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}/submit": "least=Application",
+ "/identityGovernance/entitlementManagement/externalOriginResourceConnectors": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentapprovals/{id}/stages/{id}": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentresourceroles": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentresourceroles/{id}": "",
+ "/identitygovernance/entitlementmanagement/accesspackageassignments": "",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackagecustomworkflowextensions/{id}": "",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackageresourceroles": "",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/accesspackageresources": "",
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}/customaccesspackageworkflowextensions": "",
+ "/identitygovernance/entitlementmanagement/accesspackageresourceenvironments": "",
+ "/identitygovernance/entitlementmanagement/accesspackageresourceenvironments/{id}": "",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/accesspackagesincompatiblewith": "",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/getaccesspackageassignmentpolicypresets": "",
+ "/identitygovernance/entitlementmanagement/accesspackagesuggestions/filterbycurrentuser(on={value})": "",
+ "/identitygovernance/entitlementmanagement/assignments": "",
+ "/identitygovernance/entitlementmanagement/assignments/{id}": "",
+ "/identitygovernance/entitlementmanagement/availableaccesspackages/{id}/resourcerolescopes": "",
+ "/identityGovernance/entitlementManagement/externalOriginResourceConnectors": "",
+ "/rolemanagement/entitlementmanagement/roledefinitions": "",
+ "/rolemanagement/entitlementmanagement/roledefinitions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackagecatalogs/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/catalogs/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations/{id}": "least=DelegatedWork,Application",
+ "/identityGovernance/entitlementManagement/externalOriginResourceConnectors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/assignmentpolicypresets/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/incompatibleaccesspackages/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/incompatiblegroups/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations/{id}/externalsponsors/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/entitlementmanagement/connectedorganizations/{id}/internalsponsors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/settings": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/accessevaluationdetections": "",
+ "/identitygovernance/accessevaluationdetections/{id}": "",
+ "/identitygovernance/accessevaluationpolicies": "",
+ "/identitygovernance/accessevaluationpolicies/{id}": "",
+ "/identitygovernance/accessguardian/customextensions": "",
+ "/identitygovernance/accessguardian/customextensions/{id}": "",
+ "/identitygovernance/accessguardian/customextensions/microsoft.graph.accessremediationextension": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/accessevaluationdetections/{id}/remediate": "least=DelegatedWork,Application",
+ "/identitygovernance/accessevaluationdetections/remediate": "least=DelegatedWork,Application",
+ "/identitygovernance/accessguardian/customextensions": "least=DelegatedWork,Application",
+ "/identitygovernance/catalogs/{id}/accessevaluationpolicies": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/accessevaluationdetections/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/accessguardian/customextensions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/catalogs/{id}/accessevaluationpolicies/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/identitygovernance/accessguardian/customextensions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/catalogs/{id}/accessevaluationpolicies/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/insights/accessdriftsummary": "",
+ "/identitygovernance/insights/accessdriftsummary/{id}": "",
+ "/identitygovernance/insights/accessdriftsummary/{id}/details": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/insights/accessdriftreport/downloadfile": "",
+ "/identitygovernance/insights/accessdriftreport/generatedownloaduri": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igaelmlivesite"
+ }
+ },
+ "EntitlementMgmt-SubjectAccess.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write entitlement management resources related to self-service operations",
+ "adminDescription": "Allows the app to manage self-service entitlement management resources on behalf of the signed-in user. This includes operations such as requesting access and approving access of others.",
+ "userDisplayName": "Read and write your entitlement management access",
+ "userDescription": "Allows the app to request, view, and cancel your access package assignments and view available access packages on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/filterbycurrentuser(on={value})": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackageassignments/filterbycurrentuser(on={value})": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackages/filterbycurrentuser(on={value})": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackagesuggestions/filterbycurrentuser(on={value})": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/assignmentrequests/filterbycurrentuser(on={value})": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/assignments/filterbycurrentuser(on={value})": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/availableaccesspackages/{id}/resourcerolescopes": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/dynamicaccessrequests/{id}": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackageassignmentrequests/{id}/cancel": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/accesspackages/{id}/getapplicablepolicyrequirements": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/assignmentrequests": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/assignmentrequests/{id}/cancel": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/dynamicaccesssessions": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}/clarify": "least=DelegatedWork",
+ "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}/submit": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/identitygovernance/entitlementmanagement/dynamicaccesssessions/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igaelmlivesite"
+ }
+ },
+ "EntraBackup.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Entra Backup configuration, preview jobs, and snapshots",
+ "adminDescription": "Allows the app to read the Entra Backup configuration, list snapshots and jobs, and enumerate the changes of a specific preview job, on behalf of the signed-in user.",
+ "userDisplayName": "Read Entra Backup configuration, preview jobs, and snapshots",
+ "userDescription": "Allows the app to read the Entra Backup configuration, list snapshots and jobs, and enumerate the changes of a specific preview job, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Entra Backup configuration, preview jobs, and snapshots",
+ "adminDescription": "Allows the app to read the Entra Backup configuration, list snapshots and jobs, and enumerate the changes of a specific preview job.",
+ "userDisplayName": "Read Entra Backup configuration, preview jobs, and snapshots",
+ "userDescription": "Allows the app to read the Entra Backup configuration, list snapshots and jobs, and enumerate the changes of a specific preview job, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/recovery/configuration": "least=Application,DelegatedWork",
+ "/directory/recovery/snapshots": "least=Application,DelegatedWork",
+ "/directory/recovery/snapshots/{id}": "least=Application,DelegatedWork",
+ "/directory/recovery/snapshots/{id}/recoveryJobs/{id}/getFailedChanges": "least=Application,DelegatedWork",
+ "/directory/recovery/snapshots/{id}/recoveryPreviewJobs/{id}/getChanges": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "xtenantex"
+ }
+ },
+ "EntraBackup.ReadWrite.Preview": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create a preview job, read preview job and snapshots",
+ "adminDescription": "Allows the app to list the all the snapshots, create a preview job and enumerate the changes of a specific preview job, on behalf of the signed-in user.",
+ "userDisplayName": "Create a preview job, read preview job and snapshots",
+ "userDescription": "Allows the app to list the all the snapshots, create a preview job and enumerate the changes of a specific preview job, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/recovery/snapshots/{id}/recoveryPreviewJobs": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "xtenantex"
+ }
+ },
+ "EntraBackup.ReadWrite.Recovery": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create preview and recovery job, read recovery job and snapshots",
+ "adminDescription": "Allows the app to list the all the snapshots, create a recovery job and enumerate the changes of a specific recovery job, on behalf of the signed-in user.",
+ "userDisplayName": "Create preview and recovery job, read recovery job and snapshots",
+ "userDescription": "Allows the app to list the all the snapshots, create a recovery job and enumerate the changes of a specific recovery job, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/recovery/snapshots/{id}/recoveryJobs": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "xtenantex"
+ }
+ },
+ "EventListener.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all identity authentication event listeners",
+ "adminDescription": "Allows the app to read your organization's authentication listeners, on behalf of the signed-in user.",
+ "userDisplayName": "Read all identity authentication event listeners",
+ "userDescription": "Allows the app to read your organization's authentication event listeners, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity authentication event listeners",
+ "adminDescription": "Allows the app to read your organization's authentication listeners, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/authenticationEventListeners": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/conditions/applications/includeApplications": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAccountTakeoverProtectionStartListener/handler/microsoft.graph.onAccountTakeoverProtectionStartCustomExtensionHandler/customExtension": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionListener/handler/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionStartListener/handler/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionSubmitListener/handler/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAuthenticationMethodLoadStartListener/handler/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onEmailOtpSendListener/handler/microsoft.graph.onOtpSendCustomExtensionHandler/customExtension": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onFraudProtectionLoadStartListener/handler/microsoft.graph.onFraudProtectionLoadStartExternalUsersAuthHandler/signUp/microsoft.graph.fraudProtectionProviderConfiguration/fraudProtectionProvider": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartBrandingOverrideHandler/brandingTheme": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartCustomExtensionHandler/customExtension": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onVerifiedIdClaimValidationListener/handler/microsoft.graph.onVerifiedIdClaimValidationCustomExtensionHandler/customExtension": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/microsoft.graph.onAccountTakeoverProtectionStartListener": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/conditions/applications/includeApplications": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollectionStart/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollectionSubmit/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "EventListener.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all identity authentication event listeners",
+ "adminDescription": "Allows the app to read and write your organization's authentication listeners, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all identity authentication event listeners",
+ "userDescription": "Allows the app to read and write your organization's authentication event listeners, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all identity authentication event listeners",
+ "adminDescription": "Allows the app to read and write your organization's authentication listeners, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identity/authenticationEventListeners": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/conditions/applications/includeApplications": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/conditions/applications/includeApplications": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/authenticationEventListeners/{id}": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAccountTakeoverProtectionStartListener/handler/microsoft.graph.onAccountTakeoverProtectionStartCustomExtensionHandler/customExtension": "",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionListener/handler/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes": "",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionStartListener/handler/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension": "",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionSubmitListener/handler/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension": "",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAuthenticationMethodLoadStartListener/handler/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders": "",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onEmailOtpSendListener/handler/microsoft.graph.onOtpSendCustomExtensionHandler/customExtension": "",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onFraudProtectionLoadStartListener/handler/microsoft.graph.onFraudProtectionLoadStartExternalUsersAuthHandler/signUp/microsoft.graph.fraudProtectionProviderConfiguration/fraudProtectionProvider": "",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartBrandingOverrideHandler/brandingTheme": "",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartCustomExtensionHandler/customExtension": "",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onVerifiedIdClaimValidationListener/handler/microsoft.graph.onVerifiedIdClaimValidationCustomExtensionHandler/customExtension": "",
+ "/identity/authenticationEventListeners/microsoft.graph.onAccountTakeoverProtectionStartListener": "",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes": "",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollectionStart/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension": "",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollectionSubmit/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension": "",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAccountTakeoverProtectionStartListener/handler/microsoft.graph.onAccountTakeoverProtectionStartCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionStartListener/handler/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionSubmitListener/handler/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onEmailOtpSendListener/handler/microsoft.graph.onOtpSendCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onFraudProtectionLoadStartListener/handler/microsoft.graph.onFraudProtectionLoadStartExternalUsersAuthHandler/signUp/microsoft.graph.fraudProtectionProviderConfiguration/fraudProtectionProvider/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartBrandingOverrideHandler/brandingTheme/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onPageRenderStartListener/handler/microsoft.graph.onPageRenderStartCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onTokenIssuanceStartListener/handler/microsoft.graph.onTokenIssuanceStartCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onVerifiedIdClaimValidationListener/handler/microsoft.graph.onVerifiedIdClaimValidationCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollectionStart/microsoft.graph.onAttributeCollectionStartCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollectionSubmit/microsoft.graph.onAttributeCollectionSubmitCustomExtensionHandler/customExtension/$ref": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionListener/handler/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAuthenticationMethodLoadStartListener/handler/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders/$ref": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/identity/authenticationEventListeners/{id}/conditions/applications/includeApplications/{id}": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAttributeCollectionListener/handler/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes/{id}/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventListeners/{id}/microsoft.graph.onAuthenticationMethodLoadStartListener/handler/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders/{id}/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/conditions/applications/includeApplications/{id}": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAttributeCollection/microsoft.graph.onAttributeCollectionExternalUsersSelfServiceSignUp/attributes/{id}/$ref": "least=DelegatedWork,Application",
+ "/identity/authenticationEventsFlows/{id}/microsoft.graph.externalUsersSelfServiceSignUpEventsFlow/onAuthenticationMethodLoadStart/microsoft.graph.onAuthenticationMethodLoadStartExternalUsersSelfServiceSignUp/identityProviders/{id}/$ref": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "ExchangeMessageTrace.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Search the email message trace",
+ "adminDescription": "Allows the app to search the email message trace on behalf of the signed-in user.",
+ "userDisplayName": "Search the email message trace",
+ "userDescription": "Allows the app to search the email message trace on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Search the email message trace",
+ "adminDescription": "Allows the app to search the email message trace, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/exchange/tracing/messagetraces": "least=DelegatedWork,Application",
+ "/admin/exchange/tracing/messagetraces/{id}": "least=DelegatedWork,Application",
+ "/admin/exchange/tracing/messagetraces/{id}/getDetailsByRecipient(recipientAddress={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "transportdp"
+ }
+ },
+ "ExternalConnection.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all external connections",
+ "adminDescription": "Allows the app to read all external connections on behalf of a signed-in user. The signed-in user must be an administrator.",
+ "userDisplayName": "Read all external connections",
+ "userDescription": "Allows the app to read all external connections on your behalf. The signed-in user must be an administrator.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all external connections",
+ "adminDescription": "Allows the app to read all external connections without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/connections": "",
+ "/external/connections/{id}": "",
+ "/external/connections/{id}/operations/{id}": "",
+ "/external/connections/{id}/schema": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gcsowners"
+ }
+ },
+ "ExternalConnection.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all external connections",
+ "adminDescription": "Allows the app to read and write all external connections on behalf of a signed-in user. The signed-in user must be an administrator.",
+ "userDisplayName": "Read and write all external connections",
+ "userDescription": "Allows the app to read and write all external connections on your behalf. The signed-in user must be an administrator.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all external connections",
+ "adminDescription": "Allows the app to read and write all external connections without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/external/connections": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/connections/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/connections/{id}/operations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/external/connections/{id}/schema": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/connections/{id}/fullRefresh/end": "",
+ "/external/connections/{id}/fullRefresh/start": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gcsowners"
+ }
+ },
+ "ExternalConnection.ReadWrite.OwnedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write external connections",
+ "adminDescription": "Allows the app to read and write settings of external connections on behalf of a signed-in user. The signed-in user must be an administrator. The app can only read and write settings of connections that it is authorized to.",
+ "userDisplayName": "Read and write external connections",
+ "userDescription": "Allows the app to read and write external connections on your behalf. The signed-in user must be an administrator. The app can only read and write external connections that it is authorized to, or it can create new external connections. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write external connections",
+ "adminDescription": "Allows the app to read and write external connections without a signed-in user. The app can only read and write external connections that it is authorized to, or it can create new external connections. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/external/connections": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/connections/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/connections/{id}/operations/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/connections/{id}/quota": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/external/connections/{id}/schema": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/connections/{id}/fullRefresh/end": "least=DelegatedWork,Application",
+ "/external/connections/{id}/fullRefresh/start": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gcsowners"
+ }
+ },
+ "ExternalItem.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read items in external datasets",
+ "adminDescription": "Allow the app to read external datasets and content, on behalf of the signed-in user.",
+ "userDisplayName": "Read items in external datasets",
+ "userDescription": "Allows the app to read external datasets and content that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all external items",
+ "adminDescription": "Allows the app to read all external items without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/connections/{id}/groups/{id}": "least=DelegatedWork,Application",
+ "/external/connections/{id}/items/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/retrieval": "",
+ "/search/grounding": "",
+ "/search/query": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gcsowners"
+ }
+ },
+ "ExternalItem.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all external items",
+ "adminDescription": "Allows the app to read and write all external items on behalf of a signed-in user. The signed-in user must be an administrator.",
+ "userDisplayName": "Read and write all external items",
+ "userDescription": "Allows the app to read and write all external items on your behalf. The signed-in user must be an administrator.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write items in external datasets",
+ "adminDescription": "Allow the app to read or write items in all external datasets that the app is authorized to access",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/connections/{id}/items/{id}/addactivities": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/connections/{id}/fullRefresh/groups": "",
+ "/external/connections/{id}/fullRefresh/groups/{id}/members": "",
+ "/external/connections/{id}/groups": "",
+ "/external/connections/{id}/groups/{id}/members": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/connections/{id}/groups/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/external/connections/{id}/groups/{id}/members/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/external/connections/{id}/items/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/connections/{id}/fullRefresh/items": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gcsowners"
+ }
+ },
+ "ExternalItem.ReadWrite.OwnedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write external items",
+ "adminDescription": "Allows the app to read and write external items on behalf of a signed-in user. The signed-in user must be an administrator. The app can only read external items of the connection that it is authorized to.",
+ "userDisplayName": "Read and write external items",
+ "userDescription": "Allows the app to read and write external items on your behalf. The signed-in user must be an administrator. The app can only read external items of the connection that it is authorized to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write external items",
+ "adminDescription": "Allows the app to read and write external items without a signed-in user. The app can only read external items of the connection that it is authorized to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/connections/{id}/items/{id}/addactivities": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/connections/{id}/fullRefresh/groups": "least=DelegatedWork,Application",
+ "/external/connections/{id}/fullRefresh/groups/{id}/members": "least=DelegatedWork,Application",
+ "/external/connections/{id}/groups": "least=DelegatedWork,Application",
+ "/external/connections/{id}/groups/{id}/members": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/connections/{id}/groups/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/external/connections/{id}/groups/{id}/members/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/external/connections/{id}/items/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/connections/{id}/fullRefresh/items": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gcsowners"
+ }
+ },
+ "ExternalUserProfile.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read external user profiles",
+ "adminDescription": "Allows the app to read available properties of external user profiles, on behalf of the signed-in user.",
+ "userDisplayName": "Read external user profiles",
+ "userDescription": "Allows the app to read available properties of external user profiles, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all external user profiles",
+ "adminDescription": "Allows the app to read available properties of external user profiles, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/externalUserProfiles": "least=DelegatedWork,Application",
+ "/directory/externalUserProfiles/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "xtenantex"
+ }
+ },
+ "ExternalUserProfile.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write external user profiles",
+ "adminDescription": "Allows the app to read and write available properties of external user profiles, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write external user profiles",
+ "userDescription": "Allows the app to read and write available properties of external user profiles, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all external user profiles",
+ "adminDescription": "Allows the app to read and write available properties of external user profiles, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/directory/externalUserProfiles": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/externalUserProfiles/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "xtenantex"
+ }
+ },
+ "File.Read.Group": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/filesfolder": ""
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "FileIngestion.Ingest": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Ingest SharePoint and OneDrive content to make it available in the search index",
+ "adminDescription": "Allows the app to ingest SharePoint and OneDrive content to make it available in the search index, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/rp/onpremises/spoons/api/v1/ingest('{itemId}')": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "SPOONSAdmin"
+ }
+ },
+ "FileIngestionHybridOnboarding.Manage": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage onboarding for a Hybrid Cloud tenant",
+ "adminDescription": "Allows the app to manage onboarding for a Hybrid Cloud tenant, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/rp/onpremises/spoons/admin/tenant/{tenant}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "SPOONSAdmin"
+ }
+ },
+ "Files.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user files",
+ "adminDescription": "Allows the app to read the signed-in user's files.",
+ "userDisplayName": "Read your files",
+ "userDescription": "Allows the app to read your files.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user files",
+ "adminDescription": "Allows the app to read the signed-in user's files.",
+ "userDisplayName": "Read your files",
+ "userDescription": "Allows the app to read your files.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/bundles": "least=DelegatedPersonal",
+ "/drive/bundles/{id}": "least=DelegatedPersonal",
+ "/me/settings/storage/quota": "least=DelegatedPersonal",
+ "/me/settings/storage/quota/services": "least=DelegatedPersonal",
+ "/me/settings/storage/quota/services/{id}": "least=DelegatedPersonal",
+ "/users/{id}/settings/storage/quota": "least=DelegatedPersonal",
+ "/users/{id}/settings/storage/quota/services": "least=DelegatedPersonal",
+ "/users/{id}/settings/storage/quota/services/{id}": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drive/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drive/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/drive/root:/{id}:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drive/root:/{id}:/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/capabilities": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/officeActivities": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/permissions": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/thumbnails": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/versions": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/versions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/versions/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/versions/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/list/subscriptions/socketio": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/root:/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/root:/{id}:/children": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/root:/{id}:/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/root:/{id}:/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/root:/{id}:/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/root/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/root/search(q={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/root/subscriptions/socketio": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/permissions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/thumbnails": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/versions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/versions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/versions/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/root": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/root:/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/root:/{id}:/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/root/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/root/search(q={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/root/subscriptions/socketio": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/root/weburl": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drives": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/permissions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/thumbnails": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions/current": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names": "least=DelegatedPersonal",
+ "/me/drive/recent": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/permissions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names": "least=DelegatedPersonal",
+ "/me/drive/root/children": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root/search(q={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root/subscriptions/socketio": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/special/{id}": "least=DelegatedWork",
+ "/me/drive/special/{id}/children": "least=DelegatedWork",
+ "/me/drives": "least=DelegatedWork,DelegatedPersonal",
+ "/shares/{id}/driveitem/content": "least=DelegatedWork,DelegatedPersonal",
+ "/shares/{id}/driveitem/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/capabilities": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/officeActivities": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/permissions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/thumbnails": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/versions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/versions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/versions/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/root:/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/root/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/root/search(q={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drives": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/lists/{id}/drive/root/subscriptions/socketio": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/lists/{id}/items/{id}/driveitem": "least=DelegatedWork,DelegatedPersonal",
+ "/teams/{id}/channels/{id}/filesfolder": "least=DelegatedPersonal",
+ "/users/{id}/drive": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/permissions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/thumbnails": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/versions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/versions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/versions/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/versions/current": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names": "least=DelegatedPersonal",
+ "/users/{id}/drive/recent": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/permissions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names": "least=DelegatedPersonal",
+ "/users/{id}/drive/root/children": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root/search(q={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root/subscriptions/socketio": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/special/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/special/{id}/children": "least=DelegatedWork",
+ "/users/{id}/drives": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drives/{id}/activities": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/activities": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/analytics": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/analytics/alltime": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/analytics/lastsevendays": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/extensions": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/extensions/{id}": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}/content": "least=DelegatedWork",
+ "/me/drive/following": "least=DelegatedWork",
+ "/me/drive/items/{id}/extensions": "least=DelegatedWork",
+ "/me/drive/items/{id}/extensions/{id}": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/tables": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/tables": "least=DelegatedWork",
+ "/sites/{id}/analytics": "least=DelegatedWork",
+ "/sites/{id}/analytics/alltime": "least=DelegatedWork",
+ "/sites/{id}/analytics/lastsevendays": "least=DelegatedWork",
+ "/sites/{id}/extensions": "least=DelegatedWork",
+ "/sites/{id}/extensions/{id}": "least=DelegatedWork",
+ "/sites/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "least=DelegatedWork",
+ "/sites/{id}/lists/{id}/activities": "least=DelegatedWork",
+ "/sites/{id}/lists/{id}/items/{id}/activities": "least=DelegatedWork",
+ "/sites/{id}/lists/{id}/items/{id}/analytics": "least=DelegatedWork",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/alltime": "least=DelegatedWork",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/lastsevendays": "least=DelegatedWork",
+ "/sites/{id}/lists/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "least=DelegatedWork",
+ "/users/{id}/drive/following": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/tables": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/tables": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/cortexdrivebatch": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/follow": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/preview": "least=DelegatedWork",
+ "/drives/{id}/querycortexitemsnippetsinbatch": "least=DelegatedWork",
+ "/groups/{id}/drive/items/{id}/follow": "least=DelegatedWork",
+ "/groups/{id}/drive/items/{id}/preview": "least=DelegatedWork",
+ "/me/drive/items/{id}/follow": "least=DelegatedWork",
+ "/me/drive/items/{id}/preview": "least=DelegatedWork",
+ "/me/drive/items/{id}/unfollow": "least=DelegatedWork",
+ "/shares/{id}/driveitem/preview": "least=DelegatedWork",
+ "/sites/{id}/drive/items/{id}/follow": "least=DelegatedWork",
+ "/sites/{id}/drive/items/{id}/preview": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/follow": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/preview": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/unfollow": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/following/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/following/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/sharepoint/grounding/fetchResources": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/checkAccess": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Files.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all files that user can access",
+ "adminDescription": "Allows the app to read all files the signed-in user can access.",
+ "userDisplayName": "Read all files that you have access to",
+ "userDescription": "Allows the app to read all files you can access.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read all files that user can access",
+ "adminDescription": "Allows the app to read all files the signed-in user can access.",
+ "userDisplayName": "Read all files that you have access to",
+ "userDescription": "Allows the app to read all files you can access.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read files in all site collections",
+ "adminDescription": "Allows the app to read all files in all site collections without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/bundles": "",
+ "/drive/bundles/{id}": "",
+ "/me/settings/storage/quota": "",
+ "/me/settings/storage/quota/services": "",
+ "/me/settings/storage/quota/services/{id}": "",
+ "/users/{id}/settings/storage/quota": "",
+ "/users/{id}/settings/storage/quota/services": "",
+ "/users/{id}/settings/storage/quota/services/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/items/{id}": "least=Application",
+ "/drive/items/{id}/content": "least=Application",
+ "/drive/items/{id}/contentStream": "least=Application",
+ "/drive/root:/{id}:/content": "least=Application",
+ "/drive/root:/{id}:/contentStream": "least=Application",
+ "/drives/{id}": "least=Application",
+ "/drives/{id}/items/{id}": "least=Application",
+ "/drives/{id}/items/{id}/capabilities": "least=Application",
+ "/drives/{id}/items/{id}/children": "least=Application",
+ "/drives/{id}/items/{id}/content": "least=Application",
+ "/drives/{id}/items/{id}/contentStream": "least=Application",
+ "/drives/{id}/items/{id}/officeActivities": "least=Application",
+ "/drives/{id}/items/{id}/permissions": "least=Application",
+ "/drives/{id}/items/{id}/permissions/{id}": "least=Application",
+ "/drives/{id}/items/{id}/streams": "least=Application",
+ "/drives/{id}/items/{id}/streams/{id}": "least=Application",
+ "/drives/{id}/items/{id}/streams/{id}/content": "least=Application",
+ "/drives/{id}/items/{id}/thumbnails": "least=Application",
+ "/drives/{id}/items/{id}/versions": "least=Application",
+ "/drives/{id}/items/{id}/versions/{id}": "least=Application",
+ "/drives/{id}/items/{id}/versions/{id}/content": "least=Application",
+ "/drives/{id}/items/{id}/versions/{id}/streams": "least=Application",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}": "least=Application",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}/content": "least=Application",
+ "/drives/{id}/root:/{id}": "least=Application",
+ "/drives/{id}/root:/{id}:/children": "least=Application",
+ "/drives/{id}/root:/{id}:/streams": "least=Application",
+ "/drives/{id}/root:/{id}:/streams/{id}": "least=Application",
+ "/drives/{id}/root:/{id}:/streams/{id}/content": "least=Application",
+ "/drives/{id}/root/delta": "least=Application",
+ "/drives/{id}/root/search(q={value})": "least=Application",
+ "/groups/{id}/drive": "least=Application",
+ "/groups/{id}/drive/items/{id}": "least=Application",
+ "/groups/{id}/drive/items/{id}/children": "least=Application",
+ "/groups/{id}/drive/items/{id}/content": "least=Application",
+ "/groups/{id}/drive/items/{id}/contentStream": "least=Application",
+ "/groups/{id}/drive/items/{id}/permissions": "least=Application",
+ "/groups/{id}/drive/items/{id}/permissions/{id}": "least=Application",
+ "/groups/{id}/drive/items/{id}/streams": "least=Application",
+ "/groups/{id}/drive/items/{id}/streams/{id}": "least=Application",
+ "/groups/{id}/drive/items/{id}/streams/{id}/content": "least=Application",
+ "/groups/{id}/drive/items/{id}/thumbnails": "least=Application",
+ "/groups/{id}/drive/items/{id}/versions": "least=Application",
+ "/groups/{id}/drive/items/{id}/versions/{id}": "least=Application",
+ "/groups/{id}/drive/items/{id}/versions/{id}/content": "least=Application",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams": "least=Application",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}": "least=Application",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "least=Application",
+ "/groups/{id}/drive/root:/{id}": "least=Application",
+ "/groups/{id}/drive/root:/{id}:/streams": "least=Application",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}": "least=Application",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}/content": "least=Application",
+ "/groups/{id}/drive/root/delta": "least=Application",
+ "/groups/{id}/drive/root/search(q={value})": "least=Application",
+ "/groups/{id}/drives": "least=Application",
+ "/shares/{id}/driveitem/content": "least=Application",
+ "/shares/{id}/driveitem/contentStream": "least=Application",
+ "/sites/{id}/drive": "least=Application",
+ "/sites/{id}/drive/items/{id}": "least=Application",
+ "/sites/{id}/drive/items/{id}/capabilities": "least=Application",
+ "/sites/{id}/drive/items/{id}/children": "least=Application",
+ "/sites/{id}/drive/items/{id}/content": "least=Application",
+ "/sites/{id}/drive/items/{id}/contentStream": "least=Application",
+ "/sites/{id}/drive/items/{id}/officeActivities": "least=Application",
+ "/sites/{id}/drive/items/{id}/permissions": "least=Application",
+ "/sites/{id}/drive/items/{id}/permissions/{id}": "least=Application",
+ "/sites/{id}/drive/items/{id}/streams": "least=Application",
+ "/sites/{id}/drive/items/{id}/streams/{id}": "least=Application",
+ "/sites/{id}/drive/items/{id}/streams/{id}/content": "least=Application",
+ "/sites/{id}/drive/items/{id}/thumbnails": "least=Application",
+ "/sites/{id}/drive/items/{id}/versions": "least=Application",
+ "/sites/{id}/drive/items/{id}/versions/{id}": "least=Application",
+ "/sites/{id}/drive/items/{id}/versions/{id}/content": "least=Application",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams": "least=Application",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}": "least=Application",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "least=Application",
+ "/sites/{id}/drive/root:/{id}": "least=Application",
+ "/sites/{id}/drive/root:/{id}:/streams": "least=Application",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}": "least=Application",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}/content": "least=Application",
+ "/sites/{id}/drive/root/delta": "least=Application",
+ "/sites/{id}/drive/root/search(q={value})": "least=Application",
+ "/sites/{id}/drives": "least=Application",
+ "/sites/{id}/lists/{id}/items/{id}/driveitem": "least=Application",
+ "/teams/{id}/channels/{id}/filesfolder": "least=DelegatedWork,Application",
+ "/users/{id}/drive": "least=Application",
+ "/users/{id}/drive/items/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}/children": "least=Application",
+ "/users/{id}/drive/items/{id}/content": "least=Application",
+ "/users/{id}/drive/items/{id}/contentStream": "least=Application",
+ "/users/{id}/drive/items/{id}/permissions": "least=Application",
+ "/users/{id}/drive/items/{id}/permissions/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}/streams": "least=Application",
+ "/users/{id}/drive/items/{id}/streams/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}/streams/{id}/content": "least=Application",
+ "/users/{id}/drive/items/{id}/thumbnails": "least=Application",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}/content": "least=Application",
+ "/users/{id}/drive/items/{id}/versions": "least=Application",
+ "/users/{id}/drive/items/{id}/versions/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}/versions/{id}/content": "least=Application",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams": "least=Application",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "least=Application",
+ "/users/{id}/drive/items/{id}/versions/current": "least=Application",
+ "/users/{id}/drive/recent": "least=Application",
+ "/users/{id}/drive/root": "least=Application",
+ "/users/{id}/drive/root:/{id}": "least=Application",
+ "/users/{id}/drive/root:/{id}:/content": "least=Application",
+ "/users/{id}/drive/root:/{id}:/contentStream": "least=Application",
+ "/users/{id}/drive/root:/{id}:/permissions": "least=Application",
+ "/users/{id}/drive/root:/{id}:/streams": "least=Application",
+ "/users/{id}/drive/root:/{id}:/streams/{id}": "least=Application",
+ "/users/{id}/drive/root:/{id}:/streams/{id}/content": "least=Application",
+ "/users/{id}/drive/root/children": "least=Application",
+ "/users/{id}/drive/root/delta": "least=Application",
+ "/users/{id}/drive/root/search(q={value})": "least=Application",
+ "/users/{id}/drive/sharedwithme": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/drive/special/{id}": "least=Application",
+ "/users/{id}/drive/special/{id}/children": "least=Application",
+ "/users/{id}/drives": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/drive": "",
+ "/me/drive/items/{id}": "",
+ "/me/drive/items/{id}/capabilities": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/children": "",
+ "/me/drive/items/{id}/content": "",
+ "/me/drive/items/{id}/contentStream": "",
+ "/me/drive/items/{id}/officeActivities": "",
+ "/me/drive/items/{id}/permissions": "",
+ "/me/drive/items/{id}/permissions/{id}": "",
+ "/me/drive/items/{id}/streams": "",
+ "/me/drive/items/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/streams/{id}/content": "",
+ "/me/drive/items/{id}/thumbnails": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}/content": "",
+ "/me/drive/items/{id}/versions": "",
+ "/me/drive/items/{id}/versions/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/content": "",
+ "/me/drive/items/{id}/versions/current": "",
+ "/me/drive/items/{id}/versions/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/recent": "",
+ "/me/drive/root": "",
+ "/me/drive/root:/{id}": "",
+ "/me/drive/root:/{id}:/content": "",
+ "/me/drive/root:/{id}:/contentStream": "",
+ "/me/drive/root:/{id}:/permissions": "",
+ "/me/drive/root:/{id}:/streams": "",
+ "/me/drive/root:/{id}:/streams/{id}": "",
+ "/me/drive/root:/{id}:/streams/{id}/content": "",
+ "/me/drive/root/children": "",
+ "/me/drive/root/delta": "",
+ "/me/drive/root/search(q={value})": "",
+ "/me/drive/sharedwithme": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/special/{id}": "",
+ "/me/drive/special/{id}/children": "",
+ "/me/drives": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drives/{id}/activities": "least=Application",
+ "/drives/{id}/items/{id}/activities": "least=Application",
+ "/drives/{id}/items/{id}/analytics": "least=Application",
+ "/drives/{id}/items/{id}/analytics/alltime": "least=Application",
+ "/drives/{id}/items/{id}/analytics/lastsevendays": "least=Application",
+ "/drives/{id}/items/{id}/extensions": "least=Application",
+ "/drives/{id}/items/{id}/extensions/{id}": "least=Application",
+ "/drives/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "least=Application",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets": "least=Application",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}": "least=Application",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites": "least=Application",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}": "least=Application",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}/content": "least=Application",
+ "/me/drive/following": "least=Application",
+ "/me/drive/items/{id}/extensions": "least=Application",
+ "/me/drive/items/{id}/extensions/{id}": "least=Application",
+ "/sites/{id}/analytics": "least=Application",
+ "/sites/{id}/analytics/alltime": "least=Application",
+ "/sites/{id}/analytics/lastsevendays": "least=Application",
+ "/sites/{id}/extensions": "least=Application",
+ "/sites/{id}/extensions/{id}": "least=Application",
+ "/sites/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "least=Application",
+ "/sites/{id}/lists/{id}/activities": "least=Application",
+ "/sites/{id}/lists/{id}/items/{id}/activities": "least=Application",
+ "/sites/{id}/lists/{id}/items/{id}/analytics": "least=Application",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/alltime": "least=Application",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/lastsevendays": "least=Application",
+ "/sites/{id}/lists/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "least=Application",
+ "/users/{id}/drive/following": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/cortexdrivebatch": "least=Application",
+ "/drives/{id}/items/{id}/extractsensitivitylabels": "least=DelegatedWork,Application",
+ "/drives/{id}/items/{id}/follow": "least=Application",
+ "/drives/{id}/items/{id}/preview": "least=Application",
+ "/drives/{id}/querycortexitemsnippetsinbatch": "least=Application",
+ "/drives/{id}/root:/{id}/extractsensitivitylabels": "",
+ "/groups/{id}/drive/items/{id}/extractsensitivitylabels": "least=DelegatedWork,Application",
+ "/groups/{id}/drive/items/{id}/follow": "least=Application",
+ "/groups/{id}/drive/items/{id}/preview": "least=Application",
+ "/groups/{id}/drive/root:/{id}/extractsensitivitylabels": "",
+ "/me/drive/items/{id}/extractsensitivitylabels": "least=DelegatedWork,Application",
+ "/me/drive/items/{id}/follow": "least=Application",
+ "/me/drive/items/{id}/preview": "least=Application",
+ "/me/drive/items/{id}/unfollow": "least=Application",
+ "/me/drive/root:/{id}/extractsensitivitylabels": "",
+ "/search/query": "least=Application",
+ "/shares/{id}/driveitem/preview": "least=Application",
+ "/sites/{id}/drive/items/{id}/extractsensitivitylabels": "least=DelegatedWork,Application",
+ "/sites/{id}/drive/items/{id}/follow": "least=Application",
+ "/sites/{id}/drive/items/{id}/preview": "least=Application",
+ "/sites/{id}/drive/root:/{id}/extractsensitivitylabels": "",
+ "/users/{id}/drive/items/{id}/extractsensitivitylabels": "least=DelegatedWork,Application",
+ "/users/{id}/drive/items/{id}/follow": "least=Application",
+ "/users/{id}/drive/items/{id}/preview": "least=Application",
+ "/users/{id}/drive/items/{id}/unfollow": "least=Application",
+ "/users/{id}/drive/root:/{id}/extractsensitivitylabels": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/drive/root": "least=Application",
+ "/groups/{id}/drive/root/weburl": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/following/{id}": "least=Application",
+ "/users/{id}/drive/following/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/searchNextPage": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/retrieval": "least=DelegatedWork",
+ "/copilot/search": "least=DelegatedWork",
+ "/search/grounding": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/sharepoint/grounding/fetchResources": "",
+ "/drives/{drive-id}/items/{item-id}/checkAccess": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Files.Read.Selected": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read files that the user selects",
+ "adminDescription": "Allows the app to read files that the user selects through open with in the UX. The app has access for several hours after the user selects a file.",
+ "userDisplayName": "Read selected files",
+ "userDescription": "Allows the app to read files that you select through open with in the UX. After you select a file, the app has access to the file for several hours.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Files.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Have full access to user files",
+ "adminDescription": "Allows the app to read, create, update and delete the signed-in user's files.",
+ "userDisplayName": "Have full access to your files",
+ "userDescription": "Allows the app to read, create, update, and delete your files.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Have full access to user files",
+ "adminDescription": "Allows the app to read, create, update and delete the signed-in user's files.",
+ "userDisplayName": "Have full access to your files",
+ "userDescription": "Allows the app to read, create, update, and delete your files.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/cortexdrivebatch": "",
+ "/drives/{id}/querycortexitemsnippetsinbatch": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drive/bundles": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/bundles/{id}": "",
+ "/me/settings/storage/quota": "",
+ "/me/settings/storage/quota/services": "",
+ "/me/settings/storage/quota/services/{id}": "",
+ "/users/{id}/settings/storage/quota": "",
+ "/users/{id}/settings/storage/quota/services": "",
+ "/users/{id}/settings/storage/quota/services/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/bundles/{id}/children": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/drive/bundles/{id}/children/{id}": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/drive/items/{id}": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/items/{id}": "",
+ "/drive/items/{id}/content": "",
+ "/drive/items/{id}/contentStream": "",
+ "/drive/items/{id}/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/drive/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/drive/items/{id}/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drive/root:/{id}:/content": "",
+ "/drive/root:/{id}:/contentStream": "",
+ "/drives/{id}": "",
+ "/drives/{id}/items/{id}/capabilities": "",
+ "/drives/{id}/items/{id}/permissions": "",
+ "/drives/{id}/items/{id}/thumbnails": "",
+ "/drives/{id}/items/{id}/versions": "",
+ "/drives/{id}/items/{id}/versions/{id}": "",
+ "/drives/{id}/items/{id}/versions/{id}/content": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/drives/{id}/list/subscriptions/socketio": "",
+ "/drives/{id}/root:/{id}": "",
+ "/drives/{id}/root:/{id}:/children": "",
+ "/drives/{id}/root:/{id}:/streams": "",
+ "/drives/{id}/root:/{id}:/streams/{id}": "",
+ "/drives/{id}/root:/{id}:/streams/{id}/content": "",
+ "/drives/{id}/root/delta": "",
+ "/drives/{id}/root/search(q={value})": "",
+ "/drives/{id}/root/subscriptions/socketio": "",
+ "/groups/{id}/drive": "",
+ "/groups/{id}/drive/items/{id}/permissions": "",
+ "/groups/{id}/drive/items/{id}/streams": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/thumbnails": "",
+ "/groups/{id}/drive/items/{id}/versions": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/groups/{id}/drive/root:/{id}": "",
+ "/groups/{id}/drive/root:/{id}:/streams": "",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/groups/{id}/drive/root/delta": "",
+ "/groups/{id}/drive/root/search(q={value})": "",
+ "/groups/{id}/drive/root/subscriptions/socketio": "",
+ "/groups/{id}/drives": "",
+ "/me/drive": "",
+ "/me/drive/items/{id}/capabilities": "",
+ "/me/drive/items/{id}/permissions": "",
+ "/me/drive/items/{id}/streams": "",
+ "/me/drive/items/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/streams/{id}/content": "",
+ "/me/drive/items/{id}/thumbnails": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}/content": "",
+ "/me/drive/items/{id}/versions": "",
+ "/me/drive/items/{id}/versions/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/content": "",
+ "/me/drive/items/{id}/versions/{id}/streams": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/me/drive/items/{id}/versions/current": "",
+ "/me/drive/items/{id}/workbook/names": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/column": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables": "least=DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/column": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/rows/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/sort": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/cell(row={value},column={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width={value},height={value},fittingmode={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/pivottables": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/pivottables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/column": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/visibleview": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/visibleview/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/visibleview/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range/columnsafter(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range/rowsabove(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range/rowsbelow(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/recent": "",
+ "/me/drive/root": "",
+ "/me/drive/root:/{id}:/content": "",
+ "/me/drive/root:/{id}:/contentStream": "",
+ "/me/drive/root:/{id}:/permissions": "",
+ "/me/drive/root:/{id}:/streams": "",
+ "/me/drive/root:/{id}:/streams/{id}": "",
+ "/me/drive/root:/{id}:/streams/{id}/content": "",
+ "/me/drive/root:/{id}:/workbook/names": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/column": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables": "least=DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/column": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/rows/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/sort": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/cell(row={value},column={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width={value},height={value},fittingmode={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/column": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/visibleview": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/visibleview/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/visibleview/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range/columnsafter(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range/rowsabove(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range/rowsbelow(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root/delta": "",
+ "/me/drive/root/search(q={value})": "",
+ "/me/drive/root/subscriptions/socketio": "",
+ "/me/drive/special/{id}": "",
+ "/me/drive/special/{id}/children": "",
+ "/me/drives": "",
+ "/shares/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/shares/{id}/driveitem": "least=DelegatedWork,DelegatedPersonal",
+ "/shares/{id}/driveitem/content": "",
+ "/shares/{id}/driveitem/contentStream": "",
+ "/sites/{id}/drive": "",
+ "/sites/{id}/drive/items/{id}/capabilities": "",
+ "/sites/{id}/drive/items/{id}/permissions": "",
+ "/sites/{id}/drive/items/{id}/streams": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/thumbnails": "",
+ "/sites/{id}/drive/items/{id}/versions": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/sites/{id}/drive/root:/{id}": "",
+ "/sites/{id}/drive/root:/{id}:/streams": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/root/delta": "",
+ "/sites/{id}/drive/root/search(q={value})": "",
+ "/sites/{id}/drives": "",
+ "/sites/{id}/lists/{id}/drive/root/subscriptions/socketio": "",
+ "/sites/{id}/lists/{id}/items/{id}/driveitem": "",
+ "/teams/{id}/channels/{id}/filesfolder": "",
+ "/users/{id}/drive": "",
+ "/users/{id}/drive/items/{id}/permissions": "",
+ "/users/{id}/drive/items/{id}/streams": "",
+ "/users/{id}/drive/items/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/users/{id}/drive/items/{id}/thumbnails": "",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}": "",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions": "",
+ "/users/{id}/drive/items/{id}/versions/{id}": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions/current": "",
+ "/users/{id}/drive/items/{id}/workbook/names": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/column": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables": "least=DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/column": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/rows/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/sort": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/cell(row={value},column={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width={value},height={value},fittingmode={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/pivottables": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/pivottables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/column": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/visibleview": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/visibleview/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/visibleview/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range/columnsafter(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range/rowsabove(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range/rowsbelow(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/recent": "",
+ "/users/{id}/drive/root": "",
+ "/users/{id}/drive/root:/{id}:/content": "",
+ "/users/{id}/drive/root:/{id}:/contentStream": "",
+ "/users/{id}/drive/root:/{id}:/permissions": "",
+ "/users/{id}/drive/root:/{id}:/streams": "",
+ "/users/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/users/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/users/{id}/drive/root:/{id}:/workbook/names": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/column": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables": "least=DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/column": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/rows/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/sort": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/cell(row={value},column={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width={value},height={value},fittingmode={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/pivottables": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/boundingrect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/cell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/column": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/entirecolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/entirerow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/intersection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/lastcell": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/lastcolumn": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/lastrow": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/offsetrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/usedrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/visibleview": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/visibleview/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/visibleview/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range/columnsafter(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range/rowsabove(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range/rowsbelow(count={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/databodyrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/headerrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/totalrowrange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root/delta": "",
+ "/users/{id}/drive/root/search(q={value})": "",
+ "/users/{id}/drive/root/subscriptions/socketio": "",
+ "/users/{id}/drive/special/{id}": "",
+ "/users/{id}/drive/special/{id}/children": "",
+ "/users/{id}/drives": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/items/{id}/workbook/comments/{id}/replies/{id}": "least=DelegatedWork",
+ "/drives/{id}/activities": "",
+ "/drives/{id}/items/{id}/activities": "",
+ "/drives/{id}/items/{id}/analytics": "",
+ "/drives/{id}/items/{id}/analytics/alltime": "",
+ "/drives/{id}/items/{id}/analytics/lastsevendays": "",
+ "/drives/{id}/items/{id}/extensions": "",
+ "/drives/{id}/items/{id}/extensions/{id}": "",
+ "/drives/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}/content": "",
+ "/me/drive/following": "",
+ "/me/drive/items/{id}/extensions": "",
+ "/me/drive/items/{id}/extensions/{id}": "",
+ "/me/drive/items/{id}/workbook/application": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/comments/{id}": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/comments/{id}/replies/{id}": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/operations/{id}": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/tablerowoperationresult(key={value})": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/tables/{id}/rows/itemat(index={value})/range": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width={value},height={value})": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width={value})": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range/columnsbefore(count={value})": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={value})range": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/usedrange": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/application": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/comments/{id}": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/comments/{id}/replies/{id}": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/tablerowoperationresult(key={value})": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/rows/itemat(index={value})/range": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width={value},height={value})": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width={value})": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range/columnsbefore(count={value})": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={value})/range": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/usedrange": "least=DelegatedWork",
+ "/sites/{id}/analytics": "",
+ "/sites/{id}/analytics/alltime": "",
+ "/sites/{id}/analytics/lastsevendays": "",
+ "/sites/{id}/extensions": "",
+ "/sites/{id}/extensions/{id}": "",
+ "/sites/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/sites/{id}/lists/{id}/activities": "",
+ "/sites/{id}/lists/{id}/items/{id}/activities": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/alltime": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/lastsevendays": "",
+ "/sites/{id}/lists/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/users/{id}/drive/following": "",
+ "/users/{id}/drive/items/{id}/workbook/application": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/comments/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/comments/{id}/replies/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/operations/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/tablerowoperationresult(key={value})": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/rows/itemat(index={value})/range": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width={value},height={value})": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/image(width={value})": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range/columnsbefore(count={value})": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={value})range": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/usedrange": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/application": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/comments/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/comments/{id}/replies/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/tablerowoperationresult(key={value})": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/rows/itemat(index={value})/range": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width={value},height={value})": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/image(width={value})": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range/columnsbefore(count={value})": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/itemat(index={value})/range": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/usedrange": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/root:/{id}:/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/checkin": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/checkout": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/copy": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/createlink": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/discardCheckout": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/invite": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/versions/{id}/restoreversion": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/checkin": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/checkout": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/copy": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/createlink": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/discardCheckout": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/invite": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/versions/{id}/restoreversion": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}:/{id}:/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/checkin": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/checkout": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/copy": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/createlink": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/discardCheckout": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/invite": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/versions/{id}/restoreversion": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/row": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/clearfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/filter/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/filter/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/row": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/converttorange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/reapplyfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/rows/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/rows/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/sort/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/sort/reapply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/setdata": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/setposition": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/pivottables/{id}/refresh": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/pivottables/refreshall": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/protection/protect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/protection/unprotect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/row": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range/resizedrange(deltarows={value}, deltacolumns={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/clearfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/converttorange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/reapplyfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/reapply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/row": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/clearfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/filter/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/filter/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/row": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/converttorange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/reapplyfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/rows/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/rows/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/sort/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/sort/reapply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/setdata": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/setposition": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/{id}/refresh": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/refreshall": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/protection/protect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/protection/unprotect": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/row": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range/resizedrange(deltarows={value}, deltacolumns={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/clearfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/converttorange": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/reapplyfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/reapply": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/add": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/add": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/checkin": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/checkout": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/copy": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/createlink": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/discardCheckout": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/invite": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/versions/{id}/restoreversion": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/lists/{id}/items/{id}/createlink": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/pages/{id}/publish": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}:/{id}:/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/checkin": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/checkout": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/copy": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/createlink": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/discardCheckout": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/invite": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/versions/{id}/restoreversion": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/row": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/clearfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/filter/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/filter/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/row": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/converttorange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/reapplyfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/rows/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/rows/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/sort/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/sort/reapply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/setdata": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/setposition": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/pivottables/{id}/refresh": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/pivottables/refreshall": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/protection/protect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/protection/unprotect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/row": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range/resizedrange(deltarows={value}, deltacolumns={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/clearfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/converttorange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/reapplyfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/reapply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/row": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/clearfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/filter/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/filter/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/row": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/converttorange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/reapplyfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/rows/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/rows/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/sort/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/sort/reapply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/setdata": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/setposition": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title/format/fill/setsolidcolor": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/{id}/refresh": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/pivottables/refreshall": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/protection/protect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/protection/unprotect": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/delete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/autofitcolumns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/autofitrows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/borders/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/fill/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/insert": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/merge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/row": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/unmerge": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range/resizedrange(deltarows={value}, deltacolumns={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/clearfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}/filter/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/converttorange": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/reapplyfilters": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/itemat": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/apply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/clear": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/reapply": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/add": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/add": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}:/{id}:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}:/{id}:/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}:/{id}:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}:/{id}:/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}:/{id}:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}:/{id}:/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/foldera/fileb.txt:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/foldera/fileb.txt:/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}:/{id}:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}:/{id}:/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}:/{id}:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}:/{id}:/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/foldera/fileb.txt:/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/foldera/fileb.txt:/contentStream": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root/children": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/children": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}/points": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}/points": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/borders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root/children": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/contentStream": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/follow": "",
+ "/drives/{id}/items/{id}/permissions/{id}/revokegrants": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/preview": "",
+ "/groups/{id}/drive/items/{id}/follow": "",
+ "/groups/{id}/drive/items/{id}/permissions/{id}/revokegrants": "least=DelegatedWork",
+ "/groups/{id}/drive/items/{id}/preview": "",
+ "/me/drive/items/{id}/follow": "",
+ "/me/drive/items/{id}/permissions/{id}/revokegrants": "least=DelegatedWork",
+ "/me/drive/items/{id}/preview": "",
+ "/me/drive/items/{id}/unfollow": "",
+ "/me/drive/items/{id}/workbook/application/calculate": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/closesession": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/createsession": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/refreshsession": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/tables/{id}/add": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/tables/{id}/rows": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/application/calculate": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/closesession": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/createsession": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/refreshsession": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/add": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/rows": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows": "least=DelegatedWork",
+ "/shares/{id}/driveitem/preview": "",
+ "/shares/{id}/permission/grant": "least=DelegatedWork",
+ "/sites/{id}/drive/items/{id}/follow": "",
+ "/sites/{id}/drive/items/{id}/permissions/{id}/revokegrants": "least=DelegatedWork",
+ "/sites/{id}/drive/items/{id}/preview": "",
+ "/sites/{id}/lists/{id}/items/{id}/driveitem/permissions/{id}/revokegrants": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/follow": "",
+ "/users/{id}/drive/items/{id}/permissions/{id}/revokegrants": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/preview": "",
+ "/users/{id}/drive/items/{id}/unfollow": "",
+ "/users/{id}/drive/items/{id}/workbook/application/calculate": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/closesession": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/createsession": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/refreshsession": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/add": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/rows": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/application/calculate": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/closesession": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/createsession": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/refreshsession": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/add": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/rows": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/drive/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/rows/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/rows/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/rows/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/rows/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/rows/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/rows/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/following/{id}": "",
+ "/users/{id}/drive/following/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/drive/items/{id}/workbook/comments": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/comments/{id}/replies": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/comments": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/comments/{id}/replies": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/comments": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/comments/{id}/replies": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/comments": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/comments/{id}/replies": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/officeActivities": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/officeActivities": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/borders(sideindex={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders(sideindex={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/tables/{id}/sort/fields/icon": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/datalabels": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/fields/icon": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/borders(sideindex={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders(sideindex={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/sort/fields/icon": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/datalabels": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/fields/icon": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/drive/items/{id}/officeActivities": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/borders(sideindex={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders(sideindex={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/sort/fields/icon": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/datalabels": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/legend": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/series/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/charts/{id}/title": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/tables/{id}/sort/fields/icon": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/borders(sideindex={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders(sideindex={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/sort/fields/icon": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/categoryaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/majorgridlines/format/line": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/seriesaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/majorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/minorgridlines": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/axes/valueaxis/title": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/datalabels": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/legend": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/series/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/charts/{id}/title": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/fill": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/font": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/protection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/tables/{id}/sort/fields/icon": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/drive/items/{id}/workbook/names/{id}/range/format/borders/{id}": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders/{id}": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/borders/{id}": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/names/{id}/range/format/borders/{id}": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders/{id}": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/borders/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}/range/format/borders/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/tables/{id}/columns/{id}/range/format/borders/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/range(address={value})/format/borders/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}/range/format/borders/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/tables/{id}/columns/{id}/range/format/borders/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/range(address={value})/format/borders/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "least=DelegatedPersonal",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": "least=DelegatedPersonal",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "least=DelegatedPersonal",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/extensions": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/extensions/{id}": "least=DelegatedWork",
+ "/me/drive/items/{id}/extensions": "least=DelegatedWork",
+ "/me/drive/items/{id}/extensions/{id}": "least=DelegatedWork",
+ "/sites/{id}/extensions": "least=DelegatedWork",
+ "/sites/{id}/extensions/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/sharepoint/grounding/fetchResources": "",
+ "/drives/{drive-id}/items/{item-id}/checkAccess": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/bundles/{driveItemId}/archive": "least=DelegatedWork",
+ "/drive/bundles/{driveItemId}/unarchive": "least=DelegatedWork",
+ "/drive/following/{driveItemId}/archive": "least=DelegatedWork",
+ "/drive/following/{driveItemId}/unarchive": "least=DelegatedWork",
+ "/drive/items/{driveItemId}/archive": "least=DelegatedWork",
+ "/drive/items/{driveItemId}/unarchive": "least=DelegatedWork",
+ "/drive/root/archive": "least=DelegatedWork",
+ "/drive/root/unarchive": "least=DelegatedWork",
+ "/drive/special/{driveItemId}/archive": "least=DelegatedWork",
+ "/drive/special/{driveItemId}/unarchive": "least=DelegatedWork",
+ "/drives/{drivesId}/root/archive": "least=DelegatedWork",
+ "/drives/{drivesId}/root/unarchive": "least=DelegatedWork",
+ "/shares/{sharesId}/driveItem/archive": "least=DelegatedWork",
+ "/shares/{sharesId}/driveItem/unarchive": "least=DelegatedWork",
+ "/shares/{sharesId}/root/archive": "least=DelegatedWork",
+ "/shares/{sharesId}/root/unarchive": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Files.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Have full access to all files user can access",
+ "adminDescription": "Allows the app to read, create, update and delete all files the signed-in user can access.",
+ "userDisplayName": "Have full access to all files you have access to",
+ "userDescription": "Allows the app to read, create, update and delete all files that you can access.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Have full access to all files user can access",
+ "adminDescription": "Allows the app to read, create, update and delete all files the signed-in user can access.",
+ "userDisplayName": "Have full access to all files you have access to",
+ "userDescription": "Allows the app to read, create, update and delete all files that you can access.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write files in all site collections",
+ "adminDescription": "Allows the app to read, create, update and delete all files in all site collections without a signed in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drive/bundles": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/bundles/{id}": "",
+ "/me/settings/storage/quota": "",
+ "/me/settings/storage/quota/services": "",
+ "/me/settings/storage/quota/services/{id}": "",
+ "/users/{id}/settings/storage/quota": "",
+ "/users/{id}/settings/storage/quota/services": "",
+ "/users/{id}/settings/storage/quota/services/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/bundles/{id}/children": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/drive/bundles/{id}/children/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/drive/items/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/officeActivities": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/items/{id}": "",
+ "/drive/items/{id}/content": "",
+ "/drive/items/{id}/contentStream": "",
+ "/drive/root:/{id}:/content": "",
+ "/drive/root:/{id}:/contentStream": "",
+ "/drives/{id}": "",
+ "/drives/{id}/items/{id}/capabilities": "",
+ "/drives/{id}/items/{id}/officeActivities": "",
+ "/drives/{id}/items/{id}/permissions": "",
+ "/drives/{id}/items/{id}/streams": "",
+ "/drives/{id}/items/{id}/streams/{id}": "",
+ "/drives/{id}/items/{id}/streams/{id}/content": "",
+ "/drives/{id}/items/{id}/thumbnails": "",
+ "/drives/{id}/items/{id}/versions": "",
+ "/drives/{id}/items/{id}/versions/{id}": "",
+ "/drives/{id}/items/{id}/versions/{id}/content": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/drives/{id}/root:/{id}": "",
+ "/drives/{id}/root:/{id}:/children": "",
+ "/drives/{id}/root:/{id}:/streams": "",
+ "/drives/{id}/root:/{id}:/streams/{id}": "",
+ "/drives/{id}/root:/{id}:/streams/{id}/content": "",
+ "/drives/{id}/root/delta": "",
+ "/drives/{id}/root/search(q={value})": "",
+ "/groups/{id}/drive": "",
+ "/groups/{id}/drive/items/{id}/permissions": "",
+ "/groups/{id}/drive/items/{id}/streams": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/thumbnails": "",
+ "/groups/{id}/drive/items/{id}/versions": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/groups/{id}/drive/root:/{id}": "",
+ "/groups/{id}/drive/root:/{id}:/streams": "",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/groups/{id}/drive/root/delta": "",
+ "/groups/{id}/drive/root/search(q={value})": "",
+ "/groups/{id}/drives": "",
+ "/shares/{id}": "least=Application",
+ "/shares/{id}/driveitem": "least=Application",
+ "/shares/{id}/driveitem/content": "",
+ "/shares/{id}/driveitem/contentStream": "",
+ "/sites/{id}/drive": "",
+ "/sites/{id}/drive/items/{id}/capabilities": "",
+ "/sites/{id}/drive/items/{id}/officeActivities": "",
+ "/sites/{id}/drive/items/{id}/permissions": "",
+ "/sites/{id}/drive/items/{id}/streams": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/thumbnails": "",
+ "/sites/{id}/drive/items/{id}/versions": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/sites/{id}/drive/root:/{id}": "",
+ "/sites/{id}/drive/root:/{id}:/streams": "",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/sites/{id}/drive/root/delta": "",
+ "/sites/{id}/drive/root/search(q={value})": "",
+ "/sites/{id}/drives": "",
+ "/sites/{id}/lists/{id}/items/{id}/driveitem": "",
+ "/teams/{id}/channels/{id}/filesfolder": "",
+ "/users/{id}/drive": "",
+ "/users/{id}/drive/items/{id}/permissions": "",
+ "/users/{id}/drive/items/{id}/streams": "",
+ "/users/{id}/drive/items/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/users/{id}/drive/items/{id}/thumbnails": "",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}": "",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions": "",
+ "/users/{id}/drive/items/{id}/versions/{id}": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions/current": "",
+ "/users/{id}/drive/recent": "",
+ "/users/{id}/drive/root": "",
+ "/users/{id}/drive/root:/{id}": "",
+ "/users/{id}/drive/root:/{id}:/content": "",
+ "/users/{id}/drive/root:/{id}:/contentStream": "",
+ "/users/{id}/drive/root:/{id}:/permissions": "",
+ "/users/{id}/drive/root:/{id}:/streams": "",
+ "/users/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/users/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/users/{id}/drive/root/delta": "",
+ "/users/{id}/drive/root/search(q={value})": "",
+ "/users/{id}/drive/sharedwithme": "",
+ "/users/{id}/drive/special/{id}": "",
+ "/users/{id}/drive/special/{id}/children": "",
+ "/users/{id}/drives": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/drive": "",
+ "/me/drive/items/{id}/permissions": "",
+ "/me/drive/items/{id}/streams": "",
+ "/me/drive/items/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/streams/{id}/content": "",
+ "/me/drive/items/{id}/thumbnails": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}/content": "",
+ "/me/drive/items/{id}/versions": "",
+ "/me/drive/items/{id}/versions/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/content": "",
+ "/me/drive/items/{id}/versions/{id}/streams": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/me/drive/items/{id}/versions/current": "",
+ "/me/drive/recent": "",
+ "/me/drive/root": "",
+ "/me/drive/root:/{id}": "",
+ "/me/drive/root:/{id}:/content": "",
+ "/me/drive/root:/{id}:/contentStream": "",
+ "/me/drive/root:/{id}:/permissions": "",
+ "/me/drive/root:/{id}:/streams": "",
+ "/me/drive/root:/{id}:/streams/{id}": "",
+ "/me/drive/root:/{id}:/streams/{id}/content": "",
+ "/me/drive/root/delta": "",
+ "/me/drive/root/search(q={value})": "",
+ "/me/drive/sharedwithme": "",
+ "/me/drive/special/{id}": "",
+ "/me/drive/special/{id}/children": "",
+ "/me/drives": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/root:/{id}:/createuploadsession": "",
+ "/drives/{id}/items/{id}/createuploadsession": "",
+ "/groups/{id}/drive/items/{id}/createuploadsession": "",
+ "/me/drive/items/{id}:/{id}:/createuploadsession": "",
+ "/me/drive/items/{id}/createuploadsession": "",
+ "/me/drive/root:/{id}:/createuploadsession": "",
+ "/sites/{id}/drive/items/{id}/createuploadsession": "",
+ "/users/{id}/drive/items/{id}:/{id}:/createuploadsession": "",
+ "/users/{id}/drive/items/{id}/createuploadsession": "",
+ "/users/{id}/drive/root:/{id}:/createuploadsession": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drives/{id}/activities": "",
+ "/drives/{id}/items/{id}/activities": "",
+ "/drives/{id}/items/{id}/analytics": "",
+ "/drives/{id}/items/{id}/analytics/alltime": "",
+ "/drives/{id}/items/{id}/analytics/lastsevendays": "",
+ "/drives/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}/content": "",
+ "/me/drive/following": "",
+ "/sites/{id}/analytics": "",
+ "/sites/{id}/analytics/alltime": "",
+ "/sites/{id}/analytics/lastsevendays": "",
+ "/sites/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/sites/{id}/lists/{id}/activities": "",
+ "/sites/{id}/lists/{id}/items/{id}/activities": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/alltime": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/lastsevendays": "",
+ "/sites/{id}/lists/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/users/{id}/drive/following": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}": "least=Application",
+ "/drives/{id}/items/{id}/permissions/{id}": "least=Application",
+ "/groups/{id}/drive/items/{id}": "least=Application",
+ "/groups/{id}/drive/items/{id}/permissions/{id}": "least=Application",
+ "/sites/{id}/drive/items/{id}": "least=Application",
+ "/sites/{id}/drive/items/{id}/permissions/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}/permissions/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/drive/items/{id}": "",
+ "/me/drive/items/{id}/permissions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/retentionLabel": "least=DelegatedWork,Application",
+ "/groups/{id}/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
+ "/me/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
+ "/users/{user-id}/drive/items/{item-id}/retentionLabel": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}:/{id}:/content": "least=Application",
+ "/drives/{id}/items/{id}:/{id}:/contentStream": "least=Application",
+ "/groups/{id}/drive/items/{id}:/{id}:/content": "least=Application",
+ "/groups/{id}/drive/items/{id}:/{id}:/contentStream": "least=Application",
+ "/me/drive/items/{id}:/{id}:/content": "least=Application",
+ "/me/drive/items/{id}:/{id}:/contentStream": "least=Application",
+ "/me/drive/root:/foldera/fileb.txt:/content": "least=Application",
+ "/me/drive/root:/foldera/fileb.txt:/contentStream": "least=Application",
+ "/sites/{id}/drive/items/{id}:/{id}:/content": "least=Application",
+ "/sites/{id}/drive/items/{id}:/{id}:/contentStream": "least=Application",
+ "/users/{id}/drive/items/{id}:/{id}:/content": "least=Application",
+ "/users/{id}/drive/items/{id}:/{id}:/contentStream": "least=Application",
+ "/users/{id}/drive/root:/foldera/fileb.txt:/content": "least=Application",
+ "/users/{id}/drive/root:/foldera/fileb.txt:/contentStream": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/cortexdrivebatch": "",
+ "/drives/{id}/items/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/drives/{id}/items/{id}/extractsensitivitylabels": "",
+ "/drives/{id}/items/{id}/follow": "",
+ "/drives/{id}/items/{id}/permissions/{id}/revokegrants": "least=Application",
+ "/drives/{id}/items/{id}/preview": "",
+ "/drives/{id}/querycortexitemsnippetsinbatch": "",
+ "/drives/{id}/root:/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/drives/{id}/root:/{id}/extractsensitivitylabels": "least=DelegatedWork,Application",
+ "/groups/{id}/drive/items/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/groups/{id}/drive/items/{id}/extractsensitivitylabels": "",
+ "/groups/{id}/drive/items/{id}/follow": "",
+ "/groups/{id}/drive/items/{id}/permissions/{id}/revokegrants": "least=Application",
+ "/groups/{id}/drive/items/{id}/preview": "",
+ "/groups/{id}/drive/root:/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/groups/{id}/drive/root:/{id}/extractsensitivitylabels": "least=DelegatedWork,Application",
+ "/me/drive/items/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/me/drive/items/{id}/extractsensitivitylabels": "",
+ "/me/drive/items/{id}/follow": "",
+ "/me/drive/items/{id}/permissions/{id}/revokegrants": "least=Application",
+ "/me/drive/items/{id}/preview": "",
+ "/me/drive/items/{id}/unfollow": "",
+ "/me/drive/root:/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/me/drive/root:/{id}/extractsensitivitylabels": "least=DelegatedWork,Application",
+ "/shares/{id}/driveitem/preview": "",
+ "/shares/{id}/permission/grant": "least=Application",
+ "/sites/{id}/drive/items/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/sites/{id}/drive/items/{id}/extractsensitivitylabels": "",
+ "/sites/{id}/drive/items/{id}/follow": "",
+ "/sites/{id}/drive/items/{id}/permissions/{id}/revokegrants": "least=Application",
+ "/sites/{id}/drive/items/{id}/preview": "",
+ "/sites/{id}/drive/root:/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/sites/{id}/drive/root:/{id}/extractsensitivitylabels": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/driveitem/permissions/{id}/revokegrants": "least=Application",
+ "/users/{id}/drive/items/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/users/{id}/drive/items/{id}/extractsensitivitylabels": "",
+ "/users/{id}/drive/items/{id}/follow": "",
+ "/users/{id}/drive/items/{id}/permissions/{id}/revokegrants": "least=Application",
+ "/users/{id}/drive/items/{id}/preview": "",
+ "/users/{id}/drive/items/{id}/unfollow": "",
+ "/users/{id}/drive/root:/{id}/assignsensitivitylabel": "least=DelegatedWork,Application",
+ "/users/{id}/drive/root:/{id}/extractsensitivitylabels": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/checkin": "least=Application",
+ "/drives/{id}/items/{id}/checkout": "least=Application",
+ "/drives/{id}/items/{id}/copy": "least=Application",
+ "/drives/{id}/items/{id}/createlink": "least=Application",
+ "/drives/{id}/items/{id}/discardCheckout": "least=Application",
+ "/drives/{id}/items/{id}/invite": "least=Application",
+ "/drives/{id}/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/drives/{id}/items/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/drives/{id}/items/{id}/versions/{id}/restoreversion": "least=Application",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/drive/items/{id}/checkin": "least=Application",
+ "/groups/{id}/drive/items/{id}/checkout": "least=Application",
+ "/groups/{id}/drive/items/{id}/copy": "least=Application",
+ "/groups/{id}/drive/items/{id}/createlink": "least=Application",
+ "/groups/{id}/drive/items/{id}/discardCheckout": "least=Application",
+ "/groups/{id}/drive/items/{id}/invite": "least=Application",
+ "/groups/{id}/drive/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/drive/items/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/drive/items/{id}/versions/{id}/restoreversion": "least=Application",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/drive/items/{id}/checkin": "least=Application",
+ "/me/drive/items/{id}/checkout": "least=Application",
+ "/me/drive/items/{id}/copy": "least=Application",
+ "/me/drive/items/{id}/createlink": "least=Application",
+ "/me/drive/items/{id}/discardCheckout": "least=Application",
+ "/me/drive/items/{id}/invite": "least=Application",
+ "/me/drive/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/drive/items/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/drive/items/{id}/versions/{id}/restoreversion": "least=Application",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/sites/{id}/drive/items/{id}/checkin": "least=Application",
+ "/sites/{id}/drive/items/{id}/checkout": "least=Application",
+ "/sites/{id}/drive/items/{id}/copy": "least=Application",
+ "/sites/{id}/drive/items/{id}/createlink": "least=Application",
+ "/sites/{id}/drive/items/{id}/discardCheckout": "least=Application",
+ "/sites/{id}/drive/items/{id}/invite": "least=Application",
+ "/sites/{id}/drive/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/sites/{id}/drive/items/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/sites/{id}/drive/items/{id}/versions/{id}/restoreversion": "least=Application",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/sites/{id}/lists/{id}/items/{id}/createlink": "least=Application",
+ "/sites/{id}/pages/{id}/publish": "least=Application",
+ "/users/{id}/drive/items/{id}/checkin": "least=Application",
+ "/users/{id}/drive/items/{id}/checkout": "least=Application",
+ "/users/{id}/drive/items/{id}/copy": "least=Application",
+ "/users/{id}/drive/items/{id}/createlink": "least=Application",
+ "/users/{id}/drive/items/{id}/discardCheckout": "least=Application",
+ "/users/{id}/drive/items/{id}/invite": "least=Application",
+ "/users/{id}/drive/items/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/drive/items/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/drive/items/{id}/versions/{id}/restoreversion": "least=Application",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}/appendContent": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/children": "least=Application",
+ "/groups/{id}/drive/items/{id}/children": "least=Application",
+ "/me/drive/items/{id}/children": "least=Application",
+ "/me/drive/root/children": "least=Application",
+ "/sites/{id}/drive/items/{id}/children": "least=Application",
+ "/users/{id}/drive/items/{id}/children": "least=Application",
+ "/users/{id}/drive/root/children": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/content": "least=Application",
+ "/drives/{id}/items/{id}/contentStream": "least=Application",
+ "/groups/{id}/drive/items/{id}/content": "least=Application",
+ "/groups/{id}/drive/items/{id}/contentStream": "least=Application",
+ "/me/drive/items/{id}/content": "least=Application",
+ "/me/drive/items/{id}/contentStream": "least=Application",
+ "/sites/{id}/drive/items/{id}/content": "least=Application",
+ "/sites/{id}/drive/items/{id}/contentStream": "least=Application",
+ "/users/{id}/drive/items/{id}/content": "least=Application",
+ "/users/{id}/drive/items/{id}/contentStream": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drives/{id}/list/subscriptions/socketio": "",
+ "/drives/{id}/root/subscriptions/socketio": "",
+ "/groups/{id}/drive/root/subscriptions/socketio": "",
+ "/me/drive/root/subscriptions/socketio": "",
+ "/sites/{id}/lists/{id}/drive/root/subscriptions/socketio": "",
+ "/users/{id}/drive/root/subscriptions/socketio": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/following/{id}": "",
+ "/users/{id}/drive/following/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/drive/items/{id}/restore": "least=DelegatedPersonal,Application",
+ "/users/{id}/drive/items/{id}/restore": "least=DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/items/{id}/workbook/names/{id}": "least=Application",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "least=Application",
+ "/me/drive/root:/{id}:/workbook/names/{id}": "least=Application",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}": "least=Application",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "least=Application",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}": "least=Application",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/drive/root:/{id}": "",
+ "/users/{id}/drive/root:/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{drive-id}/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{group-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{group-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{site-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{site-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{user-id}/drive/items/{itemId}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{user-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/extensions": "least=Application",
+ "/drives/{id}/items/{id}/extensions/{id}": "least=Application",
+ "/me/drive/items/{id}/extensions": "least=Application",
+ "/me/drive/items/{id}/extensions/{id}": "least=Application",
+ "/sites/{id}/extensions": "least=Application",
+ "/sites/{id}/extensions/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/sharepoint/grounding/fetchResources": "",
+ "/drives/{drive-id}/items/{item-id}/checkAccess": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/bundles/{driveItemId}/archive": "least=Application",
+ "/drive/bundles/{driveItemId}/unarchive": "least=Application",
+ "/drive/following/{driveItemId}/archive": "least=Application",
+ "/drive/following/{driveItemId}/unarchive": "least=Application",
+ "/drive/items/{driveItemId}/archive": "least=Application",
+ "/drive/items/{driveItemId}/unarchive": "least=Application",
+ "/drive/root/archive": "least=Application",
+ "/drive/root/unarchive": "least=Application",
+ "/drive/special/{driveItemId}/archive": "least=Application",
+ "/drive/special/{driveItemId}/unarchive": "least=Application",
+ "/drives/{drivesId}/root/archive": "least=Application",
+ "/drives/{drivesId}/root/unarchive": "least=Application",
+ "/shares/{sharesId}/driveItem/archive": "least=Application",
+ "/shares/{sharesId}/driveItem/unarchive": "least=Application",
+ "/shares/{sharesId}/root/archive": "least=Application",
+ "/shares/{sharesId}/root/unarchive": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Files.ReadWrite.AppFolder": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Have full access to the application's folder (preview)",
+ "adminDescription": "(Preview) Allows the app to read, create, update and delete files in the application's folder.",
+ "userDisplayName": "Have full access to the application's folder",
+ "userDescription": "(Preview) Allows the app to read, create, update and delete files in the application's folder.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Have full access to the application's folder (preview)",
+ "adminDescription": "(Preview) Allows the app to read, create, update and delete files in the application's folder.",
+ "userDisplayName": "Have full access to the application's folder",
+ "userDescription": "(Preview) Allows the app to read, create, update and delete files in the application's folder.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Have full access to the application's folder without a signed in user.",
+ "adminDescription": "Allows the app to read, create, update and delete files in the application's folder without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/drive/items/{id}/workbook/names/{id}": "",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}": "",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/items/{id}/workbook/names/{id}": "",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "",
+ "/me/drive/root:/{id}:/workbook/names/{id}": "",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/drive/special/{id}": "least=DelegatedPersonal",
+ "/me/drive/special/{id}/children": "least=DelegatedPersonal",
+ "/users/{id}/drive/special/{id}": "least=DelegatedPersonal",
+ "/users/{id}/drive/special/{id}/children": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{drive-id}/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{group-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{group-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{site-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{site-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{user-id}/drive/items/{itemId}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{user-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Files.ReadWrite.Selected": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write files that the user selects",
+ "adminDescription": "Allows the app temporary access to read and write specific files that the user selects through open with in the UX. The app has access for several hours after the user selects a file.",
+ "userDisplayName": "Read and write selected files",
+ "userDescription": "Allows the app temporary access to read and write specific files that you select through open with in the UX. After you select a file, the app has access to the file for several hours.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/items/{id}/workbook/names/{id}": "least=DelegatedWork",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/names/{id}": "least=DelegatedWork",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}": "least=DelegatedWork",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{drive-id}/root:/{item-path}/media/reactions": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/media/reactions": "least=DelegatedWork",
+ "/groups/{group-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork",
+ "/groups/{group-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork",
+ "/me/drive/items/{item-id}/media/reactions": "least=DelegatedWork",
+ "/me/drive/root:/{item-path}/media/reactions": "least=DelegatedWork",
+ "/sites/{site-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork",
+ "/sites/{site-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork",
+ "/users/{user-id}/drive/items/{itemId}/media/reactions": "least=DelegatedWork",
+ "/users/{user-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Files.SelectedOperations.Selected": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Access selected Files, on behalf of the signed-in user",
+ "adminDescription": "Allow the application to access files explicitly permissioned to the application on behalf of the signed in user. The specific files and the permissions granted will be configured in SharePoint Online or OneDrive.",
+ "userDisplayName": "Access selected Files, on behalf of the signed-in user",
+ "userDescription": "Allow the application to access files explicitly permissioned to the application on behalf of the signed in user. The specific files and the permissions granted will be configured in SharePoint Online or OneDrive.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Access selected Files without a signed in user.",
+ "adminDescription": "Allow the application to access a subset of files without a signed in user. The specific files and the permissions granted will be configured in SharePoint Online or OneDrive.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "spauthsg"
+ }
+ },
+ "FileStorageContainer.Manage.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage all file storage containers",
+ "adminDescription": "Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.",
+ "userDisplayName": "Manage all file storage containers",
+ "userDescription": "Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers": "",
+ "/storage/fileStorage/containers/{id}": "",
+ "/storage/fileStorage/containers/{id}/permissions": "",
+ "/storage/fileStorage/containers/{id}/permissions(email={email})": "",
+ "/storage/fileStorage/containers/{id}/permissions(userPrincipalName={userPrincipalName})": "",
+ "/storage/fileStorage/containers/{id}/permissions/{id}": "",
+ "/storage/fileStorage/containers/getByUser(userObjectId={userObjectId},role={role})": "least=DelegatedWork",
+ "/storage/fileStorage/containers/getByUser(userObjectId={userObjectId})": "least=DelegatedWork",
+ "/storage/fileStorage/containers/getByUser(userPrincipalName={userPrincipalName},role={role})": "least=DelegatedWork",
+ "/storage/fileStorage/containers/getByUser(userPrincipalName={userPrincipalName})": "least=DelegatedWork",
+ "/storage/fileStorage/deletedContainers": "",
+ "/storage/fileStorage/deletedContainers/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/archive": "",
+ "/storage/fileStorage/containers/{id}/lock": "",
+ "/storage/fileStorage/containers/{id}/permanentDelete": "",
+ "/storage/fileStorage/containers/{id}/permissions": "",
+ "/storage/fileStorage/containers/{id}/transferPrincipalOwnership": "least=DelegatedWork",
+ "/storage/fileStorage/containers/{id}/unarchive": "",
+ "/storage/fileStorage/containers/{id}/unlock": "",
+ "/storage/fileStorage/deletedContainers/{id}/restore": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}": "",
+ "/storage/fileStorage/containers/{id}/permissions(email={email})": "",
+ "/storage/fileStorage/containers/{id}/permissions(userPrincipalName={userPrincipalName})": "",
+ "/storage/fileStorage/containers/{id}/permissions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/storage/fileStorage/deletedContainers/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "FileStorageContainer.Selected": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Access selected file storage containers",
+ "adminDescription": "Allows the application to utilize the file storage container platform to manage containers on behalf of the signed in user. The specific file storage containers and the permissions granted to them will be configured in Microsoft 365 by the developer of each container type.",
+ "userDisplayName": "Access selected file storage containers",
+ "userDescription": "Allows the app to access a subset of Storage Containers on your behalf. The specific file storage containers and the permissions granted will be configured in Microsoft 365 by the developer of each container type.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Access selected file storage containers",
+ "adminDescription": "Allows the application to utilize the file storage container platform to manage containers on behalf of the signed in user. The specific file storage containers and the permissions granted to them will be configured in Microsoft 365 by the developer of each container type.",
+ "userDisplayName": "Access selected file storage containers",
+ "userDescription": "Allows the app to access a subset of Storage Containers on your behalf. The specific file storage containers and the permissions granted will be configured in Microsoft 365 by the developer of each container type.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Access selected file storage containers",
+ "adminDescription": "Allows the application to utilize the file storage container platform to manage containers, without a signed-in user. The specific file storage containers and the permissions granted to them will be configured in Microsoft 365 by the developer of each container type.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/columns": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/drive": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/permissions": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/permissions(email={email})": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/permissions(userPrincipalName={userPrincipalName})": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/recycleBin": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/recycleBin/items": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/deletedContainers": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/deletedContainers/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/activate": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/columns": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/permissions": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/recycleBin/items(driveItemId={driveItemId})/restore": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/recycleBin/items/delete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/recycleBin/items/restore": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/deletedContainers/{id}/restore": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/columns/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/permissions(email={email})": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/permissions(userPrincipalName={userPrincipalName})": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/permissions/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/customProperties": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/storage/fileStorage/containers/{id}/recycleBin/items": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/recycleBin": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/storage/fileStorage/deletedContainers/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/archive": "least=DelegatedWork,Application",
+ "/storage/fileStorage/containers/{id}/lock": "least=DelegatedWork,Application",
+ "/storage/fileStorage/containers/{id}/migrationJobs": "least=DelegatedWork,Application",
+ "/storage/fileStorage/containers/{id}/provisionMigrationContainers": "least=DelegatedWork,Application",
+ "/storage/fileStorage/containers/{id}/unarchive": "least=DelegatedWork,Application",
+ "/storage/fileStorage/containers/{id}/unlock": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/migrationJobs/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/migrationJobs/{id}/progressEvents": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/sharePointGroups": "least=Application",
+ "/storage/fileStorage/containers/{id}/sharePointGroups/{id}": "least=Application",
+ "/storage/fileStorage/containers/{id}/sharePointGroups/{id}/members": "least=Application",
+ "/storage/fileStorage/containers/{id}/sharePointGroups/{id}/members/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/sharePointGroups": "least=Application",
+ "/storage/fileStorage/containers/{id}/sharePointGroups/{id}/members": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/sharePointGroups/{id}": "least=Application",
+ "/storage/fileStorage/containers/{id}/sharePointGroups/{id}/members/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/storage/fileStorage/containers/{id}/sharePointGroups/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/retrieval": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Financials.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write financials data",
+ "adminDescription": "Allows the app to read and write financials data on behalf of the signed-in user.",
+ "userDisplayName": "Read and write financials data",
+ "userDescription": "Allows the app to read and write financials data on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/financials/companies": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/accounts/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/agedaccountspayable": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/agedaccountsreceivable": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/dimensions/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/dimensions/{id}/dimensionvalues/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/generalledgerentries/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/financials/companies/{id}/companyinformation/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/financials/companies/{id}/countriesregions": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/currencies": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/customers": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/employees": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/itemcategories": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/items": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/paymentmethods": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/paymentterms": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/shipmentmethods": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/taxgroups": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/unitsofmeasure": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/vendors": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/financials/companies/{id}/countriesregions/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/currencies/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/customers/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/employees/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/itemcategories/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/items/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/paymentmethods/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/paymentterms/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/shipmentmethods/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/taxgroups/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/unitsofmeasure/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/vendors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/financials/companies/{id}/customerpaymentjournals/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/customerpaymentjournals/{id}/customerpayments/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/journals/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/journals/{id}/journallines/{id}": "least=DelegatedWork,Application",
+ "/financials/companies/{id}/taxareas/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "d365bcapiadmin"
+ }
+ },
+ "Goals-Export.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all goals and export jobs that a user can access",
+ "adminDescription": "Allows the app to read all goals and export jobs that the signed-in user can access.",
+ "userDisplayName": "Read all goals and export jobs that you have access to",
+ "userDescription": "Allows the app to read all goals and export jobs you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/goals/exportJobs": "least=DelegatedWork",
+ "/employeeexperience/goals/exportJobs/{id}": "least=DelegatedWork",
+ "/employeeexperience/goals/exportJobs/{id}/content": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "VivaGoalsOnGraph"
+ }
+ },
+ "Goals-Export.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Have full access to all goals and export jobs a user can access",
+ "adminDescription": "Allows the app to read goals, create and read export jobs that the signed-in user can access.",
+ "userDisplayName": "Read goals, create and read export jobs that you can access",
+ "userDescription": "Allows the app to read goals, create and read export jobs that you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/employeeexperience/goals/exportJobs": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "VivaGoalsOnGraph"
+ }
+ },
+ "Group-Conversation.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read group conversations",
+ "adminDescription": "Allows the app to read group conversations that the signed-in user has access to.",
+ "userDisplayName": "Read group conversations",
+ "userDescription": "Allows the app to read group conversations that the signed-in user has access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all group conversations",
+ "adminDescription": "Allows the app to read conversations of the groups this app has access to without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/conversations": "least=DelegatedWork,Application",
+ "/groups/{id}/conversations/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/conversations/{id}/threads": "least=DelegatedWork,Application",
+ "/groups/{id}/conversations/{id}/threads/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts": "least=DelegatedWork,Application",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/threads": "least=DelegatedWork,Application",
+ "/groups/{id}/threads/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/threads/{id}/posts": "least=DelegatedWork,Application",
+ "/groups/{id}/threads/{id}/posts/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}/attachments": "least=DelegatedWork",
+ "/groups/{id}/threads/{id}/posts/{id}/attachments": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GroupsIDCSG"
+ }
+ },
+ "Group-Conversation.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write group conversations",
+ "adminDescription": "Allows the app to read and write group conversations that the signed-in user has access to.",
+ "userDisplayName": "Read and write group conversations",
+ "userDescription": "Allows the app to read and write group conversations that the signed-in user has access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all group conversations",
+ "adminDescription": "Allows the app to read and write conversations of the groups this app has access to without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/conversations": "least=DelegatedWork",
+ "/groups/{id}/conversations/{id}/threads": "least=DelegatedWork",
+ "/groups/{id}/conversations/{id}/threads/{id}/reply": "least=DelegatedWork",
+ "/groups/{id}/threads": "least=DelegatedWork",
+ "/groups/{id}/threads/{id}/reply": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/conversations": "",
+ "/groups/{id}/conversations/{id}/threads": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}": "",
+ "/groups/{id}/threads": "",
+ "/groups/{id}/threads/{id}/posts": "",
+ "/groups/{id}/threads/{id}/posts/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}/forward": "least=DelegatedWork,Application",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}/reply": "least=DelegatedWork,Application",
+ "/groups/{id}/threads/{id}/posts/{id}/forward": "least=DelegatedWork,Application",
+ "/groups/{id}/threads/{id}/posts/{id}/reply": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}/attachments": "",
+ "/groups/{id}/threads/{id}/posts/{id}/attachments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/conversations/{id}/threads/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/threads/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/conversations/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GroupsIDCSG"
+ }
+ },
+ "Group-NestingSupport.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write groups' disableNesting property",
+ "adminDescription": "Allows the app to read and write groups' disableNesting property on behalf of the signed-in user.",
+ "userDisplayName": "Read and write groups' disableNesting property",
+ "userDescription": "Allows the app to read and write the disableNesting property on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write groups' disableNesting property",
+ "adminDescription": "Allows the app to read and write groups' disableNesting property without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups": "least=DelegatedWork,Application",
+ "/groups/{id}": "least=DelegatedWork,Application",
+ "/groups/delta": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "Group-OnPremisesSyncBehavior.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and update the on-premises sync behavior of groups",
+ "adminDescription": "Allows the app to read and update the on-premises sync behavior of groups on behalf of the signed-in user.",
+ "userDisplayName": "Read and update the on-premises sync behavior of groups",
+ "userDescription": "Allows the app to update the on-premises sync behavior of groups on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and update the on-premises sync behavior of groups",
+ "adminDescription": "Allows the app to update the on-premises sync behavior of all groups without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/onPremisesSyncBehavior": "least=DelegatedWork,Application",
+ "/groups/onPremisesSyncBehavior": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ddsappperm"
+ }
+ },
+ "Group-PreferredDataLocation.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all groups' preferred data location property that user can access",
+ "adminDescription": "Allows the app to create, read and update groups' preferred data location property that you have access to in the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all groups' preferred data location property that user can access",
+ "userDescription": "Allows the app to create, read and update groups' preferred data location property that you have access to in the organization, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all groups' preferred data location property",
+ "adminDescription": "Allows the app to create, read and update all groups' preferred data location property, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups": "",
+ "/groups/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "Group-XTenantIdentitySync.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Group Cross-Tenant Identity Synchronization properties",
+ "adminDescription": "Allows the app to read all Cross-Tenant Identity Synchronization properties on Groups, on behalf of the signed-in user.",
+ "userDisplayName": "Read all Group Cross-Tenant Identity Synchronization properties",
+ "userDescription": "Allows the app to read all Cross-Tenant Identity Synchronization properties on Groups, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all Group Cross-Tenant Identity Synchronization properties",
+ "adminDescription": "Allows the app to read all Cross-Tenant Identity Synchronization properties on Groups, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idsync"
+ }
+ },
+ "Group.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Create groups",
+ "adminDescription": "Allows the app to create groups without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/administrativeunits/{id}/members": "",
+ "/groups": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "Group.ManageProtection.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage the Microsoft Information Protection (MIP) label for M365 and security groups.",
+ "adminDescription": "Allows the app to list groups, and to read their basic properties and manage the MIP label for all label enabled groups on behalf of the signed-in user. ",
+ "userDisplayName": "Manage group label.",
+ "userDescription": "Allows the app to list groups, to read their properties, and manage the MIP label on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage the Microsoft Information Protection (MIP) label for M365 and security groups.",
+ "adminDescription": "Allows the app to list groups, and to read their basic properties and manage the MIP label for all label enabled groups without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups": "",
+ "/groups/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "Group.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all groups",
+ "adminDescription": "Allows the app to list groups, and to read their properties and all group memberships on behalf of the signed-in user. Also allows the app to read calendar, conversations, files, and other group content for all groups the signed-in user can access. ",
+ "userDisplayName": "Read all groups",
+ "userDescription": "Allows the app to list groups, and to read their properties and all group memberships on your behalf. Also allows the app to read calendar, conversations, files, and other group content for all groups you can access. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all groups",
+ "adminDescription": "Allows the app to read group properties and memberships, and read conversations for all groups, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/messages/{id}": "",
+ "/chats/{id}/messages/{id}/hostedcontents": "",
+ "/chats/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/contacts/{id}/directreports": "",
+ "/contacts/{id}/manager": "",
+ "/contacts/{id}/memberof": "",
+ "/contacts/{id}/transitivememberof": "",
+ "/drives/{id}/items/{id}": "",
+ "/drives/{id}/root:/{id}": "",
+ "/groups": "",
+ "/groups/{id}": "",
+ "/groups/{id}/cloudLicensing/assignments": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/groups/{id}/cloudLicensing/usageRights": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/groups/{id}/conversations": "",
+ "/groups/{id}/conversations/{id}": "",
+ "/groups/{id}/conversations/{id}/threads": "",
+ "/groups/{id}/conversations/{id}/threads/{id}": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}": "",
+ "/groups/{id}/drive/items/{id}": "",
+ "/groups/{id}/drive/root:/{id}": "",
+ "/groups/{id}/endpoints": "least=DelegatedWork,Application",
+ "/groups/{id}/endpoints/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/memberof": "",
+ "/groups/{id}/members": "",
+ "/groups/{id}/organizationalUnitParent": "least=DelegatedWork,Application",
+ "/groups/{id}/owners": "",
+ "/groups/{id}/permissiongrants": "",
+ "/groups/{id}/photo": "",
+ "/groups/{id}/photos": "",
+ "/groups/{id}/photos/{id}": "",
+ "/groups/{id}/settings": "",
+ "/groups/{id}/settings/{id}": "",
+ "/groups/{id}/team": "least=DelegatedWork,Application",
+ "/groups/{id}/team/channels": "least=DelegatedWork,Application",
+ "/groups/{id}/team/channels/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/threads": "",
+ "/groups/{id}/threads/{id}": "",
+ "/groups/{id}/threads/{id}/posts": "",
+ "/groups/{id}/threads/{id}/posts/{id}": "",
+ "/groups/{id}/transitivemembers": "",
+ "/groups/delta": "",
+ "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": "least=DelegatedWork,Application",
+ "/groupsettings": "",
+ "/groupsettings/{id}": "",
+ "/settings": "",
+ "/settings/{id}": "",
+ "/sites/{id}/drive/items/{id}": "",
+ "/sites/{id}/drive/root:/{id}": "",
+ "/teams/{id}": "",
+ "/teams/{id}/channels": "",
+ "/teams/{id}/channels/{id}": "",
+ "/teams/{id}/channels/{id}/filesfolder": "",
+ "/teams/{id}/channels/{id}/messages": "",
+ "/teams/{id}/channels/{id}/messages/{id}": "",
+ "/teams/{id}/channels/{id}/messages/{id}/hostedcontents": "",
+ "/teams/{id}/channels/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents/{id}": "",
+ "/teams/{id}/channels/{id}/messages/delta": "",
+ "/teams/{id}/channels/{id}/tabs": "",
+ "/teams/{id}/channels/{id}/tabs/{id}": "",
+ "/teams/{id}/installedapps": "",
+ "/teams/{id}/installedapps/{id}": "",
+ "/users/{id}/chats/{id}/messages/{id}": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/users/{id}/drive/items/{id}": "",
+ "/users/{id}/drive/root": "",
+ "/users/{id}/drive/root:/{id}": "",
+ "/users/{id}/transitivememberof": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directory/deleteditems/getuserownedobjects": "least=DelegatedWork,Application",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/directoryobjects/validateproperties": "least=DelegatedWork,Application",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/groups/{id}/validateproperties": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/root/createdbyuser/planner/plans": "",
+ "/drive/root/createdbyuser/planner/tasks": "",
+ "/groups/{id}/acceptedsenders": "least=DelegatedWork",
+ "/groups/{id}/calendar/calendarview": "least=DelegatedWork",
+ "/groups/{id}/calendar/calendarview/delta": "least=DelegatedWork",
+ "/groups/{id}/calendar/events": "least=DelegatedWork",
+ "/groups/{id}/calendar/events/{id}": "",
+ "/groups/{id}/calendarview": "least=DelegatedWork",
+ "/groups/{id}/calendarview/delta": "least=DelegatedWork",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}/attachments": "",
+ "/groups/{id}/events": "least=DelegatedWork",
+ "/groups/{id}/events/{id}": "",
+ "/groups/{id}/planner/plans": "",
+ "/groups/{id}/rejectedsenders": "least=DelegatedWork",
+ "/groups/{id}/threads/{id}/posts/{id}/attachments": "",
+ "/groups/{id}/transitivememberof": "",
+ "/me/chats/{id}/messages/{id}": "",
+ "/me/drive/items/{id}": "",
+ "/me/drive/root": "",
+ "/me/drive/root:/{id}": "",
+ "/me/planner": "",
+ "/me/planner/all/delta": "",
+ "/me/planner/favoriteplans": "",
+ "/me/planner/plans": "",
+ "/me/planner/recentplans": "",
+ "/me/planner/tasks": "",
+ "/me/transitivememberof": "",
+ "/planner/buckets": "",
+ "/planner/buckets/{id}": "",
+ "/planner/buckets/{id}/tasks": "",
+ "/planner/plans": "",
+ "/planner/plans/{id}": "",
+ "/planner/plans/{id}/buckets": "",
+ "/planner/plans/{id}/details": "",
+ "/planner/plans/{id}/tasks": "",
+ "/planner/tasks": "",
+ "/planner/tasks/{id}": "",
+ "/planner/tasks/{id}/assignedtotaskboardformat": "",
+ "/planner/tasks/{id}/buckettaskboardformat": "",
+ "/planner/tasks/{id}/details": "",
+ "/planner/tasks/{id}/progresstaskboardformat": "",
+ "/policies/ownerlessGroupPolicy": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/members": "",
+ "/teams/{id}/schedule": "",
+ "/teams/{id}/schedule/offershiftrequests/{id}": "",
+ "/teams/{id}/schedule/openshiftchangerequests": "",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}": "",
+ "/teams/{id}/schedule/openshifts/{id}": "",
+ "/teams/{id}/schedule/schedulinggroups": "",
+ "/teams/{id}/schedule/schedulinggroups/{id}": "",
+ "/teams/{id}/schedule/shifts": "",
+ "/teams/{id}/schedule/shifts/{id}": "least=DelegatedWork",
+ "/teams/{id}/schedule/swapshiftschangerequests": "",
+ "/teams/{id}/schedule/timeoffreasons": "",
+ "/teams/{id}/schedule/timeoffreasons/{id}": "",
+ "/teams/{id}/schedule/timeoffrequests": "",
+ "/teams/{id}/schedule/timeoffrequests/{id}": "",
+ "/teams/{id}/schedule/timesoff": "",
+ "/users/{id}/planner": "",
+ "/users/{id}/planner/all/delta": "",
+ "/users/{id}/planner/favoriteplans": "",
+ "/users/{id}/planner/plans": "",
+ "/users/{id}/planner/recentplans": "",
+ "/users/{id}/planner/tasks": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/openshifts": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/timesoff/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "Group.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all groups' basic property",
+ "adminDescription": "Allows the app to read all group basic properties on behalf of the signed-in user.",
+ "userDisplayName": "Read all groups' basic property",
+ "userDescription": "Allows the app to read all group basic properties on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all groups' basic property",
+ "adminDescription": "Allows the app to read all group basic properties. All of these operations can be performed by the app without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups": "least=DelegatedWork,Application",
+ "/groups/{id}": "",
+ "/groups/{id}/memberof": "",
+ "/groups/{id}/members": "",
+ "/groups/{id}/transitivememberof": "",
+ "/groups/{id}/transitivemembers": "",
+ "/groups/delta": "least=DelegatedWork,Application",
+ "/users/{id}/memberof": "",
+ "/users/{id}/transitivememberof": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/memberof": "",
+ "/me/transitivememberof": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "Group.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all groups",
+ "adminDescription": "Allows the app to create groups and read all group properties and memberships on behalf of the signed-in user. Additionally allows group owners to manage their groups and allows group members to update group content.",
+ "userDisplayName": "Read and write all groups",
+ "userDescription": "Allows the app to create groups and read all group properties and memberships on your behalf. Additionally allows the app to manage your groups and to update group content for groups you are a member of.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all groups",
+ "adminDescription": "Allows the app to create groups, read all group properties and memberships, update group properties and memberships, and delete groups. Also allows the app to read and write conversations. All of these operations can be performed by the app without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/messages": "",
+ "/groups/{id}/addfavorite": "least=DelegatedWork",
+ "/groups/{id}/conversations": "",
+ "/groups/{id}/conversations/{id}/threads": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/reply": "",
+ "/groups/{id}/removefavorite": "least=DelegatedWork",
+ "/groups/{id}/resetunseencount": "least=DelegatedWork",
+ "/groups/{id}/subscribebymail": "least=DelegatedWork",
+ "/groups/{id}/threads": "",
+ "/groups/{id}/threads/{id}/reply": "",
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": "",
+ "/teams/{id}/channels/{id}/messages": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies": "",
+ "/teams/{id}/schedule/offershiftrequests/{id}/approve": "",
+ "/teams/{id}/schedule/offershiftrequests/{id}/decline": "",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}/approve": "",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}/decline": "",
+ "/teams/{id}/schedule/share": "",
+ "/teams/{id}/schedule/swapshiftschangerequests/{id}/approve": "",
+ "/teams/{id}/schedule/swapshiftschangerequests/{id}/decline": "",
+ "/teams/{id}/schedule/timeoffrequests/{id}/approve": "",
+ "/teams/{id}/schedule/timeoffrequests/{id}/decline": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}/messages/{id}": "",
+ "/teams/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/messages/{id}/hostedcontents": "",
+ "/chats/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/drives/{id}/items/{id}": "",
+ "/drives/{id}/root:/{id}": "",
+ "/groups": "",
+ "/groups/{id}": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/groups/{id}/cloudLicensing/usageRights": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/groups/{id}/conversations": "",
+ "/groups/{id}/conversations/{id}/threads": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}": "",
+ "/groups/{id}/drive/items/{id}": "",
+ "/groups/{id}/drive/root:/{id}": "",
+ "/groups/{id}/endpoints": "",
+ "/groups/{id}/endpoints/{id}": "",
+ "/groups/{id}/members": "",
+ "/groups/{id}/permissiongrants": "",
+ "/groups/{id}/settings": "",
+ "/groups/{id}/settings/{id}": "",
+ "/groups/{id}/threads": "",
+ "/groups/{id}/threads/{id}/posts": "",
+ "/groups/{id}/threads/{id}/posts/{id}": "",
+ "/groups/{id}/transitivemembers": "",
+ "/groups/delta": "",
+ "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": "",
+ "/groupsettings": "",
+ "/groupsettings/{id}": "",
+ "/settings": "",
+ "/settings/{id}": "",
+ "/sites/{id}/drive/items/{id}": "",
+ "/sites/{id}/drive/root:/{id}": "",
+ "/teams/{id}/channels/{id}/filesfolder": "",
+ "/teams/{id}/channels/{id}/messages": "",
+ "/teams/{id}/channels/{id}/messages/{id}": "",
+ "/teams/{id}/channels/{id}/messages/{id}/hostedcontents": "",
+ "/teams/{id}/channels/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}/hostedcontents/{id}": "",
+ "/teams/{id}/channels/{id}/messages/delta": "",
+ "/users/{id}/chats/{id}/messages/{id}": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents": "",
+ "/users/{id}/chats/{id}/messages/{id}/hostedcontents/{id}": "",
+ "/users/{id}/drive/items/{id}": "",
+ "/users/{id}/drive/root": "",
+ "/users/{id}/drive/root:/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directory/administrativeunits/{id}/members": "",
+ "/directory/deleteditems/getuserownedobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/grouplifecyclepolicies/renewgroup": "least=DelegatedWork,Application",
+ "/groups": "least=DelegatedWork",
+ "/groups/{id}/assignlicense": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/cloudLicensing/assignments/reprocessAssignments": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}/forward": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}/reply": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/groups/{id}/renew": "least=DelegatedWork,Application",
+ "/groups/{id}/threads/{id}/posts/{id}/forward": "",
+ "/groups/{id}/threads/{id}/posts/{id}/reply": "",
+ "/groups/{id}/unsubscribebymail": "least=DelegatedWork,Application",
+ "/groups/{id}/validateproperties": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/teams": "",
+ "/teams/{id}/archive": "",
+ "/teams/{id}/clone": "",
+ "/teams/{id}/installedapps/{id}/upgrade": "",
+ "/teams/{id}/unarchive": "",
+ "/teams/87654321-0abc-zqf0-321456789q/installedapps": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directoryobjects/validateproperties": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/root/createdbyuser/planner/plans": "",
+ "/drive/root/createdbyuser/planner/tasks": "",
+ "/groups/{id}/calendarview": "",
+ "/groups/{id}/conversations/{id}/threads/{id}/posts/{id}/attachments": "",
+ "/groups/{id}/planner/plans": "",
+ "/groups/{id}/threads/{id}/posts/{id}/attachments": "",
+ "/me/chats/{id}/messages/{id}": "",
+ "/me/drive/items/{id}": "",
+ "/me/drive/root": "",
+ "/me/drive/root:/{id}": "",
+ "/me/planner/all/delta": "",
+ "/me/planner/plans": "",
+ "/me/planner/tasks": "",
+ "/planner/buckets/{id}/tasks": "",
+ "/planner/plans/{id}/buckets": "",
+ "/planner/plans/{id}/tasks": "",
+ "/policies/ownerlessGroupPolicy": "",
+ "/teams/{id}/schedule/offershiftrequests/{id}": "",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}": "",
+ "/teams/{id}/schedule/timeoffrequests": "",
+ "/users/{id}/planner/all/delta": "",
+ "/users/{id}/planner/plans": "",
+ "/users/{id}/planner/tasks": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/owners": "least=DelegatedWork,Application",
+ "/teams/{id}/channels": "",
+ "/teams/{id}/channels/{id}/tabs": "",
+ "/teams/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}": "",
+ "/groups/{id}/conversations/{id}/threads/{id}": "",
+ "/groups/{id}/threads/{id}": "",
+ "/teams/{id}/channels/{id}": "",
+ "/teams/{id}/channels/{id}/tabs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/acceptedsenders": "least=DelegatedWork",
+ "/groups/{id}/rejectedsenders": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/calendar/events": "least=DelegatedWork",
+ "/groups/{id}/cloudLicensing/assignments": "",
+ "/groups/{id}/events": "least=DelegatedWork",
+ "/planner/buckets": "",
+ "/planner/plans": "",
+ "/planner/tasks": "",
+ "/teams/{id}/schedule/offershiftrequests": "",
+ "/teams/{id}/schedule/openshiftchangerequests": "",
+ "/teams/{id}/schedule/openshifts": "",
+ "/teams/{id}/schedule/schedulinggroups": "",
+ "/teams/{id}/schedule/shifts": "",
+ "/teams/{id}/schedule/swapshiftschangerequests": "",
+ "/teams/{id}/schedule/timeoffreasons": "",
+ "/teams/{id}/schedule/timesoff": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/calendar/events/{id}": "",
+ "/groups/{id}/events/{id}": "",
+ "/planner/buckets/{id}": "",
+ "/planner/plans/{id}": "",
+ "/planner/tasks/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/conversations/{id}": "",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/groups/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/members/{id}": "",
+ "/groups/{id}/owners/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/groups/{id}/photo": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/groups/{id}/team": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/me/planner": "",
+ "/policies/ownerlessGroupPolicy": "least=DelegatedWork",
+ "/users/{id}/planner": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/planner/plans/{id}/details": "",
+ "/planner/tasks/{id}/assignedtotaskboardformat": "",
+ "/planner/tasks/{id}/buckettaskboardformat": "",
+ "/planner/tasks/{id}/details": "",
+ "/planner/tasks/{id}/progresstaskboardformat": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}": "",
+ "/teams/(team-id)/channels/{id}/messages/{id}": "",
+ "/teams/(team-id)/channels/{id}/messages/{id}/replies/{id}": "",
+ "/teams/{id}/channels/{id}/members/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/teams/{id}/schedule": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/openshifts/{id}": "",
+ "/teams/{id}/schedule/schedulinggroups/{id}": "",
+ "/teams/{id}/schedule/shifts/{id}": "",
+ "/teams/{id}/schedule/timeoffreasons/{id}": "",
+ "/teams/{id}/schedule/timesoff/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/timeoffrequests/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "GroupMember.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read group memberships",
+ "adminDescription": "Allows the app to list groups, read basic group properties and read membership of all groups the signed-in user has access to.",
+ "userDisplayName": "Read group memberships",
+ "userDescription": "Allows the app to list groups, read basic group properties and read membership of all your groups.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all group memberships",
+ "adminDescription": "Allows the app to read memberships and basic group properties for all groups without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups": "",
+ "/groups/{id}": "",
+ "/groups/{id}/memberof": "",
+ "/groups/{id}/members": "",
+ "/groups/{id}/owners": "least=DelegatedWork,Application",
+ "/groups/{id}/permissiongrants": "least=DelegatedWork,Application",
+ "/groups/{id}/transitivemembers": "",
+ "/groups/delta": "",
+ "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": "",
+ "/users/{id}/transitivememberof": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/transitivememberof": "",
+ "/me/memberof": "",
+ "/me/transitivememberof": "",
+ "/users/{id}/memberof": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "GroupMember.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read group memberships",
+ "adminDescription": "Allows the app to read basic group memberships that you have access to in the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read group memberships",
+ "userDescription": "Allows the app to read basic group memberships that you have access to in the organization, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all group memberships",
+ "adminDescription": "Allows the app to read all basic group memberships in the organization, without signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "least=DelegatedWork,Application",
+ "/groups/{id}/checkmemberobjects": "least=DelegatedWork,Application",
+ "/groups/{id}/getmembergroups": "least=DelegatedWork,Application",
+ "/groups/{id}/getmemberobjects": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/memberof": "least=DelegatedWork,Application",
+ "/groups/{id}/members": "least=DelegatedWork,Application",
+ "/groups/{id}/transitivememberof": "least=DelegatedWork,Application",
+ "/groups/{id}/transitivemembers": "least=DelegatedWork,Application",
+ "/users/{id}/memberof": "",
+ "/users/{id}/transitivememberof": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/memberof": "",
+ "/me/transitivememberof": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "GroupMember.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write group memberships",
+ "adminDescription": "Allows the app to list groups, read basic properties, read and update the membership of the groups the signed-in user has access to. Group properties and owners cannot be updated and groups cannot be deleted.",
+ "userDisplayName": "Read and write group memberships",
+ "userDescription": "Allows the app to list groups, read basic properties, read and update the membership of your groups. Group properties and owners cannot be updated and groups cannot be deleted.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all group memberships",
+ "adminDescription": "Allows the app to list groups, read basic properties, read and update the membership of the groups this app has access to without a signed-in user. Group properties and owners cannot be updated and groups cannot be deleted.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/members": "",
+ "/groups/{id}/owners": "",
+ "/groups/{id}/permissiongrants": "",
+ "/groups/{id}/transitivemembers": "",
+ "/groups/dynamicMembershipProcessingStatus(state={value},dynamicMembershipPriority={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/groups/{id}/members/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "GroupSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all group settings that user can access",
+ "adminDescription": "Allows the app to read a list of tenant-level or group-specific group settings objects, on behalf of the signed-in user.",
+ "userDisplayName": "Read all group settings that user can access",
+ "userDescription": "Allows the app to read a list of tenant-level or group-specific group settings objects, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all group settings",
+ "adminDescription": "Allows the app to read a list of tenant-level or group-specific group settings objects, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directorysettingtemplates": "least=DelegatedWork,Application",
+ "/directorysettingtemplates/{id}": "least=DelegatedWork,Application",
+ "/groups/{id}/settings": "least=DelegatedWork,Application",
+ "/groups/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/groupsettings": "least=DelegatedWork,Application",
+ "/groupsettings/{id}": "least=DelegatedWork,Application",
+ "/groupsettingtemplates": "least=DelegatedWork,Application",
+ "/groupsettingtemplates/{id}": "least=DelegatedWork,Application",
+ "/settings": "least=DelegatedWork,Application",
+ "/settings/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "GroupSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all group settings that user can access",
+ "adminDescription": "Allows the app to create, read, update, and delete on the list of tenant-level or group-specific group settings objects that you have access to in the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all group settings that user can access",
+ "userDescription": "Allows the app to create, read, update, and delete on the list of tenant-level or group-specific group settings objects that you have access to in the organization, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all group settings",
+ "adminDescription": "Allows the app to create, read, update, and delete on the list of tenant-level or group-specific group settings objects, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directorysettingtemplates": "",
+ "/directorysettingtemplates/{id}": "",
+ "/groups/{id}/settings": "",
+ "/groups/{id}/settings/{id}": "",
+ "/groupsettings": "least=DelegatedWork,Application",
+ "/groupsettings/{id}": "least=DelegatedWork,Application",
+ "/groupsettingtemplates": "",
+ "/groupsettingtemplates/{id}": "",
+ "/settings": "least=DelegatedWork,Application",
+ "/settings/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/settings": "least=DelegatedWork,Application",
+ "/groups/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/groupsettings": "least=DelegatedWork,Application",
+ "/settings": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/settings/{id}": "least=DelegatedWork,Application",
+ "/groupsettings/{id}": "least=DelegatedWork,Application",
+ "/settings/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/group/{id}/settings": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "HealthMonitoringAlert.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all scenario health monitoring alerts",
+ "adminDescription": "Allows the app to read all scenario health monitoring alerts",
+ "userDisplayName": "Read all alerts",
+ "userDescription": "Allows the app to read all scenario health monitoring alerts, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all scenario health monitoring alerts",
+ "adminDescription": "Allows the app to read all scenario health monitoring alerts, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/healthmonitoring/alerts": "least=Application,DelegatedWork",
+ "/reports/healthmonitoring/alerts/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ihxhealth"
+ }
+ },
+ "HealthMonitoringAlert.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all scenario monitoring alerts.",
+ "adminDescription": "Allows the app to read and write all scenario monitoring alerts, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all scenario monitoring alerts",
+ "userDescription": "Allows the app to read and write all scenario monitoring alerts, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all scenario monitoring alerts",
+ "adminDescription": "Allows the app to read and write all scenario monitoring alerts, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/reports/healthmonitoring/alerts/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ihxhealth"
+ }
+ },
+ "HealthMonitoringAlertConfig.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all scenario health monitoring alert configurations",
+ "adminDescription": "Allows the app to read all scenario health monitoring alert configurations",
+ "userDisplayName": "Read all alert configurations",
+ "userDescription": "Allows the app to read all scenario health monitoring alert configurations, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all scenario health monitoring alert configurations",
+ "adminDescription": "Allows the app to read all scenario health monitoring alert configurations, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/healthmonitoring/alertconfigurations": "least=Application,DelegatedWork",
+ "/reports/healthmonitoring/alertconfigurations/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ihxhealth"
+ }
+ },
+ "HealthMonitoringAlertConfig.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all scenario monitoring alert configurations.",
+ "adminDescription": "Allows the app to read and write all scenario monitoring alert configurations, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all scenario monitoring alert configurations",
+ "userDescription": "Allows the app to read and write all scenario monitoring alert configurations, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/reports/healthmonitoring/alertconfigurations/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ihxhealth"
+ }
+ },
+ "IdentityNotifications.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity notification settings and templates",
+ "adminDescription": "Allows the app to read identity notification settings, email templates, and prerequisites on behalf of the signed-in user.",
+ "userDisplayName": "Read identity notification settings and templates",
+ "userDescription": "Allows the app to read identity notification settings and email templates that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity notification settings and templates",
+ "adminDescription": "Allows the app to read identity notification settings, email templates, and prerequisites without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/identityAdminNotifications": "least=DelegatedWork,Application",
+ "/admin/identityAdminNotifications/emailTemplates": "least=DelegatedWork,Application",
+ "/admin/identityAdminNotifications/emailTemplates/{id}": "least=DelegatedWork,Application",
+ "/admin/identityAdminNotifications/emailTemplates/{id}/localizations": "least=DelegatedWork,Application",
+ "/admin/identityAdminNotifications/emailTemplates/{id}/localizations/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/identityAdminNotifications/emailTemplates/{id}/preview": "least=DelegatedWork,Application",
+ "/admin/identityAdminNotifications/getPrerequisites": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IGANotificationsKen"
+ }
+ },
+ "IdentityNotifications.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write identity notification settings and templates",
+ "adminDescription": "Allows the app to read and write identity notification settings, customize email templates, and send test emails on behalf of the signed-in user.",
+ "userDisplayName": "Read and write identity notification settings and templates",
+ "userDescription": "Allows the app to read and write identity notification settings and customize email templates that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all identity notification settings and templates",
+ "adminDescription": "Allows the app to read and write identity notification settings, customize email templates, and send test emails without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/identityAdminNotifications": "",
+ "/admin/identityAdminNotifications/emailTemplates": "",
+ "/admin/identityAdminNotifications/emailTemplates/{id}": "",
+ "/admin/identityAdminNotifications/emailTemplates/{id}/localizations": "",
+ "/admin/identityAdminNotifications/emailTemplates/{id}/localizations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/identityAdminNotifications": "least=DelegatedWork,Application",
+ "/admin/identityAdminNotifications/emailTemplates/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/admin/identityAdminNotifications/emailTemplates/{id}/localizations/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/admin/identityAdminNotifications/emailTemplates/{id}/localizations/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/identityAdminNotifications/emailTemplates/{id}/preview": "",
+ "/admin/identityAdminNotifications/emailTemplates/{id}/resetToDefault": "least=DelegatedWork,Application",
+ "/admin/identityAdminNotifications/emailTemplates/{id}/sendTest": "least=DelegatedWork,Application",
+ "/admin/identityAdminNotifications/getPrerequisites": "",
+ "/admin/identityAdminNotifications/sendTestEmail": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IGANotificationsKen"
+ }
+ },
+ "IdentityProvider.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity providers",
+ "adminDescription": "Allows the app to read your organization's identity (authentication) providers' properties on behalf of the user.",
+ "userDisplayName": "Read identity providers",
+ "userDescription": "Allows the app to read your organization's identity (authentication) providers' properties on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read identity providers",
+ "adminDescription": "Allows the app to read your organization's identity (authentication) providers' properties without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/federationconfigurations": "least=DelegatedWork,Application",
+ "/directory/federationconfigurations/{id}": "least=DelegatedWork,Application",
+ "/directory/federationconfigurations/microsoft.graph.samlorwsfedexternaldomainfederation/{id}/domains": "least=DelegatedWork,Application",
+ "/identity/identityproviders": "least=DelegatedWork,Application",
+ "/identity/identityproviders/{id}": "least=DelegatedWork,Application",
+ "/identity/identityproviders/availableprovidertypes": "least=DelegatedWork,Application",
+ "/identityproviders": "least=DelegatedWork,Application",
+ "/identityproviders/{id}": "least=DelegatedWork,Application",
+ "/identityproviders/availableprovidertypes": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "IdentityProvider.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write identity providers",
+ "adminDescription": "Allows the app to read and write your organization's identity (authentication) providers' properties on behalf of the user.",
+ "userDisplayName": "Read and write identity providers",
+ "userDescription": "Allows the app to read and write your organization's identity (authentication) providers' properties on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write identity providers",
+ "adminDescription": "Allows the app to read and write your organization's identity (authentication) providers' properties without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/directory/federationconfigurations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/federationconfigurations": "least=DelegatedWork,Application",
+ "/directory/federationconfigurations/{id}/microsoft.graph.samlorwsfedexternaldomainfederation/domains": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/federationconfigurations": "",
+ "/directory/federationconfigurations/{id}": "",
+ "/directory/federationconfigurations/microsoft.graph.samlorwsfedexternaldomainfederation/{id}/domains": "",
+ "/identity/identityproviders/availableprovidertypes": "",
+ "/identityproviders/availableprovidertypes": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/federationconfigurations/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identity/identityproviders": "least=DelegatedWork,Application",
+ "/identityproviders": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/identityproviders/{id}": "least=DelegatedWork,Application",
+ "/identityproviders/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "IdentityRiskEvent.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity risk event information",
+ "adminDescription": "Allows the app to read identity risk event information for all users in your organization on behalf of the signed-in user. ",
+ "userDisplayName": "Read identity risk event information",
+ "userDescription": "Allows the app to read identity risk event information for all users in your organization on behalf of the signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity risk event information",
+ "adminDescription": "Allows the app to read the identity risk event information for your organization without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityProtection/agentRiskDetections": "least=DelegatedWork,Application",
+ "/identityProtection/agentRiskDetections/{id}": "least=DelegatedWork,Application",
+ "/identityprotection/riskdetections": "least=DelegatedWork,Application",
+ "/identityprotection/riskdetections/{id}": "least=DelegatedWork,Application",
+ "/identityprotection/serviceprincipalriskdetections": "least=DelegatedWork,Application",
+ "/identityprotection/serviceprincipalriskdetections/{id}": "least=DelegatedWork,Application",
+ "/identityProtection/settings/agentNotifications": "least=DelegatedWork,Application",
+ "/riskdetections": "least=DelegatedWork,Application",
+ "/riskdetections/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "serresapp"
+ }
+ },
+ "IdentityRiskEvent.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write identity risk event information",
+ "adminDescription": "Allows the app to read and update identity risk event information for all users in your organization on behalf of the signed-in user. Update operations include confirming risk event detections.",
+ "userDisplayName": "Read and write identity risk event information",
+ "userDescription": "Allows the app to read and update identity risk event information for all users in your organization on your behalf. Update operations include confirming risk event detections.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all risk detection information",
+ "adminDescription": "Allows the app to read and update identity risk detection information for your organization without a signed-in user. Update operations include confirming risk event detections. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityProtection/settings/agentNotifications": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identityProtection/settings/agentNotifications": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/auditlogs/signins/confirmcompromised": "least=Application",
+ "/auditlogs/signins/confirmsafe": "least=Application",
+ "/auditlogs/signins/dismiss": "least=Application",
+ "/identityProtection/agentRiskDetections/submit": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AadIpUxDevAdmin"
+ }
+ },
+ "IdentityRiskyAgent.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read risky agents information",
+ "adminDescription": "Allows the app to read risky agents information in your organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read risky agents information",
+ "userDescription": "Allows the app to read risky agents information in your organization, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all risky agents information",
+ "adminDescription": "Allows the app to read the risky agents information in your organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityprotection/riskyagents": "least=DelegatedWork,Application",
+ "/identityprotection/riskyagents/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AadIpUxDevAdmin"
+ }
+ },
+ "IdentityRiskyAgent.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write risky agents information",
+ "adminDescription": "Allows the app to read and update identity risky agents information for all agents in your organization on behalf of the signed-in user. Update operations include dismissing risky agents.",
+ "userDisplayName": "Read and write risky agents information",
+ "userDescription": "Allows the app to read and update identity risky agents information for all agents in your organization on your behalf. Update operations include dismissing risky agents.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write risky agents information",
+ "adminDescription": "Allows the app to read and update risky agents information in your organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identityprotection/riskyagents/confirmcompromised": "least=DelegatedWork,Application",
+ "/identityprotection/riskyagents/confirmSafe": "least=DelegatedWork,Application",
+ "/identityprotection/riskyagents/dismiss": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AadIpUxDevAdmin"
+ }
+ },
+ "IdentityRiskyServicePrincipal.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all identity risky service principal information",
+ "adminDescription": "Allows the app to read all identity risky service principal information for your organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read all identity risky service principal information",
+ "userDescription": "Allows the app to read all identity risky service principal information for your organization, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity risky service principal information",
+ "adminDescription": "Allows the app to read all risky service principal information for your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityprotection/riskyserviceprincipals": "least=DelegatedWork,Application",
+ "/identityprotection/riskyserviceprincipals/{id}": "least=DelegatedWork,Application",
+ "/identityprotection/riskyserviceprincipals/{id}/history": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ispuxdeveap"
+ }
+ },
+ "IdentityRiskyServicePrincipal.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all identity risky service principal information",
+ "adminDescription": "Allows the app to read and update identity risky service principal information for all service principals in your organization, on behalf of the signed-in user. Update operations include dismissing risky service principals.",
+ "userDisplayName": "Read and write all identity risky service principal information",
+ "userDescription": "Allows the app to read and update identity risky service principal information for all service principals in your organization, on your behalf. Update operations include dismissing risky service principals.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all identity risky service principal information",
+ "adminDescription": "Allows the app to read and update identity risky service principal for your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityprotection/riskyserviceprincipals": "",
+ "/identityprotection/riskyserviceprincipals/{id}": "",
+ "/identityprotection/riskyserviceprincipals/{id}/history": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identityprotection/riskyserviceprincipals/confirmcompromised": "least=DelegatedWork,Application",
+ "/identityprotection/riskyserviceprincipals/dismiss": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ispuxdeveap"
+ }
+ },
+ "IdentityRiskyUser.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity risky user information",
+ "adminDescription": "Allows the app to read identity risky user information for all users in your organization on behalf of the signed-in user.",
+ "userDisplayName": "Read identity risky user information",
+ "userDescription": "Allows the app to read identity risky user information for all users in your organization on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity risky user information",
+ "adminDescription": "Allows the app to read the identity risky user information for your organization without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityprotection/riskyusers": "least=DelegatedWork,Application",
+ "/identityprotection/riskyusers/{id}": "least=DelegatedWork,Application",
+ "/identityprotection/riskyusers/{id}/history": "least=DelegatedWork,Application",
+ "/identityprotection/riskyusers/{id}/history/{id}": "least=DelegatedWork,Application",
+ "/identityprotection/riskyusers/{id}/history/{id}/history": "least=DelegatedWork,Application",
+ "/riskyusers": "least=DelegatedWork,Application",
+ "/riskyusers/{id}": "least=DelegatedWork,Application",
+ "/riskyusers/{id}/history": "least=DelegatedWork,Application",
+ "/riskyusers/{id}/history/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AadIpUxDevAdmin"
+ }
+ },
+ "IdentityRiskyUser.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write risky user information",
+ "adminDescription": "Allows the app to read and update identity risky user information for all users in your organization on behalf of the signed-in user. Update operations include dismissing risky users.",
+ "userDisplayName": "Read and write identity risky user information",
+ "userDescription": "Allows the app to read and update identity risky user information for all users in your organization on your behalf. Update operations include dismissing risky users.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all risky user information",
+ "adminDescription": "Allows the app to read and update identity risky user information for your organization without a signed-in user. Update operations include dismissing risky users.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/auditlogs/signins/confirmcompromised": "least=DelegatedWork",
+ "/auditlogs/signins/confirmsafe": "least=DelegatedWork",
+ "/auditlogs/signins/dismiss": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityprotection/riskyusers/{id}/history": "",
+ "/identityprotection/riskyusers/{id}/history/{id}": "",
+ "/riskyusers/{id}/history": "",
+ "/riskyusers/{id}/history/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identityprotection/riskyusers/confirmcompromised": "least=DelegatedWork,Application",
+ "/identityprotection/riskyusers/confirmSafe": "least=DelegatedWork,Application",
+ "/identityprotection/riskyusers/dismiss": "least=DelegatedWork,Application",
+ "/riskyusers/confirmcompromised": "least=DelegatedWork,Application",
+ "/riskyusers/confirmSafe": "least=DelegatedWork,Application",
+ "/riskyusers/dismiss": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AadIpUxDevAdmin"
+ }
+ },
+ "IdentityUserFlow.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all identity user flows",
+ "adminDescription": "Allows the app to read your organization's user flows, on behalf of the signed-in user.",
+ "userDisplayName": "Read all identity user flows",
+ "userDescription": "Allows the app to read your organization's user flows, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity user flows",
+ "adminDescription": "Allows the app to read your organization's user flows, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/b2cuserflows": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/languages": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/languages/{id}": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/languages/{id}/defaultpages": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/languages/{id}/defaultpages/{id}": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/languages/{id}/overridespages": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/languages/{id}/overridespages/{id}": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/userattributeassignments": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/userattributeassignments/{id}": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/userattributeassignments/getorder": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/languages": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/languages/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/languages/{id}/defaultpages": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/languages/{id}/defaultpages/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/languages/{id}/overridespages": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/languages/{id}/overridespages/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/userattributeassignments": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/userattributeassignments/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/userattributeassignments/getorder": "least=DelegatedWork,Application",
+ "/identity/userflowattributes": "least=DelegatedWork,Application",
+ "/identity/userflowattributes/{id}": "least=DelegatedWork,Application",
+ "/identity/userflows": "least=DelegatedWork,Application",
+ "/identity/userflows/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "IdentityUserFlow.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all identity user flows",
+ "adminDescription": "Allows the app to read or write your organization's user flows, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all identity user flows",
+ "userDescription": "Allows the app to read or write your organization's user flows, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all identity user flows",
+ "adminDescription": "Allows the app to read or write your organization's user flows, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identity/b2cuserflows": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/identityproviders": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/userattributeassignments": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/identityproviders": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/userattributeassignments": "least=DelegatedWork,Application",
+ "/identity/userflowattributes": "least=DelegatedWork,Application",
+ "/identity/userflows": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/b2cuserflows/{id}": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/userattributeassignments/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/userattributeassignments/{id}": "least=DelegatedWork,Application",
+ "/identity/userflowattributes/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/b2cuserflows/{id}/apiconnectorconfiguration": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/languages": "",
+ "/identity/b2cuserflows/{id}/languages/{id}/defaultpages": "",
+ "/identity/b2cuserflows/{id}/languages/{id}/defaultpages/{id}": "",
+ "/identity/b2cuserflows/{id}/userattributeassignments/getorder": "",
+ "/identity/b2xuserflows/{id}/apiconnectorconfiguration": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/languages": "",
+ "/identity/b2xuserflows/{id}/languages/{id}": "",
+ "/identity/b2xuserflows/{id}/languages/{id}/defaultpages": "",
+ "/identity/b2xuserflows/{id}/languages/{id}/defaultpages/{id}": "",
+ "/identity/b2xuserflows/{id}/userattributeassignments/getorder": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/identity/b2cuserflows/{id}/apiconnectorconfiguration/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/apiconnectorconfiguration/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/identity/b2cuserflows/{id}/identityproviders/{id}": "least=DelegatedWork,Application",
+ "/identity/b2cuserflows/{id}/userflowidentityproviders/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/identityproviders/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/identity/b2cuserflows/{id}/languages/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/identity/b2cuserflows/{id}/languages/{id}/overridespages": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/languages/{id}/overridespages": "least=DelegatedWork,Application",
+ "/identity/userflows/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/identity/b2cuserflows/{id}/languages/{id}/overridespages/{id}": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/languages/{id}/overridespages/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/b2cuserflows/{id}/userattributeassignments/setorder": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/userattributeassignments/setorder": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/b2cuserflows/{id}/userflowidentityproviders": "least=DelegatedWork,Application",
+ "/identity/b2xuserflows/{id}/userflowidentityproviders": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "IMAP.AccessAsUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write access to mailboxes via IMAP.",
+ "adminDescription": "Allows the app to have the same access to mailboxes as the signed-in user via IMAP protocol.",
+ "userDisplayName": "Read and write access to your mail.",
+ "userDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write access to mailboxes via IMAP.",
+ "adminDescription": "Allows the app to have the same access to mailboxes as the signed-in user via IMAP protocol.",
+ "userDisplayName": "Read and write access to your mail.",
+ "userDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "exospm_sg"
+ }
+ },
+ "IndustryData-DataConnector.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "View data connector definitions",
+ "adminDescription": "Allows the app to read data connectors on behalf of the signed-in user.",
+ "userDisplayName": "View data connector definitions",
+ "userDescription": "Allows the app to read data connectors on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "View data connector definitions",
+ "adminDescription": "Allows the app to read data connectors without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/dataconnectors": "least=DelegatedWork,Application",
+ "/external/industrydata/dataconnectors/{id}": "least=DelegatedWork,Application",
+ "/external/industrydata/inboundflows/{id}/dataconnector": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-DataConnector.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage data connector definitions",
+ "adminDescription": "Allows the app to read and write data connectors on behalf of the signed-in user.",
+ "userDisplayName": "Manage data connector definitions",
+ "userDescription": "Allows the app to read and write data connectors on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage data connector definitions",
+ "adminDescription": "Allows the app to read and write data connectors without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/external/industrydata/dataconnectors": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/industrydata/dataconnectors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/dataconnectors/{id}/microsoft.graph.industrydata.azuredatalakeconnector/getuploadsession": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/industrydata/dataconnectors/{id}/validate": "least=Application",
+ "/external/industrydata/inboundflows/{id}/dataconnector/validate": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/industrydata/inboundflows/{id}/dataconnector": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-DataConnector.Upload": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Upload files to a data connector",
+ "adminDescription": "Allows the app to upload data files to a data connector on behalf of the signed-in user.",
+ "userDisplayName": "Upload files to a data connector",
+ "userDescription": "Allows the app to upload data files to a data connector on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Upload files to a data connector",
+ "adminDescription": "Allows the app to upload data files to a data connector without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/dataconnectors/{id}/microsoft.graph.industrydata.azuredatalakeconnector/getuploadsession": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/industrydata/dataconnectors/{id}/validate": "least=DelegatedWork",
+ "/external/industrydata/inboundflows/{id}/dataconnector/validate": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-InboundFlow.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "View inbound flow definitions",
+ "adminDescription": "Allows the app to read inbound data flows on behalf of the signed-in user.",
+ "userDisplayName": "View inbound flow definitions",
+ "userDescription": "Allows the app to read inbound data flows on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "View inbound flow definitions",
+ "adminDescription": "Allows the app to read inbound data flows without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/inboundflows": "least=DelegatedWork,Application",
+ "/external/industrydata/inboundflows/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-InboundFlow.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage inbound flow definitions",
+ "adminDescription": "Allows the app to read and write inbound data flows on behalf of the signed-in user.",
+ "userDisplayName": "Manage inbound flow definitions",
+ "userDescription": "Allows the app to read and write inbound data flows on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage inbound flow definitions",
+ "adminDescription": "Allows the app to read and write inbound data flows without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/external/industrydata/inboundflows": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/industrydata/inboundflows/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-OutboundFlow.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "userDisplayName": "View outbound flowsets and flows definitions",
+ "userDescription": "Allows the app to read outbound data flowsets and flows on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "View outbound flowsets and flows definitions",
+ "adminDescription": "Allows the app to read outbound data flowsets and flows without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/outbounddatalakeflows": "least=DelegatedWork,Application",
+ "/external/industrydata/outboundprovisioningflowsets": "least=DelegatedWork,Application",
+ "/external/industrydata/outboundprovisioningflowsets/{id}": "least=DelegatedWork,Application",
+ "/external/industrydata/outboundprovisioningflowsets/{id}/educationprovisioningflows": "least=DelegatedWork,Application",
+ "/external/industrydata/outboundprovisioningflowsets/{id}/educationprovisioningflows/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-OutboundFlow.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage outbound flowsets and flows definitions",
+ "adminDescription": "Allows the app to read and write outbound data flowsets and flows on behalf of the signed-in user.",
+ "userDisplayName": "Manage outbound flowsets and flows definitions",
+ "userDescription": "Allows the app to read and write outbound data flowsets and flows on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/industrydata/outbounddatalakeflows": "least=DelegatedWork",
+ "/external/industrydata/outboundprovisioningflowsets": "least=DelegatedWork",
+ "/external/industrydata/outboundprovisioningflowsets/{id}/educationprovisioningflows": "least=DelegatedWork",
+ "/external/industrydata/outboundprovisioningflowsets/{id}/educationprovisioningflows/{id}/reset": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/outbounddatalakeflows": "",
+ "/external/industrydata/outboundprovisioningflowsets": "",
+ "/external/industrydata/outboundprovisioningflowsets/{id}": "",
+ "/external/industrydata/outboundprovisioningflowsets/{id}/educationprovisioningflows": "",
+ "/external/industrydata/outboundprovisioningflowsets/{id}/educationprovisioningflows/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/industrydata/outboundprovisioningflowsets/{id}": "least=DelegatedWork",
+ "/external/industrydata/outboundprovisioningflowsets/{id}/educationprovisioningflows/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/external/industrydata/outbounddatalakeflows/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-ReferenceDefinition.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "userDisplayName": "View reference definitions",
+ "userDescription": "Allows the app to read reference definitions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "View reference definitions",
+ "adminDescription": "Allows the app to read reference definitions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/referencedefinitions/{id}": "least=DelegatedWork,Application",
+ "/external/industrydata/rolegroups/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-ReferenceDefinition.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "userDisplayName": "Manage reference definitions",
+ "userDescription": "Allows the app to read and write reference definitions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage reference definitions",
+ "adminDescription": "Allows the app to read and write reference definitions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/external/industrydata/referenceDefinitions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/industrydata/referenceDefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-Run.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "View current and previous runs",
+ "adminDescription": "Allows the app to read current and previous IndustryData runs on behalf of the signed-in user.",
+ "userDisplayName": "View current and previous runs",
+ "userDescription": "Allows the app to read current and previous IndustryData runs on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "View current and previous runs",
+ "adminDescription": "Allows the app to read current and previous IndustryData runs without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/runs": "least=DelegatedWork,Application",
+ "/external/industrydata/runs/{id}": "least=DelegatedWork,Application",
+ "/external/industrydata/runs/{id}/getstatistics": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-Run.Start": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "View and start runs",
+ "adminDescription": "Allows the app to view and start IndustryData runs on behalf of the signed-in user.",
+ "userDisplayName": "View and start runs",
+ "userDescription": "Allows the app to view and start IndustryData runs on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "View and start runs",
+ "adminDescription": "Allows the app to view and start IndustryData runs without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/runs": "",
+ "/external/industrydata/runs/{id}": "",
+ "/external/industrydata/runs/{id}/getstatistics": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/external/industrydata/runs/start": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-SourceSystem.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "View source system definitions",
+ "adminDescription": "Allows the app to read source system definitions on behalf of the signed-in user.",
+ "userDisplayName": "View source system definitions",
+ "userDescription": "Allows the app to read source system definitions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "View source system definitions",
+ "adminDescription": "Allows the app to read source system definitions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/sourcesystems": "least=DelegatedWork,Application",
+ "/external/industrydata/sourcesystems/{id}": "least=DelegatedWork,Application",
+ "/external/industrydata/sourcesystems/{id}/sourcesystem": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-SourceSystem.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage source system definitions",
+ "adminDescription": "Allows the app to read and write source system definitions on behalf of the signed-in user.",
+ "userDisplayName": "Manage source system definitions",
+ "userDescription": "Allows the app to read and write source system definitions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage source system definitions",
+ "adminDescription": "Allows the app to read and write source system definitions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/external/industrydata/sourcesystems": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/industrydata/sourcesystems/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/sourcesystems/{id}/sourcesystem": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-TimePeriod.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read time period definitions",
+ "adminDescription": "Allows the app to read time period definitions on behalf of the signed-in user.",
+ "userDisplayName": "Read time period definitions",
+ "userDescription": "Allows the app to read time period definitions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read time period definitions",
+ "adminDescription": "Allows the app to read time period definitions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/inboundflows/{id}/year": "least=DelegatedWork,Application",
+ "/external/industrydata/years": "least=DelegatedWork,Application",
+ "/external/industrydata/years/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData-TimePeriod.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage time period definitions",
+ "adminDescription": "Allows the app to read and write time period definitions on behalf of the signed-in user.",
+ "userDisplayName": "Manage time period definitions",
+ "userDescription": "Allows the app to read and write time period definitions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage time period definitions",
+ "adminDescription": "Allows the app to read and write time period definitions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/inboundflows/{id}/year": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/external/industrydata/years": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/external/industrydata/years/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "IndustryData.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read basic Industry Data service and resource definitions",
+ "adminDescription": "Allows the app to read basic Industry Data service and resource information on behalf of the signed-in user.",
+ "userDisplayName": "Read basic Industry Data service and resource definitions",
+ "userDescription": "Allows the app to read Industry Data basic service and resource information on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "View basic service and resource information",
+ "adminDescription": "Allows the app to read basic service and resource information without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/external/industrydata/operations": "least=DelegatedWork,Application",
+ "/external/industrydata/operations/{id}": "least=DelegatedWork,Application",
+ "/external/industrydata/referencedefinitions": "least=DelegatedWork,Application",
+ "/external/industrydata/rolegroups": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IndustryDataAgsAdmin"
+ }
+ },
+ "InformationProtectionPolicy.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user sensitivity labels and label policies.",
+ "adminDescription": "Allows an app to read information protection sensitivity labels and label policy settings, on behalf of the signed-in user.",
+ "userDisplayName": "Read user sensitivity labels and label policies.",
+ "userDescription": "Allows an app to read information protection sensitivity labels and label policy settings, on behalf of the signed-in user.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/informationprotection/policy/labels": "least=DelegatedWork",
+ "/informationprotection/policy/labels/{id}": "least=DelegatedWork",
+ "/me/informationprotection/policy/labels": "least=DelegatedWork",
+ "/me/informationprotection/policy/labels/{id}": "least=DelegatedWork",
+ "/me/security/informationprotection/labelpolicysettings": "least=DelegatedWork",
+ "/me/security/informationprotection/sensitivitylabels": "least=DelegatedWork",
+ "/me/security/informationprotection/sensitivitylabels/{id}": "least=DelegatedWork",
+ "/security/informationprotection/labelpolicysettings": "least=DelegatedWork",
+ "/security/informationprotection/sensitivitylabels": "least=DelegatedWork",
+ "/security/informationprotection/sensitivitylabels/{id}": "least=DelegatedWork",
+ "/users/{id}/informationprotection/policy/labels": "least=DelegatedWork",
+ "/users/{id}/informationprotection/policy/labels/{id}": "least=DelegatedWork",
+ "/users/{id}/security/informationprotection/labelpolicysettings": "least=DelegatedWork",
+ "/users/{id}/security/informationprotection/sensitivitylabels": "least=DelegatedWork",
+ "/users/{id}/security/informationprotection/sensitivitylabels/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/informationprotection/policy/labels/{id}/evaluateclassificationresults": "least=DelegatedWork",
+ "/informationprotection/policy/labels/evaluateremoval": "least=DelegatedWork",
+ "/informationprotection/policy/labels/extractlabel": "least=DelegatedWork",
+ "/me/informationprotection/policy/labels/evaluateapplication": "least=DelegatedWork",
+ "/me/security/informationprotection/sensitivitylabels/evaluateapplication": "least=DelegatedWork",
+ "/security/informationprotection/sensitivitylabels/evaluateapplication": "least=DelegatedWork",
+ "/users/{id}/informationprotection/policy/labels/evaluateapplication": "least=DelegatedWork",
+ "/users/{id}/security/informationprotection/sensitivitylabels/evaluateapplication": "least=DelegatedWork",
+ "/users/{id}/security/informationprotection/sensitivitylabels/evaluateclassificationresults": "least=DelegatedWork",
+ "/users/{id}/security/informationprotection/sensitivitylabels/evaluateremoval": "least=DelegatedWork",
+ "/users/{id}/security/informationprotection/sensitivitylabels/extractcontentlabel": "least=DelegatedWork",
+ "/users/me/security/informationprotection/sensitivitylabels/evaluateclassificationresults": "least=DelegatedWork",
+ "/users/me/security/informationprotection/sensitivitylabels/evaluateremoval": "least=DelegatedWork",
+ "/users/me/security/informationprotection/sensitivitylabels/extractcontentlabel": "least=DelegatedWork",
+ "/users/security/informationprotection/sensitivitylabels/evaluateclassificationresults": "least=DelegatedWork",
+ "/users/security/informationprotection/sensitivitylabels/evaluateremoval": "least=DelegatedWork",
+ "/users/security/informationprotection/sensitivitylabels/extractcontentlabel": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "MipServiceApprovers"
+ }
+ },
+ "InformationProtectionPolicy.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all published labels and label policies for an organization.",
+ "adminDescription": "Allows an app to read published sensitivity labels and label policy settings for the entire organization or a specific user, without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/informationprotection/policy/labels": "least=Application",
+ "/informationprotection/policy/labels/{id}": "least=Application",
+ "/me/informationprotection/policy/labels": "least=Application",
+ "/me/informationprotection/policy/labels/{id}": "least=Application",
+ "/me/security/informationprotection/labelpolicysettings": "least=Application",
+ "/me/security/informationprotection/sensitivitylabels": "least=Application",
+ "/me/security/informationprotection/sensitivitylabels/{id}": "least=Application",
+ "/security/informationprotection/labelpolicysettings": "least=Application",
+ "/security/informationprotection/sensitivitylabels": "least=Application",
+ "/security/informationprotection/sensitivitylabels/{id}": "least=Application",
+ "/users/{id}/informationprotection/policy/labels": "least=Application",
+ "/users/{id}/informationprotection/policy/labels/{id}": "least=Application",
+ "/users/{id}/security/informationprotection/labelpolicysettings": "least=Application",
+ "/users/{id}/security/informationprotection/sensitivitylabels": "least=Application",
+ "/users/{id}/security/informationprotection/sensitivitylabels/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/informationprotection/policy/labels/{id}/evaluateclassificationresults": "least=Application",
+ "/informationprotection/policy/labels/evaluateremoval": "least=Application",
+ "/informationprotection/policy/labels/extractlabel": "least=Application",
+ "/me/informationprotection/policy/labels/evaluateapplication": "least=Application",
+ "/me/security/informationprotection/sensitivitylabels/evaluateapplication": "least=Application",
+ "/security/informationprotection/sensitivitylabels/evaluateapplication": "least=Application",
+ "/users/{id}/informationprotection/policy/labels/evaluateapplication": "least=Application",
+ "/users/{id}/security/informationprotection/sensitivitylabels/evaluateapplication": "least=Application",
+ "/users/{id}/security/informationprotection/sensitivitylabels/evaluateclassificationresults": "least=Application",
+ "/users/{id}/security/informationprotection/sensitivitylabels/evaluateremoval": "least=Application",
+ "/users/{id}/security/informationprotection/sensitivitylabels/extractcontentlabel": "least=Application",
+ "/users/me/security/informationprotection/sensitivitylabels/evaluateclassificationresults": "least=Application",
+ "/users/me/security/informationprotection/sensitivitylabels/evaluateremoval": "least=Application",
+ "/users/me/security/informationprotection/sensitivitylabels/extractcontentlabel": "least=Application",
+ "/users/security/informationprotection/sensitivitylabels/evaluateclassificationresults": "least=Application",
+ "/users/security/informationprotection/sensitivitylabels/evaluateremoval": "least=Application",
+ "/users/security/informationprotection/sensitivitylabels/extractcontentlabel": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "MipServiceApprovers"
+ }
+ },
+ "Insights-UserMetric.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user metrics insights",
+ "adminDescription": "Allows an app to read user metrics insights, such as daily and monthly active users, on behalf of the signed-in user.",
+ "userDisplayName": "Read user metrics insights",
+ "userDescription": "Allows an app to read user metrics insights, such as daily and monthly active users, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all user metrics insights",
+ "adminDescription": "Allows an app to read all user metrics insights, such as daily and monthly active users, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/userinsights/daily/microsoft.graph.activeUsers": "least=DelegatedWork,Application",
+ "/reports/userinsights/daily/microsoft.graph.activeUsersBreakdown": "least=DelegatedWork,Application",
+ "/reports/userinsights/daily/microsoft.graph.authentications": "least=DelegatedWork,Application",
+ "/reports/userinsights/daily/microsoft.graph.inactiveUsers": "least=DelegatedWork,Application",
+ "/reports/userinsights/daily/microsoft.graph.mfaCompletions": "least=DelegatedWork,Application",
+ "/reports/userinsights/daily/microsoft.graph.mfaTelecomFraud": "least=DelegatedWork,Application",
+ "/reports/userinsights/daily/microsoft.graph.requests": "least=DelegatedWork,Application",
+ "/reports/userinsights/daily/microsoft.graph.signUps": "least=DelegatedWork,Application",
+ "/reports/userinsights/daily/microsoft.graph.summary": "least=DelegatedWork,Application",
+ "/reports/userinsights/daily/microsoft.graph.userCount": "least=DelegatedWork,Application",
+ "/reports/userinsights/monthly/microsoft.graph.activeUsers": "least=DelegatedWork,Application",
+ "/reports/userinsights/monthly/microsoft.graph.activeUsersBreakdown": "least=DelegatedWork,Application",
+ "/reports/userinsights/monthly/microsoft.graph.authentications": "least=DelegatedWork,Application",
+ "/reports/userinsights/monthly/microsoft.graph.inactiveUsers": "least=DelegatedWork,Application",
+ "/reports/userinsights/monthly/microsoft.graph.mfaCompletions": "least=DelegatedWork,Application",
+ "/reports/userinsights/monthly/microsoft.graph.mfaRegisteredUsers": "least=DelegatedWork,Application",
+ "/reports/userinsights/monthly/microsoft.graph.requests": "least=DelegatedWork,Application",
+ "/reports/userinsights/monthly/microsoft.graph.signUps": "least=DelegatedWork,Application",
+ "/reports/userinsights/monthly/microsoft.graph.summary": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "identityappengke"
+ }
+ },
+ "LearningAssignedCourse.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's assignments",
+ "adminDescription": "Allows the app to read data for the learner's assignments in the organization's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Read your assignments",
+ "userDescription": "Allows the app to read data for your assignments in the organization's directory, on your behalf.",
+ "requiresAdminConsent": false
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/learningcourseactivities/{id}": "least=DelegatedWork",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities(externalcourseactivityid={value})": "least=DelegatedWork",
+ "/me/employeeexperience/learningcourseactivities/{id}": "least=DelegatedWork",
+ "/users/{id}/employeeexperience/learningcourseactivities/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LearningAssignedCourse.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all assignments",
+ "adminDescription": "Allows the app to read data for all assignments in the organization's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/learningcourseactivities/{id}": "least=Application",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities": "least=Application",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities(externalcourseactivityid={value})": "least=Application",
+ "/users/{id}/employeeexperience/learningcourseactivities/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LearningAssignedCourse.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all assignments",
+ "adminDescription": "Allows the app to create, update, read and delete all assignments in the organization's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/employeeexperience/learningcourseactivities/{id}": "least=Application",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeExperience/learningCourseActivities/{Id}": "least=Application",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LearningContent.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read learning content",
+ "adminDescription": "Allows the app to read learning content in the organization's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Read learning content",
+ "userDescription": "Allows the app to read learning content in the organization's directory, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all learning content",
+ "adminDescription": "Allows the app to read all learning content in the organization's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders/{id}/learningcontents": "least=DelegatedWork,Application",
+ "/employeeexperience/learningproviders/{id}/learningcontents(externalid={value})": "least=DelegatedWork,Application",
+ "/employeeexperience/learningproviders/{id}/learningcontents/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LearningContent.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage learning content",
+ "adminDescription": "Allows the app to manage learning content in the organization's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Manage learning content",
+ "userDescription": "Allows the app to manage learning content in the organization's directory, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage all learning content",
+ "adminDescription": "Allows the app to manage all learning content in the organization's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders/{id}/learningcontents(externalid={value})": "least=Application",
+ "/employeeexperience/learningproviders/{id}/learningcontents/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders/{id}/learningcontents": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LearningProvider.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read learning provider",
+ "adminDescription": "Allows the app to read data for the learning provider in the organization's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Read learning provider",
+ "userDescription": "Allows the app to read data for the learning provider in the organization's directory, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders": "least=DelegatedWork",
+ "/employeeexperience/learningproviders/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LearningProvider.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage learning provider",
+ "adminDescription": "Allows the app to create, update, read, and delete data for the learning provider in the organization's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Manage learning provider",
+ "userDescription": "Allows the app to create, update, read, and delete data for the learning provider in the organization's directory, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LearningSelfInitiatedCourse.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's self-initiated courses",
+ "adminDescription": "Allows the app to read data for the learner's self-initiated courses in the organization's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Read your self-initiated courses",
+ "userDescription": "Allows the app to read data for your self-initiated courses in the organization's directory, on your behalf.",
+ "requiresAdminConsent": false
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/learningcourseactivities/{id}": "",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities(externalcourseactivityid={value})": "",
+ "/me/employeeexperience/learningcourseactivities/{id}": "",
+ "/users/{id}/employeeexperience/learningcourseactivities/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LearningSelfInitiatedCourse.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all self-initiated courses",
+ "adminDescription": "Allows the app to read data for all self-initiated courses in the organization's directory, without a signed-in user.",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeexperience/learningcourseactivities/{id}": "",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities": "",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities(externalcourseactivityid={value})": "",
+ "/users/{id}/employeeexperience/learningcourseactivities/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LearningSelfInitiatedCourse.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all self-initiated courses",
+ "adminDescription": "Allows the app to create, update, read and delete all self-initiated courses in the organization's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/employeeexperience/learningcourseactivities/{id}": "",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/employeeExperience/learningCourseActivities/{Id}": "",
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities": "",
+ "/users/{user-id}/employeeExperience/learningCourseActivities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/employeeexperience/learningproviders/{id}/learningcourseactivities/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "learnidcengineers"
+ }
+ },
+ "LicenseAssignment.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all license assignments.",
+ "adminDescription": "Allows an app to read license assignments for users and groups, on behalf of the signed-in user.",
+ "userDisplayName": "Read all license assignments.",
+ "userDescription": "Allows the app to read all license assignments, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all license assignments.",
+ "adminDescription": "Allows an app to read license assignments for users and groups, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/subscribedSkus": "least=DelegatedWork,Application",
+ "/subscribedSkus/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/licensedetails": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/licensedetails": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadcslms"
+ }
+ },
+ "LicenseAssignment.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage all license assignments.",
+ "adminDescription": "Allows an app to manage license assignments for users and groups, on behalf of the signed-in user.",
+ "userDisplayName": "Manage all license assignments.",
+ "userDescription": "Allows the app to manage all license assignments, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage all license assignments.",
+ "adminDescription": "Allows an app to manage license assignments for users and groups, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/assignlicense": "least=DelegatedWork,Application",
+ "/users/{id}/assignlicense": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadcslms"
+ }
+ },
+ "LifeCycleInfo.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "userDisplayName": "",
+ "userDescription": "",
+ "requiresAdminConsent": false
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {}
+ },
+ "LifeCycleInfo.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "userDisplayName": "",
+ "userDescription": "",
+ "requiresAdminConsent": false
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {}
+ },
+ "LifecyclePolicies-AgentId.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity lifecycle policies for agent identities",
+ "adminDescription": "Allows the app to read identity lifecycle policies for agent identities that the signed-in user has access to in the organization.",
+ "userDisplayName": "Read identity lifecycle policies for agent identities",
+ "userDescription": "Allows the app to read identity lifecycle policies for agent identities that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read identity lifecycle policies for agent identities",
+ "adminDescription": "Allows the app to read identity lifecycle policies for agent identities in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies/{id}": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/impact(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/report": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/report/subjects": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/rules": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/rules/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicyPriorityConfigurations": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicyPriorityConfigurations/{subjectType}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadlcm"
+ }
+ },
+ "LifecyclePolicies-AgentId.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write identity lifecycle policies for agent identities",
+ "adminDescription": "Allows the app to read, create, update and delete identity lifecycle policies for agent identities that the signed-in user has access to in the organization.",
+ "userDisplayName": "Read and write identity lifecycle policies for agent identities",
+ "userDescription": "Allows the app to read, create, update and delete identity lifecycle policies for agent identities that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write identity lifecycle policies for agent identities",
+ "adminDescription": "Allows the app to read, create, update and delete identity lifecycle policies for agent identities in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies": "",
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies/{id}": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/impact(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/report": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/report/subjects": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/rules": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/rules/{id}": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicyPriorityConfigurations": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicyPriorityConfigurations/{subjectType}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies/{id}/restore": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/rules/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicyPriorityConfigurations/{subjectType}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadlcm"
+ }
+ },
+ "LifecyclePolicies-Guests.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity lifecycle policies for external guests",
+ "adminDescription": "Allows the app to read identity lifecycle policies for external guests on behalf of the signed-in user.",
+ "userDisplayName": "Read identity lifecycle policies for external guests",
+ "userDescription": "Allows the app to read identity lifecycle policies for external guests on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read identity lifecycle policies for external guests",
+ "adminDescription": "Allows the app to read identity lifecycle policies for external guests in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/attestationRequirements": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/attestationRequirements/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/impact(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/report": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/report/subjects": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/rules": "",
+ "/users/{id}/lifecycle": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadlcm"
+ }
+ },
+ "LifecyclePolicies-Guests.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write identity lifecycle policies for external guests",
+ "adminDescription": "Allows the app to create, update, and delete identity lifecycle policies for external guests on behalf of the signed-in user.",
+ "userDisplayName": "Read and write identity lifecycle policies for external guests",
+ "userDescription": "Allows the app to create, update, and delete identity lifecycle policies for external guests on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write identity lifecycle policies for external guests",
+ "adminDescription": "Allows the app to create, update, and delete identity lifecycle policies for external guests in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies/{id}": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/attestationRequirements": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/attestationRequirements/{id}": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/impact(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/report": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/report/subjects": "",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/rules": "",
+ "/users/{id}/lifecycle": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/deletedItems/lifecyclePolicies/{id}/restore": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/attestationRequirements/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/lifecyclePolicies/{id}/rules": "least=DelegatedWork,Application",
+ "/users/{id}/microsoft.graph.identityGovernance.attest": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadlcm"
+ }
+ },
+ "LifecycleWorkflows-CustomExt.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Lifecycle workflows custom task extensions",
+ "adminDescription": "Allows the app to read all Lifecycle workflows custom task extensions on behalf of a signed-in user.",
+ "userDisplayName": "Read all Lifecycle workflows custom task extensions",
+ "userDescription": "Allows the app to read all Lifecycle workflows custom task extensions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all Lifecycle workflows custom task extensionss",
+ "adminDescription": "Allows the app to read all Lifecycle workflows custom task extensions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/customtaskextensions": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/customtaskextensions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADLCMAGSApprovers"
+ }
+ },
+ "LifecycleWorkflows-CustomExt.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all Lifecycle workflows custom task extensions",
+ "adminDescription": "Allows the app to create, update, list, read and delete all Lifecycle workflows custom task extensions on behalf of a signed-in user.",
+ "userDisplayName": "Read and write all Lifecycle workflows custom task extensions",
+ "userDescription": "Allows the app to create, update, list, read and delete all Lifecycle workflows custom task extensions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all Lifecycle workflows custom task extensions",
+ "adminDescription": "Allows the app to create, update, list, read and delete all Lifecycle workflows custom task extensions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/customtaskextensions": "",
+ "/identitygovernance/lifecycleworkflows/customtaskextensions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/customtaskextensions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/customtaskextensions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADLCMAGSApprovers"
+ }
+ },
+ "LifecycleWorkflows-Reports.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Lifecycle workflows reports",
+ "adminDescription": "Allows the app to read all Lifecycle workflows reports on behalf of a signed-in user.",
+ "userDisplayName": "Read all Lifecycle workflows reports",
+ "userDescription": "Allows the app to read all Lifecycle workflows reports on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all Lifecycle workflows reports",
+ "adminDescription": "Allows the app to read all Lifecycle workflows reports without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/insights/topTasksProcessedSummary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/insights/topWorkflowsProcessedSummary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/insights/workflowsProcessedByCategory(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/insights/workflowsProcessedSummary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}/taskprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/summary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}/taskprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/summary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults/{id}/taskprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/taskprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/summary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}/taskprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults/{id}/taskprocessingresults": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults/summary(startdatetime={value},enddatetime={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADLCMAGSApprovers"
+ }
+ },
+ "LifecycleWorkflows-Workflow.Activate": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Run workflows on-demand in Lifecycle workflows",
+ "adminDescription": "Allows the app to run workflows on-demand on behalf of a signed-in user.",
+ "userDisplayName": "Run workflows on-demand in Lifecycle workflows",
+ "userDescription": "Allows the app to run workflows on-demand on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Run workflows on-demand in Lifecycle workflows",
+ "adminDescription": "Allows the app run workflows on-demand without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/activate": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/activateandwait": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADLCMAGSApprovers"
+ }
+ },
+ "LifecycleWorkflows-Workflow.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all workflows in Lifecycle workflows",
+ "adminDescription": "Allows the app to list and read all workflows and tasks on behalf of a signed-in user.",
+ "userDisplayName": "Read all workflows in Lifecycle workflows",
+ "userDescription": "Allows the app to list and read all workflows and tasks on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all workflows in Lifecycle workflows",
+ "adminDescription": "Allows the app to list and read all workflows and tasks without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows": "",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewscope": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewtaskfailures": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/executionscope": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADLCMAGSApprovers"
+ }
+ },
+ "LifecycleWorkflows-Workflow.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "List all workflows in Lifecycle workflows",
+ "adminDescription": "Allows the app to list all workflows on behalf of a signed-in user.",
+ "userDisplayName": "List all workflows in Lifecycle workflows",
+ "userDescription": "Allows the app to list all workflows on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "List all workflows in Lifecycle workflows",
+ "adminDescription": "Allows the app to list all workflows without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/workflows": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADLCMAGSApprovers"
+ }
+ },
+ "LifecycleWorkflows-Workflow.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all workflows in Lifecycle workflows",
+ "adminDescription": "Allows the app to create, update, list, read and delete all workflows and tasks in lifecycle workflows on behalf of a signed-in user.",
+ "userDisplayName": "Read and write all workflows in Lifecycle workflows",
+ "userDescription": "Allows the app to create, update, list, read and delete all workflows and tasks in lifecycle workflows on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all workflows in Lifecycle workflows",
+ "adminDescription": "Allows the app to create, update, list, read and delete all workflows and tasks in lifecycle workflows without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows": "",
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows": "",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewscope": "",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewtaskfailures": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/executionscope": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}/restore": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewworkflow": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/activate": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/activateandwait": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/createnewversion": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/workflows/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADLCMAGSApprovers"
+ }
+ },
+ "LifecycleWorkflows.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all lifecycle workflows resources",
+ "adminDescription": "Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user.",
+ "userDisplayName": "Read all lifecycle workflows resources",
+ "userDescription": "Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all lifecycle workflows resources",
+ "adminDescription": "Allows the app to list and read all workflows, tasks and related lifecycle workflows resources without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/customtaskextensions": "",
+ "/identitygovernance/lifecycleworkflows/customtaskextensions/{id}": "",
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows": "",
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}": "",
+ "/identitygovernance/lifecycleworkflows/insights/topTasksProcessedSummary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/insights/topWorkflowsProcessedSummary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/insights/workflowsProcessedByCategory(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/insights/workflowsProcessedSummary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/settings": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/taskdefinitions": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/taskdefinitions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows": "",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewscope": "",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewtaskfailures": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/executionscope": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/summary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/summary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/summary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults/summary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflowtemplates": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflowtemplates/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADLCMAGSApprovers"
+ }
+ },
+ "LifecycleWorkflows.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all lifecycle workflows resources",
+ "adminDescription": "Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all lifecycle workflows resources",
+ "userDescription": "Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all lifecycle workflows resources",
+ "adminDescription": "Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/customtaskextensions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/customtaskextensions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/customtaskextensions/{id}": "",
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/customtaskextensions": "",
+ "/identitygovernance/lifecycleworkflows/customtaskextensions/{id}": "",
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows": "",
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}": "",
+ "/identitygovernance/lifecycleworkflows/insights/topTasksProcessedSummary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/insights/topWorkflowsProcessedSummary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/insights/workflowsProcessedByCategory(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/insights/workflowsProcessedSummary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/settings": "",
+ "/identitygovernance/lifecycleworkflows/taskdefinitions": "",
+ "/identitygovernance/lifecycleworkflows/taskdefinitions/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows": "",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewscope": "",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewtaskfailures": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/executionscope": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/subjectprocessingresults/summary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/{id}/userprocessingresults/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/runs/summary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/subjectprocessingresults/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/taskreports/summary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults/{id}/taskprocessingresults": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/userprocessingresults/summary(startdatetime={value},enddatetime={value})": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/versions/{id}/tasks/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflowtemplates": "",
+ "/identitygovernance/lifecycleworkflows/workflowtemplates/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/deleteditems/workflows/{id}/restore": "",
+ "/identitygovernance/lifecycleworkflows/workflows": "",
+ "/identitygovernance/lifecycleworkflows/workflows({id})/previewworkflow": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/activate": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/activateandwait": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/createnewversion": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}/taskprocessingresults/{id}/resume": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/lifecycleworkflows/settings": "least=DelegatedWork,Application",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}": "",
+ "/identitygovernance/lifecycleworkflows/workflows/{id}/tasks/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADLCMAGSApprovers"
+ }
+ },
+ "ListItems.SelectedOperations.Selected": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Access selected ListItems, on behalf of the signed-in user",
+ "adminDescription": "Allow the application to access a subset of listitems on behalf of the signed in user. The specific listitems and the permissions granted will be configured in SharePoint Online.",
+ "userDisplayName": "Access selected ListItems, on behalf of the signed-in user",
+ "userDescription": "Allow the application to access a subset of listitems on behalf of the signed in user. The specific listitems and the permissions granted will be configured in SharePoint Online.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Access selected ListItems without a signed in user.",
+ "adminDescription": "Allow the application to access a subset of listitems without a signed in user. The specific listitems and the permissions granted will be configured in SharePoint Online.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "spauthsg"
+ }
+ },
+ "Lists.SelectedOperations.Selected": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Access selected Lists, on behalf of the signed-in user",
+ "adminDescription": "Allow the application to access a subset of lists on behalf of the signed in user. The specific lists and the permissions granted will be configured in SharePoint Online.",
+ "userDisplayName": "Access selected Lists, on behalf of the signed-in user",
+ "userDescription": "Allow the application to access a subset of lists on behalf of the signed in user. The specific lists and the permissions granted will be configured in SharePoint Online.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Access selected Lists without a signed in user.",
+ "adminDescription": "Allow the application to access a subset of lists without a signed in user. The specific lists and the permissions granted will be configured in SharePoint Online.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "spauthsg"
+ }
+ },
+ "LockboxRequest.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all lockbox requests",
+ "adminDescription": "Allows the app to read lockbox requests on behalf of the signed-in user",
+ "userDisplayName": "Read lockbox requests",
+ "userDescription": "Allows the app to read lockbox requests that you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/lockbox/requests": "least=DelegatedWork",
+ "/security/lockbox/requests/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ihxhealth"
+ }
+ },
+ "LockboxRequest.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and manage lockbox requests",
+ "adminDescription": "Allows the app to read and manage lockbox requests on behalf of the signed-in user",
+ "userDisplayName": "Read and manage lockbox requests",
+ "userDescription": "Allows the app to read and manage lockbox requests that you can access, including approving or denying access requests.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/lockbox/requests/{id}/approve": "least=DelegatedWork",
+ "/security/lockbox/requests/{id}/deny": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ihxhealth"
+ }
+ },
+ "LockboxSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read lockbox settings",
+ "adminDescription": "Allows the app to read lockbox configuration settings on behalf of the signed-in user",
+ "userDisplayName": "Read lockbox settings",
+ "userDescription": "Allows the app to read lockbox configuration settings for your organization.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/lockbox/settings": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ihxhealth"
+ }
+ },
+ "LockboxSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write lockbox settings",
+ "adminDescription": "Allows the app to read and modify lockbox configuration settings on behalf of the signed-in user",
+ "userDisplayName": "Read and write lockbox settings",
+ "userDescription": "Allows the app to read and modify lockbox configuration settings for your organization.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/lockbox/settings": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ihxhealth"
+ }
+ },
+ "Mail.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user mail ",
+ "adminDescription": "Allows the app to read the signed-in user's mailbox.",
+ "userDisplayName": "Read your mail ",
+ "userDescription": "Allows the app to read email in your mailbox. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user mail ",
+ "adminDescription": "Allows the app to read the signed-in user's mailbox.",
+ "userDisplayName": "Read your mail ",
+ "userDescription": "Allows the app to read email in your mailbox. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read mail in all mailboxes",
+ "adminDescription": "Allows the app to read mail in all mailboxes without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/getmailtips": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/getmailtips": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/inferenceclassification/overrides": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders": "",
+ "/me/mailfolders/{id}": "",
+ "/me/mailfolders/{id}/childfolders": "",
+ "/me/mailfolders/{id}/childfolders/{id}/.../messages/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages": "",
+ "/me/mailfolders/{id}/messages/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/delta": "",
+ "/me/mailfolders/{id}/operations": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/operations/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/delta": "",
+ "/me/messages": "",
+ "/me/messages/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/inferenceclassification/overrides": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders": "",
+ "/users/{id}/mailfolders/{id}": "",
+ "/users/{id}/mailfolders/{id}/childfolders": "",
+ "/users/{id}/mailfolders/{id}/childfolders/{id}/.../messages/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/childfolders/{id}/messages/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages": "",
+ "/users/{id}/mailfolders/{id}/messages/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/delta": "",
+ "/users/{id}/mailfolders/{id}/operations": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/operations/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/delta": "",
+ "/users/{id}/messages": "",
+ "/users/{id}/messages/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/search/query": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Mail.Read.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user and shared mail",
+ "adminDescription": "Allows the app to read mail a user can access, including their own and shared mail.",
+ "userDisplayName": "Read mail you can access",
+ "userDescription": "Allows the app to read mail you can access, including shared mail.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/getmailtips": "",
+ "/users/{id}/getmailtips": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Mail.ReadBasic": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user basic mail",
+ "adminDescription": "Allows the app to read email in the signed-in user's mailbox except body, previewBody, attachments and any extended properties.",
+ "userDisplayName": "Read user basic mail",
+ "userDescription": "Allows the app to read email in the signed-in user's mailbox except body, previewBody, attachments and any extended properties.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user basic mail",
+ "adminDescription": "Allows the app to read email in the signed-in user's mailbox except body, previewBody, attachments and any extended properties.",
+ "userDisplayName": "Read user basic mail",
+ "userDescription": "Allows the app to read email in the signed-in user's mailbox except body, previewBody, attachments and any extended properties.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/mailfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/mailfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/mailfolders/{id}/childfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/mailfolders/{id}/messages": "least=DelegatedWork,DelegatedPersonal",
+ "/me/mailfolders/{id}/messages/{id}": "",
+ "/me/mailfolders/{id}/messages/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/me/mailfolders/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/me/messages": "least=DelegatedWork,DelegatedPersonal",
+ "/me/messages/{id}": "",
+ "/users/{id}/mailfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/mailfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/mailfolders/{id}/childfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/mailfolders/{id}/messages": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/mailfolders/{id}/messages/{id}": "",
+ "/users/{id}/mailfolders/{id}/messages/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/mailfolders/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/messages": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/messages/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Mail.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read basic mail in all mailboxes",
+ "adminDescription": "Allows the app to read basic mail properties in all mailboxes without a signed-in user. Includes all properties except body, previewBody, attachments and any extended properties.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/mailfolders": "least=Application",
+ "/me/mailfolders/{id}": "least=Application",
+ "/me/mailfolders/{id}/childfolders": "least=Application",
+ "/me/mailfolders/{id}/messages": "least=Application",
+ "/me/mailfolders/{id}/messages/{id}": "",
+ "/me/mailfolders/{id}/messages/delta": "least=Application",
+ "/me/mailfolders/delta": "least=Application",
+ "/me/messages": "least=Application",
+ "/me/messages/{id}": "",
+ "/users/{id}/mailfolders": "least=Application",
+ "/users/{id}/mailfolders/{id}": "least=Application",
+ "/users/{id}/mailfolders/{id}/childfolders": "least=Application",
+ "/users/{id}/mailfolders/{id}/messages": "least=Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}": "",
+ "/users/{id}/mailfolders/{id}/messages/delta": "least=Application",
+ "/users/{id}/mailfolders/delta": "least=Application",
+ "/users/{id}/messages": "least=Application",
+ "/users/{id}/messages/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Mail.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write access to user mail ",
+ "adminDescription": "Allows the app to create, read, update, and delete email in user mailboxes. Does not include permission to send mail. ",
+ "userDisplayName": "Read and write access to your mail ",
+ "userDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write access to user mail ",
+ "adminDescription": "Allows the app to create, read, update, and delete email in user mailboxes. Does not include permission to send mail. ",
+ "userDisplayName": "Read and write access to your mail ",
+ "userDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write mail in all mailboxes",
+ "adminDescription": "Allows the app to create, read, update, and delete mail in all mailboxes without a signed-in user. Does not include permission to send mail.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/events/{id}/attachments/createuploadsession": "",
+ "/me/inferenceclassification/overrides": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/childfolders/{id}/.../messages/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/copy": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/copy": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/createforward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/createreply": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/createreplyall": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/move": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/move": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/reportMessage": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/updateAllMessagesReadState": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/attachments/createuploadsession": "",
+ "/me/messages/{id}/copy": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/createforward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/createreply": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/createreplyall": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/move": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/reportMessage": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/events/{id}/attachments/createuploadsession": "",
+ "/users/{id}/inferenceclassification/overrides": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/childfolders/{id}/.../messages/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/childfolders/{id}/messages/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/copy": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/copy": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/createforward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/createreply": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/createreplyall": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/move": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/move": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/reportMessage": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/updateAllMessagesReadState": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/attachments": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/attachments/createuploadsession": "",
+ "/users/{id}/messages/{id}/copy": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/createforward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/createreply": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/createreplyall": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/move": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/reportMessage": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/inferenceclassification/overrides/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/inferenceclassification/overrides/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/mailfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/childfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/childfolders": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/mailfolders/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/mailfolders/{id}/messages/{id}/mentions/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/mentions/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/mentions/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/mentions/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/mailfolders/{id}/messages/delta": "",
+ "/me/mailfolders/delta": "",
+ "/users/{id}/mailfolders/{id}/messages/delta": "",
+ "/users/{id}/mailfolders/delta": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Mail.ReadWrite.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user and shared mail",
+ "adminDescription": "Allows the app to create, read, update, and delete mail a user has permission to access, including their own and shared mail. Does not include permission to send mail.",
+ "userDisplayName": "Read and write mail you can access",
+ "userDescription": "Allows the app to read, update, create, and delete mail you have permission to access, including your own and shared mail. Does not allow the app to send mail on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Mail.Send": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Send mail as a user ",
+ "adminDescription": "Allows the app to send mail as users in the organization. ",
+ "userDisplayName": "Send mail as you ",
+ "userDescription": "Allows the app to send mail as you. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Send mail as a user ",
+ "adminDescription": "Allows the app to send mail as users in the organization. ",
+ "userDisplayName": "Send mail as you ",
+ "userDescription": "Allows the app to send mail as you. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Send mail as any user",
+ "adminDescription": "Allows the app to send mail as any user without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/mailfolders/{id}/messages/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/reply": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/{id}/messages/{id}/replyall": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/reply": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/messages/{id}/send": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/sendmail": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/reply": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/{id}/messages/{id}/replyall": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/forward": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/reply": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/replyall": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/send": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/messages/{id}/unsubscribe": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/sendmail": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/me/messages/{id}/replyall": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "Mail.Send.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Send mail on behalf of others",
+ "adminDescription": "Allows the app to send mail as the signed-in user, including sending on-behalf of others.",
+ "userDisplayName": "Send mail on behalf of others or yourself",
+ "userDescription": "Allows the app to send mail as you or on-behalf of someone else.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxConfigItem.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's UserConfiguration objects",
+ "adminDescription": "Allows the app to read user's UserConfiguration objects, on behalf of the the signed-in user.",
+ "userDisplayName": "Read your UserConfiguration objects",
+ "userDescription": "Allows the app to read your UserConfiguration objects.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user's UserConfiguration objects",
+ "adminDescription": "Allows the app to read user's UserConfiguration objects, on behalf of the the signed-in user.",
+ "userDisplayName": "Read your UserConfiguration objects",
+ "userDescription": "Allows the app to read your UserConfiguration objects.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' UserConfiguration objects",
+ "adminDescription": "Allows the app to read all users' UserConfiguration objects.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/mailFolders/{id}/userConfigurations/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailFolders/{id}/userConfigurations/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphExoSchemaAdmin"
+ }
+ },
+ "MailboxConfigItem.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user's UserConfiguration objects",
+ "adminDescription": "Allows the app to create, read, update and delete user's UserConfiguration objects, on behalf of the the signed-in user.",
+ "userDisplayName": "Read and write your UserConfiguration objects",
+ "userDescription": "Allows the app to create, read, update and delete your UserConfiguration objects.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write user's UserConfiguration objects",
+ "adminDescription": "Allows the app to create, read, update and delete user's UserConfiguration objects, on behalf of the the signed-in user.",
+ "userDisplayName": "Read and write your UserConfiguration objects",
+ "userDescription": "Allows the app to create, read, update and delete your UserConfiguration objects.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' UserConfiguration objects",
+ "adminDescription": "Allows the app to create, read, update and delete all users' UserConfiguration objects.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/mailFolders/{id}/userConfigurations": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailFolders/{id}/userConfigurations": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/mailFolders/{id}/userConfigurations/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailFolders/{id}/userConfigurations/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphExoSchemaAdmin"
+ }
+ },
+ "MailboxFolder.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read a user's mailbox folders",
+ "adminDescription": "Allows the app to read the user's mailbox folders, on behalf of the the signed-in user.",
+ "userDisplayName": "Read your mailbox folders",
+ "userDescription": "Allows the app to read your mailbox folders, on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders": "least=DelegatedWork",
+ "/admin/exchange/mailboxes/{id}/folders/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxFolder.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all the users' mailbox folders",
+ "adminDescription": "Allows the app to read all the users' mailbox folders, without signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders": "least=Application",
+ "/admin/exchange/mailboxes/{id}/folders/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxFolder.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write a user's mailbox folders",
+ "adminDescription": "Allows the app to read and write the user's mailbox folders, on behalf of the the signed-in user.",
+ "userDisplayName": "Read and write your mailbox folders",
+ "userDescription": "Allows the app to read and write your mailbox folders, on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxFolder.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all the users' mailbox folders",
+ "adminDescription": "Allows the app to read and write all the users' mailbox folders, without signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxItem.Export": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Export a user's mailbox items",
+ "adminDescription": "Allows the app to export the user's mailbox items, on behalf of the the signed-in user.",
+ "userDisplayName": "Export your mailbox items",
+ "userDescription": "Allows the app to export your mailbox items, on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/exportItems": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxItem.Export.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Export all the users' mailbox items",
+ "adminDescription": "Allows the app to export all the users' mailbox items, without signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/exportItems": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxItem.ImportExport": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Export and import a user's mailbox items",
+ "adminDescription": "Allows the app to export and import the user's mailbox items, on behalf of the the signed-in user.",
+ "userDisplayName": "Export and import your mailbox items",
+ "userDescription": "Allows the app to export and import your mailbox items, on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/createImportSession": "least=DelegatedWork",
+ "/admin/exchange/mailboxes/{id}/exportItems": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxItem.ImportExport.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Export and import all the users' mailbox items",
+ "adminDescription": "Allows the app to export and import all the users' mailbox items, without signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/createImportSession": "least=Application",
+ "/admin/exchange/mailboxes/{id}/exportItems": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxItem.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read a user's mailbox items",
+ "adminDescription": "Allows the app to read the user's mailbox items, on behalf of the the signed-in user.",
+ "userDisplayName": "Read your mailbox items",
+ "userDescription": "Allows the app to read your mailbox items, on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders/{id}/items": "least=DelegatedWork",
+ "/admin/exchange/mailboxes/{id}/folders/{id}/items/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxItem.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all the users' mailbox items",
+ "adminDescription": "Allows the app to read all the users' mailbox items, without signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders/{id}/items": "least=Application",
+ "/admin/exchange/mailboxes/{id}/folders/{id}/items/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxItem.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write a user's mailbox items",
+ "adminDescription": "Allows the app to read, write, and delete the user's mailbox items, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your mailbox items",
+ "userDescription": "Allows the app to read, write, and delete your mailbox items, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders/{id}/items": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders/{id}/items/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxItem.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all users' mailbox items",
+ "adminDescription": "Allows the app to read, write, and delete all users' mailbox items, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders/{id}/items": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/admin/exchange/mailboxes/{id}/folders/{id}/items/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxSettings.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user mailbox settings",
+ "adminDescription": "Allows the app to the read user's mailbox settings. Does not include permission to send mail.",
+ "userDisplayName": "Read your mailbox settings",
+ "userDescription": "Allows the app to read your mailbox settings.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user mailbox settings",
+ "adminDescription": "Allows the app to the read user's mailbox settings. Does not include permission to send mail.",
+ "userDisplayName": "Read your mailbox settings",
+ "userDescription": "Allows the app to read your mailbox settings.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all user mailbox settings",
+ "adminDescription": "Allows the app to read user's mailbox settings without a signed-in user. Does not include permission to send mail.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/mailboxsettings": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailboxsettings/automaticrepliessetting": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailboxsettings/dateformat": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailboxsettings/delegatemeetingmessagedeliveryoptions": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailboxsettings/language": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailboxsettings/timeformat": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailboxsettings/timezone": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailboxsettings/userpurpose": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailboxsettings/workinghours": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/inbox/messagerules": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/mailfolders/inbox/messagerules/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/outlook/mastercategories": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/outlook/mastercategories/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings/automaticrepliessetting": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings/dateformat": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings/delegatemeetingmessagedeliveryoptions": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings/language": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings/timeformat": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings/timezone": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings/userpurpose": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings/workinghours": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/inbox/messagerules": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/inbox/messagerules/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/outlook/mastercategories": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/outlook/mastercategories/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/settings/workHoursAndLocations": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailboxSettings.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user mailbox settings",
+ "adminDescription": "Allows the app to create, read, update, and delete user's mailbox settings. Does not include permission to send mail.",
+ "userDisplayName": "Read and write to your mailbox settings",
+ "userDescription": "Allows the app to read, update, create, and delete your mailbox settings.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write user mailbox settings",
+ "adminDescription": "Allows the app to create, read, update, and delete user's mailbox settings. Does not include permission to send mail.",
+ "userDisplayName": "Read and write to your mailbox settings",
+ "userDescription": "Allows the app to read, update, create, and delete your mailbox settings.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all user mailbox settings",
+ "adminDescription": "Allows the app to create, read, update, and delete user's mailbox settings without a signed-in user. Does not include permission to send mail.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/mailboxsettings": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailboxsettings": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/mailboxsettings/automaticrepliessetting": "",
+ "/me/mailboxsettings/dateformat": "",
+ "/me/mailboxsettings/delegatemeetingmessagedeliveryoptions": "",
+ "/me/mailboxsettings/language": "",
+ "/me/mailboxsettings/timeformat": "",
+ "/me/mailboxsettings/timezone": "",
+ "/me/mailboxsettings/userpurpose": "",
+ "/me/mailboxsettings/workinghours": "",
+ "/users/{id}/mailboxsettings/automaticrepliessetting": "",
+ "/users/{id}/mailboxsettings/dateformat": "",
+ "/users/{id}/mailboxsettings/delegatemeetingmessagedeliveryoptions": "",
+ "/users/{id}/mailboxsettings/language": "",
+ "/users/{id}/mailboxsettings/timeformat": "",
+ "/users/{id}/mailboxsettings/timezone": "",
+ "/users/{id}/mailboxsettings/userpurpose": "",
+ "/users/{id}/mailboxsettings/workinghours": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/mailfolders/inbox/messagerules": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/outlook/mastercategories": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/inbox/messagerules": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/outlook/mastercategories": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/mailfolders/inbox/messagerules/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/outlook/mastercategories/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/mailfolders/inbox/messagerules/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/outlook/mastercategories/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/settings/workHoursAndLocations": "",
+ "/users/{id}/settings/workHoursAndLocations": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/me/settings/workHoursAndLocations": "least=DelegatedWork",
+ "/users/{id}/settings/workHoursAndLocations": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailTips.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read mail tips for all users",
+ "adminDescription": "Allows the app to read mail tips for all users in the organization without a signed-in user. Mail tips include automatic replies, mailbox status, custom tips, and delivery information.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/getmailtips": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "MailTips.ReadBasic.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read mail tips for accessible mailboxes",
+ "adminDescription": "Allows the app to read mail tips on behalf of the signed-in user for mailboxes they have access to, including their own mailbox and shared mailboxes. Mail tips include automatic replies, mailbox status, custom tips, and delivery information.",
+ "userDisplayName": "Read mail tips for mailboxes you can access",
+ "userDescription": "Allows the app to read mail tips on your behalf for mailboxes you have access to, including your own mailbox and shared mailboxes.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read mail tips for accessible mailboxes",
+ "adminDescription": "Allows the app to read mail tips on behalf of the signed-in user for mailboxes they have access to. Mail tips include automatic replies, mailbox status, custom tips, and delivery information.",
+ "userDisplayName": "Read mail tips for mailboxes you can access",
+ "userDescription": "Allows the app to read mail tips on your behalf for mailboxes you have access to, including your own mailbox.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/getmailtips": "",
+ "/users/{id}/getmailtips": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stisaprvc"
+ }
+ },
+ "ManagedTenants.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all managed tenant information",
+ "adminDescription": "Allows the app to read all managed tenant information on behalf of the signed-in user.",
+ "userDisplayName": "Read all managed tenant information",
+ "userDescription": "Allows the app to read all managed tenant information on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/managedtenant/auditevents": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/auditevents/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/managementactions": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/managementactions/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/managementactiontenantdeploymentstatuses": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/managementactiontenantdeploymentstatuses/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/managementintents": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/managementintents/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/managementtemplates": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/managementtemplates/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/myroles": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/procedures": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/procedures/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/procedurestepdefinitions": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/procedurestepdefinitions/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/recordroot/offboardeduserrecords": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/recordroot/offboardeduserrecords/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/reportRoot/delegatedAccessReports": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/reportroot/offboardeduserreports": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/reportroot/offboardeduserreports/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/roleAssignments": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/roleDefinitions": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenantgroups": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenantgroups/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenants": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenants/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenantscustomizedinformation": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenantscustomizedinformation/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenantsdetailedinformation": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenantsdetailedinformation/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenanttags": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenanttags/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenantusage": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/tenantgroups/tenantsearch": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "simbaeng"
+ }
+ },
+ "ManagedTenants.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all managed tenant information",
+ "adminDescription": "Allows the app to read and write all managed tenant information on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all managed tenant information",
+ "userDescription": "Allows the app to read and write all managed tenant information on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/managedtenant/auditevents": "",
+ "/tenantrelationships/managedtenants/auditevents/{id}": "",
+ "/tenantrelationships/managedtenants/managementactions": "",
+ "/tenantrelationships/managedtenants/managementactions/{id}": "",
+ "/tenantrelationships/managedtenants/managementactiontenantdeploymentstatuses": "",
+ "/tenantrelationships/managedtenants/managementactiontenantdeploymentstatuses/{id}": "",
+ "/tenantrelationships/managedtenants/managementintents": "",
+ "/tenantrelationships/managedtenants/managementintents/{id}": "",
+ "/tenantrelationships/managedtenants/managementtemplates": "",
+ "/tenantrelationships/managedtenants/managementtemplates/{id}": "",
+ "/tenantrelationships/managedtenants/myroles": "",
+ "/tenantrelationships/managedtenants/procedurestepdefinitions": "",
+ "/tenantrelationships/managedtenants/procedurestepdefinitions/{id}": "",
+ "/tenantrelationships/managedtenants/recordroot/offboardeduserrecords": "",
+ "/tenantrelationships/managedtenants/reportroot/offboardeduserreports": "",
+ "/tenantrelationships/managedtenants/reportroot/offboardeduserreports/{id}": "",
+ "/tenantrelationships/managedtenants/roleDefinitions": "",
+ "/tenantrelationships/managedtenants/tenantgroups": "",
+ "/tenantrelationships/managedtenants/tenantgroups/{id}": "",
+ "/tenantrelationships/managedtenants/tenants": "",
+ "/tenantrelationships/managedtenants/tenants/{id}": "",
+ "/tenantrelationships/managedtenants/tenantscustomizedinformation": "",
+ "/tenantrelationships/managedtenants/tenantsdetailedinformation": "",
+ "/tenantrelationships/managedtenants/tenantsdetailedinformation/{id}": "",
+ "/tenantrelationships/managedtenants/tenantusage": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/managementactions/{id}/apply": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/managementactiontenantdeploymentstatuses/changedeploymentstatus": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/procedures/{id}/run": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/recordroot/offboardeduserrecords/{id}/completeoffboarding": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/recordRoot/supportOrganizationRecords": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenantgroups/tenantsearch": "",
+ "/tenantrelationships/managedtenants/tenants/{id}/offboardtenant": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenants/{id}/resettenantonboardingstatus": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenanttags/{id}/assigntag": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenanttags/{id}/unassigntag": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/tenantscustomizedinformation/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/procedures": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/roleAssignments": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/tenanttags": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/tenanttags/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/recordroot/offboardeduserrecords/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/recordRoot/supportOrganizationRecords/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/procedures/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/recordRoot/supportOrganizationRecords": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "simbaeng"
+ }
+ },
+ "Member.Read.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Member.Read.Hidden": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read hidden memberships",
+ "adminDescription": "Allows the app to read the memberships of hidden groups and administrative units on behalf of the signed-in user, for those hidden groups and administrative units that the signed-in user has access to.",
+ "userDisplayName": "Read your hidden memberships",
+ "userDescription": "Allows the app to read the memberships of hidden groups or administrative units on your behalf, for those hidden groups or adminstrative units that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all hidden memberships",
+ "adminDescription": "Allows the app to read the memberships of hidden groups and administrative units without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/members": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "MultiTenantOrganization.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read multi-tenant organization details and tenants",
+ "adminDescription": "Allows the app to read multi-tenant organization details and tenants on behalf of the signed-in user.",
+ "userDisplayName": "Read multi-tenant organization details and tenants",
+ "userDescription": "Allows the app to read multi-tenant organization details and tenants on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all multi-tenant organization details and tenants",
+ "adminDescription": "Allows the app to read all multi-tenant organization details and tenants, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/crossTenantAccessPolicy/templates": "least=DelegatedWork,Application",
+ "/tenantRelationships/multiTenantOrganization": "least=Application",
+ "/tenantRelationships/multiTenantOrganization/joinRequest": "least=DelegatedWork,Application",
+ "/tenantRelationships/multiTenantOrganization/tenants": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "MultiTenantOrganization.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read multi-tenant organization basic details and active tenants",
+ "adminDescription": "Allows the app to read multi-tenant organization basic details and active tenants on behalf of the signed-in user.",
+ "userDisplayName": "Read multi-tenant organization basic details and active tenants",
+ "userDescription": "Allows the app to read multi-tenant organization basic details and active tenants on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read multi-tenant organization basic details and active tenants",
+ "adminDescription": "Allows the app to read multi-tenant organization basic details and active tenants, without a signed-in user.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantRelationships/multiTenantOrganization": "least=DelegatedWork",
+ "/tenantRelationships/multiTenantOrganization/tenants": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "MultiTenantOrganization.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write multi-tenant organization details and tenants",
+ "adminDescription": "Allows the app to read and write multi-tenant organization details and tenants on behalf of the signed-in user.",
+ "userDisplayName": "Read and write multi-tenant organization details and tenants",
+ "userDescription": "Allows the app to read multi-tenant organization details and tenants on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all multi-tenant organization details and tenants",
+ "adminDescription": "Allows the app to read and write all multi-tenant organization details and tenants, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/tenantRelationships/multiTenantOrganization": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/tenantRelationships/multiTenantOrganization/tenants/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/tenantRelationships/multiTenantOrganization/tenants": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/crossTenantAccessPolicy/templates": "least=DelegatedWork,Application",
+ "/tenantRelationships/multiTenantOrganization/joinRequest": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "MutualTlsOauthConfiguration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all device authentication certificate configurations.",
+ "adminDescription": "Allows the app to read all device authentication certificate configurations on behalf of the signed-in user.",
+ "userDisplayName": "Read all device authentication certificate configurations.",
+ "userDescription": "Allows the app to read all device authentication certificate configurations on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all device authentication certificate configurations.",
+ "adminDescription": "Allows the app to read all device authentication certificate configurations without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/certificateAuthorities/mutualTlsOauthConfigurations": "least=Application,DelegatedWork",
+ "/directory/certificateAuthorities/mutualTlsOauthConfigurations/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "MutualTlsOauthConfiguration.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all device authentication certificate configurations.",
+ "adminDescription": "Allows the app to the and write all device authentication certificate configurations on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all device authentication certificate configurations.",
+ "userDescription": "Allows the app to read and write all device authentication certificate configurations on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all device authentication certificate configurations.",
+ "adminDescription": "Allows the app the read and write all device authentication certificate configurations without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/certificateAuthorities/mutualTlsOauthConfigurations": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/certificateAuthorities/mutualTlsOauthConfigurations": "least=Application,DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/certificateAuthorities/mutualTlsOauthConfigurations/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "NetworkAccess-Reports.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all network access reports",
+ "adminDescription": "Allows the app to read all network access reports on behalf of the signed-in user.",
+ "userDisplayName": "Read all network access reports",
+ "userDescription": "Allows the app to read all network access reports and configuration settings, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all network access reports",
+ "adminDescription": "Allows the app to read all network access reports without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/networkAccess/alerts": "least=DelegatedWork,Application",
+ "/networkaccess/alerts/getAlertFrequencies": "least=DelegatedWork,Application",
+ "/networkaccess/alerts/getAlertSeveritySummaries": "least=DelegatedWork,Application",
+ "/networkaccess/alerts/getAlertSummaries": "least=DelegatedWork,Application",
+ "/networkaccess/discovery/discoveredApplicationSegments": "least=DelegatedWork,Application",
+ "/networkaccess/logs/connections": "least=DelegatedWork,Application",
+ "/networkaccess/logs/connections/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/logs/generativeAIInsights": "least=DelegatedWork,Application",
+ "/networkaccess/logs/remoteNetworks": "least=DelegatedWork,Application",
+ "/networkaccess/logs/traffic": "least=DelegatedWork,Application",
+ "/networkaccess/logs/traffic/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/reports/clientTrafficActivity(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/entitiesSummaries": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getApplicationUsageAnalytics(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getClientVersionsByOperatingSystem(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getCloudApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getConnectionSummaries(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getCrossTenantSummary": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDestinationSummaries": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDeviceOperatingSystemVersions(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDeviceUsageSummary": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDiscoveredAIAgentReport(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDiscoveredApplicationSegmentGroupingRecommendationsReport(period={period})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDiscoveredApplicationSegmentGroupingRecommendationsSummary(period={period})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDiscoveredApplicationSegmentReport(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDomainControllerDiscovery(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDomainControllerDiscoveryDevices(startDateTime={startDateTime},endDateTime={endDateTime},hostFqdn={hostFqdn})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDomainControllerDiscoveryOnPremisesAccounts(startDateTime={startDateTime},endDateTime={endDateTime},hostFqdn={hostFqdn})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDomainControllerDiscoveryServicePrincipals(startDateTime={startDateTime},endDateTime={endDateTime},hostFqdn={hostFqdn})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getDomainControllerDiscoveryUsers(startDateTime={startDateTime},endDateTime={endDateTime},hostFqdn={hostFqdn})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getEnterpriseApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getMcpDiscovery(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getMcpDiscoverySummary(startDateTime={startDateTime},endDateTime={endDateTime})": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getUserThreatReport": "least=DelegatedWork,Application",
+ "/networkaccess/reports/getUserThreatSummaryReport": "least=DelegatedWork,Application",
+ "/networkaccess/reports/transactionSummaries": "least=DelegatedWork,Application",
+ "/networkaccess/reports/usageProfiling(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gsadatateams"
+ }
+ },
+ "NetworkAccess.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all network access information",
+ "adminDescription": "Allows the app to read all network access information on behalf of the signed-in user.",
+ "userDisplayName": "Read all network access information",
+ "userDescription": "Allows the app to read all network access information and configuration settings, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all network access information",
+ "adminDescription": "Allows the app to read all network access information and configuration settings without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/networkAccess/cloudFirewallPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}/connectivityConfiguration": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}/deviceLinks": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}/deviceLinks/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/getWebCategoryByUrl(url={value})": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/remoteNetworks/{id}/microsoft.graph.networkaccess.getRemoteNetworkLinkHealth": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/webCategories": "least=DelegatedWork,Application",
+ "/networkAccess/contentPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/contentPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/contentPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/deployments": "least=DelegatedWork,Application",
+ "/networkAccess/deployments/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/explicitForwardProxyConfig": "least=DelegatedWork,Application",
+ "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles": "least=DelegatedWork,Application",
+ "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/featureSettings": "least=DelegatedWork,Application",
+ "/networkAccess/featureSettings/settings": "least=DelegatedWork,Application",
+ "/networkAccess/featureSettings/settings/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/fileDlpPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filteringPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/filteringPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/filteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles/{id}/policies": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles/{id}/policies?$filter=isof('microsoft.graph.networkaccess.tlsInspectionPolicyLink')": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingProfiles": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingProfiles/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingProfiles/{id}/policies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/privateAccessConfigs/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/privateNetworks": "least=DelegatedWork,Application",
+ "/networkAccess/privateNetworks/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/promptPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/promptPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/promptPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/promptPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/secureEnterpriseBrowserConfig": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviderPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviderPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviderPolicySchemas": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviderPolicySchemas/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviders": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviders/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviders/{id}/registration": "least=DelegatedWork,Application",
+ "/networkAccess/settings/conditionalAccess": "least=DelegatedWork,Application",
+ "/networkAccess/settings/crossTenantAccess": "least=DelegatedWork,Application",
+ "/networkAccess/settings/customBlockPage": "least=DelegatedWork,Application",
+ "/networkaccess/settings/enrichedAuditLogs": "least=DelegatedWork,Application",
+ "/networkAccess/threatInspectionPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/tls/externalCertificateAuthorityCertificates": "least=DelegatedWork,Application",
+ "/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/tls/managedCertificateAuthorityCertificates": "least=DelegatedWork,Application",
+ "/networkaccess/tls/managedCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/tls/settings": "least=DelegatedWork,Application",
+ "/networkaccess/tls/trustedCertificateAuthorities": "least=Application",
+ "/networkaccess/tls/trustedCertificateAuthorities/{id}": "least=Application",
+ "/networkAccess/tlsInspectionPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/tlsInspectionPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/tlsInspectionPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/tlsInspectionPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/tlsPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/networkAccess/classifyMcpTools": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/remoteNetworks/microsoft.graph.networkaccess.getRemoteNetworksHealth": "least=DelegatedWork,Application",
+ "/networkAccess/discoverMcpTools": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gsadatateams"
+ }
+ },
+ "NetworkAccess.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all network access information",
+ "adminDescription": "Allows the app to read and write all network access information and configuration settings on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all network access information",
+ "userDescription": "Allows the app to read and write all network access information and configuration settings, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all network access information",
+ "adminDescription": "Allows the app to read and write all network access information and configuration settings without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/networkAccess/alerts": "",
+ "/networkaccess/alerts/getAlertFrequencies": "",
+ "/networkaccess/alerts/getAlertSeveritySummaries": "",
+ "/networkaccess/alerts/getAlertSummaries": "",
+ "/networkAccess/cloudFirewallPolicies": "",
+ "/networkAccess/cloudFirewallPolicies/{id}": "",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft": "",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft/policyRules": "",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft/policyRules/{id}": "",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyRules": "",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyRules/{id}": "",
+ "/networkAccess/connectivity/branches": "",
+ "/networkAccess/connectivity/branches/{id}": "",
+ "/networkAccess/connectivity/branches/{id}/connectivityConfiguration": "",
+ "/networkAccess/connectivity/branches/{id}/deviceLinks": "",
+ "/networkAccess/connectivity/branches/{id}/deviceLinks/{id}": "",
+ "/networkAccess/connectivity/remoteNetworks/{id}/microsoft.graph.networkaccess.getRemoteNetworkLinkHealth": "",
+ "/networkAccess/connectivity/webCategories": "",
+ "/networkAccess/contentPolicies": "",
+ "/networkAccess/contentPolicies/{id}/policyRules": "",
+ "/networkAccess/contentPolicies/{id}/policyRules/{id}": "",
+ "/networkAccess/contentTypePolicies": "",
+ "/networkAccess/contentTypePolicies/{id}": "",
+ "/networkAccess/contentTypePolicies/{id}/policyRules": "",
+ "/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "",
+ "/networkaccess/discovery/discoveredApplicationSegments": "",
+ "/networkAccess/explicitForwardProxyConfig": "",
+ "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles": "",
+ "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "",
+ "/networkAccess/featureSettings": "",
+ "/networkAccess/featureSettings/settings": "",
+ "/networkAccess/featureSettings/settings/{id}": "",
+ "/networkAccess/fileDlpPolicies": "",
+ "/networkAccess/filePolicies": "",
+ "/networkAccess/filePolicies/{id}": "",
+ "/networkAccess/filePolicies/{id}/policyRules": "",
+ "/networkAccess/filePolicies/{id}/policyRules/{id}": "",
+ "/networkAccess/filteringPolicies": "",
+ "/networkAccess/filteringPolicies/{id}/policyRules": "",
+ "/networkAccess/filteringPolicies/{id}/policyRules/{id}": "",
+ "/networkAccess/filteringProfiles": "",
+ "/networkAccess/filteringProfiles/{id}": "",
+ "/networkAccess/filteringProfiles/{id}/policies": "",
+ "/networkAccess/filteringProfiles/{id}/policies?$filter=isof('microsoft.graph.networkaccess.tlsInspectionPolicyLink')": "",
+ "/networkAccess/forwardingPolicies": "",
+ "/networkAccess/forwardingPolicies/{id}": "",
+ "/networkAccess/forwardingPolicies/{id}/policyRules": "",
+ "/networkAccess/forwardingPolicies/{id}/policyRules/{id}": "",
+ "/networkAccess/forwardingProfiles": "",
+ "/networkAccess/forwardingProfiles/{id}": "",
+ "/networkAccess/forwardingProfiles/{id}/policies/{id}": "",
+ "/networkAccess/intelligentAppProtectPolicies": "",
+ "/networkAccess/intelligentAppProtectPolicies/{id}": "",
+ "/networkAccess/intelligentAppProtectPolicies/{id}/policyRules": "",
+ "/networkAccess/intelligentAppProtectPolicies/{id}/policyRules/{id}": "",
+ "/networkaccess/logs/connections": "",
+ "/networkaccess/logs/connections/{id}": "",
+ "/networkaccess/logs/generativeAIInsights": "",
+ "/networkaccess/logs/remoteNetworks": "",
+ "/networkaccess/logs/traffic": "",
+ "/networkaccess/logs/traffic/{id}": "",
+ "/networkAccess/mcpPolicies": "",
+ "/networkAccess/mcpPolicies/{id}": "",
+ "/networkAccess/mcpPolicies/{id}/policyRules": "",
+ "/networkAccess/mcpPolicies/{id}/policyRules/{id}": "",
+ "/networkaccess/privateAccessConfigs/{id}": "",
+ "/networkAccess/privateNetworks": "",
+ "/networkAccess/privateNetworks/{id}": "",
+ "/networkaccess/reports/clientTrafficActivity(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/entitiesSummaries": "",
+ "/networkaccess/reports/getApplicationUsageAnalytics(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})": "",
+ "/networkaccess/reports/getClientVersionsByOperatingSystem(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getCloudApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getConnectionSummaries(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getCrossTenantSummary": "",
+ "/networkaccess/reports/getDestinationSummaries": "",
+ "/networkaccess/reports/getDeviceOperatingSystemVersions(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getDeviceUsageSummary": "",
+ "/networkaccess/reports/getDiscoveredAIAgentReport(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getDiscoveredApplicationSegmentGroupingRecommendationsReport(period={period})": "",
+ "/networkaccess/reports/getDiscoveredApplicationSegmentGroupingRecommendationsSummary(period={period})": "",
+ "/networkaccess/reports/getDiscoveredApplicationSegmentReport(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getDomainControllerDiscovery(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getDomainControllerDiscoveryDevices(startDateTime={startDateTime},endDateTime={endDateTime},hostFqdn={hostFqdn})": "",
+ "/networkaccess/reports/getDomainControllerDiscoveryOnPremisesAccounts(startDateTime={startDateTime},endDateTime={endDateTime},hostFqdn={hostFqdn})": "",
+ "/networkaccess/reports/getDomainControllerDiscoveryServicePrincipals(startDateTime={startDateTime},endDateTime={endDateTime},hostFqdn={hostFqdn})": "",
+ "/networkaccess/reports/getDomainControllerDiscoveryUsers(startDateTime={startDateTime},endDateTime={endDateTime},hostFqdn={hostFqdn})": "",
+ "/networkaccess/reports/getEnterpriseApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getMcpDiscovery(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getMcpDiscoverySummary(startDateTime={startDateTime},endDateTime={endDateTime})": "",
+ "/networkaccess/reports/getUserThreatReport": "",
+ "/networkaccess/reports/getUserThreatSummaryReport": "",
+ "/networkaccess/reports/transactionSummaries": "",
+ "/networkaccess/reports/usageProfiling(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})": "",
+ "/networkAccess/secureEnterpriseBrowserConfig": "",
+ "/networkAccess/securityProviderPolicies": "",
+ "/networkAccess/securityProviderPolicies/{id}": "",
+ "/networkAccess/securityProviderPolicySchemas": "",
+ "/networkAccess/securityProviderPolicySchemas/{id}": "",
+ "/networkAccess/securityProviders": "",
+ "/networkAccess/securityProviders/{id}": "",
+ "/networkAccess/securityProviders/{id}/registration": "",
+ "/networkAccess/settings/conditionalAccess": "",
+ "/networkAccess/settings/crossTenantAccess": "",
+ "/networkAccess/settings/customBlockPage": "",
+ "/networkaccess/settings/enrichedAuditLogs": "",
+ "/networkAccess/threatInspectionPolicies": "",
+ "/networkAccess/threatIntelligencePolicies": "",
+ "/networkAccess/threatIntelligencePolicies/{id}": "",
+ "/networkAccess/threatIntelligencePolicies/{id}/policyRules": "",
+ "/networkAccess/threatIntelligencePolicies/{id}/policyRules/{id}": "",
+ "/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "",
+ "/networkaccess/tls/managedCertificateAuthorityCertificates/{id}": "",
+ "/networkAccess/tls/settings": "",
+ "/networkaccess/tls/trustedCertificateAuthorities": "",
+ "/networkaccess/tls/trustedCertificateAuthorities/{id}": "",
+ "/networkAccess/tlsInspectionPolicies": "",
+ "/networkAccess/tlsInspectionPolicies/{id}": "",
+ "/networkAccess/tlsInspectionPolicies/{id}/policyRules": "",
+ "/networkAccess/tlsInspectionPolicies/{id}/policyRules/{id}": "",
+ "/networkAccess/tlsPolicies": "",
+ "/networkAccess/webFilteringPolicies": "",
+ "/networkAccess/webFilteringPolicies/{id}": "",
+ "/networkAccess/webFilteringPolicies/{id}/policyRules": "",
+ "/networkAccess/webFilteringPolicies/{id}/policyRules/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/networkAccess/classifyMcpTools": "",
+ "/networkAccess/cloudFirewallPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/createDraft": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft/publish": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}/deviceLinks": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/remoteNetworks/microsoft.graph.networkaccess.getRemoteNetworksHealth": "",
+ "/networkAccess/contentPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/contentPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/discoverMcpTools": "",
+ "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles": "least=DelegatedWork,Application",
+ "/networkAccess/fileDlpPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/filteringPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/filteringPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles/{id}/policies": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingProfiles/{id}/policies": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/microsoft.graph.networkaccess.migrateFilteringPolicies": "least=DelegatedWork,Application",
+ "/networkaccess/privateAccessConfigs/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/privateNetworks": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviderPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviders/{id}/registration": "least=DelegatedWork,Application",
+ "/networkAccess/threatInspectionPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkaccess/tls/externalCertificateAuthorityCertificates": "least=DelegatedWork,Application",
+ "/networkaccess/tls/managedCertificateAuthorityCertificates": "least=DelegatedWork,Application",
+ "/networkaccess/tls/managedCertificateAuthorityCertificates/{id}/microsoft.graph.networkaccess.revoke": "least=DelegatedWork,Application",
+ "/networkAccess/tlsInspectionPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/tlsInspectionPolicies/{id}/policyRules": "least=DelegatedWork,Application",
+ "/networkAccess/tlsPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies/{id}/policyRules": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/networkAccess/cloudFirewallPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}/deviceLinks/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}/forwardingProfiles": "least=DelegatedWork,Application",
+ "/networkAccess/contentPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/explicitForwardProxyConfig": "least=DelegatedWork,Application",
+ "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/featureSettings/settings/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/fileDlpPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles/{id}/policies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingProfiles/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingProfiles/{id}/policies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/privateAccessConfigs/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/privateNetworks/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/secureEnterpriseBrowserConfig": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviderPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/settings/conditionalAccess": "least=DelegatedWork,Application",
+ "/networkAccess/settings/crossTenantAccess": "least=DelegatedWork,Application",
+ "/networkAccess/settings/customBlockPage": "least=DelegatedWork,Application",
+ "/networkaccess/settings/enrichedAuditLogs": "least=DelegatedWork,Application",
+ "/networkAccess/threatInspectionPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/tls/settings": "least=DelegatedWork,Application",
+ "/networkAccess/tlsInspectionPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/tlsInspectionPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/tlsPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/networkAccess/cloudFirewallPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyDraft/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/cloudFirewallPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/connectivity/branches/{id}/deviceLinks/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/contentPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/contentTypePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/explicitForwardProxyConfig/proxyAutoConfigurationFiles/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/fileDlpPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/filteringProfiles/{id}/policies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/forwardingProfiles/{id}/policies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/intelligentAppProtectPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/mcpPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/privateAccessConfigs/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/privateNetworks/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/securityProviderPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/threatInspectionPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/threatIntelligencePolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/tls/externalCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application",
+ "/networkaccess/tls/managedCertificateAuthorityCertificates/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/tlsInspectionPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/tlsPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies/{id}": "least=DelegatedWork,Application",
+ "/networkAccess/webFilteringPolicies/{id}/policyRules/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "gsadatateams"
+ }
+ },
+ "Notes.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create user OneNote notebooks",
+ "adminDescription": "Allows the app to read the titles of OneNote notebooks and sections and to create new pages, notebooks, and sections on behalf of the signed-in user.",
+ "userDisplayName": "Create your OneNote notebooks",
+ "userDescription": "Allows the app to view the titles of your OneNote notebooks and sections and to create new pages, notebooks, and sections on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Create user OneNote notebooks",
+ "adminDescription": "Allows the app to read the titles of OneNote notebooks and sections and to create new pages, notebooks, and sections on behalf of the signed-in user.",
+ "userDisplayName": "Create your OneNote notebooks",
+ "userDescription": "Allows the app to view the titles of your OneNote notebooks and sections and to create new pages, notebooks, and sections on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/notebooks/{id}/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/notebooks/{id}/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sectiongroups/{id}/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sectiongroups/{id}/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/notebooks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/notebooks/{id}/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/notebooks/{id}/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sectiongroups/{id}/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sectiongroups/{id}/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/notebooks": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/notebooks/{id}/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/notebooks/{id}/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sectiongroups/{id}/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sectiongroups/{id}/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/notebooks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/notebooks/{id}/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/notebooks/{id}/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sectiongroups/{id}/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sectiongroups/{id}/sections": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/operations/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sectiongroups/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sections/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/notebooks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/operations/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sectiongroups/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sections/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/notebooks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/operations/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sectiongroups/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sections/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/notebooks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/operations/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sectiongroups": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sectiongroups/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sections": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sections/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/{id}/copynotebook": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/pages/{id}/copytosection": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sections/{id}/copytonotebook": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sections/{id}/copytosectiongroup": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sections/{id}/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/notebooks/{id}/copynotebook": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/pages/{id}/copytosection": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sections/{id}/copytonotebook": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sections/{id}/copytosectiongroup": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sections/{id}/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/notebooks/{id}/copynotebook": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/pages/{id}/copytosection": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sections/{id}/copytonotebook": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sections/{id}/copytosectiongroup": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sections/{id}/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/notebooks/{id}/copynotebook": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/pages/{id}/copytosection": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sections/{id}/copytonotebook": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sections/{id}/copytosectiongroup": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sections/{id}/pages": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/getnotebookfromweburl": "least=DelegatedWork",
+ "/me/onenote/notebooks/getnotebookfromweburl": "least=DelegatedWork",
+ "/sites/{id}/onenote/notebooks/getnotebookfromweburl": "least=DelegatedWork",
+ "/users/{id}/onenote/notebooks/getnotebookfromweburl": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "onesvcaadadmin"
+ }
+ },
+ "Notes.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user OneNote notebooks",
+ "adminDescription": "Allows the app to read OneNote notebooks on behalf of the signed-in user.",
+ "userDisplayName": "Read your OneNote notebooks",
+ "userDescription": "Allows the app to read OneNote notebooks on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user OneNote notebooks",
+ "adminDescription": "Allows the app to read OneNote notebooks on behalf of the signed-in user.",
+ "userDisplayName": "Read your OneNote notebooks",
+ "userDescription": "Allows the app to read OneNote notebooks on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks": "",
+ "/groups/{id}/onenote/notebooks/{id}": "",
+ "/groups/{id}/onenote/notebooks/{id}/sectiongroups": "",
+ "/groups/{id}/onenote/notebooks/{id}/sections": "",
+ "/groups/{id}/onenote/operations/{id}": "",
+ "/groups/{id}/onenote/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/pages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/resources/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{id}/onenote/sectiongroups": "",
+ "/groups/{id}/onenote/sectiongroups/{id}": "",
+ "/groups/{id}/onenote/sectiongroups/{id}/sectiongroups": "",
+ "/groups/{id}/onenote/sectiongroups/{id}/sections": "",
+ "/groups/{id}/onenote/sections": "",
+ "/groups/{id}/onenote/sections/{id}": "",
+ "/groups/{id}/onenote/sections/{id}/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/notebooks": "",
+ "/me/onenote/notebooks/{id}": "",
+ "/me/onenote/notebooks/{id}/sectiongroups": "",
+ "/me/onenote/notebooks/{id}/sections": "",
+ "/me/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "",
+ "/me/onenote/operations/{id}": "",
+ "/me/onenote/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/pages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/pages/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/resources/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/sectiongroups": "",
+ "/me/onenote/sectiongroups/{id}": "",
+ "/me/onenote/sectiongroups/{id}/sectiongroups": "",
+ "/me/onenote/sectiongroups/{id}/sections": "",
+ "/me/onenote/sections": "",
+ "/me/onenote/sections/{id}": "",
+ "/me/onenote/sections/{id}/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/notebooks": "",
+ "/sites/{id}/onenote/notebooks/{id}": "",
+ "/sites/{id}/onenote/notebooks/{id}/sectiongroups": "",
+ "/sites/{id}/onenote/notebooks/{id}/sections": "",
+ "/sites/{id}/onenote/operations/{id}": "",
+ "/sites/{id}/onenote/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/pages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/resources/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/sectiongroups": "",
+ "/sites/{id}/onenote/sectiongroups/{id}": "",
+ "/sites/{id}/onenote/sectiongroups/{id}/sectiongroups": "",
+ "/sites/{id}/onenote/sectiongroups/{id}/sections": "",
+ "/sites/{id}/onenote/sections": "",
+ "/sites/{id}/onenote/sections/{id}": "",
+ "/sites/{id}/onenote/sections/{id}/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/notebooks": "",
+ "/users/{id}/onenote/notebooks/{id}": "",
+ "/users/{id}/onenote/notebooks/{id}/sectiongroups": "",
+ "/users/{id}/onenote/notebooks/{id}/sections": "",
+ "/users/{id}/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "",
+ "/users/{id}/onenote/operations/{id}": "",
+ "/users/{id}/onenote/pages": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/pages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/pages/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/resources/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/sectiongroups": "",
+ "/users/{id}/onenote/sectiongroups/{id}": "",
+ "/users/{id}/onenote/sectiongroups/{id}/sectiongroups": "",
+ "/users/{id}/onenote/sectiongroups/{id}/sections": "",
+ "/users/{id}/onenote/sections": "",
+ "/users/{id}/onenote/sections/{id}": "",
+ "/users/{id}/onenote/sections/{id}/pages": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/getnotebookfromweburl": "",
+ "/me/onenote/notebooks/getnotebookfromweburl": "",
+ "/sites/{id}/onenote/notebooks/getnotebookfromweburl": "",
+ "/users/{id}/onenote/notebooks/getnotebookfromweburl": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "onesvcaadadmin"
+ }
+ },
+ "Notes.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all OneNote notebooks that user can access",
+ "adminDescription": "Allows the app to read OneNote notebooks that the signed-in user has access to in the organization.",
+ "userDisplayName": "Read all OneNote notebooks that you can access",
+ "userDescription": "Allows the app to read all the OneNote notebooks that you have access to.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all OneNote notebooks",
+ "adminDescription": "Allows the app to read all the OneNote notebooks in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks": "least=Application",
+ "/groups/{id}/onenote/notebooks/{id}": "least=Application",
+ "/groups/{id}/onenote/notebooks/{id}/sectiongroups": "least=Application",
+ "/groups/{id}/onenote/notebooks/{id}/sections": "least=Application",
+ "/groups/{id}/onenote/operations/{id}": "least=Application",
+ "/groups/{id}/onenote/pages": "least=Application",
+ "/groups/{id}/onenote/pages/{id}": "least=Application",
+ "/groups/{id}/onenote/resources/{id}/content": "least=Application",
+ "/groups/{id}/onenote/sectiongroups": "least=Application",
+ "/groups/{id}/onenote/sectiongroups/{id}": "least=Application",
+ "/groups/{id}/onenote/sectiongroups/{id}/sectiongroups": "least=Application",
+ "/groups/{id}/onenote/sectiongroups/{id}/sections": "least=Application",
+ "/groups/{id}/onenote/sections": "least=Application",
+ "/groups/{id}/onenote/sections/{id}": "least=Application",
+ "/groups/{id}/onenote/sections/{id}/pages": "least=Application",
+ "/me/onenote/notebooks": "least=Application",
+ "/me/onenote/notebooks/{id}": "least=Application",
+ "/me/onenote/notebooks/{id}/sectiongroups": "least=Application",
+ "/me/onenote/notebooks/{id}/sections": "least=Application",
+ "/me/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "least=Application",
+ "/me/onenote/operations/{id}": "least=Application",
+ "/me/onenote/pages": "least=Application",
+ "/me/onenote/pages/{id}": "least=Application",
+ "/me/onenote/pages/{id}/content": "least=Application",
+ "/me/onenote/resources/{id}/content": "least=Application",
+ "/me/onenote/sectiongroups": "least=Application",
+ "/me/onenote/sectiongroups/{id}": "least=Application",
+ "/me/onenote/sectiongroups/{id}/sectiongroups": "least=Application",
+ "/me/onenote/sectiongroups/{id}/sections": "least=Application",
+ "/me/onenote/sections": "least=Application",
+ "/me/onenote/sections/{id}": "least=Application",
+ "/me/onenote/sections/{id}/pages": "least=Application",
+ "/sites/{id}/onenote/notebooks": "least=Application",
+ "/sites/{id}/onenote/notebooks/{id}": "least=Application",
+ "/sites/{id}/onenote/notebooks/{id}/sectiongroups": "least=Application",
+ "/sites/{id}/onenote/notebooks/{id}/sections": "least=Application",
+ "/sites/{id}/onenote/operations/{id}": "least=Application",
+ "/sites/{id}/onenote/pages": "least=Application",
+ "/sites/{id}/onenote/pages/{id}": "least=Application",
+ "/sites/{id}/onenote/resources/{id}/content": "least=Application",
+ "/sites/{id}/onenote/sectiongroups": "least=Application",
+ "/sites/{id}/onenote/sectiongroups/{id}": "least=Application",
+ "/sites/{id}/onenote/sectiongroups/{id}/sectiongroups": "least=Application",
+ "/sites/{id}/onenote/sectiongroups/{id}/sections": "least=Application",
+ "/sites/{id}/onenote/sections": "least=Application",
+ "/sites/{id}/onenote/sections/{id}": "least=Application",
+ "/sites/{id}/onenote/sections/{id}/pages": "least=Application",
+ "/users/{id}/onenote/notebooks": "least=Application",
+ "/users/{id}/onenote/notebooks/{id}": "least=Application",
+ "/users/{id}/onenote/notebooks/{id}/sectiongroups": "least=Application",
+ "/users/{id}/onenote/notebooks/{id}/sections": "least=Application",
+ "/users/{id}/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "least=Application",
+ "/users/{id}/onenote/operations/{id}": "least=Application",
+ "/users/{id}/onenote/pages": "least=Application",
+ "/users/{id}/onenote/pages/{id}": "least=Application",
+ "/users/{id}/onenote/pages/{id}/content": "least=Application",
+ "/users/{id}/onenote/resources/{id}/content": "least=Application",
+ "/users/{id}/onenote/sectiongroups": "least=Application",
+ "/users/{id}/onenote/sectiongroups/{id}": "least=Application",
+ "/users/{id}/onenote/sectiongroups/{id}/sectiongroups": "least=Application",
+ "/users/{id}/onenote/sectiongroups/{id}/sections": "least=Application",
+ "/users/{id}/onenote/sections": "least=Application",
+ "/users/{id}/onenote/sections/{id}": "least=Application",
+ "/users/{id}/onenote/sections/{id}/pages": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/getnotebookfromweburl": "least=Application",
+ "/me/onenote/notebooks/getnotebookfromweburl": "least=Application",
+ "/sites/{id}/onenote/notebooks/getnotebookfromweburl": "least=Application",
+ "/users/{id}/onenote/notebooks/getnotebookfromweburl": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "onesvcaadadmin"
+ }
+ },
+ "Notes.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user OneNote notebooks",
+ "adminDescription": "Allows the app to read, share, and modify OneNote notebooks on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your OneNote notebooks",
+ "userDescription": "Allows the app to read, share, and modify OneNote notebooks on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write user OneNote notebooks",
+ "adminDescription": "Allows the app to read, share, and modify OneNote notebooks on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your OneNote notebooks",
+ "userDescription": "Allows the app to read, share, and modify OneNote notebooks on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks": "",
+ "/groups/{id}/onenote/notebooks/{id}/sectiongroups": "",
+ "/groups/{id}/onenote/notebooks/{id}/sections": "",
+ "/groups/{id}/onenote/pages": "",
+ "/groups/{id}/onenote/sectiongroups/{id}/sectiongroups": "",
+ "/groups/{id}/onenote/sectiongroups/{id}/sections": "",
+ "/groups/{id}/onenote/sections/{id}/pages": "",
+ "/me/onenote/notebooks": "",
+ "/me/onenote/notebooks/{id}/sectiongroups": "",
+ "/me/onenote/notebooks/{id}/sections": "",
+ "/me/onenote/pages": "",
+ "/me/onenote/sectiongroups/{id}/sectiongroups": "",
+ "/me/onenote/sectiongroups/{id}/sections": "",
+ "/me/onenote/sections/{id}/pages": "",
+ "/sites/{id}/onenote/notebooks": "",
+ "/sites/{id}/onenote/notebooks/{id}/sectiongroups": "",
+ "/sites/{id}/onenote/notebooks/{id}/sections": "",
+ "/sites/{id}/onenote/pages": "",
+ "/sites/{id}/onenote/sectiongroups/{id}/sectiongroups": "",
+ "/sites/{id}/onenote/sectiongroups/{id}/sections": "",
+ "/sites/{id}/onenote/sections/{id}/pages": "",
+ "/users/{id}/onenote/notebooks": "",
+ "/users/{id}/onenote/notebooks/{id}/sectiongroups": "",
+ "/users/{id}/onenote/notebooks/{id}/sections": "",
+ "/users/{id}/onenote/pages": "",
+ "/users/{id}/onenote/sectiongroups/{id}/sectiongroups": "",
+ "/users/{id}/onenote/sectiongroups/{id}/sections": "",
+ "/users/{id}/onenote/sections/{id}/pages": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/{id}": "",
+ "/groups/{id}/onenote/operations/{id}": "",
+ "/groups/{id}/onenote/resources/{id}/content": "",
+ "/groups/{id}/onenote/sectiongroups": "",
+ "/groups/{id}/onenote/sectiongroups/{id}": "",
+ "/groups/{id}/onenote/sections": "",
+ "/groups/{id}/onenote/sections/{id}": "",
+ "/me/onenote/notebooks/{id}": "",
+ "/me/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "",
+ "/me/onenote/operations/{id}": "",
+ "/me/onenote/resources/{id}/content": "",
+ "/me/onenote/sectiongroups": "",
+ "/me/onenote/sectiongroups/{id}": "",
+ "/me/onenote/sections": "",
+ "/me/onenote/sections/{id}": "",
+ "/sites/{id}/onenote/notebooks/{id}": "",
+ "/sites/{id}/onenote/operations/{id}": "",
+ "/sites/{id}/onenote/resources/{id}/content": "",
+ "/sites/{id}/onenote/sectiongroups": "",
+ "/sites/{id}/onenote/sectiongroups/{id}": "",
+ "/sites/{id}/onenote/sections": "",
+ "/sites/{id}/onenote/sections/{id}": "",
+ "/users/{id}/onenote/notebooks/{id}": "",
+ "/users/{id}/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "",
+ "/users/{id}/onenote/operations/{id}": "",
+ "/users/{id}/onenote/resources/{id}/content": "",
+ "/users/{id}/onenote/sectiongroups": "",
+ "/users/{id}/onenote/sectiongroups/{id}": "",
+ "/users/{id}/onenote/sections": "",
+ "/users/{id}/onenote/sections/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/{id}/copynotebook": "",
+ "/groups/{id}/onenote/pages/{id}/copytosection": "",
+ "/groups/{id}/onenote/sections/{id}/copytonotebook": "",
+ "/groups/{id}/onenote/sections/{id}/copytosectiongroup": "",
+ "/me/onenote/notebooks/{id}/copynotebook": "",
+ "/me/onenote/pages/{id}/copytosection": "",
+ "/me/onenote/sections/{id}/copytonotebook": "",
+ "/me/onenote/sections/{id}/copytosectiongroup": "",
+ "/sites/{id}/onenote/notebooks/{id}/copynotebook": "",
+ "/sites/{id}/onenote/pages/{id}/copytosection": "",
+ "/sites/{id}/onenote/sections/{id}/copytonotebook": "",
+ "/sites/{id}/onenote/sections/{id}/copytosectiongroup": "",
+ "/users/{id}/onenote/notebooks/{id}/copynotebook": "",
+ "/users/{id}/onenote/pages/{id}/copytosection": "",
+ "/users/{id}/onenote/sections/{id}/copytonotebook": "",
+ "/users/{id}/onenote/sections/{id}/copytosectiongroup": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/getnotebookfromweburl": "",
+ "/me/onenote/notebooks/getnotebookfromweburl": "",
+ "/sites/{id}/onenote/notebooks/getnotebookfromweburl": "",
+ "/users/{id}/onenote/notebooks/getnotebookfromweburl": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/pages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/onenote/pages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/pages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/pages/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/pages/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{id}/onenote/pages/{id}/content": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/onenote/pages/{id}/content": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/onenote/pages/{id}/content": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "onesvcaadadmin"
+ }
+ },
+ "Notes.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all OneNote notebooks that user can access",
+ "adminDescription": "Allows the app to read, share, and modify OneNote notebooks that the signed-in user has access to in the organization.",
+ "userDisplayName": "Read and write all OneNote notebooks that you can access",
+ "userDescription": "Allows the app to read, share, and modify all the OneNote notebooks that you have access to.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all OneNote notebooks",
+ "adminDescription": "Allows the app to read all the OneNote notebooks in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/reassign": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/submit": "",
+ "/education/classes/{id}/assignments/{id}/submissions/{id}/unsubmit": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks": "least=Application",
+ "/groups/{id}/onenote/notebooks/{id}/sectiongroups": "least=Application",
+ "/groups/{id}/onenote/notebooks/{id}/sections": "least=Application",
+ "/groups/{id}/onenote/pages": "least=Application",
+ "/groups/{id}/onenote/sectiongroups/{id}/sectiongroups": "least=Application",
+ "/groups/{id}/onenote/sectiongroups/{id}/sections": "least=Application",
+ "/groups/{id}/onenote/sections/{id}/pages": "least=Application",
+ "/me/onenote/notebooks": "least=Application",
+ "/me/onenote/notebooks/{id}/sectiongroups": "least=Application",
+ "/me/onenote/notebooks/{id}/sections": "least=Application",
+ "/me/onenote/pages": "least=Application",
+ "/me/onenote/sectiongroups/{id}/sectiongroups": "least=Application",
+ "/me/onenote/sectiongroups/{id}/sections": "least=Application",
+ "/me/onenote/sections/{id}/pages": "least=Application",
+ "/sites/{id}/onenote/notebooks": "least=Application",
+ "/sites/{id}/onenote/notebooks/{id}/sectiongroups": "least=Application",
+ "/sites/{id}/onenote/notebooks/{id}/sections": "least=Application",
+ "/sites/{id}/onenote/pages": "least=Application",
+ "/sites/{id}/onenote/sectiongroups/{id}/sectiongroups": "least=Application",
+ "/sites/{id}/onenote/sectiongroups/{id}/sections": "least=Application",
+ "/sites/{id}/onenote/sections/{id}/pages": "least=Application",
+ "/users/{id}/onenote/notebooks": "least=Application",
+ "/users/{id}/onenote/notebooks/{id}/sectiongroups": "least=Application",
+ "/users/{id}/onenote/notebooks/{id}/sections": "least=Application",
+ "/users/{id}/onenote/pages": "least=Application",
+ "/users/{id}/onenote/sectiongroups/{id}/sectiongroups": "least=Application",
+ "/users/{id}/onenote/sectiongroups/{id}/sections": "least=Application",
+ "/users/{id}/onenote/sections/{id}/pages": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/{id}": "",
+ "/groups/{id}/onenote/operations/{id}": "",
+ "/groups/{id}/onenote/resources/{id}/content": "",
+ "/groups/{id}/onenote/sectiongroups": "",
+ "/groups/{id}/onenote/sectiongroups/{id}": "",
+ "/groups/{id}/onenote/sections": "",
+ "/groups/{id}/onenote/sections/{id}": "",
+ "/me/onenote/notebooks/{id}": "",
+ "/me/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "",
+ "/me/onenote/operations/{id}": "",
+ "/me/onenote/resources/{id}/content": "",
+ "/me/onenote/sectiongroups": "",
+ "/me/onenote/sectiongroups/{id}": "",
+ "/me/onenote/sections": "",
+ "/me/onenote/sections/{id}": "",
+ "/sites/{id}/onenote/notebooks/{id}": "",
+ "/sites/{id}/onenote/operations/{id}": "",
+ "/sites/{id}/onenote/resources/{id}/content": "",
+ "/sites/{id}/onenote/sectiongroups": "",
+ "/sites/{id}/onenote/sectiongroups/{id}": "",
+ "/sites/{id}/onenote/sections": "",
+ "/sites/{id}/onenote/sections/{id}": "",
+ "/users/{id}/onenote/notebooks/{id}": "",
+ "/users/{id}/onenote/notebooks/getrecentnotebooks(includepersonalnotebooks={value})": "",
+ "/users/{id}/onenote/operations/{id}": "",
+ "/users/{id}/onenote/resources/{id}/content": "",
+ "/users/{id}/onenote/sectiongroups": "",
+ "/users/{id}/onenote/sectiongroups/{id}": "",
+ "/users/{id}/onenote/sections": "",
+ "/users/{id}/onenote/sections/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/notebooks/{id}/copynotebook": "least=Application",
+ "/groups/{id}/onenote/notebooks/getnotebookfromweburl": "",
+ "/groups/{id}/onenote/pages/{id}/copytosection": "least=Application",
+ "/groups/{id}/onenote/sections/{id}/copytonotebook": "least=Application",
+ "/groups/{id}/onenote/sections/{id}/copytosectiongroup": "least=Application",
+ "/me/onenote/notebooks/{id}/copynotebook": "least=Application",
+ "/me/onenote/notebooks/getnotebookfromweburl": "",
+ "/me/onenote/pages/{id}/copytosection": "least=Application",
+ "/me/onenote/sections/{id}/copytonotebook": "least=Application",
+ "/me/onenote/sections/{id}/copytosectiongroup": "least=Application",
+ "/sites/{id}/onenote/notebooks/{id}/copynotebook": "least=Application",
+ "/sites/{id}/onenote/notebooks/getnotebookfromweburl": "",
+ "/sites/{id}/onenote/pages/{id}/copytosection": "least=Application",
+ "/sites/{id}/onenote/sections/{id}/copytonotebook": "least=Application",
+ "/sites/{id}/onenote/sections/{id}/copytosectiongroup": "least=Application",
+ "/users/{id}/onenote/notebooks/{id}/copynotebook": "least=Application",
+ "/users/{id}/onenote/notebooks/getnotebookfromweburl": "",
+ "/users/{id}/onenote/pages/{id}/copytosection": "least=Application",
+ "/users/{id}/onenote/sections/{id}/copytonotebook": "least=Application",
+ "/users/{id}/onenote/sections/{id}/copytosectiongroup": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/pages/{id}": "least=Application",
+ "/me/onenote/pages/{id}": "least=Application",
+ "/sites/{id}/onenote/pages/{id}": "least=Application",
+ "/users/{id}/onenote/pages/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/onenote/pages/{id}/content": "least=Application",
+ "/sites/{id}/onenote/pages/{id}/content": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/onenote/pages/{id}/content": "least=Application",
+ "/users/{id}/onenote/pages/{id}/content": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "onesvcaadadmin"
+ }
+ },
+ "Notes.ReadWrite.CreatedByApp": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Limited notebook access (deprecated)",
+ "adminDescription": "This is deprecated! Do not use! This permission no longer has any effect. You can safely consent to it. No additional privileges will be granted to the app.",
+ "userDisplayName": "Limited access to your OneNote notebooks for this app (preview)",
+ "userDescription": "This permission no longer has any effect. You can safely consent to it. No additional privileges will be granted to the app.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {}
+ },
+ "Notifications.ReadWrite.CreatedByApp": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Deliver and manage user notifications for this app",
+ "adminDescription": "Allows the app to deliver its notifications on behalf of signed-in users. Also allows the app to read, update, and delete the user's notification items for this app.",
+ "userDisplayName": "Deliver and manage your notifications for this app",
+ "userDescription": "Allows the app to deliver its notifications, on your behalf. Also allows the app to read, update, and delete your notification items for this app.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Deliver and manage user notifications for this app",
+ "adminDescription": "Allows the app to deliver its notifications on behalf of signed-in users. Also allows the app to read, update, and delete the user's notification items for this app.",
+ "userDisplayName": "Deliver and manage your notifications for this app",
+ "userDescription": "Allows the app to deliver its notifications, on your behalf. Also allows the app to read, update, and delete your notification items for this app.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/notifications": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notifications": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "afsteam"
+ }
+ },
+ "OnlineMeeting.ReadBasic.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {}
+ },
+ "OnlineMeetingAiInsight.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all AI Insights for online meetings. ",
+ "adminDescription": "Allows the app to read all AI Insights for online meetings, on behalf of the signed-in user.",
+ "userDisplayName": "Read all AI Insights for online meetings.",
+ "userDescription": "Allows the app to read all AI Insights for online meetings, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all AI Insights for online meetings.",
+ "adminDescription": "Allows the app to read all AI Insights for all online meetings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/users/{id}/onlinemeetings/{id}/aiInsights": "least=DelegatedWork",
+ "/copilot/users/{id}/onlinemeetings/{id}/aiInsights/{id}": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/aiInsights": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/aiInsights/{id}": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/aiInsights": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/aiInsights/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "OnlineMeetingAiInsight.Read.Chat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all AI Insights for online meetings where the Teams application is installed.",
+ "adminDescription": "Allows the teams-app to read all aiInsights for online meetings where the Teams-app is installed, without a signed-in user.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {}
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "OnlineMeetingArtifact.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's online meeting artifacts",
+ "adminDescription": "Allows the app to read online meeting artifacts on behalf of the signed-in user.",
+ "userDisplayName": "Read user's online meeting artifacts",
+ "userDescription": "Allows the app to read online meeting artifacts on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read online meeting artifacts",
+ "adminDescription": "Allows the app to read online meeting artifacts in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}/alternativerecording": "least=DelegatedWork,Application",
+ "/me/onlinemeetings/{id}/attendancereports": "least=DelegatedWork,Application",
+ "/me/onlinemeetings/{id}/attendancereports/{id}": "least=DelegatedWork,Application",
+ "/me/onlinemeetings/{id}/attendancereports/{id}/attendancerecords": "least=DelegatedWork,Application",
+ "/me/onlinemeetings/{id}/attendeereport": "least=DelegatedWork,Application",
+ "/me/onlinemeetings/{id}/meetingattendancereport": "least=DelegatedWork,Application",
+ "/me/onlinemeetings/{id}/recording": "least=DelegatedWork,Application",
+ "/users/{id}/onlinemeetings/{id}/alternativerecording": "least=DelegatedWork,Application",
+ "/users/{id}/onlinemeetings/{id}/attendancereports": "least=DelegatedWork,Application",
+ "/users/{id}/onlinemeetings/{id}/attendancereports/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/onlinemeetings/{id}/attendancereports/{id}/attendancerecords": "least=DelegatedWork,Application",
+ "/users/{id}/onlinemeetings/{id}/attendeereport": "least=DelegatedWork,Application",
+ "/users/{id}/onlinemeetings/{id}/meetingattendancereport": "least=DelegatedWork,Application",
+ "/users/{id}/onlinemeetings/{id}/recording": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "OnlineMeetingArtifact.Read.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read virtual event artifacts",
+ "adminDescription": "Read attendance reports \u0026 attendance records for this webinar or town hall.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/onlineMeetings/{meetingId}/attendanceReports": "",
+ "/me/onlineMeetings/{meetingId}/attendanceReports/{reportId}": "",
+ "/me/onlineMeetings/{meetingId}/attendanceReports/{reportId}/attendanceRecords": "",
+ "/solutions/virtualEvents/webinars/{webinarId}/sessions/{sessionId}/attendanceReports": "least=Application",
+ "/solutions/virtualEvents/webinars/{webinarId}/sessions/{sessionId}/attendanceReports/{reportId}": "least=Application",
+ "/solutions/virtualEvents/webinars/{webinarId}/sessions/{sessionId}/attendanceReports/{reportId}/attendanceRecords": "least=Application",
+ "/users/{userId}/onlineMeetings/{meetingId}/attendanceReports": "",
+ "/users/{userId}/onlineMeetings/{meetingId}/attendanceReports/{reportId}": "",
+ "/users/{userId}/onlineMeetings/{meetingId}/attendanceReports/{reportId}/attendanceRecords": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "OnlineMeetingRecording.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all recordings of online meetings. ",
+ "adminDescription": "Allows the app to read all recordings of online meetings, on behalf of the signed-in user.",
+ "userDisplayName": "Read all recordings of online meetings.",
+ "userDescription": "Allows the app to read all recordings of online meetings, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all recordings of online meetings.",
+ "adminDescription": "Allows the app to read all recordings of all online meetings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}/recordings": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/recordings/{id}": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/recordings/{id}/content": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/recordings": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/recordings/{id}": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/recordings/{id}/content": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/recordings": "least=Application",
+ "/users/{id}/onlinemeetings/{id}/recordings/{id}": "least=Application",
+ "/users/{id}/onlinemeetings/{id}/recordings/{id}/content": "least=Application",
+ "/users/{id}/onlinemeetings/getAllRecordings": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "OnlineMeetingRecording.Read.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all recordings of online meetings where the Teams application is installed.",
+ "adminDescription": "Allows the teams-app to read all recordings of online meetings where the Teams-app is installed, without a signed-in user.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/recordings": "",
+ "/users/{id}/onlinemeetings/{id}/recordings/{id}": "",
+ "/users/{id}/onlinemeetings/{id}/recordings/{id}/content": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "OnlineMeetings.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's online meetings",
+ "adminDescription": "Allows the app to read online meeting details on behalf of the signed-in user.",
+ "userDisplayName": "Read your online meetings",
+ "userDescription": "Allows the app to read online meeting details on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/app/onlinemeetings": "least=DelegatedWork",
+ "/communications/onlinemeetings": "least=DelegatedWork",
+ "/communications/onlinemeetings/getActiveMeetingDetails(callConversationId={conversationId})": "least=DelegatedWork",
+ "/me/communications/meetingTemplates": "least=DelegatedWork",
+ "/me/onlinemeetings": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/alternativerecording": "",
+ "/me/onlinemeetings/{id}/getvirtualappointmentjoinweburl": "",
+ "/me/onlinemeetings/{id}/recording": "",
+ "/me/onlinemeetings/{id}/registration": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/registration/customquestions/{id}": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/registration/microsoft.graph.meetingregistration/customquestions": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/registration/registrants": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/virtualappointment": "least=DelegatedWork",
+ "/me/onlinemeetings/getActiveMeetingDetails(callConversationId={conversationId})": "least=DelegatedWork",
+ "/users/{id}/communications/meetingTemplates": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/alternativerecording": "",
+ "/users/{id}/onlinemeetings/{id}/getvirtualappointmentjoinweburl": "",
+ "/users/{id}/onlinemeetings/{id}/recording": "",
+ "/users/{id}/onlinemeetings/{id}/registration": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/registration/customquestions/{id}": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/registration/microsoft.graph.meetingregistration/customquestions": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/registration/registrants": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/virtualappointment": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/getActiveMeetingDetails(callConversationId={conversationId})": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "OnlineMeetings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read online meeting details",
+ "adminDescription": "Allows the app to read online meeting details in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/app/onlinemeetings": "least=Application",
+ "/communications/onlinemeetings": "least=Application",
+ "/users/{id}/communications/meetingTemplates": "least=Application",
+ "/users/{id}/onlinemeetings": "least=Application",
+ "/users/{id}/onlinemeetings/{id}": "least=Application",
+ "/users/{id}/onlinemeetings/{id}/alternativerecording": "",
+ "/users/{id}/onlinemeetings/{id}/recording": "",
+ "/users/{id}/onlinemeetings/{id}/registration": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/registration/registrants": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/registration/registrants/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "OnlineMeetings.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and create user's online meetings",
+ "adminDescription": "Allows the app to read and create online meetings on behalf of the signed-in user.",
+ "userDisplayName": "Read and create your online meetings",
+ "userDescription": "Allows the app to read and create online meetings on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/app/onlinemeetings": "",
+ "/communications/onlinemeetings": "",
+ "/communications/onlinemeetings/getActiveMeetingDetails(callConversationId={conversationId})": "",
+ "/me/communications/meetingTemplates": "",
+ "/me/onlinemeetings/{id}/alternativerecording": "",
+ "/me/onlinemeetings/{id}/getvirtualappointmentjoinweburl": "",
+ "/me/onlinemeetings/{id}/recording": "",
+ "/me/onlinemeetings/getActiveMeetingDetails(callConversationId={conversationId})": "",
+ "/users/{id}/communications/meetingTemplates": "",
+ "/users/{id}/onlinemeetings/{id}/alternativerecording": "",
+ "/users/{id}/onlinemeetings/{id}/getvirtualappointmentjoinweburl": "",
+ "/users/{id}/onlinemeetings/{id}/recording": "",
+ "/users/{id}/onlinemeetings/getActiveMeetingDetails(callConversationId={conversationId})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/onlinemeetings": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/registration/microsoft.graph.meetingregistration/customquestions": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/registration/registrants": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/registration/microsoft.graph.meetingregistration/customquestions": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/registration/registrants": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/registration/customquestions/{id}": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/registration/customquestions/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}/registration": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/registration": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}/registration/registrants/{id}": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/registration/registrants/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}/virtualappointment": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/virtualappointment": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/onlinemeetings/createorget": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/createorget": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "OnlineMeetings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and create online meetings",
+ "adminDescription": "Allows the app to read and create online meetings as an application in your organization.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/app/onlinemeetings": "",
+ "/communications/onlinemeetings": "",
+ "/users/{id}/communications/meetingTemplates": "",
+ "/users/{id}/onlinemeetings/{id}/alternativerecording": "",
+ "/users/{id}/onlinemeetings/{id}/recording": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings": "least=Application",
+ "/users/{id}/onlinemeetings/{id}/registration/registrants": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/registration": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/registration/registrants/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/createorget": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "OnlineMeetingTranscript.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all transcripts of online meetings. ",
+ "adminDescription": "Allows the app to read all transcripts of online meetings, on behalf of the signed-in user.",
+ "userDisplayName": "Read all transcripts of online meetings.",
+ "userDescription": "Allows the app to read all transcripts of online meetings, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all transcripts of online meetings.",
+ "adminDescription": "Allows the app to read all transcripts of all online meetings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}/transcripts": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/transcripts/{id}": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/transcripts/{id}/content": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/transcripts/{id}/metadataContent": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/transcripts": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/transcripts/{id}": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/transcripts/{id}/content": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/transcripts/{id}/metadataContent": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/transcripts": "least=Application",
+ "/users/{id}/onlinemeetings/{id}/transcripts/{id}": "least=Application",
+ "/users/{id}/onlinemeetings/{id}/transcripts/{id}/content": "least=Application",
+ "/users/{id}/onlinemeetings/{id}/transcripts/{id}/metadataContent": "least=Application",
+ "/users/{id}/onlinemeetings/getAllTranscripts": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "OnlineMeetingTranscript.Read.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all transcripts of online meetings where the Teams app is installed.",
+ "adminDescription": "Allows the Teams app to read all transcripts of online meetings where the Teams-app is installed, without a signed-in user.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/communications/realTimeActivityFeed/meetings/{meetingId}/transcripts": "",
+ "/copilot/communications/realTimeActivityFeed/subscriptions/{id}": "",
+ "/users/{id}/onlinemeetings/{id}/transcripts": "",
+ "/users/{id}/onlinemeetings/{id}/transcripts/{id}": "",
+ "/users/{id}/onlinemeetings/{id}/transcripts/{id}/content": "",
+ "/users/{id}/onlinemeetings/{id}/transcripts/{id}/metadataContent": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/communications/realTimeActivityFeed/subscriptions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/copilot/communications/realTimeActivityFeed/subscriptions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/copilot/communications/realTimeActivityFeed/subscriptions/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "OnPremDirectorySynchronization.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all on-premises directory synchronization information",
+ "adminDescription": "Allows the app to read all on-premises directory synchronization information for the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read all on-premises directory synchronization information",
+ "userDescription": "Allows the app to read all on-premises directory synchronization information for the organization, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/onpremisessynchronization": "least=DelegatedWork",
+ "/directory/onPremisesSynchronization/{id}/accounts": "least=DelegatedWork",
+ "/directory/onPremisesSynchronization/{id}/accounts/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "OnPremDirectorySynchronization.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all on-premises directory synchronization information",
+ "adminDescription": "Allows the app to read and write all on-premises directory synchronization information for the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all on-premises directory synchronization information",
+ "userDescription": "Allows the app to read and write all on-premises directory synchronization information for the organization, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/onpremisessynchronization": "",
+ "/directory/onpremisessynchronization/{id}": "least=DelegatedWork",
+ "/directory/onPremisesSynchronization/{id}/accounts": "",
+ "/directory/onPremisesSynchronization/{id}/accounts/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/onpremisessynchronization/{id}": "least=DelegatedWork",
+ "/directory/onpremisessynchronization/{id}/accounts/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/onPremisesSynchronization/{id}/accounts": "least=DelegatedWork",
+ "/directory/onPremisesSynchronization/{id}/accounts/{id}/resetPassword": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/directory/onPremisesSynchronization/{id}/accounts/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "OnPremisesPublishingProfiles.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage on-premises published resources",
+ "adminDescription": "Allows the app to manage hybrid identity service configuration by creating, viewing, updating and deleting on-premises published resources, on-premises agents and agent groups, on behalf of the signed-in user.",
+ "userDisplayName": "Manage on-premises published resources",
+ "userDescription": "Allows the app to manage hybrid identity service configuration by creating, viewing, updating and deleting on-premises published resources, on-premises agents and agent groups, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage on-premises published resources",
+ "adminDescription": "Allows the app to create, view, update and delete on-premises published resources, on-premises agents and agent groups, as part of a hybrid identity configuration, without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/publishedresources": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/publishedresources/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/publishedresources/{id}/agentgroups": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/publishedresources/{id}/agentgroups/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/applicationSegments": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/applicationSegments/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/sensors": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/sensors/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "hybridSvcTeam"
+ }
+ },
+ "Organization.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organization information",
+ "adminDescription": "Allows the app to read the organization and related resources, on behalf of the signed-in user. Related resources include things like subscribed skus and tenant branding information.",
+ "userDisplayName": "Read organization information",
+ "userDescription": "Allows the app to read the organization and related resources, on your behalf. Related resources include things like subscribed skus and tenant branding information.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read organization information",
+ "adminDescription": "Allows the app to read the organization and related resources, without a signed-in user. Related resources include things like subscribed skus and tenant branding information.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/organization": "",
+ "/organization/{id}/branding": "",
+ "/organization/{id}/branding/localizations": "",
+ "/organization/{id}/branding/localizations/{id}": "",
+ "/organization/{id}/branding/localizations/{id}/{streamObjectType}": "",
+ "/organization/{id}/certificatebasedauthconfiguration": "least=DelegatedWork,Application",
+ "/organization/{id}/certificatebasedauthconfiguration/{id}": "least=DelegatedWork,Application",
+ "/subscribedskus": "",
+ "/subscribedskus/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/organization/{id}/settings/contactinsights": "least=DelegatedWork,Application",
+ "/organization/{id}/settings/microsoftapplicationdataaccess": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadorgperms"
+ }
+ },
+ "Organization.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write organization information",
+ "adminDescription": "Allows the app to read and write the organization and related resources, on behalf of the signed-in user. Related resources include things like subscribed skus and tenant branding information.",
+ "userDisplayName": "Read and write organization information",
+ "userDescription": "Allows the app to read and write the organization and related resources, on your behalf. Related resources include things like subscribed skus and tenant branding information.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write organization information",
+ "adminDescription": "Allows the app to read and write the organization and related resources, without a signed-in user. Related resources include things like subscribed skus and tenant branding information.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/organization": "",
+ "/organization/{id}/branding": "",
+ "/organization/{id}/branding/localizations": "",
+ "/organization/{id}/branding/localizations/{id}": "",
+ "/organization/{id}/branding/localizations/{id}/{streamObjectType}": "",
+ "/subscribedskus": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}": "",
+ "/organization/{id}/branding": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/organization/{id}/branding": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/organization/{id}/branding/localizations": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/branding/localizations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/organization/{id}/branding/localizations/{id}/{streamObjectType}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/organization/{id}/certificatebasedauthconfiguration": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/organization/{id}/certificatebasedauthconfiguration/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/settings/contactinsights": "least=DelegatedWork,Application",
+ "/organization/{id}/settings/microsoftapplicationdataaccess": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/settings/iteminsights": "least=DelegatedWork",
+ "/organization/{id}/settings/peopleinsights": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/subscribedskus/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadorgperms"
+ }
+ },
+ "OrganizationalBranding.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organizational branding information",
+ "adminDescription": "Allows the app to read the organizational branding resources, on behalf of the signed-in user.",
+ "userDisplayName": "Read organizational branding information",
+ "userDescription": "Allows the app to read the organizational branding resources, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read organizational branding information",
+ "adminDescription": "Allows the app to read the organizational branding resources, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/organization/{id}/branding": "least=Application",
+ "/organization/{id}/branding/localizations": "least=Application",
+ "/organization/{id}/branding/localizations/{id}": "least=Application",
+ "/organization/{id}/branding/localizations/{id}/{streamObjectType}": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes/{id}": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes/{id}/localizations": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes/{id}/localizations/{id}": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes/{id}/localizations/{id}/{streamObjectType}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadorgperms"
+ }
+ },
+ "OrganizationalBranding.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write organizational branding information",
+ "adminDescription": "Allows the app to read and write the organizational branding resources, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write organizational branding information",
+ "userDescription": "Allows the app to read and write the organizational branding resources, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write organizational branding information",
+ "adminDescription": "Allows the app to read and write the organizational branding resources, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/organization/{id}/branding": "",
+ "/organization/{id}/branding/localizations": "",
+ "/organization/{id}/branding/localizations/{id}": "",
+ "/organization/{id}/branding/themes/{id}": "",
+ "/organization/{id}/branding/themes/{id}/localizations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/branding": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/localizations/{id}": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes/{id}": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes/{id}/localizations/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/organization/{id}/branding/localizations": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes/{id}/localizations": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/organization/{id}/branding/localizations/{id}/{streamObjectType}": "least=DelegatedWork,Application",
+ "/organization/{id}/branding/themes/{id}/localizations/{id}/{streamObjectType}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadorgperms"
+ }
+ },
+ "OrgContact.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "userDisplayName": "",
+ "userDescription": "",
+ "requiresAdminConsent": false
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/contacts/{id}/transitivereports/$count": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "OrgContact.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organizational contacts",
+ "adminDescription": "Allows the app to read all organizational contacts on behalf of the signed-in user. These contacts are managed by the organization and are different from a user's personal contacts.",
+ "userDisplayName": "Read organizational contacts",
+ "userDescription": "Allows the app to read all organizational contacts on your behalf. These contacts are managed by the organization and are different from your personal contacts.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read organizational contacts",
+ "adminDescription": "Allows the app to read all organizational contacts without a signed-in user. These contacts are managed by the organization and are different from a user's personal contacts.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/contacts": "least=DelegatedWork,Application",
+ "/contacts/{id}": "least=DelegatedWork,Application",
+ "/contacts/{id}/directreports": "least=DelegatedWork,Application",
+ "/contacts/{id}/manager": "least=DelegatedWork,Application",
+ "/contacts/{id}/memberof": "least=DelegatedWork,Application",
+ "/contacts/{id}/transitivememberof": "least=DelegatedWork,Application",
+ "/contacts/{id}/transitivereports/$count": "",
+ "/contacts/delta": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadorgperms"
+ }
+ },
+ "OrgSettings-AppsAndServices.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organization-wide apps and services settings",
+ "adminDescription": "Allows the app to read organization-wide apps and services settings on behalf of the signed-in user.",
+ "userDisplayName": "Read organization-wide apps and services settings",
+ "userDescription": "Allows the app to read organization-wide apps and services settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read organization-wide apps and services settings",
+ "adminDescription": "Allows the app to read organization-wide apps and services settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/appsandservices": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "M365AdminSvcDevTeam"
+ }
+ },
+ "OrgSettings-AppsAndServices.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write organization-wide apps and services settings",
+ "adminDescription": "Allows the app to read and write organization-wide apps and services settings on behalf of the signed-in user.",
+ "userDisplayName": "Read and write organization-wide apps and services settings",
+ "userDescription": "Allows the app to read and write organization-wide apps and services settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write organization-wide apps and services settings",
+ "adminDescription": "Allows the app to read and write organization-wide apps and services settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/appsandservices": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "M365AdminSvcDevTeam"
+ }
+ },
+ "OrgSettings-DynamicsVoice.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organization-wide Dynamics customer voice settings",
+ "adminDescription": "Allows the app to read organization-wide Dynamics customer voice settings on behalf of the signed-in user.",
+ "userDisplayName": "Read organization-wide dynamics customer voice settings",
+ "userDescription": "Allows the app to read organization-wide Dynamics customer voice settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read organization-wide Dynamics customer voice settings",
+ "adminDescription": "Allows the app to read organization-wide Dynamics customer voice settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/dynamics": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "M365AdminSvcDevTeam"
+ }
+ },
+ "OrgSettings-DynamicsVoice.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write organization-wide Dynamics customer voice settings",
+ "adminDescription": "Allows the app to read and write organization-wide Dynamics customer voice settings on behalf of the signed-in user.",
+ "userDisplayName": "Read and write organization-wide Dynamics customer voice settings",
+ "userDescription": "Allows the app to read and write organization-wide Dynamics customer voice settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write organization-wide Dynamics customer voice settings",
+ "adminDescription": "Allows the app to read and write organization-wide Dynamics customer voice settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/dynamics": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "M365AdminSvcDevTeam"
+ }
+ },
+ "OrgSettings-Forms.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organization-wide Microsoft Forms settings",
+ "adminDescription": "Allows the app to read organization-wide Microsoft Forms settings on behalf of the signed-in user.",
+ "userDisplayName": "Read organization-wide Microsoft Forms settings",
+ "userDescription": "Allows the app to read organization-wide Microsoft Forms settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read organization-wide Microsoft Forms settings",
+ "adminDescription": "Allows the app to read organization-wide Microsoft Forms settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/forms": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "M365AdminSvcDevTeam"
+ }
+ },
+ "OrgSettings-Forms.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write organization-wide Microsoft Forms settings",
+ "adminDescription": "Allows the app to read and write organization-wide Microsoft Forms settings on behalf of the signed-in user.",
+ "userDisplayName": "Read and write organization-wide Microsoft Forms settings",
+ "userDescription": "Allows the app to read and write organization-wide Microsoft Forms settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write organization-wide Microsoft Forms settings",
+ "adminDescription": "Allows the app to read and write organization-wide Microsoft Forms settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/forms": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "M365AdminSvcDevTeam"
+ }
+ },
+ "OrgSettings-Microsoft365Install.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organization-wide Microsoft 365 apps installation settings",
+ "adminDescription": "Allows the app to read organization-wide Microsoft 365 apps installation settings on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read organization-wide Microsoft 365 apps installation settings",
+ "adminDescription": "Allows the app to read organization-wide Microsoft 365 apps installation settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/microsoft365Apps/installationOptions": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "rdxOnGraph"
+ }
+ },
+ "OrgSettings-Microsoft365Install.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write organization-wide Microsoft 365 apps installation settings",
+ "adminDescription": "Allows the app to read and write organization-wide Microsoft 365 apps installation settings on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write organization-wide Microsoft 365 apps installation settings",
+ "adminDescription": "Allows the app to read and write organization-wide Microsoft 365 apps installation settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/microsoft365Apps/installationOptions": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "rdxOnGraph"
+ }
+ },
+ "OrgSettings-Todo.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organization-wide Microsoft To Do settings",
+ "adminDescription": "Allows the app to read organization-wide Microsoft To Do settings on behalf of the signed-in user.",
+ "userDisplayName": "Read organization-wide Microsoft To Do settings",
+ "userDescription": "Allows the app to read organization-wide Microsoft To Do settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read organization-wide Microsoft To Do settings",
+ "adminDescription": "Allows the app to read organization-wide Microsoft To Do settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/todo": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "M365AdminSvcDevTeam"
+ }
+ },
+ "OrgSettings-Todo.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write organization-wide Microsoft To Do settings",
+ "adminDescription": "Allows the app to read and write organization-wide Microsoft To Do settings on behalf of the signed-in user.",
+ "userDisplayName": "Read and write organization-wide Microsoft To Do settings",
+ "userDescription": "Allows the app to read and write organization-wide Microsoft To Do settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write organization-wide Microsoft To Do settings",
+ "adminDescription": "Allows the app to read and write organization-wide Microsoft To Do settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/todo": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "M365AdminSvcDevTeam"
+ }
+ },
+ "Owner.Read.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "PartnerBilling.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all billing data for your company's tenant",
+ "adminDescription": "Allows the app to read all of billing data from Microsoft for your company's tenant, on behalf of the signed-in user. This includes reading billed and unbilled Usage and Invoice reconciliation data.",
+ "userDisplayName": "Allows the app to read billing data you have access to.",
+ "userDescription": "Allows the app to read all of billing data from Microsoft for your company's tenant that you have access to. This includes reading billed and unbilled Usage and Invoice reconciliation data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all billing data for your company's tenant",
+ "adminDescription": "Allows the app to read all of billing data from Microsoft for your company's tenant, without a signed-in user. This includes reading billed and unbilled azure usage and invoice reconciliation data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/reports/partners/billing/aggregatedUsage/billed/export": "least=DelegatedWork,Application",
+ "/reports/partners/billing/reconciliation/billed/export": "least=DelegatedWork,Application",
+ "/reports/partners/billing/reconciliation/unbilled/export": "least=DelegatedWork,Application",
+ "/reports/partners/billing/usage/billed/export": "least=DelegatedWork,Application",
+ "/reports/partners/billing/usage/unbilled/export": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/partners/billing/manifests/{manifestId}": "least=DelegatedWork,Application",
+ "/reports/partners/billing/operations/{operationId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pcbilinggraphadmins"
+ }
+ },
+ "PartnerSecurity.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read security alerts of customer with CSP relationship",
+ "adminDescription": "Allows the app to read security alerts of customer with CSP relationship on behalf of the partner signed-in user.",
+ "userDisplayName": "Read security alerts of customer with CSP relationship",
+ "userDescription": "Allows the app to read security alerts of customer with CSP relationship on behalf of you.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read security alerts of customer with CSP relationship",
+ "adminDescription": "Allows the app to read security alerts of customer with CSP relationship, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/partner/securityalerts": "least=DelegatedWork,Application",
+ "/security/partner/securityalerts/{id}": "least=DelegatedWork,Application",
+ "/security/partner/securityScore": "least=DelegatedWork,Application",
+ "/security/partner/securityScore/customerInsights": "least=DelegatedWork,Application",
+ "/security/partner/securityScore/history": "least=DelegatedWork,Application",
+ "/security/partner/securityScore/history/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "smrtsec"
+ }
+ },
+ "PartnerSecurity.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read security alerts and update status of security alerts of customer with CSP relationship",
+ "adminDescription": "Allows the app to read security alerts and update status of alerts of customer with CSP relationship on behalf of the partner signed-in user.",
+ "userDisplayName": "Read security alerts and update status of security alerts of customer with CSP relationship",
+ "userDescription": "Allows the app to read security alerts and update status of alerts of customer with CSP relationship on behalf of you.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read security alerts and update status of security alerts of customer with CSP relationship",
+ "adminDescription": "Allows the app to read security alerts and update status of alerts of customer with CSP relationship, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/partner/securityalerts": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/partner/securityalerts/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "smrtsec"
+ }
+ },
+ "PendingExternalUserProfile.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read pending external user profiles",
+ "adminDescription": "Allows the app to read available properties of pending external user profiles, on behalf of the signed-in user.",
+ "userDisplayName": "Read pending external user profiles",
+ "userDescription": "Allows the app to read available properties of pending external user profiles, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all pending external user profiles",
+ "adminDescription": "Allows the app to read available properties of pending external user profiles, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/pendingExternalUserProfiles": "least=DelegatedWork,Application",
+ "/directory/pendingExternalUserProfiles/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "xtenantex"
+ }
+ },
+ "PendingExternalUserProfile.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write pending external user profiles",
+ "adminDescription": "Allows the app to read and write available properties of pending external user profiles, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write pending external user profiles",
+ "userDescription": "Allows the app to read and write available properties of pending external user profiles, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all pending external user profiles",
+ "adminDescription": "Allows the app to read and write available properties of pending external user profiles, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/directory/pendingExternalUserProfiles": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/pendingExternalUserProfiles/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "xtenantex"
+ }
+ },
+ "People.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read users' relevant people lists",
+ "adminDescription": "Allows the app to read a ranked list of relevant people of the signed-in user. The list includes local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).",
+ "userDisplayName": "Read your relevant people list",
+ "userDescription": "Allows the app to read a list of people in the order that's most relevant to you. This includes your local contacts, your contacts from social networking, people listed in your organization's directory, and people from recent communications.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read users' relevant people lists",
+ "adminDescription": "Allows the app to read a ranked list of relevant people of the signed-in user. The list includes local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).",
+ "userDisplayName": "Read your relevant people list",
+ "userDescription": "Allows the app to read a list of people in the order that's most relevant to you. This includes your local contacts, your contacts from social networking, people listed in your organization's directory, and people from recent communications.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/people": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/people": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "PeoplePreAuthz"
+ }
+ },
+ "People.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' relevant people lists",
+ "adminDescription": "Allows the app to read a scored list of relevant people of the signed-in user or other users in the signed-in user's organization. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).",
+ "userDisplayName": "Read all users' relevant people lists",
+ "userDescription": "Allows the app to read a list of people in the order that is most relevant to you. Allows the app to read a list of people in the order that is most relevant to another user in your organization. These can include local contacts, contacts from social networking, people listed in your organization's directory, and people from recent communications.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' relevant people lists",
+ "adminDescription": "Allows the app to read any user's scored list of relevant people, without a signed-in user. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/people": "least=Application",
+ "/users/{id}/people": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "PeoplePreAuthz"
+ }
+ },
+ "PeopleSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read tenant-wide people settings",
+ "adminDescription": "Allows the application to read tenant-wide people settings on behalf of the signed-in user.",
+ "userDisplayName": "Read tenant-wide people settings",
+ "userDescription": "Allows the application to read tenant-wide people settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all tenant-wide people settings",
+ "adminDescription": "Allows the application to read tenant-wide people settings without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/people": "least=DelegatedWork,Application",
+ "/admin/people/feedSettings": "least=DelegatedWork,Application",
+ "/admin/people/feedSettings/{id}": "least=DelegatedWork,Application",
+ "/admin/people/itemInsights": "least=Application",
+ "/admin/people/namePronunciation": "least=DelegatedWork,Application",
+ "/admin/people/photoUpdateSettings": "least=DelegatedWork,Application",
+ "/admin/people/profileCardProperties": "least=DelegatedWork,Application",
+ "/admin/people/profilePropertySettings": "least=DelegatedWork,Application",
+ "/admin/people/profilePropertySettings/{id}": "least=DelegatedWork,Application",
+ "/admin/people/profileSources": "least=DelegatedWork,Application",
+ "/admin/people/profileSources/{id}": "least=DelegatedWork,Application",
+ "/admin/people/pronouns": "least=DelegatedWork,Application",
+ "/copilot/settings/people/enhancedPersonalization": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "peopleadminadmin"
+ }
+ },
+ "PeopleSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write tenant-wide people settings",
+ "adminDescription": "Allows the application to read and write tenant-wide people settings on behalf of the signed-in user.",
+ "userDisplayName": "Read and write tenant-wide people settings",
+ "userDescription": "Allows the application to read and write tenant-wide people settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all tenant-wide people settings",
+ "adminDescription": "Allows the application to read and write tenant-wide people settings without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/people": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/people/feedSettings/{id}": "least=DelegatedWork,Application",
+ "/admin/people/itemInsights": "least=DelegatedWork,Application",
+ "/admin/people/namePronunciation": "least=DelegatedWork,Application",
+ "/admin/people/photoUpdateSettings": "least=DelegatedWork,Application",
+ "/admin/people/profileCardProperties": "least=DelegatedWork,Application",
+ "/admin/people/profilePropertySettings": "least=DelegatedWork,Application",
+ "/admin/people/profilePropertySettings/{id}": "least=DelegatedWork,Application",
+ "/admin/people/profileSources": "least=DelegatedWork,Application",
+ "/admin/people/profileSources/{id}": "least=DelegatedWork,Application",
+ "/admin/people/pronouns": "least=DelegatedWork,Application",
+ "/copilot/settings/people/enhancedPersonalization": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/people/feedSettings": "least=DelegatedWork,Application",
+ "/admin/people/profilePropertySettings": "least=DelegatedWork,Application",
+ "/admin/people/profileSources": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/admin/people/photoUpdateSettings": "least=DelegatedWork,Application",
+ "/admin/people/profilePropertySettings/{id}": "least=DelegatedWork,Application",
+ "/admin/people/profileSources/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "peopleadminadmin"
+ }
+ },
+ "Place.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all company places",
+ "adminDescription": "Allows the app to read your company's places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.",
+ "userDisplayName": "Read all company places",
+ "userDescription": "Allows the app to read your company's places (conference rooms and room lists) for calendar events and other applications, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all company places",
+ "adminDescription": "Allows the app to read company places (conference rooms and room lists) for calendar events and other applications, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/places/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/descendants": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/footprints": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/footprints/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/fixtures": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/fixtures/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/sections": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/sections/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/units": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/units/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.roomlist/rooms": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.roomlist/workspaces": "least=DelegatedWork,Application",
+ "/places/getOperation": "least=DelegatedWork,Application",
+ "/places/listOperations": "least=DelegatedWork,Application",
+ "/places/microsoft.graph.building": "least=DelegatedWork,Application",
+ "/places/microsoft.graph.desk": "least=DelegatedWork,Application",
+ "/places/microsoft.graph.floor": "least=DelegatedWork,Application",
+ "/places/microsoft.graph.room": "least=DelegatedWork,Application",
+ "/places/microsoft.graph.roomlist": "least=DelegatedWork,Application",
+ "/places/microsoft.graph.section": "least=DelegatedWork,Application",
+ "/places/microsoft.graph.workspace": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "places-directory-sg"
+ }
+ },
+ "Place.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write organization places",
+ "adminDescription": "Allows the app to manage organization places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write organization places",
+ "userDescription": "Allows the app to manage organization places (conference rooms and room lists) for calendar events and other applications, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write organization places",
+ "adminDescription": "Allows the app to manage organization places (conference rooms and room lists) for calendar events and other applications, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/places/{id}": "",
+ "/places/{id}/descendants": "",
+ "/places/{id}/microsoft.graph.building/map": "",
+ "/places/{id}/microsoft.graph.building/map/footprints": "",
+ "/places/{id}/microsoft.graph.building/map/footprints/{id}": "",
+ "/places/{id}/microsoft.graph.building/map/levels": "",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}": "",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/fixtures": "",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/fixtures/{id}": "",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/sections": "",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/sections/{id}": "",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/units": "",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/units/{id}": "",
+ "/places/{id}/microsoft.graph.roomlist/rooms": "",
+ "/places/{id}/microsoft.graph.roomlist/workspaces": "",
+ "/places/getOperation": "",
+ "/places/listOperations": "",
+ "/places/microsoft.graph.building": "",
+ "/places/microsoft.graph.desk": "",
+ "/places/microsoft.graph.floor": "",
+ "/places/microsoft.graph.room": "",
+ "/places/microsoft.graph.roomlist": "",
+ "/places/microsoft.graph.section": "",
+ "/places/microsoft.graph.workspace": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/places": "least=DelegatedWork,Application",
+ "/places/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/customProperties": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/footprints/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/fixtures/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/sections/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/units/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/places": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/ingestMapFile": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/places/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/footprints/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/fixtures/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/sections/{id}": "least=DelegatedWork,Application",
+ "/places/{id}/microsoft.graph.building/map/levels/{id}/units/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "places-directory-sg"
+ }
+ },
+ "PlaceDevice.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all workplace devices",
+ "adminDescription": "Allows the app to read all workplace devices, on behalf of the signed-in user.",
+ "userDisplayName": "Read all workplace devices",
+ "userDescription": "Allows the app to read all workplace devices, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all workplace devices",
+ "adminDescription": "Allows the app to read all workplace devices, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/workplace/sensorDevices": "",
+ "/workplace/sensorDevices(deviceId='{id}')": "",
+ "/workplace/sensorDevices/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "places-sensorsignals"
+ }
+ },
+ "PlaceDevice.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all workplace devices",
+ "adminDescription": "Allows the app to read and write all workplace devices, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all workplace devices",
+ "userDescription": "Allows the app to read and write all workplace devices, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all workplace devices",
+ "adminDescription": "Allows the app to read and write all workplace devices, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/workplace/sensorDevices": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/workplace/sensorDevices(deviceId='{id}')": "",
+ "/workplace/sensorDevices/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/workplace/sensorDevices/ingestRawTelemetry": "",
+ "/workplace/sensorDevices/ingestTelemetry": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "places-sensorsignals"
+ }
+ },
+ "PlaceDeviceTelemetry.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write telemetry for all workplace devices.",
+ "adminDescription": "Allows the app to read and write telemetry for all workplace devices, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/workplace/sensorDevices/ingestRawTelemetry": "",
+ "/workplace/sensorDevices/ingestTelemetry": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "places-sensorsignals"
+ }
+ },
+ "Policy.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your organization's policies",
+ "adminDescription": "Allows the app to read your organization's policies on behalf of the signed-in user.",
+ "userDisplayName": "Read your organization's policies",
+ "userDescription": "Allows the app to read your organization's policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read your organization's policies",
+ "adminDescription": "Allows the app to read your organization's policies on behalf of the signed-in user.",
+ "userDisplayName": "Read your organization's policies",
+ "userDescription": "Allows the app to read your organization's policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read your organization's policies",
+ "adminDescription": "Allows the app to read all your organization's policies without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/tokenissuancepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/applications(appid={value})/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/applications/{id}/tokenissuancepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/applications/{id}/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/identity/conditionalaccess/namedlocations": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/policies": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals(appid={value})/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/claimsmappingpolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/tokenissuancepolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/applications/{id}/tokenissuancepolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals/{id}/claimsmappingpolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies": "AlsoRequires=Application.ReadWrite.OwnedBy"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/applications/{id}/tokenissuancepolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/applications/{id}/tokenlifetimepolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/claimsmappingpolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies/{id}": "AlsoRequires=Application.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/applications/{id}/tokenissuancepolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/applications/{id}/tokenlifetimepolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationstrength/authenticationmethodmodes": "",
+ "/identity/conditionalaccess/authenticationstrength/authenticationmethodmodes/{id}": "",
+ "/identity/conditionalaccess/authenticationstrength/combinations": "",
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations": "",
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}": "",
+ "/identity/conditionalaccess/templates": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/templates/{id}": "least=DelegatedWork,Application",
+ "/identity/events/onsignupstart": "least=DelegatedWork,Application",
+ "/identity/events/onsignupstart/{id}": "least=DelegatedWork,Application",
+ "/identity/securitydefaults": "",
+ "/identity/securitydefaults/rules": "",
+ "/identity/securitydefaults/rules/{id}": "",
+ "/identitygovernance/accessreviews/policy": "least=DelegatedWork,Application",
+ "/policies/accessreviewpolicy": "least=DelegatedWork,Application",
+ "/policies/activitybasedtimeoutpolicies": "least=DelegatedWork,Application",
+ "/policies/activitybasedtimeoutpolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/adminconsentrequestpolicy": "least=DelegatedWork,Application",
+ "/policies/appmanagementpolicies": "least=DelegatedWork,Application",
+ "/policies/appmanagementpolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/appmanagementpolicies/{id}/appliesto": "",
+ "/policies/authenticationflowspolicy": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy": "",
+ "/policies/authenticationMethodsPolicy/authenticationMethodConfigurations/{id}": "",
+ "/policies/authenticationstrengthpolicies": "",
+ "/policies/authenticationstrengthpolicies/{id}": "",
+ "/policies/authenticationstrengthpolicies/{id}/usage": "",
+ "/policies/authenticationstrengthpolicies/findbymethodmode(authenticationmethodmodes={value})": "",
+ "/policies/authorizationpolicy": "least=DelegatedWork,Application",
+ "/policies/claimsmappingpolicies": "least=DelegatedWork,Application",
+ "/policies/claimsmappingpolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/claimsmappingpolicies/{id}/appliesto": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy": "",
+ "/policies/crosstenantaccesspolicy/default": "",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarAvailabilityBasic": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarAvailabilityLimitedDetails": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners": "",
+ "/policies/crosstenantaccesspolicy/partners/{id}": "",
+ "/policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization": "",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarAvailabilityBasic": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarAvailabilityLimitedDetails": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMigration": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application",
+ "/policies/defaultappmanagementpolicy": "least=DelegatedWork,Application",
+ "/policies/externalidentitiespolicy": "least=DelegatedWork,Application",
+ "/policies/federatedtokenvalidationpolicy": "least=DelegatedWork,Application",
+ "/policies/homerealmdiscoverypolicies": "least=DelegatedWork,Application",
+ "/policies/homerealmdiscoverypolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/homerealmdiscoverypolicies/{id}/appliesto": "least=DelegatedWork,Application",
+ "/policies/hybridAuthenticationPolicy": "least=DelegatedWork,Application",
+ "/policies/tokenissuancepolicies": "least=DelegatedWork,Application",
+ "/policies/tokenissuancepolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/tokenissuancepolicies/{id}/appliesto": "least=DelegatedWork,Application",
+ "/policies/tokenlifetimepolicies": "least=DelegatedWork,Application",
+ "/policies/tokenlifetimepolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/tokenlifetimepolicies/{id}/appliesto": "least=DelegatedWork,Application",
+ "/trustframework/policies": "least=DelegatedWork,Application",
+ "/trustframework/policies/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/namedlocations/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}/rules": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}/rules/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/policies/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/continuousaccessevaluationpolicy": "least=DelegatedWork,Application",
+ "/policies/identitysecuritydefaultsenforcementpolicy": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/b2cauthenticationmethodspolicy": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/deviceregistrationpolicy": "",
+ "/policies/mobileappmanagementpolicies": "least=DelegatedWork",
+ "/policies/mobileappmanagementpolicies/{id}": "least=DelegatedWork",
+ "/policies/mobileappmanagementpolicies/{id}/includedgroups": "least=DelegatedWork",
+ "/policies/mobiledevicemanagementpolicies": "least=DelegatedWork",
+ "/policies/mobiledevicemanagementpolicies/{id}": "least=DelegatedWork",
+ "/policies/mobiledevicemanagementpolicies/{id}/includedgroups": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/conditionalaccesspolicycoverages": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/conditionalaccesspolicycoverages/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/requirements": "least=DelegatedWork",
+ "/users/{id}/authentication/requirements": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/requirements": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/evaluate": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/classicpolicies": "least=DelegatedWork",
+ "/identity/conditionalaccess/vpnconnectivitycertificates": "least=DelegatedWork",
+ "/identity/conditionalaccess/vpnconnectivitycertificates/{thumbprint}": "least=DelegatedWork",
+ "/identity/conditionalaccess/vpnconnectivitycertificates/{thumbprint}/downloadbase64certificate": "least=DelegatedWork",
+ "/identity/conditionalaccess/vpnconnectivitycertificates/{thumbprint}/downloadcertificate": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/vpnconnectivitycertificates": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/vpnconnectivitycertificates/{thumbprint}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/classicpolicies/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/claimProviders": "least=DelegatedWork",
+ "/identity/conditionalaccess/claimProviders/getControls": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/claimProviders": "least=DelegatedWork",
+ "/identity/conditionalaccess/claimProviders/{name}/validate": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/claimProviders/{name}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "Policy.Read.AuthenticationMethod": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read authentication method policies",
+ "adminDescription": "Allows the app to read the authentication method policies, on behalf of the signed-in user. ",
+ "userDisplayName": "Read your authentication method policies ",
+ "userDescription": "Allows the app to read the authentication method policies for your tenant, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read authentication method policies",
+ "adminDescription": "Allows the app to read all authentication method policies for the tenant, without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationstrength/authenticationmethodmodes": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/authenticationstrength/authenticationmethodmodes/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/authenticationstrength/combinations": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy": "least=DelegatedWork,Application",
+ "/policies/authenticationMethodsPolicy/authenticationMethodConfigurations/{id}": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/email": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/federatedIdentityCredential": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/fido2": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/hardwareoath": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/microsoftauthenticator": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/password": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/qrcodepin": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/sms": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/softwareoath": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/temporaryaccesspass": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/voice": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/x509certificate": "least=DelegatedWork,Application",
+ "/policies/authenticationstrengthpolicies": "least=DelegatedWork,Application",
+ "/policies/authenticationstrengthpolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/authenticationstrengthpolicies/{id}/usage": "least=DelegatedWork,Application",
+ "/policies/authenticationstrengthpolicies/findbymethodmode(authenticationmethodmodes={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AuthMethodProvTeam"
+ }
+ },
+ "Policy.Read.B2BManagementPolicy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your organization's B2BManagement policies",
+ "adminDescription": "Allows the app to read your organization's B2BManagement policies on behalf of the signed-in user.",
+ "userDisplayName": "Read your organization's B2BManagement policies",
+ "userDescription": "Allows the app to read your organization's B2BManagement policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read your organization's B2BManagement policies",
+ "adminDescription": "Allows the app to read all your organization's B2BManagement policies without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/b2bmanagementpolicies": "least=DelegatedWork,Application",
+ "/policies/b2bmanagementpolicies/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/b2bmanagementpolicies": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/b2bmanagementpolicies/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "prgctex"
+ }
+ },
+ "Policy.Read.ConditionalAccess": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your organization's conditional access policies",
+ "adminDescription": "Allows the app to read your organization's conditional access policies on behalf of the signed-in user.",
+ "userDisplayName": "Read your organization's conditional access policies",
+ "userDescription": "Allows the app to read your organization's conditional access policies on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read your organization's conditional access policies",
+ "adminDescription": "Allows the app to read your organization's conditional access policies, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationcontextclassreferences": "",
+ "/identity/conditionalaccess/plans": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}/rules": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}/rules/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/settings": "least=DelegatedWork,Application",
+ "/identity/securitydefaults": "",
+ "/identity/securitydefaults/rules": "",
+ "/identity/securitydefaults/rules/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationcontextclassreferences/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/evaluate": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cagraphscopeapproval"
+ }
+ },
+ "Policy.Read.DeviceConfiguration": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your organization's device configuration policies",
+ "adminDescription": "Allows the app to read your organization's device configuration policies on behalf of the signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.",
+ "userDisplayName": "Read your organization's device configuration policies",
+ "userDescription": "Allows the app to read your organization's device configuration policies on your behalf. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read your organization's device configuration policies",
+ "adminDescription": "Allows the application to read your organization's device configuration policies without a signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/deviceregistrationpolicy": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "Policy.Read.HybridAuthentication": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your organization's hybrid authentication policies",
+ "adminDescription": "Allows the app to read your organization's hybrid authentication policies on behalf of the signed-in user.",
+ "userDisplayName": "Read your organization's hybrid authentication policies like pass-through authentication and seamless single sign-on",
+ "userDescription": "Allows the app to read your organization's hybrid authentication policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read your organization's hybrid authentication policies",
+ "adminDescription": "Allows the app to read your organization's hybrid authentication policies without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/hybridAuthenticationPolicy": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}": "least=DelegatedWork",
+ "/onpremisespublishingprofiles/{id}/agentgroups": "least=DelegatedWork",
+ "/onpremisespublishingprofiles/{id}/agentgroups/{id}": "least=DelegatedWork",
+ "/onpremisespublishingprofiles/{id}/agents": "least=DelegatedWork",
+ "/onpremisespublishingprofiles/{id}/agents/{id}": "least=DelegatedWork",
+ "/policies/featurerolloutpolicies": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "hybridauth"
+ }
+ },
+ "Policy.Read.OnPremAuthenticationPolicy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your organization's on-prem authentication policies",
+ "adminDescription": "Allows the app to read your organization's on-prem authentication policies on behalf of the signed-in user.",
+ "userDisplayName": "Read your organization's on-prem authentication policies like PTA and single sign-on",
+ "userDescription": "Allows the app to read your organization's on-prem authentication policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/onPremAuthenticationPolicies": "least=DelegatedWork",
+ "/policies/onPremAuthenticationPolicies/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "hybridauth"
+ }
+ },
+ "Policy.Read.PermissionGrant": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read consent and permission grant policies",
+ "adminDescription": "Allows the app to read policies related to consent and permission grants for applications, on behalf of the signed-in user.",
+ "userDisplayName": "Read consent and permission grant policies",
+ "userDescription": "Allows the app to read policies related to consent and permission grants for applications, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read consent and permission grant policies",
+ "adminDescription": "Allows the app to read policies related to consent and permission grants for applications, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/permissiongrantpolicies": "least=DelegatedWork,Application",
+ "/policies/permissiongrantpolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/permissiongrantpolicies/{id}/excludes": "least=DelegatedWork,Application",
+ "/policies/permissiongrantpolicies/{id}/includes": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CnsntPreauthzApprvrs"
+ }
+ },
+ "Policy.ReadWrite.AccessReview": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's directory access review default policy",
+ "adminDescription": "Allows the app to read and write your organization's directory access review default policy on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your organization's directory access review default policy",
+ "userDescription": "Allows the app to read and write your organization's directory access review default policy on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's directory access review default policy",
+ "adminDescription": "Allows the app to read and write your organization's directory access review default policy without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/accessreviews/policy": "least=DelegatedWork,Application",
+ "/policies/accessreviewpolicy": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadaccessreviews"
+ }
+ },
+ "Policy.ReadWrite.ApplicationConfiguration": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's application configuration policies",
+ "adminDescription": "Allows the app to read and write your organization's application configuration policies on behalf of the signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.",
+ "userDisplayName": "Read and write your organization's application configuration policies",
+ "userDescription": "Allows the app to read and write your organization's application configuration policies on your behalf. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's application configuration policies",
+ "adminDescription": "Allows the app to read and write your organization's application configuration policies, without a signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/tokenissuancepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/applications(appid={value})/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/applications/{id}/tokenissuancepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/applications/{id}/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/identity/events/onsignupstart": "least=DelegatedWork,Application",
+ "/policies/activitybasedtimeoutpolicies": "least=DelegatedWork,Application",
+ "/policies/appmanagementpolicies": "least=DelegatedWork,Application",
+ "/policies/claimsmappingpolicies": "least=DelegatedWork,Application",
+ "/policies/homerealmdiscoverypolicies": "least=DelegatedWork,Application",
+ "/policies/tokenissuancepolicies": "least=DelegatedWork,Application",
+ "/policies/tokenlifetimepolicies": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals(appid={value})/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/claimsmappingpolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/applications(appid={value})/tokenissuancepolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/applications(appid={value})/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/applications/{id}/tokenissuancepolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/applications/{id}/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals(appid={value})/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals/{id}/claimsmappingpolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals/{id}/tokenlifetimepolicies": "AlsoRequires=Application.ReadWrite.OwnedBy"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "POST"
+ ],
+ "paths": {
+ "/applications/{id}/appmanagementpolicies": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/applications/{id}/tokenissuancepolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/applications/{id}/tokenlifetimepolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/claimsmappingpolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies/{id}": "AlsoRequires=Application.ReadWrite.All",
+ "/serviceprincipals/{id}/tokenlifetimepolicies/{id}": "AlsoRequires=Application.ReadWrite.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/applications/{id}/tokenissuancepolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/applications/{id}/tokenlifetimepolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals(appid={value})/claimsmappingpolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals(appid={value})/homerealmdiscoverypolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals/{id}/claimsmappingpolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals/{id}/homerealmdiscoverypolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy",
+ "/serviceprincipals/{id}/tokenlifetimepolicies/{id}": "AlsoRequires=Application.ReadWrite.OwnedBy"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/identity/events/onsignupstart/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/activitybasedtimeoutpolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/appmanagementpolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/claimsmappingpolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/homerealmdiscoverypolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/tokenissuancepolicies/{id}": "least=DelegatedWork,Application",
+ "/policies/tokenlifetimepolicies/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/appmanagementpolicies/{id}/appliesto": "",
+ "/policies/claimsmappingpolicies/{id}/appliesto": "",
+ "/policies/homerealmdiscoverypolicies/{id}/appliesto": "",
+ "/policies/tokenissuancepolicies/{id}/appliesto": "",
+ "/policies/tokenlifetimepolicies/{id}/appliesto": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/defaultappmanagementpolicy": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/claimsPolicy": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idappcore"
+ }
+ },
+ "Policy.ReadWrite.AuthenticationFlows": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write authentication flow policies",
+ "adminDescription": "Allows the app to read and write the authentication flow policies, on behalf of the signed-in user. ",
+ "userDisplayName": "Read and write your authentication flow policies",
+ "userDescription": "Allows the app to read and write the authentication flow policies for your tenant, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write authentication flow policies",
+ "adminDescription": "Allows the app to read and write all authentication flow policies for the tenant, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/authenticationflowspolicy": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "Policy.ReadWrite.AuthenticationMethod": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write authentication method policies",
+ "adminDescription": "Allows the app to read and write the authentication method policies, on behalf of the signed-in user. ",
+ "userDisplayName": "Read and write your authentication method policies ",
+ "userDescription": "Allows the app to read and write the authentication method policies for your tenant, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write authentication method policies",
+ "adminDescription": "Allows the app to read and write the authentication method policies, on behalf of the signed-in user. ",
+ "userDisplayName": "Read and write your authentication method policies ",
+ "userDescription": "Allows the app to read and write the authentication method policies for your tenant, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all authentication method policies ",
+ "adminDescription": "Allows the app to read and write all authentication method policies for the tenant, without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationstrength/authenticationmethodmodes": "",
+ "/identity/conditionalaccess/authenticationstrength/authenticationmethodmodes/{id}": "",
+ "/identity/conditionalaccess/authenticationstrength/combinations": "",
+ "/policies/authenticationstrengthpolicies/{id}/usage": "",
+ "/policies/authenticationstrengthpolicies/findbymethodmode(authenticationmethodmodes={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations": "",
+ "/policies/authenticationstrengthpolicies": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}": "",
+ "/policies/authenticationMethodsPolicy/authenticationMethodConfigurations/{id}": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/email": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/federatedIdentityCredential": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/fido2": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/hardwareoath": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/microsoftauthenticator": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/password": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/qrcodepin": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/sms": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/softwareoath": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/temporaryaccesspass": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/voice": "",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/x509certificate": "",
+ "/policies/authenticationstrengthpolicies/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}": "",
+ "/policies/authenticationMethodsPolicy/authenticationMethodConfigurations/{id}": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/email": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/federatedIdentityCredential": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/fido2": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/microsoftauthenticator": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/password": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/qrcodepin": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/sms": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/softwareoath": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/temporaryaccesspass": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/voice": "least=DelegatedWork,Application",
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/x509certificate": "least=DelegatedWork,Application",
+ "/policies/authenticationstrengthpolicies/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/authenticationmethodspolicy": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/authenticationmethodspolicy/authenticationmethodconfigurations/passwordlessmicrosoftauthenticator": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/policies/authenticationstrengthpolicies/{id}/updateallowedcombinations": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/b2cauthenticationmethodspolicy": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/requirements": "least=DelegatedWork",
+ "/users/{id}/authentication/requirements": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/authentication/requirements": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/requirements": "",
+ "/users/{id}/authentication/requirements": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/requirements": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AuthMethodProvTeam"
+ }
+ },
+ "Policy.ReadWrite.Authorization": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's authorization policy",
+ "adminDescription": "Allows the app to read and write your organization's authorization policy on behalf of the signed-in user. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.",
+ "userDisplayName": "Read and write your organization's authorization policy",
+ "userDescription": "Allows the app to read and write your organization's authorization policy on your behalf. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's authorization policy",
+ "adminDescription": "Allows the app to read and write your organization's authorization policy without a signed in user. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/settings/{id}": "",
+ "/groupsettings/{id}": "",
+ "/settings/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/authorizationpolicy": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/authorizationpolicy/authorizationpolicy": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "Policy.ReadWrite.B2BManagementPolicy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's B2BManagement policies",
+ "adminDescription": "Allows the app to read and write your organization's B2BManagement policies on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your organization's B2BManagement policies",
+ "userDescription": "Allows the app to read and write your organization's B2BManagement policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's B2BManagement policies",
+ "adminDescription": "Allows the app to read and write all your organization's B2BManagement policies without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/policies/b2bmanagementpolicies": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/b2bmanagementpolicies/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "prgctex"
+ }
+ },
+ "Policy.ReadWrite.ConditionalAccess": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's conditional access policies",
+ "adminDescription": "Allows the app to read and write your organization's conditional access policies on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your organization's conditional access policies",
+ "userDescription": "Allows the app to read and write your organization's conditional access policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's conditional access policies",
+ "adminDescription": "Allows the app to read and write your organization's conditional access policies, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationcontextclassreferences": "",
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations": "least=DelegatedWork,Application",
+ "/policies/authenticationstrengthpolicies": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationcontextclassreferences/{id}": "",
+ "/identity/continuousaccessevaluationpolicy": "",
+ "/policies/identitysecuritydefaultsenforcementpolicy": "AlsoRequires=Policy.Read.All"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationcontextclassreferences": "",
+ "/identity/conditionalaccess/authenticationstrength/authenticationmethodmodes": "",
+ "/identity/conditionalaccess/authenticationstrength/authenticationmethodmodes/{id}": "",
+ "/identity/conditionalaccess/authenticationstrength/combinations": "",
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations": "",
+ "/identity/conditionalaccess/plans": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}/rules": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}/rules/{id}": "least=DelegatedWork,Application",
+ "/identity/securitydefaults": "",
+ "/identity/securitydefaults/rules": "",
+ "/identity/securitydefaults/rules/{id}": "",
+ "/policies/authenticationstrengthpolicies": "",
+ "/policies/authenticationstrengthpolicies/{id}/usage": "",
+ "/policies/authenticationstrengthpolicies/findbymethodmode(authenticationmethodmodes={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/settings": "least=DelegatedWork,Application",
+ "/policies/authenticationstrengthpolicies/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/authenticationstrength/policies/{id}/combinationconfigurations/{id}": "",
+ "/policies/authenticationstrengthpolicies/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/evaluate": "",
+ "/identity/conditionalaccess/namedlocations": "",
+ "/identity/conditionalaccess/plans": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}/rules": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/policies": "",
+ "/policies/authenticationstrengthpolicies/{id}/updateallowedcombinations": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/namedlocations/{id}": "",
+ "/identity/conditionalaccess/plans/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/plans/{id}/rules/{id}": "least=DelegatedWork,Application",
+ "/identity/conditionalaccess/policies/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/tenantrelationships/managedtenants/conditionalaccesspolicycoverages": "",
+ "/tenantrelationships/managedtenants/conditionalaccesspolicycoverages/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/vpnconnectivitycertificates": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/vpnconnectivitycertificates/{thumbprint}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/classicpolicies/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/claimProviders": "",
+ "/identity/conditionalaccess/claimProviders/{name}/validate": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/conditionalaccess/claimProviders/{name}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cagraphscopeapproval"
+ }
+ },
+ "Policy.ReadWrite.ConsentRequest": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write consent request policy",
+ "adminDescription": "Allows the app to read and write your organization's consent requests policy on behalf of the signed-in user.",
+ "userDisplayName": "Read and write consent request policy",
+ "userDescription": "Allows the app to read and write your organization's consent request policy on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's consent request policy",
+ "adminDescription": "Allows the app to read and write your organization's consent requests policy without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/policies/adminconsentrequestpolicy": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadaccessreviews"
+ }
+ },
+ "Policy.ReadWrite.CrossTenantAccess": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's cross tenant access policies",
+ "adminDescription": "Allows the app to read and write your organization's cross tenant access policies on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your organization's cross tenant access policies",
+ "userDescription": "Allows the app to read and write your organization's cross tenant access policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's cross tenant access policies",
+ "adminDescription": "Allows the app to read and write your organization's cross tenant access policies without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/crosstenantaccesspolicy": "",
+ "/policies/crosstenantaccesspolicy/default": "",
+ "/policies/crosstenantaccesspolicy/partners": "",
+ "/policies/crosstenantaccesspolicy/partners/{id}": "",
+ "/policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/crosstenantaccesspolicy": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/policies/crosstenantaccesspolicy/default/resettosystemdefault": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/policies/crosstenantaccesspolicy/partners": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/crosstenantaccesspolicy/partners/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/policies/crosstenantaccesspolicy/partners/{id}/identitysynchronization": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "umtelivesite"
+ }
+ },
+ "Policy.ReadWrite.CrossTenantCapability": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's M365 cross tenant access capabilities",
+ "adminDescription": "Allows the app to read and write your organization's M365 cross tenant access capabilities on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your organization's M365 cross tenant access capabilities",
+ "userDescription": "Allows the app to read and write your organization's M365 cross tenant access capabilities on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's M365 cross tenant access capabilities",
+ "adminDescription": "Allows the app to read and write your organization's M365 cross tenant access capabilities without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/anonymousCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarAvailabilityBasic": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarAvailabilityLimitedDetails": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/default/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarAvailabilityBasic": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarAvailabilityLimitedDetails": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyDetail": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusyReviewer": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantCalendarSharingFreeBusySimple": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantLabelSync": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsAll": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMailTipsLimited": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantMigration": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantOpenProfileCard": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesDeskBooking": "least=DelegatedWork,Application",
+ "/policies/crosstenantaccesspolicy/partners/{id}/m365Capabilities/crossTenantPlacesRoomBooking": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "m365xtapnyx"
+ }
+ },
+ "Policy.ReadWrite.DeviceConfiguration": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's device configuration policies",
+ "adminDescription": "Allows the app to read and write your organization's device configuration policies on behalf of the signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.",
+ "userDisplayName": "Read and write your organization's device configuration policies",
+ "userDescription": "Allows the app to read and write your organization's device configuration policies on your behalf. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's device configuration policies",
+ "adminDescription": "Allows the application to read and write your organization's device configuration policies without a signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/deviceregistrationpolicy": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/policies/deviceregistrationpolicy": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "Policy.ReadWrite.ExternalIdentities": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's external identities policy",
+ "adminDescription": "Allows the application to read and update the organization's external identities policy on behalf of the signed-in user. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.",
+ "userDisplayName": "Read and write your organization's external identities policy",
+ "userDescription": "Allows the application to read and update the organization's external identities policy on your behalf. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's external identities policy",
+ "adminDescription": "Allows the application to read and update the organization's external identities policy without a signed-in user. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/externalidentitiespolicy": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadusersandtenants"
+ }
+ },
+ "Policy.ReadWrite.FeatureRollout": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's feature rollout policies",
+ "adminDescription": "Allows the app to read and write your organization's feature rollout policies on behalf of the signed-in user. Includes abilities to assign and remove users and groups to rollout of a specific feature.",
+ "userDisplayName": "Read and write your organization's feature rollout policies",
+ "userDescription": "Allows the app to read and write your organization's feature rollout policies on your behalf. Includes abilities to assign and remove users and groups to rollout of a specific feature.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write feature rollout policies",
+ "adminDescription": "Allows the app to read and write feature rollout policies without a signed-in user. Includes abilities to assign and remove users and groups to rollout of a specific feature.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "hybridSvcTeam"
+ }
+ },
+ "Policy.ReadWrite.FedTokenValidation": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's federated token validation policy",
+ "adminDescription": "Allows the app to read and write your organization's federated token validation policy on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your organization's federated token validation policy",
+ "userDescription": "Allows the app to read and write your organization's federated token validation policy on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's federated token validation policy",
+ "adminDescription": "Allows the app to read and write your organization's federated token validation policy without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/federatedtokenvalidationpolicy": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "federationprotocols"
+ }
+ },
+ "Policy.ReadWrite.HybridAuthentication": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's hybrid authentication policies",
+ "adminDescription": "Allows the app to read and write your organization's hybrid authentication policies on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your organization's hybrid authentication policies like pass-through authentication and seamless single sign-on",
+ "userDescription": "Allows the app to read and write your organization's hybrid authentication policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's hybrid authentication policies",
+ "adminDescription": "Allows the app to read and wrtie your organization's hybrid authentication policies without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/hybridAuthenticationPolicy": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/policies/featurerolloutpolicies": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/agents/{id}/agentgroups/{id}": "least=DelegatedWork",
+ "/policies/featurerolloutpolicies/{id}/appliesto/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/agentgroups/{id}/agents": "least=DelegatedWork",
+ "/onpremisespublishingprofiles/{id}/agents/{id}/agentgroups": "least=DelegatedWork",
+ "/policies/featurerolloutpolicies/{id}/appliesto": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}": "",
+ "/onpremisespublishingprofiles/{id}/agents": "",
+ "/onpremisespublishingprofiles/{id}/agents/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/agentgroups": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/onpremisespublishingprofiles/{id}/agentgroups/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/featurerolloutpolicies/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "hybridauth"
+ }
+ },
+ "Policy.ReadWrite.MobilityManagement": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's mobility management policies",
+ "adminDescription": "Allows the app to read and write your organization's mobility management policies on behalf of the signed-in user. For example, a mobility management policy can set the enrollment scope for a given mobility management application.",
+ "userDisplayName": "Read and write your organization's mobility management policies",
+ "userDescription": "Allows the app to read and write your organization's mobility management policies on your behalf. For example, a mobility management policy can set the enrollment scope for a given mobility management application.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/mobileappmanagementpolicies": "",
+ "/policies/mobiledevicemanagementpolicies": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/mobileappmanagementpolicies/{id}": "least=DelegatedWork",
+ "/policies/mobiledevicemanagementpolicies/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/policies/mobileappmanagementpolicies/{id}/includedgroups": "least=DelegatedWork",
+ "/policies/mobiledevicemanagementpolicies/{id}/includedgroups": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/policies/mobileappmanagementpolicies/{id}/includedgroups/{id}": "least=DelegatedWork",
+ "/policies/mobiledevicemanagementpolicies/{id}/includedgroups/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mobilitypolicyperms"
+ }
+ },
+ "Policy.ReadWrite.OnPremAuthenticationPolicy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's on-prem authentication policies",
+ "adminDescription": "Allows the app to read and write your organization's on-prem authentication policies on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your organization's on-prem authentication policies like PTA and single sign-on",
+ "userDescription": "Allows the app to read and write your organization's on-prem authentication policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/policies/onPremAuthenticationPolicies": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/onPremAuthenticationPolicies/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "hybridauth"
+ }
+ },
+ "Policy.ReadWrite.PermissionGrant": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage consent and permission grant policies",
+ "adminDescription": "Allows the app to manage policies related to consent and permission grants for applications, on behalf of the signed-in user.",
+ "userDisplayName": "Manage consent and permission grant policies",
+ "userDescription": "Allows the app to manage policies related to consent and permission grants for applications, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage consent and permission grant policies",
+ "adminDescription": "Allows the app to manage policies related to consent and permission grants for applications, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/policies/permissiongrantpolicies": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/permissiongrantpolicies/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/policies/permissiongrantpolicies/{id}/excludes": "least=DelegatedWork,Application",
+ "/policies/permissiongrantpolicies/{id}/includes": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/delegatedpermissionclassifications": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/delegatedpermissionclassifications": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/policies/permissiongrantpolicies/{id}/excludes/{id}": "least=DelegatedWork,Application",
+ "/policies/permissiongrantpolicies/{id}/includes/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals(appid={value})/delegatedpermissionclassifications/{id}": "least=DelegatedWork,Application",
+ "/serviceprincipals/{id}/delegatedpermissionclassifications/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CnsntPreauthzApprvrs"
+ }
+ },
+ "Policy.ReadWrite.SecurityDefaults": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's security defaults policy",
+ "adminDescription": "Allows the app to read and write your organization's security defaults policy without a signed-in user.",
+ "userDisplayName": "Read and write your organization's security defaults policy",
+ "userDescription": "Allows the app to read and write your organization's security defaults policy on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's security defaults policy",
+ "adminDescription": "Allows the app to read and write your organization's security defaults policy without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/securitydefaults": "",
+ "/identity/securitydefaults/rules": "",
+ "/identity/securitydefaults/rules/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/identitysecuritydefaultsenforcementpolicy": "least=DelegatedWork,Application;AlsoRequires=Policy.Read.All"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "sd-preauth"
+ }
+ },
+ "Policy.ReadWrite.TrustFramework": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's trust framework policies",
+ "adminDescription": "Allows the app to read and write your organization's trust framework policies on behalf of the signed-in user.",
+ "userDisplayName": "Read and write trust framework policies",
+ "userDescription": "Allows the app to read and write your organization's trust framework policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's trust framework policies",
+ "adminDescription": "Allows the app to read and write your organization's trust framework policies without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/trustframework/policies": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/trustframework/policies/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "POP.AccessAsUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write access to mailboxes via POP.",
+ "adminDescription": "Allows the app to have the same access to mailboxes as the signed-in user via POP protocol.",
+ "userDisplayName": "Read and write access to your mail.",
+ "userDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write access to mailboxes via POP.",
+ "adminDescription": "Allows the app to have the same access to mailboxes as the signed-in user via POP protocol.",
+ "userDisplayName": "Read and write access to your mail.",
+ "userDescription": "Allows the app to read, update, create and delete email in your mailbox. Does not include permission to send mail.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "exospm_sg"
+ }
+ },
+ "Presence.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's presence information",
+ "adminDescription": "Allows the app to read presence information on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and work location.",
+ "userDisplayName": "Read your presence information",
+ "userDescription": "Allows the app to read your presence information on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and work location.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/communications/presences": "least=DelegatedWork",
+ "/me/presence": "least=DelegatedWork",
+ "/users/{id}/presence": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "Presence.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read presence information of all users in your organization",
+ "adminDescription": "Allows the app to read presence information of all users in the directory on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and work location.",
+ "userDisplayName": "Read presence information of all users in your organization",
+ "userDescription": "Allows the app to read presence information of all users in the directory on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and work location.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read presence information of all users in your organization",
+ "adminDescription": "Allows the app to read presence information of all users in the directory without a signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and work location.",
+ "userDisplayName": "Read presence information of all users in your organization",
+ "userDescription": "Allows the app to read presence information of all users in the directory without a signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and work location.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/communications/getpresencesbyuserid": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/communications/presences": "least=Application",
+ "/users/{id}/presence": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/presence": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "Presence.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write a user's presence information",
+ "adminDescription": "Allows the app to read the presence information and write activity, availability and work location on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and work location.",
+ "userDisplayName": "Read and write your presence information",
+ "userDescription": "Allows the app to read the presence information and write activity, availability and work location on your behalf. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and work location.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/presence/clearautomaticlocation": "least=DelegatedWork",
+ "/users/{id}/presence/clearlocation": "least=DelegatedWork",
+ "/users/{id}/presence/clearpresence": "least=DelegatedWork",
+ "/users/{id}/presence/clearuserpreferredpresence": "least=DelegatedWork",
+ "/users/{id}/presence/setautomaticlocation": "least=DelegatedWork",
+ "/users/{id}/presence/setmanuallocation": "least=DelegatedWork",
+ "/users/{id}/presence/setpresence": "least=DelegatedWork",
+ "/users/{id}/presence/setstatusmessage": "least=DelegatedWork",
+ "/users/{id}/presence/setuserpreferredpresence": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "Presence.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write presence information for all users",
+ "adminDescription": "Allows the app to read all presence information and write activity, availability and work location of all users in the directory without a signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, time zone and work location.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/communications/getpresencesbyuserid": "",
+ "/users/{id}/presence/clearpresence": "least=Application",
+ "/users/{id}/presence/clearuserpreferredpresence": "least=Application",
+ "/users/{id}/presence/setpresence": "least=Application",
+ "/users/{id}/presence/setstatusmessage": "least=Application",
+ "/users/{id}/presence/setuserpreferredpresence": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/communications/presences": "",
+ "/users/{id}/presence": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "PrintAlertSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read tenant-wide alert settings",
+ "adminDescription": "Allows the application to read tenant-wide alert settings on behalf of the signed-in user.",
+ "userDisplayName": "Read tenant-wide alert settings",
+ "userDescription": "Allows the application to read tenant-wide alert settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/alertSettings": "least=DelegatedWork",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintAlertSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write tenant-wide alert settings",
+ "adminDescription": "Allows the application to read and write tenant-wide alert settings on behalf of the signed-in user.",
+ "userDisplayName": "Read and write tenant-wide alert settings",
+ "userDescription": "Allows the application to read and write tenant-wide alert settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/print/alertSettings": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintConnector.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read print connectors",
+ "adminDescription": "Allows the application to read print connectors on behalf of the signed-in user.",
+ "userDisplayName": "Read print connectors",
+ "userDescription": "Allows the application to read print connectors on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/connectors": "least=DelegatedWork",
+ "/print/connectors/{id}": "least=DelegatedWork",
+ "/print/printers/{id}/connectors": "least=DelegatedWork",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintConnector.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write print connectors",
+ "adminDescription": "Allows the application to read and write print connectors on behalf of the signed-in user. ",
+ "userDisplayName": "Read and write print connectors",
+ "userDescription": "Allows the application to read and write print connectors on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/connectors": "",
+ "/print/printers/{id}/connectors": "",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/print/connectors/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "Printer.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Register printers.",
+ "adminDescription": "Allows the application to create (register) printers on behalf of the signed-in user. ",
+ "userDisplayName": "Register printers.",
+ "userDescription": "Allows the application to create (register) printers on your behalf. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/operations/{id}": "least=DelegatedWork",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/create": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "Printer.FullControl.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Register, read, update, and unregister printers",
+ "adminDescription": "Allows the application to create (register), read, update, and delete (unregister) printers on behalf of the signed-in user. ",
+ "userDisplayName": "Register, read, update, and unregister printers",
+ "userDescription": "Allows the application to create (register), read, update, and delete (unregister) printers on your behalf. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/operations/{id}": "",
+ "/print/printers": "",
+ "/print/printers/{id}/getcapabilities": "",
+ "/print/shares/{id}/printer": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/print/printers/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/restorefactorydefaults": "",
+ "/print/printers/create": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/tasktriggers": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/tasktriggers/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "Printer.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read printers",
+ "adminDescription": "Allows the application to read printers on behalf of the signed-in user. ",
+ "userDisplayName": "Read printers",
+ "userDescription": "Allows the application to read printers on your behalf. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read printers",
+ "adminDescription": "Allows the application to read printers without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers": "least=DelegatedWork",
+ "/print/printers/{id}/getcapabilities": "least=DelegatedWork",
+ "/print/printers/{id}/tasktriggers": "least=DelegatedWork",
+ "/print/printers/{id}/tasktriggers/{id}": "least=DelegatedWork",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}": "least=DelegatedWork,Application",
+ "/print/shares/{id}/printer": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "Printer.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and update printers",
+ "adminDescription": "Allows the application to read and update printers on behalf of the signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.",
+ "userDisplayName": "Read and update printers",
+ "userDescription": "Allows the application to read and update printers on your behalf. Does not allow creating (registering) or deleting (unregistering) printers.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and update printers",
+ "adminDescription": "Allows the application to read and update printers without a signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/operations/{id}": "",
+ "/print/printers": "",
+ "/print/printers/{id}/getcapabilities": "",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/print/printers/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/restorefactorydefaults": "least=DelegatedWork",
+ "/print/printers/create": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/tasktriggers": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/tasktriggers/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/shares/{id}/printer": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrinterShare.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read printer shares",
+ "adminDescription": "Allows the application to read printer shares on behalf of the signed-in user. ",
+ "userDisplayName": "Read printer shares",
+ "userDescription": "Allows the application to read printer shares on your behalf. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/print/recentprintershares": "",
+ "/print/printers/{id}": "",
+ "/print/printers/{id}/shares": "",
+ "/print/printers/{id}/shares/{id}": "",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": "",
+ "/print/shares": "",
+ "/print/shares/{id}": "",
+ "/print/shares/{id}/allowedgroups": "least=DelegatedWork",
+ "/print/shares/{id}/allowedusers": "least=DelegatedWork",
+ "/users/{id}/print/recentprintershares": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrinterShare.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read basic information about printer shares",
+ "adminDescription": "Allows the application to read basic information about printer shares on behalf of the signed-in user. Does not allow reading access control information.",
+ "userDisplayName": "Read basic information about printer shares",
+ "userDescription": "Allows the application to read basic information about printer shares on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/print/recentprintershares": "least=DelegatedWork",
+ "/print/printers/{id}": "",
+ "/print/printers/{id}/shares": "least=DelegatedWork",
+ "/print/printers/{id}/shares/{id}": "least=DelegatedWork",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": "",
+ "/print/shares": "least=DelegatedWork",
+ "/print/shares/{id}": "least=DelegatedWork",
+ "/users/{id}/print/recentprintershares": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrinterShare.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write printer shares",
+ "adminDescription": "Allows the application to read and update printer shares on behalf of the signed-in user. ",
+ "userDisplayName": "Read and update printer shares",
+ "userDescription": "Allows the application to read and update printer shares on your behalf. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/print/recentprintershares": "",
+ "/print/printers/{id}": "",
+ "/print/printers/{id}/shares": "",
+ "/print/printers/{id}/shares/{id}": "",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": "",
+ "/users/{id}/print/recentprintershares": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/print/printers/{id}/share": "least=DelegatedWork",
+ "/print/printershares/{id}/allowedusers/{id}": "least=DelegatedWork",
+ "/print/shares/{id}/allowedgroups/{id}": "least=DelegatedWork",
+ "/print/shares/{id}/allowedusers/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/shares/{id}/allowedgroups": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/print/shares": "least=DelegatedWork",
+ "/print/shares/{id}/allowedgroups": "least=DelegatedWork",
+ "/print/shares/{id}/allowedusers": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/print/shares/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create print jobs",
+ "adminDescription": "Allows the application to create print jobs on behalf of the signed-in user and upload document content to print jobs that the signed-in user created.",
+ "userDisplayName": "Create your print jobs",
+ "userDescription": "Allows the application to create print jobs on your behalf and upload document content to print jobs that you created.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "least=DelegatedWork",
+ "/print/printers/{id}/jobs/{id}/documents/{id}/createuploadsession": "least=DelegatedWork",
+ "/print/shares/{id}/jobs/{id}/documents/{id}/createuploadsession": "least=DelegatedWork",
+ "/print/shares/{id}/jobs/{id}/start": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.Manage.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Perform advanced operations on print jobs",
+ "adminDescription": "Allows the application to perform advanced operations like redirecting a print job to another printer without a signed-in user. Also allows the application to read and update the metadata of print jobs.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}/abort": "",
+ "/print/printers/{id}/jobs/{id}/redirect": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's print jobs",
+ "adminDescription": "Allows the application to read the metadata and document content of print jobs that the signed-in user created.",
+ "userDisplayName": "Read your print jobs",
+ "userDescription": "Allows the application to read the metadata and document content of print jobs that you created.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "",
+ "/print/printers/{id}/jobs/{id}": "",
+ "/print/printers/{id}/jobs/{id}/documents/{id}": "least=DelegatedWork",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": "",
+ "/print/shares/{id}/jobs": "",
+ "/print/shares/{id}/jobs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read print jobs",
+ "adminDescription": "Allows the application to read the metadata and document content of print jobs on behalf of the signed-in user. ",
+ "userDisplayName": "Read print jobs",
+ "userDescription": "Allows the application to read the metadata and document content of print jobs on your behalf. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read print jobs",
+ "adminDescription": "Allows the application to read the metadata and document content of print jobs without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "",
+ "/print/printers/{id}/jobs/{id}": "",
+ "/print/printers/{id}/jobs/{id}/documents/{id}": "least=Application",
+ "/print/shares/{id}/jobs": "",
+ "/print/shares/{id}/jobs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.ReadBasic": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read basic information of user's print jobs",
+ "adminDescription": "Allows the application to read the metadata of print jobs that the signed-in user created. Does not allow access to print job document content.",
+ "userDisplayName": "Read basic information of your print jobs",
+ "userDescription": "Allows the application to read the metadata of print jobs that you created. Does not allow access to print job document content.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "least=DelegatedWork",
+ "/print/printers/{id}/jobs/{id}": "least=DelegatedWork",
+ "/print/services": "least=DelegatedWork",
+ "/print/services/{id}": "least=DelegatedWork",
+ "/print/services/{id}/endpoints": "least=DelegatedWork",
+ "/print/services/{id}/endpoints/{id}": "least=DelegatedWork",
+ "/print/shares/{id}/jobs": "least=DelegatedWork",
+ "/print/shares/{id}/jobs/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read basic information of print jobs",
+ "adminDescription": "Allows the application to read the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content.",
+ "userDisplayName": "Read basic information of print jobs",
+ "userDescription": "Allows the application to read the metadata of print jobs on your behalf. Does not allow access to print job document content.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read basic information for print jobs",
+ "adminDescription": "Allows the application to read the metadata of print jobs without a signed-in user. Does not allow access to print job document content.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "least=Application",
+ "/print/printers/{id}/jobs/{id}": "least=Application",
+ "/print/shares/{id}/jobs": "least=Application",
+ "/print/shares/{id}/jobs/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user's print jobs",
+ "adminDescription": "Allows the application to read and update the metadata and document content of print jobs that the signed-in user created.",
+ "userDisplayName": "Read and update your print jobs",
+ "userDescription": "Allows the application to read and update the metadata and document content of print jobs that you created.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "",
+ "/print/shares/{id}/jobs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}": "",
+ "/print/printers/{id}/jobs/{id}/documents/{id}": "",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": "",
+ "/print/shares/{id}/jobs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}/cancel": "",
+ "/print/printers/{id}/jobs/{id}/documents/{id}/createuploadsession": "",
+ "/print/shares/{id}/jobs/{id}/documents/{id}/createuploadsession": "",
+ "/print/shares/{id}/jobs/{id}/start": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write print jobs",
+ "adminDescription": "Allows the application to read and update the metadata and document content of print jobs on behalf of the signed-in user. ",
+ "userDisplayName": "Read and update print jobs",
+ "userDescription": "Allows the application to read and update the metadata and document content of print jobs on your behalf. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write print jobs",
+ "adminDescription": "Allows the application to read and update the metadata and document content of print jobs without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "",
+ "/print/printers/{id}/jobs/{id}/cancel": "",
+ "/print/shares/{id}/jobs": "",
+ "/print/shares/{id}/jobs/{id}/start": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "",
+ "/print/printers/{id}/jobs/{id}": "",
+ "/print/printers/{id}/jobs/{id}/documents/{id}": "",
+ "/print/shares/{id}/jobs": "",
+ "/print/shares/{id}/jobs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}/abort": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}/documents/{id}/createuploadsession": "least=Application",
+ "/print/shares/{id}/jobs/{id}/documents/{id}/createuploadsession": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.ReadWriteBasic": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write basic information of user's print jobs",
+ "adminDescription": "Allows the application to read and update the metadata of print jobs that the signed-in user created. Does not allow access to print job document content.",
+ "userDisplayName": "Read and write basic information of your print jobs",
+ "userDescription": "Allows the application to read and update the metadata of print jobs that you created. Does not allow access to print job document content.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "",
+ "/print/shares/{id}/jobs": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}": "",
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": "",
+ "/print/shares/{id}/jobs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}/cancel": "least=DelegatedWork",
+ "/print/shares/{id}/jobs/{id}/start": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintJob.ReadWriteBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write basic information of print jobs",
+ "adminDescription": "Allows the application to read and update the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content.",
+ "userDisplayName": "Read and write basic information of print jobs",
+ "userDescription": "Allows the application to read and update the metadata of print jobs on your behalf. Does not allow access to print job document content.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and write basic information for print jobs",
+ "adminDescription": "Allows the application to read and update the metadata of print jobs without a signed-in user. Does not allow access to print job document content.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "",
+ "/print/printers/{id}/jobs/{id}/cancel": "",
+ "/print/shares/{id}/jobs": "",
+ "/print/shares/{id}/jobs/{id}/start": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs": "",
+ "/print/printers/{id}/jobs/{id}": "",
+ "/print/shares/{id}/jobs": "",
+ "/print/shares/{id}/jobs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/print/printers/{id}/jobs/{id}/abort": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read tenant-wide print settings",
+ "adminDescription": "Allows the application to read tenant-wide print settings on behalf of the signed-in user.",
+ "userDisplayName": "Read tenant-wide print settings",
+ "userDescription": "Allows the application to read tenant-wide print settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": "",
+ "/print/settings": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write tenant-wide print settings",
+ "adminDescription": "Allows the application to read and write tenant-wide print settings on behalf of the signed-in user.",
+ "userDisplayName": "Read and write tenant-wide print settings",
+ "userDescription": "Allows the application to read and write tenant-wide print settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/services": "",
+ "/print/services/{id}": "",
+ "/print/services/{id}/endpoints": "",
+ "/print/services/{id}/endpoints/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/print/settings": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrintTaskDefinition.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read, write and update print task definitions",
+ "adminDescription": "Allows the application to read and update print task definitions without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/print/taskdefinitions": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/print/taskdefinitions/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/taskdefinitions/{id}/tasks": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/print/taskdefinitions/{id}/tasks/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "updev"
+ }
+ },
+ "PrivilegedAccess.Read.AzureAD": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read privileged access to Azure AD roles",
+ "adminDescription": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/privilegedaccess/azureresources/resources/{id}/roleassignmentrequests": "least=Application",
+ "/privilegedaccess/azureresources/roleassignmentrequests": "least=Application",
+ "/rolemanagement/directory/rolescheduleinstances": "least=Application",
+ "/rolemanagement/directory/roleschedules": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "PrivilegedAccess.Read.AzureADGroup": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read privileged access to Azure AD groups",
+ "adminDescription": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups in your organization, without a signed-in user.",
+ "userDisplayName": "Read privileged access to Azure AD groups",
+ "userDescription": "Allows the app to read time-based assignment and just in time elevation (including scheduled elevation) of Azure AD groups in your organization, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read privileged access to Azure AD groups",
+ "adminDescription": "Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/privilegedaccess/azureresources/resources/{id}/roleassignmentrequests": "",
+ "/privilegedaccess/azureresources/roleassignmentrequests": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/resources": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/resources/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "PrivilegedAccess.Read.AzureResources": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read privileged access to Azure resources",
+ "adminDescription": "Allows the app to read time-based assignment and just-in-time elevation of user privileges to audit Azure resources in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/privilegedaccess/azureresources/resources/{id}/roleassignmentrequests": "",
+ "/privilegedaccess/azureresources/roleassignmentrequests": ""
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "PrivilegedAccess.ReadWrite.AzureAD": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write privileged access to Azure AD",
+ "adminDescription": "Allows the app to request and manage just in time elevation (including scheduled elevation) of users to Azure AD built-in administrative roles, on behalf of signed-in users.",
+ "userDisplayName": "Read and write privileged access to Azure AD",
+ "userDescription": "Allows the app to request and manage just in time elevation (including scheduled elevation) of users to Azure AD built-in administrative roles, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/privilegedaccess/azureresources/resources/{id}/roleassignmentrequests": "least=DelegatedWork",
+ "/privilegedaccess/azureresources/roleassignmentrequests": "least=DelegatedWork",
+ "/privilegedapproval": "least=DelegatedWork",
+ "/rolemanagement/directory/rolescheduleinstances": "least=DelegatedWork",
+ "/rolemanagement/directory/roleschedules": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/privilegedaccess/azureresources/roleassignmentrequests/{id}/cancel": "least=DelegatedWork",
+ "/privilegedroleassignmentrequests/{id}/cancel": "least=DelegatedWork",
+ "/privilegedroleassignmentrequests/my": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/privilegedapproval/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/privilegedroleassignmentrequests": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/privilegedroles/{id}/settings": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "PrivilegedAccess.ReadWrite.AzureADGroup": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write privileged access to Azure AD groups",
+ "adminDescription": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write privileged access to Azure AD groups",
+ "userDescription": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write privileged access to Azure AD groups",
+ "adminDescription": "Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/privilegedaccess/azureresources/resources/{id}/roleassignmentrequests": "",
+ "/privilegedaccess/azureresources/roleassignmentrequests": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/privilegedaccess/azureresources/roleassignmentrequests/{id}/cancel": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/resources": "",
+ "/identityGovernance/privilegedAccess/group/resources/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "PrivilegedAccess.ReadWrite.AzureResources": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write privileged access to Azure resources",
+ "adminDescription": "Allows the app to request and manage time-based assignment and just-in-time elevation of user privileges to manage Azure resources (like subscriptions, resource groups, storage, compute) on behalf of the signed-in users.",
+ "userDisplayName": "Read and write privileged access to Azure resources",
+ "userDescription": "Allows the app to request and manage time-based assignment and just-in-time elevation of user privileges to manage your Azure resources (like your subscriptions, resource groups, storage, compute) on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/privilegedaccess/azureresources/resources/{id}/roleassignmentrequests": "",
+ "/privilegedaccess/azureresources/roleassignmentrequests": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/privilegedaccess/azureresources/roleassignmentrequests/{id}/cancel": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "PrivilegedAssignmentSchedule.Read.AzureADGroup": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read assignment schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to read time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.",
+ "userDisplayName": "Read assignment schedules for access to Azure AD groups",
+ "userDescription": "Allows the app to read time-based assignment schedules for access to Azure AD groups, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read assignment schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to read time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/assignmentScheduleInstances": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/{id}": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/assignmentScheduleInstances/filterByCurrentUser(on={value})": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/assignmentSchedules": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/assignmentSchedules/{id}": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/assignmentSchedules/filterByCurrentUser(on={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read, create, and delete assignment schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.",
+ "userDisplayName": "Read, create, and delete assignment schedules for access to Azure AD groups",
+ "userDescription": "Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read, create, and delete assignment schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/assignmentscheduleInstances": "",
+ "/identityGovernance/privilegedAccess/group/assignmentscheduleInstances/{id}": "",
+ "/identityGovernance/privilegedAccess/group/assignmentscheduleInstances/filterByCurrentUser(on={value})": "",
+ "/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{id}": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/filterByCurrentUser(on={value})": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/assignmentSchedules": "",
+ "/identityGovernance/privilegedAccess/group/assignmentSchedules/{id}": "",
+ "/identityGovernance/privilegedAccess/group/assignmentSchedules/filterByCurrentUser(on={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/assignmentScheduleRequests": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/assignmentScheduleRequests/{id}/cancel": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "PrivilegedAssignmentSchedule.Remove.AzureADGroup": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete assignment schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to delete time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.",
+ "userDisplayName": "Delete assignment schedules for access to Azure AD groups",
+ "userDescription": "Allows the app to delete time-based assignment schedules for access to Azure AD groups, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Delete assignment schedules for access to Azure AD groups",
+ "adminDescription": "Delete time-based assignment schedules for access to Azure AD groups, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/assignmentScheduleRequests": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "PrivilegedEligibilitySchedule.Read.AzureADGroup": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read eligibility schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to read time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.",
+ "userDisplayName": "Read eligibility schedules for access to Azure AD groups",
+ "userDescription": "Allows the app to read time-based eligibility schedules for access to Azure AD groups, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read eligibility schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to read time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances/{id}": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances/filterByCurrentUser(on={value})": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests/{id}": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests/filterByCurrentUser(on={value})": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/eligibilitySchedules": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/eligibilitySchedules/{id}": "least=DelegatedWork,Application",
+ "/identityGovernance/privilegedAccess/group/eligibilitySchedules/filterByCurrentUser(on={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read, create, and delete eligibility schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.",
+ "userDisplayName": "Read, create, and delete eligibility schedules for access to Azure AD groups",
+ "userDescription": "Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read, create, and delete eligibility schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances": "",
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances/{id}": "",
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleInstances/filterByCurrentUser(on={value})": "",
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests/{id}": "",
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests/filterByCurrentUser(on={value})": "",
+ "/identityGovernance/privilegedAccess/group/eligibilitySchedules": "",
+ "/identityGovernance/privilegedAccess/group/eligibilitySchedules/{id}": "",
+ "/identityGovernance/privilegedAccess/group/eligibilitySchedules/filterByCurrentUser(on={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests/{id}/cancel": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "PrivilegedEligibilitySchedule.Remove.AzureADGroup": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete eligibility schedules for access to Azure AD groups",
+ "adminDescription": "Allows the app to delete time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.",
+ "userDisplayName": "Delete eligibility schedules for access to Azure AD groups",
+ "userDescription": "Allows the app to delete time-based eligibility schedules for access to Azure AD groups, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Delete eligibility schedules for access to Azure AD groups",
+ "adminDescription": "Delete time-based eligibility schedules for access to Azure AD groups, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identityGovernance/privilegedAccess/group/eligibilityScheduleRequests": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "ProfilePhoto.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read profile photo of a user or group",
+ "adminDescription": "Allows the app to read all profile photos of users and groups, on behalf of the the signed-in user.",
+ "userDisplayName": "Read profile photo of a user or group",
+ "userDescription": "Allows the app to read all profile photos of users and groups, on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read profile photo of a user or group",
+ "adminDescription": "Allows the app to read all profile photos of users and groups, without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/photo": "",
+ "/me/photos": "",
+ "/me/photos/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/photo": "least=Application,DelegatedWork",
+ "/groups/{id}/photos": "least=Application,DelegatedWork",
+ "/groups/{id}/photos/{id}": "least=Application,DelegatedWork",
+ "/users/{id}/photo": "least=Application",
+ "/users/{id}/photos": "least=Application",
+ "/users/{id}/photos/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "fast-ppl-image"
+ }
+ },
+ "ProfilePhoto.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write profile photo of a user or group",
+ "adminDescription": "Allows the app to read and write all profile photos of users and groups, on behalf of the the signed-in user.",
+ "userDisplayName": "Read and write profile photo of a user or group",
+ "userDescription": "Allows the app to read and write all profile photos of users and groups, on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write profile photo of a user or group",
+ "adminDescription": "Allows the app to read and write all profile photos of users and groups, without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/photo": "",
+ "/me/photos": "",
+ "/me/photos/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/me/photo": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/photo": "",
+ "/groups/{id}/photos": "",
+ "/groups/{id}/photos/{id}": "",
+ "/users/{id}/photo": "",
+ "/users/{id}/photos": "",
+ "/users/{id}/photos/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/groups/{id}/photo": "least=Application,DelegatedWork",
+ "/users/{id}/photo": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "fast-ppl-image"
+ }
+ },
+ "ProgramControl.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all programs that user can access",
+ "adminDescription": "Allows the app to read programs and program controls that the signed-in user has access to in the organization.",
+ "userDisplayName": "Read programs that you can access",
+ "userDescription": "Allows the app to read information on programs and program controls that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all programs",
+ "adminDescription": "Allows the app to read programs and program controls in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/programcontrols": "least=DelegatedWork,Application",
+ "/programcontroltypes": "least=DelegatedWork,Application",
+ "/programs": "least=DelegatedWork,Application",
+ "/programs/{id}/controls": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "ProgramControl.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage all programs that user can access",
+ "adminDescription": "Allows the app to read, update, delete and perform actions on programs and program controls that the signed-in user has access to in the organization.",
+ "userDisplayName": "Manage programs that you can access",
+ "userDescription": "Allows the app to read, update and perform action on programs and program controls that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage all programs",
+ "adminDescription": "Allows the app to read, update, delete and perform actions on programs and program controls in the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/programcontrols": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/programcontrols/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/programcontroltypes": "",
+ "/programs": "",
+ "/programs/{id}/controls": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/programs": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/programs/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "igagraph"
+ }
+ },
+ "ProtectionScopes.Compute.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Compute Purview policies at tenant scope",
+ "adminDescription": "Allows the app to identify Purview data protection, compliance and governance policy scopes defined for all users across tenant.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Compute Purview policies at tenant scope",
+ "adminDescription": "Allows the app to identify Purview data protection, compliance and governance policy scopes defined for all users across tenant.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/dataSecurityAndGovernance/protectionScopes/compute": "",
+ "/security/dataSecurityAndGovernance/protectionScopes/compute": "least=Application,DelegatedWork",
+ "/users/{userId}/dataSecurityAndGovernance/protectionScopes/compute": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "ProtectionScopes.Compute.User": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Compute Purview policies for an individual user",
+ "adminDescription": "Allows the app to identify Purview data protection, compliance and governance policy scopes defined for an individual user.",
+ "userDisplayName": "Compute Purview policies for an individual user",
+ "userDescription": "Allows the app to identify Purview data protection, compliance and governance policy scopes defined for an individual user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 1
+ },
+ "Application": {
+ "adminDisplayName": "Compute Purview policies for an individual user",
+ "adminDescription": "Allows the app to identify Purview data protection, compliance and governance policy scopes defined for an individual user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/dataSecurityAndGovernance/protectionScopes/compute": "least=Application,DelegatedWork",
+ "/users/{userId}/dataSecurityAndGovernance/protectionScopes/compute": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "ProvisioningLog.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read provisioning log data",
+ "adminDescription": "Allows the app to read and query your provisioning log activities, on behalf of the signed-in user.",
+ "userDisplayName": "Read provisioning log data",
+ "userDescription": "Allows the app to read and query your provisioning log activities, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all provisioning log data",
+ "adminDescription": "Allows the app to read and query your provisioning log activities, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/auditlogs/provisioning": "least=DelegatedWork",
+ "/reports/correlations": "least=DelegatedWork",
+ "/reports/correlations/{id}": "least=DelegatedWork",
+ "/reports/correlations/{id}/identities": "least=DelegatedWork",
+ "/reports/correlations/{id}/identities/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "syncfabricadmins"
+ }
+ },
+ "PublicKeyInfrastructure.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all certificate based authentication configurations",
+ "adminDescription": "Allows the application to read certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read all certificate based authentication configurations",
+ "userDescription": "Allows the application to read certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all certificate based authentication configurations",
+ "adminDescription": "Allows the application to read certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations": "least=DelegatedWork,Application",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}": "least=DelegatedWork,Application",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}/certificateAuthorities": "least=DelegatedWork,Application",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}/certificateAuthorities/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "iamutreviewers"
+ }
+ },
+ "PublicKeyInfrastructure.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all certificate based authentication configurations",
+ "adminDescription": "Allows the application to read and write certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all certificate based authentication configurations",
+ "userDescription": "Allows the application to read and write certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all certificate based authentication configurations",
+ "adminDescription": "Allows the application to read and write certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations": "",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}": "",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}/certificateAuthorities": "",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}/certificateAuthorities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}": "least=DelegatedWork,Application",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}/certificateAuthorities/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}": "least=DelegatedWork,Application",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}/certificateAuthorities/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations": "least=DelegatedWork,Application",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}/certificateAuthorities": "least=DelegatedWork,Application",
+ "/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{id}/upload": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "iamutreviewers"
+ }
+ },
+ "QnA.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Questions and Answers that the user can access.",
+ "adminDescription": "Allows an app to read all question and answer sets that the signed-in user can access.",
+ "userDisplayName": "Read all Questions and Answers that you can access.",
+ "userDescription": "Allows the app to read all question and answer sets that you can access.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/search/query": ""
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "RealTimeActivityFeed.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Access real-time enriched data in a meeting",
+ "adminDescription": "Allows the app to get direct access to real-time enriched data in a meeting, on behalf of the signed-in user.",
+ "userDisplayName": "Access real-time enriched data in a meeting",
+ "userDescription": "Allows the app to get direct access to real-time enriched data in a meeting, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Access real-time enriched data in a meeting",
+ "adminDescription": "Allows the app to get direct access to real-time enriched data in a meeting, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/communications/realTimeActivityFeed/subscriptions": "least=DelegatedWork,Application",
+ "/copilot/communications/realTimeActivityFeed/subscriptions/{id}/getArtifacts": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/communications/realTimeActivityFeed/meetings/{meetingId}/transcripts": "least=DelegatedWork,Application",
+ "/copilot/communications/realTimeActivityFeed/subscriptions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/copilot/communications/realTimeActivityFeed/subscriptions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/copilot/communications/realTimeActivityFeed/subscriptions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "RecordsManagement.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Records Management configuration, labels, and policies",
+ "adminDescription": "Allows the application to read any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user.",
+ "userDisplayName": "Read Records Management configuration, labels, and policies",
+ "userDescription": "Allows the application to read any data from Records Management, such as configuration, labels and policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Records Management configuration, labels and policies",
+ "adminDescription": "Allows the application to read any data from Records Management, such as configuration, labels, and policies without the signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/labels/retentionlabels": "least=DelegatedWork",
+ "/security/labels/retentionlabels/{id}": "least=DelegatedWork",
+ "/security/triggers/retentionevents/{id}/labels/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/labels/retentionlabels/{id}/eventtype": "least=DelegatedWork,Application",
+ "/security/triggers/retentionevents": "least=DelegatedWork,Application",
+ "/security/triggers/retentionevents/{id}": "least=DelegatedWork,Application",
+ "/security/triggers/retentionevents/{id}/retentioneventtype": "least=DelegatedWork,Application",
+ "/security/triggertypes/retentioneventtypes": "least=DelegatedWork,Application",
+ "/security/triggertypes/retentioneventtypes/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RecordsManagementGraph"
+ }
+ },
+ "RecordsManagement.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Records Management configuration, labels, and policies",
+ "adminDescription": "Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Records Management configuration, labels, and policies",
+ "userDescription": "Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Records Management configuration, labels and policies",
+ "adminDescription": "Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies without the signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/labels/retentionlabels": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/labels/retentionlabels/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/labels/retentionlabels/{id}/eventtype": "least=DelegatedWork,Application",
+ "/security/triggers/retentionevents/{id}/retentioneventtype": "least=DelegatedWork,Application",
+ "/security/triggertypes/retentioneventtypes/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/triggers/retentionevents": "least=DelegatedWork,Application",
+ "/security/triggertypes/retentioneventtypes": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/security/triggers/retentionevents/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/triggers/retentionevents/{id}/labels/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RecordsManagementGraph"
+ }
+ },
+ "Reports.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all usage reports",
+ "adminDescription": "Allows an app to read all service usage reports on behalf of the signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.",
+ "userDisplayName": "Read all usage reports",
+ "userDescription": "Allows an app to read all service usage reports on your behalf. Services that provide usage reports include Office 365 and Azure Active Directory.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all usage reports",
+ "adminDescription": "Allows an app to read all service usage reports without a signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/print/reports/dailyprintusagebyprinter": "least=DelegatedWork",
+ "/print/reports/dailyprintusagebyprinter/{id}": "least=DelegatedWork",
+ "/print/reports/dailyprintusagebyuser": "least=DelegatedWork",
+ "/print/reports/dailyprintusagebyuser/{id}": "least=DelegatedWork",
+ "/print/reports/getgrouparchivedprintjobs(groupid={value},startdatetime={value},enddatetime={value})": "least=DelegatedWork",
+ "/print/reports/getprinterarchivedprintjobs(printerid={value},startdatetime={value},enddatetime={value})": "least=DelegatedWork",
+ "/print/reports/getuserarchivedprintjobs(userid={value},startdatetime={value},enddatetime={value})": "least=DelegatedWork",
+ "/print/reports/monthlyprintusagebyprinter": "least=DelegatedWork",
+ "/print/reports/monthlyprintusagebyprinter/{id}": "least=DelegatedWork",
+ "/print/reports/monthlyprintusagebyuser": "least=DelegatedWork",
+ "/print/reports/monthlyprintusagebyuser/{id}": "least=DelegatedWork",
+ "/reports/applicationsignindetailedsummary": "least=DelegatedWork",
+ "/reports/applicationsignindetailedsummary/{id}": "least=DelegatedWork",
+ "/reports/dailyprintusagebyprinter": "least=DelegatedWork",
+ "/reports/dailyprintusagebyprinter/{id}": "least=DelegatedWork",
+ "/reports/dailyprintusagebyuser": "least=DelegatedWork",
+ "/reports/dailyprintusagebyuser/{id}": "least=DelegatedWork",
+ "/reports/enforcementNotices": "least=DelegatedWork",
+ "/reports/getapiquota(period={value},servicearea={value},appid={value})": "least=DelegatedWork",
+ "/reports/getgrouparchivedprintjobs": "least=DelegatedWork",
+ "/reports/getgrouparchivedprintjobs(groupid={value},startdatetime={value},enddatetime={value})": "least=DelegatedWork",
+ "/reports/getprinterarchivedprintjobs": "least=DelegatedWork",
+ "/reports/getprinterarchivedprintjobs(printerid={value},startdatetime={value},enddatetime={value})": "least=DelegatedWork",
+ "/reports/getSharePointApiUsage(date={value},appid={value})": "least=DelegatedWork",
+ "/reports/getSharePointApiUsage(date={value})": "least=DelegatedWork",
+ "/reports/getSharePointApiUsage(period={value},appid={value})": "least=DelegatedWork",
+ "/reports/getSharePointApiUsage(period={value})": "least=DelegatedWork",
+ "/reports/getuserarchivedprintjobs": "least=DelegatedWork",
+ "/reports/getuserarchivedprintjobs(userid={value},startdatetime={value},enddatetime={value})": "least=DelegatedWork",
+ "/reports/microsoftappsfilestoragecontainerusagesummary": "least=DelegatedWork",
+ "/reports/monthlyprintusagebyprinter": "least=DelegatedWork",
+ "/reports/monthlyprintusagebyprinter/{id}": "least=DelegatedWork",
+ "/reports/monthlyprintusagebyuser": "least=DelegatedWork",
+ "/reports/monthlyprintusagebyuser/{id}": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/credentialuserregistrationssummaries": "least=DelegatedWork",
+ "/tenantrelationships/managedtenants/credentialuserregistrationssummaries/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/reports/getmicrosoft365copilotusageuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/copilot/reports/getmicrosoft365copilotusageuserdetailbydate(date={value})": "least=DelegatedWork,Application",
+ "/copilot/reports/getmicrosoft365copilotusercountsummary(period={value})": "least=DelegatedWork,Application",
+ "/copilot/reports/getmicrosoft365copilotusercounttrend(period={value})": "least=DelegatedWork,Application",
+ "/reports/azureADPremiumLicenseInsight": "least=DelegatedWork,Application",
+ "/reports/conditionalaccess/getconditionalaccessperpolicyimpactsummary": "",
+ "/reports/credentialuserregistrationdetails": "least=DelegatedWork,Application",
+ "/reports/getazureadapplicationsigninsummary(period={value})": "least=DelegatedWork,Application",
+ "/reports/getbrowserdistributionusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getbrowserusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getbrowseruserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getcredentialusagesummary(period={value})": "least=DelegatedWork,Application",
+ "/reports/getcredentialuserregistrationcount": "least=DelegatedWork,Application",
+ "/reports/getemailactivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getemailactivityusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getemailactivityuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getemailactivityuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getemailappusageappsusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getemailappusageusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getemailappusageuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getemailappusageuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getemailappusageversionsusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getformsuseractivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getformsuseractivityuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getm365appplatformusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getm365appusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getm365appuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getm365appuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getmailboxusagedetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getmailboxusagemailboxcounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getmailboxusagequotastatusmailboxcounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getmailboxusagestorage(period={value})": "least=DelegatedWork,Application",
+ "/reports/getmicrosoft365copilotusageuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getmicrosoft365copilotusercountsummary(period={value})": "least=DelegatedWork,Application",
+ "/reports/getmicrosoft365copilotusercounttrend(period={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365activationcounts": "least=DelegatedWork,Application",
+ "/reports/getoffice365activationsusercounts": "least=DelegatedWork,Application",
+ "/reports/getoffice365activationsuserdetail": "least=DelegatedWork,Application",
+ "/reports/getoffice365activeusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365activeuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365activeuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365groupsactivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365groupsactivitydetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365groupsactivitydetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365groupsactivityfilecounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365groupsactivitygroupcounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365groupsactivitystorage(period={value})": "least=DelegatedWork,Application",
+ "/reports/getoffice365servicesusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getonedriveactivityfilecounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getonedriveactivityusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getonedriveactivityuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getonedriveactivityuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getonedriveusageaccountcounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getonedriveusageaccountdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getonedriveusageaccountdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getonedriveusagefilecounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getonedriveusagestorage(period={value})": "least=DelegatedWork,Application",
+ "/reports/getrelyingpartydetailedsummary": "least=DelegatedWork,Application",
+ "/reports/getsharepointactivityfilecounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointactivitypages(period={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointactivityusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointactivityuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointactivityuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointsiteusagedetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointsiteusagedetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointsiteusagefilecounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointsiteusagepages(period={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointsiteusagesitecounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getsharepointsiteusagestorage(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessactivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessactivityusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessactivityuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessactivityuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessdeviceusagedistributionusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessdeviceusageusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessdeviceusageuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessdeviceusageuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessorganizeractivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessorganizeractivityminutecounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessorganizeractivityusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessparticipantactivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessparticipantactivityminutecounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinessparticipantactivityusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinesspeertopeeractivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinesspeertopeeractivityminutecounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getskypeforbusinesspeertopeeractivityusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsdeviceusagedistributiontotalusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsdeviceusagedistributionusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsdeviceusagetotalusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsdeviceusageusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsdeviceusageuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsdeviceusageuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsteamactivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsteamactivitydetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsteamactivitydistributioncounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsteamcounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsuseractivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsuseractivitydistributiontotalusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsuseractivitydistributionusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsuseractivitytotalcounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsuseractivitytotaldistributioncounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsuseractivitytotalusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsuseractivityusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsuseractivityuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getteamsuseractivityuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getyammeractivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getyammeractivityusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getyammeractivityuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getyammeractivityuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getyammerdeviceusagedistributionusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getyammerdeviceusageusercounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getyammerdeviceusageuserdetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getyammerdeviceusageuserdetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getyammergroupsactivitycounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/getyammergroupsactivitydetail(date={value})": "least=DelegatedWork,Application",
+ "/reports/getyammergroupsactivitydetail(period={value})": "least=DelegatedWork,Application",
+ "/reports/getyammergroupsactivitygroupcounts(period={value})": "least=DelegatedWork,Application",
+ "/reports/identityanalytics/serviceprincipals": "least=DelegatedWork,Application",
+ "/reports/identityanalytics/serviceprincipals/{id}": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForConditionalAccessBlockedSignIn(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForConditionalAccessCompliantDevicesSignInSuccess(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForConditionalAccessManagedDevicesSignInSuccess(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForDynamicMembershipChangeBacklog(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForDynamicMembershipChangeBacklog(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForDynamicMembershipChangesApplied(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForDynamicMembershipChangesApplied(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForDynamicMembershipChangesEvaluated(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForDynamicMembershipChangesEvaluated(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForMfaSignInFailure(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForMfaSignInSuccess(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMetricsForSamlSignInSuccess(inclusiveIntervalStartDateTime={value},exclusiveIntervalEndDateTime={value})": "least=DelegatedWork,Application",
+ "/reports/usercredentialusagedetails": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cia_o365"
+ }
+ },
+ "ReportSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read admin report settings",
+ "adminDescription": "Allows the app to read admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user",
+ "userDisplayName": "Read admin report settings",
+ "userDescription": "Allows the app to read admin report settings, such as whether to display concealed information in reports, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all admin report settings",
+ "adminDescription": "Allows the app to read all admin report settings, such as whether to display concealed information in reports, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/reportsettings": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/reportsettings/sharepoint/apiusagereportmetrics": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cia_o365"
+ }
+ },
+ "ReportSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write admin report settings",
+ "adminDescription": "Allows the app to read and update admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write admin report settings",
+ "userDescription": "Allows the app to read and update admin report settings, such as whether to display concealed information in reports, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all admin report settings",
+ "adminDescription": "Allows the app to read and update all admin report settings, such as whether to display concealed information in reports, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/reportsettings": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/reportsettings/sharepoint/disableapiusagereport": "least=DelegatedWork",
+ "/admin/reportsettings/sharepoint/enableapiusagereport": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cia_o365"
+ }
+ },
+ "ResourceSpecificPermissionGrant.ReadForChat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read resource specific permissions granted on a chat",
+ "adminDescription": "Allows the app to read the resource specific permissions granted on the chat, on behalf of the signed-in user.",
+ "userDisplayName": "Read resource specific permissions granted on a chat account",
+ "userDescription": "Allows the app to read the resource specific permission granted on the chat, on your behalf.",
+ "requiresAdminConsent": false
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/permissiongrants": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ResourceSpecificPermissionGrant.ReadForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read resource specific permissions granted on a chat",
+ "adminDescription": "Allows the app to read the resource specific permissions granted on the chat without a signed-in user.",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ResourceSpecificPermissionGrant.ReadForTeam": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read resource specific permissions granted on a team",
+ "adminDescription": "Allows the app to read the resource specific permissions granted on the team, on behalf of the signed-in user.",
+ "userDisplayName": "Read resource specific permissions granted on a team",
+ "userDescription": "Allows the app to read the resource specific permission granted on the team, on your behalf.",
+ "requiresAdminConsent": false
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/permissiongrants": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ResourceSpecificPermissionGrant.ReadForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read resource specific permissions granted on a team",
+ "adminDescription": "Allows the app to read the resource specific permissions granted on the team without a signed-in user.",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ResourceSpecificPermissionGrant.ReadForUser": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read resource specific permissions granted on a user account",
+ "adminDescription": "Allows the app to read the resource specific permissions granted on a user account, on behalf of the signed-in user.",
+ "userDisplayName": "Read resource specific permissions granted on your user account",
+ "userDescription": "Allows the app to read the resource specific permission granted on your account, on your behalf.",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/permissiongrants": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "ResourceSpecificPermissionGrant.ReadForUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all resource specific permissions granted on user accounts",
+ "adminDescription": "Allows the app to read all resource specific permissions granted on user accounts, without a signed-in user.",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/permissiongrants": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "RiskPreventionProviders.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all identity risk prevention providers",
+ "adminDescription": "Allows the app to read your organization's risk prevention providers, on behalf of the signed-in user.",
+ "userDisplayName": "Read all identity risk prevention providers",
+ "userDescription": "Allows the app to read your organization's risk prevention providers, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/riskPrevention/fraudProtectionProviders": "least=DelegatedWork",
+ "/identity/riskPrevention/fraudProtectionProviders/{id}": "least=DelegatedWork",
+ "/identity/riskPrevention/webApplicationFirewallProviders": "least=DelegatedWork",
+ "/identity/riskPrevention/webApplicationFirewallProviders/{id}": "least=DelegatedWork",
+ "/identity/riskPrevention/webApplicationFirewallVerifications": "least=DelegatedWork",
+ "/identity/riskPrevention/webApplicationFirewallVerifications/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/riskPrevention/webApplicationFirewalls/verify": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "RiskPreventionProviders.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all identity risk prevention providers",
+ "adminDescription": "Allows the app to read and write your organization's risk prevention providers, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all identity risk prevention providers",
+ "userDescription": "Allows the app to read and write your organization's risk prevention providers, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identity/riskPrevention/fraudProtectionProviders": "least=DelegatedWork",
+ "/identity/riskPrevention/webApplicationFirewallProviders": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/riskPrevention/fraudProtectionProviders/{id}": "least=DelegatedWork",
+ "/identity/riskPrevention/webApplicationFirewallProviders/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/riskPrevention/webApplicationFirewallProviders/{id}/verify": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/identity/riskPrevention/webApplicationFirewallVerifications/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "RoleAssignmentSchedule.Read.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all active role assignments for your company's directory",
+ "adminDescription": "Allows the app to read the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles.",
+ "userDisplayName": "Read all active role assignments for your company's directory",
+ "userDescription": "Allows the app to read the active role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes reading directory role templates, and directory roles.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all active role assignments and role schedules for your company's directory",
+ "adminDescription": "Allows the app to read the active role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.",
+ "userDisplayName": "Read all active role assignments and role schedules for your company's directory",
+ "userDescription": "Allows the app to read the active role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/roleManagement/directory/roleAssignmentScheduleInstances": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstanceId}": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on={parameterValue})": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleAssignmentSchedules": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentScheduleId}": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on={parameterValue})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "RoleAssignmentSchedule.ReadWrite.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read, update, and delete all active role assignments for your company's directory",
+ "adminDescription": "Allows the app to read and manage the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing active directory role membership, and reading directory role templates, directory roles and active memberships.",
+ "userDisplayName": "Read, update, and delete all active role assignments for your company's directory",
+ "userDescription": "Allows the app to read and manage the active role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes managing active directory role membership, and reading directory role templates, directory roles and active memberships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read, update, and delete all policies for privileged role assignments of your company's directory",
+ "adminDescription": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/roleManagement/directory/roleAssignmentScheduleInstances": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstanceId}": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleAssignmentScheduleRequests": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequestId}": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleAssignmentScheduleRequests/filterByCurrentUser(on={parameterValue})": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleAssignmentSchedules": "",
+ "/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentScheduleId}": "",
+ "/roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on={parameterValue})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/roleManagement/directory/roleAssignmentScheduleRequests": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/roleassignmentschedulerequests/{id}/cancel": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "RoleAssignmentSchedule.Remove.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete all active role assignments for your company's directory",
+ "adminDescription": "Allows the app to delete the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Delete all active role assignments for your company's directory",
+ "userDescription": "Allows the app to delete the active role-based access control (RBAC) assignments for your company's directory, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Delete all active role assignments of your company's directory",
+ "adminDescription": "Delete all active privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/rolemanagement/directory/roleassignmentschedulerequests": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "RoleEligibilitySchedule.Read.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all eligible role assignments for your company's directory",
+ "adminDescription": "Allows the app to read the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles.",
+ "userDisplayName": "Read all eligible role assignments for your company's directory",
+ "userDescription": "Allows the app to read the eligible role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes reading directory role templates, and directory roles.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all eligible role assignments and role schedules for your company's directory",
+ "adminDescription": "Allows the app to read the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.",
+ "userDisplayName": "Read all eligible role assignments and role schedules for your company's directory",
+ "userDescription": "Allows the app to read the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/roleManagement/directory/roleEligibilityScheduleInstances": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstanceId}": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/filterByCurrentUser(on={parameterValue})": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilitySchedules": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilityScheduleId}": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilitySchedules/filterByCurrentUser(on={parameterValue})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "RoleEligibilitySchedule.ReadWrite.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read, update, and delete all eligible role assignments for your company's directory",
+ "adminDescription": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.",
+ "userDisplayName": "Read, update, and delete all eligible role assignments for your company's directory",
+ "userDescription": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments for your company's directory, on your behalf. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read, update, and delete all eligible role assignments and schedules for your company's directory",
+ "adminDescription": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.",
+ "userDisplayName": "Read, update, and delete all eligible role assignments and schedules for your company's directory",
+ "userDescription": "Allows the app to read and manage the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/roleManagement/directory/roleEligibilityScheduleInstances": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstanceId}": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleEligibilityScheduleRequests": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequestId}": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilityScheduleRequests/filterByCurrentUser(on={parameterValue})": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilitySchedules": "",
+ "/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilityScheduleId}": "",
+ "/roleManagement/directory/roleEligibilitySchedules/filterByCurrentUser(on={parameterValue})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/roleManagement/directory/roleEligibilityScheduleRequests": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequestId}/cancel": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "RoleEligibilitySchedule.Remove.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete all eligible role assignments for your company's directory",
+ "adminDescription": "Allows the app to delete the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Delete all eligible role assignments for your company's directory",
+ "userDescription": "Allows the app to delete the eligible role-based access control (RBAC) assignments for your company's directory, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Delete all eligible role assignments of your company's directory",
+ "adminDescription": "Delete all eligible privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/rolemanagement/directory/roleassignmentschedulerequests": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "pimcr"
+ }
+ },
+ "RoleManagement.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read role management data for all RBAC providers",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) settings for all RBAC providers, on behalf of the signed-in user. This includes reading role definitions and role assignments.",
+ "userDisplayName": "Read role management data for all RBAC providers",
+ "userDescription": "Allows the app to read the role-based access control (RBAC) settings for all RBAC providers, on your behalf. This includes reading role definitions and role assignments.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read role management data for all RBAC providers",
+ "adminDescription": "Allows the app to read role-based access control (RBAC) settings for all RBAC providers without a signed-in user. This includes reading role definitions and role assignments.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/rolemanagementpolicies": "",
+ "/policies/rolemanagementpolicies/{id}": "",
+ "/policies/rolemanagementpolicies/{id}/effectiverules": "",
+ "/policies/rolemanagementpolicies/{id}/rules": "",
+ "/policies/rolemanagementpolicies/{id}/rules/{id}": "",
+ "/policies/rolemanagementpolicyassignments": "least=Application",
+ "/policies/rolemanagementpolicyassignments/{id}": "least=Application",
+ "/rolemanagement/cloudpc/roledefinitions": "",
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "",
+ "/rolemanagement/defender/customAppScopes": "",
+ "/rolemanagement/defender/roleassignments": "",
+ "/rolemanagement/defender/roleassignments/{id}": "",
+ "/rolemanagement/defender/roledefinitions": "",
+ "/rolemanagement/defender/roledefinitions/{id}": "",
+ "/rolemanagement/devicemanagement/roledefinitions": "",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": "",
+ "/rolemanagement/directory/resourcenamespaces": "",
+ "/rolemanagement/directory/resourcenamespaces/{id}": "",
+ "/rolemanagement/directory/resourcenamespaces/{id}/resourceactions": "",
+ "/rolemanagement/directory/resourcenamespaces/{id}/resourceactions/{id}": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstanceId}": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleAssignmentSchedules": "",
+ "/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentScheduleId}": "",
+ "/roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on={parameterValue})": "",
+ "/rolemanagement/directory/roledefinitions": "",
+ "/rolemanagement/directory/roledefinitions/{id}": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstanceId}": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleEligibilitySchedules": "",
+ "/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilityScheduleId}": "",
+ "/roleManagement/directory/roleEligibilitySchedules/filterByCurrentUser(on={parameterValue})": "",
+ "/rolemanagement/entitlementmanagement/roledefinitions": "",
+ "/rolemanagement/entitlementmanagement/roledefinitions/{id}": "",
+ "/roleManagement/exchange/customAppScopes": "",
+ "/roleManagement/exchange/customAppScopes/{id}": "",
+ "/rolemanagement/exchange/roleassignments": "",
+ "/rolemanagement/exchange/roleassignments/{id}": "",
+ "/rolemanagement/exchange/roledefinitions": "",
+ "/rolemanagement/exchange/roledefinitions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/rolemanagement/directory/roleassignments": "",
+ "/rolemanagement/directory/roleassignments/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "RoleManagement.Read.CloudPC": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Cloud PC RBAC settings",
+ "adminDescription": "Allows the app to read the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user. This includes reading Cloud PC role definitions and role assignments.",
+ "userDisplayName": "Read Cloud PC RBAC settings",
+ "userDescription": "Allows the app to read the Cloud PC role-based access control (RBAC) settings, on your behalf. This includes reading Cloud PC role definitions and role assignments.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Cloud PC RBAC settings",
+ "adminDescription": "Allows the app to read the Cloud PC role-based access control (RBAC) settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/rolemanagement/cloudpc/roledefinitions": "",
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "",
+ "/rolemanagement/devicemanagement/roledefinitions": "",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpcgraph"
+ }
+ },
+ "RoleManagement.Read.Defender": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read M365 Defender RBAC configuration",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading M365 Defender role definitions and role assignments.",
+ "userDisplayName": "Read M365 Defender RBAC configuration",
+ "userDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading M365 Defender role definitions and role assignments.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read M365 Defender RBAC configuration",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/rolemanagement/defender/customAppScopes": "least=DelegatedWork,Application",
+ "/rolemanagement/defender/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/defender/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/defender/roledefinitions": "least=DelegatedWork,Application",
+ "/rolemanagement/defender/roledefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mdatpUrbac"
+ }
+ },
+ "RoleManagement.Read.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read directory RBAC settings",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, directory roles and memberships.",
+ "userDisplayName": "Read directory RBAC settings",
+ "userDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on your behalf. This includes reading directory role templates, directory roles and memberships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all directory RBAC settings",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, without a signed-in user. This includes reading directory role templates, directory roles and memberships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/administrativeunits/{id}/scopedrolemembers": "least=DelegatedWork,Application",
+ "/administrativeunits/{id}/scopedrolemembers/{id}": "least=DelegatedWork,Application",
+ "/directory/administrativeunits/{id}/scopedrolemembers": "least=DelegatedWork,Application",
+ "/directory/administrativeunits/{id}/scopedrolemembers/{id}": "least=DelegatedWork,Application",
+ "/directoryroles": "least=DelegatedWork,Application",
+ "/directoryroles(roletemplateid={value})": "",
+ "/directoryroles(roletemplateid={value})/members": "",
+ "/directoryroles(roletemplateid={value})/scopedmembers": "",
+ "/directoryroles/{id}": "least=DelegatedWork,Application",
+ "/directoryroles/{id}/members": "least=DelegatedWork,Application",
+ "/directoryroles/{id}/scopedmembers": "least=DelegatedWork,Application",
+ "/directoryroles/delta": "least=DelegatedWork,Application",
+ "/directoryroletemplates": "least=DelegatedWork,Application",
+ "/directoryroletemplates/{id}": "least=DelegatedWork,Application",
+ "/policies/rolemanagementpolicies": "least=Application",
+ "/policies/rolemanagementpolicies/{id}": "least=Application",
+ "/policies/rolemanagementpolicies/{id}/effectiverules": "least=Application",
+ "/policies/rolemanagementpolicies/{id}/rules": "least=Application",
+ "/policies/rolemanagementpolicies/{id}/rules/{id}": "least=Application",
+ "/policies/rolemanagementpolicyassignments": "",
+ "/policies/rolemanagementpolicyassignments/{id}": "",
+ "/rolemanagement/cloudpc/roledefinitions": "",
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "",
+ "/rolemanagement/devicemanagement/roledefinitions": "",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": "",
+ "/rolemanagement/directory/deleteditems/roledefinitions": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/deleteditems/roledefinitions/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/resourcenamespaces": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/resourcenamespaces/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/resourcenamespaces/{id}/resourceactions": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/resourcenamespaces/{id}/resourceactions/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleAssignmentScheduleInstances": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstanceId}": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleAssignmentSchedules": "",
+ "/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentScheduleId}": "",
+ "/roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on={parameterValue})": "",
+ "/rolemanagement/directory/roledefinitions": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/roledefinitions/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/roledefinitions/{id}/assignedprincipals": "least=DelegatedWork,Application",
+ "/roleManagement/directory/roleEligibilityScheduleInstances": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstanceId}": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleEligibilitySchedules": "",
+ "/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilityScheduleId}": "",
+ "/roleManagement/directory/roleEligibilitySchedules/filterByCurrentUser(on={parameterValue})": "",
+ "/rolemanagement/directory/transitiveroleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/entitlementmanagement/roleassignments": "",
+ "/rolemanagement/entitlementmanagement/roleassignments/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "RoleManagement.Read.Exchange": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Exchange Online RBAC configuration",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.",
+ "userDisplayName": "Read Exchange Online RBAC configuration",
+ "userDescription": "Allows the app to read the role-based access control (RBAC) settings for your organization's Exchange Online service, on your behalf. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Exchange Online RBAC configuration",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) configuration for your organization's Exchange Online service, without a signed-in user. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/roleManagement/exchange/customAppScopes": "least=DelegatedWork,Application",
+ "/roleManagement/exchange/customAppScopes/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/exchange/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/exchange/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/exchange/roledefinitions": "least=DelegatedWork,Application",
+ "/rolemanagement/exchange/roledefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "exorbacgraph"
+ }
+ },
+ "RoleManagement.ReadWrite.CloudPC": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Cloud PC RBAC settings",
+ "adminDescription": "Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user. This includes reading and managing Cloud PC role definitions and role assignments.",
+ "userDisplayName": "Read and write Cloud PC RBAC settings",
+ "userDescription": "Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, on your behalf. This includes reading and managing Cloud PC role definitions and memberships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all Cloud PC RBAC settings",
+ "adminDescription": "Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, without a signed-in user. This includes reading and managing Cloud PC role definitions and memberships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/rolemanagement/cloudpc/roledefinitions": "",
+ "/rolemanagement/devicemanagement/roledefinitions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpcgraph"
+ }
+ },
+ "RoleManagement.ReadWrite.Defender": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read M365 Defender RBAC configuration",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading M365 Defender role definitions and role assignments.",
+ "userDisplayName": "Read M365 Defender RBAC configuration",
+ "userDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading M365 Defender role definitions and role assignments.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read M365 Defender RBAC configuration",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) settings for your company's directory, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/roleManagement/defender/customAppScopes": "",
+ "/roleManagement/defender/roleassignments": "",
+ "/roleManagement/defender/roleassignments/{id}": "",
+ "/rolemanagement/defender/roledefinitions": "",
+ "/rolemanagement/defender/roledefinitions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/roleManagement/defender/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/defender/roledefinitions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/roleManagement/defender/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/defender/roledefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mdatpUrbac"
+ }
+ },
+ "RoleManagement.ReadWrite.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write directory RBAC settings",
+ "adminDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.",
+ "userDisplayName": "Read and write directory RBAC settings",
+ "userDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, on your behalf. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all directory RBAC settings",
+ "adminDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, without a signed-in user. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/administrativeunits/{id}/scopedrolemembers": "least=DelegatedWork,Application",
+ "/directory/administrativeunits/{id}/scopedrolemembers": "least=DelegatedWork,Application",
+ "/directoryroles": "least=DelegatedWork,Application",
+ "/directoryroles/{id}/members": "least=DelegatedWork,Application",
+ "/rolemanagement/cloudpc/roledefinitions": "",
+ "/rolemanagement/devicemanagement/roledefinitions": "",
+ "/rolemanagement/directory/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/roleassignmentschedulerequests": "least=Application",
+ "/rolemanagement/directory/roledefinitions": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/roleeligibilityschedulerequests": "least=Application",
+ "/rolemanagement/entitlementmanagement/roleassignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/administrativeunits/{id}/scopedrolemembers/{id}": "least=DelegatedWork,Application",
+ "/directory/administrativeunits/{id}/scopedrolemembers/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/deleteditems/roledefinitions/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/entitlementmanagement/roleassignments/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directoryroles(roletemplateid={value})": "",
+ "/directoryroles(roletemplateid={value})/members": "",
+ "/directoryroles(roletemplateid={value})/scopedmembers": "",
+ "/directoryroles/{id}": "",
+ "/directoryroles/{id}/scopedmembers": "",
+ "/directoryroles/delta": "",
+ "/directoryroletemplates": "",
+ "/directoryroletemplates/{id}": "",
+ "/policies/rolemanagementpolicies": "",
+ "/policies/rolemanagementpolicies/{id}": "",
+ "/policies/rolemanagementpolicies/{id}/effectiverules": "",
+ "/policies/rolemanagementpolicies/{id}/rules": "",
+ "/policies/rolemanagementpolicies/{id}/rules/{id}": "",
+ "/policies/rolemanagementpolicyassignments": "",
+ "/policies/rolemanagementpolicyassignments/{id}": "",
+ "/rolemanagement/directory/deleteditems/roledefinitions": "",
+ "/rolemanagement/directory/resourcenamespaces": "",
+ "/rolemanagement/directory/resourcenamespaces/{id}": "",
+ "/rolemanagement/directory/resourcenamespaces/{id}/resourceactions": "",
+ "/rolemanagement/directory/resourcenamespaces/{id}/resourceactions/{id}": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/{unifiedRoleAssignmentScheduleInstanceId}": "",
+ "/roleManagement/directory/roleAssignmentScheduleInstances/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleAssignmentScheduleRequests/{unifiedRoleAssignmentScheduleRequestId}": "",
+ "/roleManagement/directory/roleAssignmentScheduleRequests/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleAssignmentSchedules": "",
+ "/roleManagement/directory/roleAssignmentSchedules/{unifiedRoleAssignmentScheduleId}": "",
+ "/roleManagement/directory/roleAssignmentSchedules/filterByCurrentUser(on={parameterValue})": "",
+ "/rolemanagement/directory/roledefinitions/{id}/assignedprincipals": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/{unifiedRoleEligibilityScheduleInstanceId}": "",
+ "/roleManagement/directory/roleEligibilityScheduleInstances/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequestId}": "",
+ "/roleManagement/directory/roleEligibilityScheduleRequests/filterByCurrentUser(on={parameterValue})": "",
+ "/roleManagement/directory/roleEligibilitySchedules": "",
+ "/roleManagement/directory/roleEligibilitySchedules/{unifiedRoleEligibilityScheduleId}": "",
+ "/roleManagement/directory/roleEligibilitySchedules/filterByCurrentUser(on={parameterValue})": "",
+ "/rolemanagement/directory/transitiveroleassignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/directoryroles(roletemplateid={value})/members/{id}": "least=DelegatedWork,Application",
+ "/directoryroles/{id}/members/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directoryroles/roletemplateid={roletemplateid}/members": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/deleteditems/roledefinitions/{id}/restore": "least=DelegatedWork,Application",
+ "/rolemanagement/directory/roleassignmentschedulerequests/{id}/cancel": "",
+ "/roleManagement/directory/roleEligibilityScheduleRequests/{unifiedRoleEligibilityScheduleRequestId}/cancel": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/rolemanagementpolicies/{id}/rules/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/rolemanagement/cloudpc/roledefinitions/{id}": "",
+ "/rolemanagement/devicemanagement/roledefinitions/{id}": "",
+ "/rolemanagement/directory/roledefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DirectoryPreAuthZReq"
+ }
+ },
+ "RoleManagement.ReadWrite.Exchange": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Exchange Online RBAC configuration",
+ "adminDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.",
+ "userDisplayName": "Read and write Exchange Online RBAC configuration",
+ "userDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, on your behalf. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Exchange Online RBAC configuration",
+ "adminDescription": "Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, without a signed-in user. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/roleManagement/exchange/customAppScopes": "",
+ "/roleManagement/exchange/customAppScopes/{id}": "",
+ "/roleManagement/exchange/roleassignments": "",
+ "/roleManagement/exchange/roleassignments/{id}": "",
+ "/rolemanagement/exchange/roledefinitions": "",
+ "/rolemanagement/exchange/roledefinitions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/roleManagement/exchange/customAppScopes": "least=DelegatedWork,Application",
+ "/roleManagement/exchange/roleassignments": "least=DelegatedWork,Application",
+ "/rolemanagement/exchange/roledefinitions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/roleManagement/exchange/customAppScopes/{id}": "least=DelegatedWork,Application",
+ "/roleManagement/exchange/roleassignments/{id}": "least=DelegatedWork,Application",
+ "/rolemanagement/exchange/roledefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "exorbacgraph"
+ }
+ },
+ "RoleManagementAlert.Read.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all alert data for your company's directory",
+ "adminDescription": "Allows the app to read the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.",
+ "userDisplayName": "Read all alert data for your company's directory",
+ "userDescription": "Allows the app to read the role-based access control (RBAC) alerts for your company's directory, on your behalf. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all alert data for your company's directory",
+ "adminDescription": "Allows the app to read all role-based access control (RBAC) alerts for your company's directory, without a signed-in user. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/rolemanagementalerts/alertconfigurations": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/alertconfigurations/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/alertdefinitions": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/alertdefinitions/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/alerts": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/alerts/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/alerts/{id}/alertincidents": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/alerts/{id}/alertincidents/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/operations/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "PIMPreAuthzApprover"
+ }
+ },
+ "RoleManagementAlert.ReadWrite.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all alert data, configure alerts, and take actions on all alerts for your company's directory",
+ "adminDescription": "Allows the app to read and manage the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.",
+ "userDisplayName": "Read all alert data, configure alerts, and take actions on all alerts for your company's directory",
+ "userDescription": "Allows the app to read and manage the role-based access control (RBAC) alerts for your company's directory, on your behalf. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all alert data, configure alerts, and take actions on all alerts for your company's directory",
+ "adminDescription": "Allows the app to read and manage all role-based access control (RBAC) alerts for your company's directory, without a signed-in user. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identitygovernance/rolemanagementalerts/alertconfigurations/{id}": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/alerts/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identitygovernance/rolemanagementalerts/alertconfigurations": "",
+ "/identitygovernance/rolemanagementalerts/alertdefinitions": "",
+ "/identitygovernance/rolemanagementalerts/alertdefinitions/{id}": "",
+ "/identitygovernance/rolemanagementalerts/alerts": "",
+ "/identitygovernance/rolemanagementalerts/alerts/{id}/alertincidents": "",
+ "/identitygovernance/rolemanagementalerts/alerts/{id}/alertincidents/{id}": "",
+ "/identitygovernance/rolemanagementalerts/operations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identitygovernance/rolemanagementalerts/alerts/{id}/alertincidents/{id}/remediate": "least=DelegatedWork,Application",
+ "/identitygovernance/rolemanagementalerts/alerts/refresh": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "PIMPreAuthzApprover"
+ }
+ },
+ "RoleManagementPolicy.Read.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all policies for privileged role assignments of your company's directory",
+ "adminDescription": "Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Read all policies for privileged role assignments of your company's directory",
+ "userDescription": "Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/rolemanagementpolicies": "least=DelegatedWork",
+ "/policies/rolemanagementpolicies/{id}": "least=DelegatedWork",
+ "/policies/rolemanagementpolicies/{id}/effectiverules": "least=DelegatedWork",
+ "/policies/rolemanagementpolicies/{id}/rules": "least=DelegatedWork",
+ "/policies/rolemanagementpolicies/{id}/rules/{id}": "least=DelegatedWork",
+ "/policies/rolemanagementpolicyassignments": "least=DelegatedWork",
+ "/policies/rolemanagementpolicyassignments/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TM"
+ }
+ },
+ "RoleManagementPolicy.ReadWrite.Directory": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read, update, and delete all policies for privileged role assignments of your company's directory",
+ "adminDescription": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user.",
+ "userDisplayName": "Read, update, and delete all policies for privileged role assignments of your company's directory",
+ "userDescription": "Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/policies/rolemanagementpolicies": "",
+ "/policies/rolemanagementpolicies/{id}": "",
+ "/policies/rolemanagementpolicies/{id}/effectiverules": "",
+ "/policies/rolemanagementpolicies/{id}/rules": "",
+ "/policies/rolemanagementpolicyassignments": "",
+ "/policies/rolemanagementpolicyassignments/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/policies/rolemanagementpolicies/{id}/rules/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TM"
+ }
+ },
+ "Schedule-WorkingTime.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Trigger all working time policies",
+ "adminDescription": "Allows the app to trigger the working time policies without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/solutions/workingTimeSchedule/endWorkingTime": "least=Application",
+ "/users/{id}/solutions/workingTimeSchedule/startWorkingTime": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/solutions": "least=Application",
+ "/users/{id}/solutions/workingTimeSchedule": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mwtshiftsengfte"
+ }
+ },
+ "Schedule.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user schedule items",
+ "adminDescription": "Allows the app to read schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user.",
+ "userDisplayName": "Read your schedule items",
+ "userDescription": "Allows the app to read schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all schedule items",
+ "adminDescription": "Allows the app to read all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/schedule": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/daynotes": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/daynotes/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/offershiftrequests/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshiftchangerequests": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshifts": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshifts/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/schedulinggroups": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/schedulinggroups/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/shifts": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/shifts/{id}": "least=Application",
+ "/teams/{id}/schedule/shiftsRoleDefinitions": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/shiftsRoleDefinitions/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/swapshiftschangerequests": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffreasons": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffreasons/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffrequests": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffrequests/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timesoff": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timesoff/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/joinedTeams/getOpenShifts": "least=DelegatedWork,Application",
+ "/users/{id}/joinedTeams/getShifts": "least=DelegatedWork,Application",
+ "/users/{id}/joinedTeams/getTimesOff": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mwtshiftsengfte"
+ }
+ },
+ "Schedule.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user schedule items",
+ "adminDescription": "Allows the app to manage schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your schedule items",
+ "userDescription": "Allows the app to manage schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all schedule items",
+ "adminDescription": "Allows the app to manage all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/teams/{id}/schedule": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/daynotes": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/offershiftrequests": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshiftchangerequests": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshifts": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/schedulinggroups": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/shifts": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/swapshiftschangerequests": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffreasons": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffrequests": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timesoff": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/offershiftrequests/{id}": "",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}": "",
+ "/teams/{id}/schedule/shiftsRoleDefinitions": "",
+ "/teams/{id}/schedule/shiftsRoleDefinitions/{id}": "",
+ "/users/{id}/joinedTeams/getOpenShifts": "",
+ "/users/{id}/joinedTeams/getShifts": "",
+ "/users/{id}/joinedTeams/getTimesOff": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/daynotes/bulkDelete": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/daynotes/bulkUpsert": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/offershiftrequests/{id}/approve": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/offershiftrequests/{id}/decline": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}/approve": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}/decline": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshifts/bulkDelete": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshifts/bulkUpsert": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/schedulinggroups/bulkDelete": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/schedulinggroups/bulkUpsert": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/share": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/shifts/bulkDelete": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/shifts/bulkUpsert": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/swapshiftschangerequests/{id}/approve": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/swapshiftschangerequests/{id}/decline": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards/{id}/clockout": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards/{id}/confirm": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards/{id}/endbreak": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards/{id}/startbreak": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards/bulkDelete": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards/bulkUpsert": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards/clockin": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffreasons/bulkDelete": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffreasons/bulkUpsert": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffrequests/{id}/approve": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffrequests/{id}/decline": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timesoff/bulkDelete": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timesoff/bulkUpsert": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/daynotes/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/openshifts/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/schedulinggroups/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/shifts/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timecards/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timeoffreasons/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/timesoff/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/timeoffrequests/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/shiftsRoleDefinitions": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/shiftsRoleDefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/offershiftrequests/{id}/approveForUser": "least=Application",
+ "/teams/{id}/schedule/offershiftrequests/{id}/declineForUser": "least=Application",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}/approveForUser": "least=Application",
+ "/teams/{id}/schedule/openshiftchangerequests/{id}/declineForUser": "least=Application",
+ "/teams/{id}/schedule/swapshiftschangerequests/{id}/approveForUser": "least=Application",
+ "/teams/{id}/schedule/swapshiftschangerequests/{id}/declineForUser": "least=Application",
+ "/teams/{id}/schedule/timecards/{id}/confirmForUser": "least=Application",
+ "/teams/{id}/schedule/timeoffrequests/{id}/approveForUser": "least=Application",
+ "/teams/{id}/schedule/timeoffrequests/{id}/declineForUser": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mwtshiftsengfte"
+ }
+ },
+ "SchedulePermissions.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read/Write schedule permissions for a role.",
+ "adminDescription": "Allows the app to read/write schedule permissions for a specific role in Shifts application on behalf of the signed-in user.",
+ "userDisplayName": "Read/Write your schedule permissions for a role.",
+ "userDescription": "Allows the app to read/write schedule permissions for a specific role in Shifts application on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read/Write schedule permissions for a role",
+ "adminDescription": "Allows the app to read/write schedule permissions for a specific role in Shifts application without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/teams/{id}/schedule/shiftsRoleDefinitions": "least=DelegatedWork,Application",
+ "/teams/{id}/schedule/shiftsRoleDefinitions/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mwtshiftsengfte"
+ }
+ },
+ "SearchConfiguration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your organization's search configuration",
+ "adminDescription": "Allows the app to read search configuration, on behalf of the signed-in user.",
+ "userDisplayName": "Read your organization's search configuration",
+ "userDescription": "Allows the app to read search configuration, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read your organization's search configuration",
+ "adminDescription": "Allows the app to read search configurations, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/search/acronyms": "least=DelegatedWork,Application",
+ "/search/bookmarks": "least=DelegatedWork,Application",
+ "/search/qnas": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/search/acronyms/{id}": "least=DelegatedWork,Application",
+ "/search/bookmarks/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/search/qna/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/search/qnas/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "SearchAdminApiFC"
+ }
+ },
+ "SearchConfiguration.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your organization's search configuration",
+ "adminDescription": "Allows the app to read and write search configuration, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your organization's search configuration",
+ "userDescription": "Allows the app to read and write search configuration, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write your organization's search configuration",
+ "adminDescription": "Allows the app to read and write search configurations, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/search/acronyms": "",
+ "/search/bookmarks": "",
+ "/search/qnas": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/search/acronyms/{id}": "",
+ "/search/bookmarks/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/search/qna/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/search/qnas/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "SearchAdminApiFC"
+ }
+ },
+ "SecurityActions.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your organization's security actions",
+ "adminDescription": "Allows the app to read security actions, on behalf of the signed-in user.",
+ "userDisplayName": "Read your organization's security actions",
+ "userDescription": "Allows the app to read security actions, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read your organization's security actions",
+ "adminDescription": "Allows the app to read security actions, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/securityactions": "least=Application",
+ "/security/securityactions/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "secgraphschema"
+ }
+ },
+ "SecurityActions.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and update your organization's security actions",
+ "adminDescription": "Allows the app to read or update security actions, on behalf of the signed-in user.",
+ "userDisplayName": "Read and update your organization's security actions",
+ "userDescription": "Allows the app to read and update security actions, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and update your organization's security actions",
+ "adminDescription": "Allows the app to read or update security actions, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/securityactions": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/securityactions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/securityactions/{id}/cancelsecurityaction": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "secgraphschema"
+ }
+ },
+ "SecurityAlert.Create.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create security alerts",
+ "adminDescription": "Allows the app to create security alerts in Microsoft 365 Defender, on behalf of the signed-in user.",
+ "userDisplayName": "Create security alerts",
+ "userDescription": "Allows the app to create security alerts on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Create security alerts without a signed-in user",
+ "adminDescription": "Allows the app to create security alerts in Microsoft 365 Defender, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/alerts_v2": "least=DelegatedWork,Application",
+ "/security/alerts_v2/createAlert": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ThreatAPIApprovers"
+ }
+ },
+ "SecurityAlert.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all security alerts",
+ "adminDescription": "Allows the app to read all security alerts, on behalf of the signed-in user.",
+ "userDisplayName": "Read all alerts",
+ "userDescription": "Allows the app to read all security alerts that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all security alerts",
+ "adminDescription": "Allows the app to read all security alerts, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/alerts_v2": "least=DelegatedWork,Application",
+ "/security/alerts_v2/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ThreatAPIApprovers"
+ }
+ },
+ "SecurityAlert.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write to all security alerts",
+ "adminDescription": "Allows the app to read and write to all security alerts, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all alerts",
+ "userDescription": "Allows the app to read and write all alerts that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write to all security alerts",
+ "adminDescription": "Allows the app to read and write to all security alerts, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/alerts_v2": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/alerts_v2/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/alerts_v2/{id}/comments": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/alerts_v2": "",
+ "/security/alerts_v2/createAlert": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ThreatAPIApprovers"
+ }
+ },
+ "SecurityAnalyzedMessage.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read security defender analyzed message data of an organization",
+ "adminDescription": "Allows the app to read security defender analyzed message data of an organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/collaboration/analyzedEmails": "least=Application",
+ "/security/collaboration/analyzedEmails/{id}": "least=Application",
+ "/security/collaboration/verdictStatuses/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mdographapiteam"
+ }
+ },
+ "SecurityAnalyzedMessage.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read, create, and update all security defender analyzed message data of an organization",
+ "adminDescription": "Allows the app to read, create, and update security defender analyzed message data of an organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/collaboration/analyzedEmails/remediate": "least=Application",
+ "/security/collaboration/analyzedEmails/setVerdict": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/collaboration/analyzedEmails": "",
+ "/security/collaboration/analyzedEmails/{id}": "",
+ "/security/collaboration/verdictStatuses/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mdographapiteam"
+ }
+ },
+ "SecurityCopilotWorkspaces.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Security Copilot resources for the signed-in user",
+ "adminDescription": "Allows the app to read all Security Copilot signed-in user's resources on behalf of the signed-in user",
+ "userDisplayName": "Read user's Security Copilot resources",
+ "userDescription": "Allows the app to read Security Copilot resources owned by user on user's behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all Security Copilot resources.",
+ "adminDescription": "Allows the app to read all Security Copilot resources without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/securityCopilot/workspaces": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/plugins": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions/{id}": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions/{id}/prompts": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions/{id}/prompts/{id}": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions/{id}/prompts/{id}/evaluations/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "SecCopDEA"
+ }
+ },
+ "SecurityCopilotWorkspaces.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write individually owned Security Copilot resources of the signed-in user",
+ "adminDescription": "Allows the app to read and write Security Copilot resources owned by the signed-in user on their behalf.",
+ "userDisplayName": "Write user's Security Copilot resources",
+ "userDescription": "Allows the app to write Security Copilot resources owned by user on user's behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Write all Security Copilot resources.",
+ "adminDescription": "Allows the app to write all Security Copilot resources without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH",
+ "POST",
+ "PUT"
+ ],
+ "paths": {
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions/{id}": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions/{id}/prompts": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions/{id}/prompts/{id}": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions/{id}/prompts/{id}/evaluations": "least=DelegatedWork,Application",
+ "/security/securityCopilot/workspaces/{workspaceId}/sessions/{id}/prompts/{id}/evaluations/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "SecCopDEA"
+ }
+ },
+ "SecurityEvents.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your organization's security events",
+ "adminDescription": "Allows the app to read your organization's security events on behalf of the signed-in user.",
+ "userDisplayName": "Read your organization's security events",
+ "userDescription": "Allows the app to read your organization's security events on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read your organization's security events",
+ "adminDescription": "Allows the app to read your organization's security events without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/alerts": "least=DelegatedWork,Application",
+ "/security/alerts/{id}": "least=DelegatedWork,Application",
+ "/security/securescorecontrolprofiles": "least=DelegatedWork,Application",
+ "/security/securescorecontrolprofiles/{id}": "least=DelegatedWork,Application",
+ "/security/securescores": "least=DelegatedWork,Application",
+ "/security/securescores/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "secgraphschema"
+ }
+ },
+ "SecurityEvents.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and update your organization's security events",
+ "adminDescription": "Allows the app to read your organization's security events on behalf of the signed-in user. Also allows the app to update editable properties in security events on behalf of the signed-in user.",
+ "userDisplayName": "Read and update your organization's security events",
+ "userDescription": "Allows the app to read your organization's security events on your behalf. Also allows you to update editable properties in security events.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and update your organization's security events",
+ "adminDescription": "Allows the app to read your organization's security events without a signed-in user. Also allows the app to update editable properties in security events.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/alerts": "",
+ "/security/securescorecontrolprofiles": "",
+ "/security/securescores": "",
+ "/security/securescores/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/alerts/{id}": "least=DelegatedWork,Application",
+ "/security/securescorecontrolprofiles/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/alerts/updatealerts": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "secgraphschema"
+ }
+ },
+ "SecurityIdentitiesAccount.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity security available identity accounts",
+ "adminDescription": "Allows the app to read all the identity security available identity accounts",
+ "userDisplayName": "Read identity security available identity accounts",
+ "userDescription": "Allows the app to read all the identity security available identity accounts on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity security available identity accounts",
+ "adminDescription": "Allows the app to read all the identity security available identity accounts without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/identities/identityAccounts": "least=DelegatedWork,Application",
+ "/security/identities/identityAccounts/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesActions.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and perform identity security available actions",
+ "adminDescription": "Allows the app to read and write identity security available actions on behalf of the signed-in identity.",
+ "userDisplayName": "Read and perform identity security available actions",
+ "userDescription": "Allows the app to read and write identity security available actions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and perform all identity security available actions",
+ "adminDescription": "Allows the app to read and write identity security available actions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/identities/identityAccounts/{id}/invokeActions": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesAutoConfig.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read sensors window auditing configuration",
+ "adminDescription": "Allows the app to read the sensors window auditing configuration of the signed in user",
+ "userDisplayName": "Read sensors window auditing configuration",
+ "userDescription": "Allows the app to read the sensors window auditing configuration on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read sensors window auditing configuration",
+ "adminDescription": "Allows the app to read sensors window auditing configuration without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/identities/settings/autoAuditingConfiguration": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesAutoConfig.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write sensors window auditing configuration",
+ "adminDescription": "Allows the app to read and write the sensors window auditing configuration of the signed in user",
+ "userDisplayName": "Read and write window auditing configuration",
+ "userDescription": "Allows the app to read and write the sensors window auditing configuration on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write sensors window auditing configuration",
+ "adminDescription": "Allows the app to read and write sensors window auditing configuration without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/identities/settings/autoAuditingConfiguration": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesHealth.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity security health issues",
+ "adminDescription": "Allows the app to read all the identity security health issues of signed user",
+ "userDisplayName": "Read identity security health issues",
+ "userDescription": "Allows the app to read all the identity security health issues on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity security health issues",
+ "adminDescription": "Allows the app to read all the identity security health issues without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/identities/healthIssues": "least=DelegatedWork,Application",
+ "/security/identities/healthIssues/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesHealth.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write identity security health issues",
+ "adminDescription": "Allows the app to read and write identity security health issues on behalf of the signed-in user.",
+ "userDisplayName": "Read and write identity security health issues",
+ "userDescription": "Allows the app to read and write identity security health issues on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all identity security health issues",
+ "adminDescription": "Allows the app to read and write identity security health issues without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/security/identities/healthIssues/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/identities/healthIssues": "",
+ "/security/identities/healthIssues/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesMigration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity security sensor migration",
+ "adminDescription": "Allows the app to read all the identity security sensor migration information of signed user",
+ "userDisplayName": "Read identity security sensor migration",
+ "userDescription": "Allows the app to read all the identity security sensor migration information on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity security sensor migration",
+ "adminDescription": "Allows the app to read all the identity security sensor migration information without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/identities/sensorMigration": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesMigration.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write identity security sensor migration",
+ "adminDescription": "Allows the app to read and write identity security sensor migration on behalf of the signed-in user.",
+ "userDisplayName": "Read and write identity security sensor migration",
+ "userDescription": "Allows the app to read and write identity security sensor migration on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all identity security sensor migration",
+ "adminDescription": "Allows the app to read and write identity security sensor migration without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/identities/sensorMigration/migrate": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesSensors.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity security sensors",
+ "adminDescription": "Allows the app to read all the identity security sensors of signed user",
+ "userDisplayName": "Read identity security sensors",
+ "userDescription": "Allows the app to read all the identity security sensors on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity security sensors",
+ "adminDescription": "Allows the app to read all the identity security sensors without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/identities/sensorCandidateActivationConfiguration": "least=DelegatedWork,Application",
+ "/security/identities/sensorCandidates": "least=DelegatedWork,Application",
+ "/security/identities/sensors": "least=DelegatedWork,Application",
+ "/security/identities/sensors/{id}": "least=DelegatedWork,Application",
+ "/security/identities/sensors/getDeploymentPackageUri": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesSensors.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write identity security sensors",
+ "adminDescription": "Allows the app to read and write identity security sensors on behalf of the signed-in user.",
+ "userDisplayName": "Read and write identity security sensors",
+ "userDescription": "Allows the app to read and write identity security sensors on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all identity security sensors",
+ "adminDescription": "Allows the app to read and write identity security sensors without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/security/identities/sensors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/identities/sensorCandidateActivationConfiguration": "least=DelegatedWork,Application",
+ "/security/identities/sensorCandidates/activate": "least=DelegatedWork,Application",
+ "/security/identities/sensors/regenerateDeploymentAccessKey": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/identities/sensorCandidateActivationConfiguration": "",
+ "/security/identities/sensorCandidates": "",
+ "/security/identities/sensors/getDeploymentAccessKey": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesUserActions.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity security available user actions",
+ "adminDescription": "Allows the app to read all the identity security available user actions of signed user",
+ "userDisplayName": "Read identity security available user actions",
+ "userDescription": "Allows the app to read all the identity security available user actions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity security available user actions",
+ "adminDescription": "Allows the app to read all the identity security available user actions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/identities/supportedRemediationActions": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesUserActions.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and perform identity security available user actions",
+ "adminDescription": "Allows the app to read and write identity security available user actions on behalf of the signed-in user.",
+ "userDisplayName": "Read and perform identity security available user actions",
+ "userDescription": "Allows the app to read and write identity security available user actions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and perform all identity security available user actions",
+ "adminDescription": "Allows the app to read and write identity security available user actions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/identities/remediationActions": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIdentitiesUsers.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read identity security available users",
+ "adminDescription": "Allows the app to read all the identity security available users ",
+ "userDisplayName": "Read identity security available users",
+ "userDescription": "Allows the app to read all the identity security available users on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all identity security available users",
+ "adminDescription": "Allows the app to read all the identity security available users without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/identities/users": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "tri-msgraph"
+ }
+ },
+ "SecurityIncident.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read incidents",
+ "adminDescription": "Allows the app to read security incidents, on behalf of the signed-in user.",
+ "userDisplayName": "Read security incidents",
+ "userDescription": "Allows the app to read all security incidents that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all security incidents",
+ "adminDescription": "Allows the app to read all security incidents, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/incidents": "least=DelegatedWork,Application",
+ "/security/incidents/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "SecurityIncident.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write to incidents",
+ "adminDescription": "Allows the app to read and write security incidents, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write to security incidents",
+ "userDescription": "Allows the app to read and write to all security incidents that you have access to.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write to all security incidents",
+ "adminDescription": "Allows the app to read and write to all security incidents, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/incidents": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/incidents/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/incidents/{id}/comments": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "SensitivityLabel.Evaluate": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Evaluate labels user scope.",
+ "adminDescription": "Allows the app to evaluate all sensitivity label.",
+ "userDisplayName": "Evaluate labels user scope",
+ "userDescription": "Evaluate labels tenant scope, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Evaluate labels user scope.",
+ "adminDescription": "Allows the app to evaluate all sensitivity label.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/dataSecurityAndGovernance/sensitivityLabels/computeInheritance": "least=DelegatedWork,Application",
+ "/security/dataSecurityAndGovernance/sensitivityLabels/computeInheritance(labelIds={labelIds},locale={locale},contentFormats={contentFormats})": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/dataSecurityAndGovernance/sensitivityLabels/computeRightsAndInheritance": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "SensitivityLabel.Evaluate.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Evaluate labels tenant scope.",
+ "adminDescription": "Allows the app to evaluate all sensitivity label.",
+ "userDisplayName": "Evaluate labels tenant scope",
+ "userDescription": "Evaluate labels tenant scope, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Evaluate labels tenant scope.",
+ "adminDescription": "Allows the app to evaluate all sensitivity label.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/informationProtection/sensitivityLabels/evaluate": "least=Application,DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/dataSecurityAndGovernance/sensitivityLabels/computeRightsAndInheritance": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/dataSecurityAndGovernance/sensitivityLabels/computeInheritance": "",
+ "/security/dataSecurityAndGovernance/sensitivityLabels/computeInheritance(labelIds={labelIds},locale={locale},contentFormats={contentFormats})": "",
+ "/users/{userId}/security/dataSecurityAndGovernance/sensitivityLabels/computeInheritance": "least=DelegatedWork,Application",
+ "/users/{userId}/security/dataSecurityAndGovernance/sensitivityLabels/computeInheritance(labelIds={labelIds},locale={locale},contentFormats={contentFormats})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "SensitivityLabel.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Get labels user scope.",
+ "adminDescription": "Allows the app to get sensitivity labels.",
+ "userDisplayName": "Get labels user scope",
+ "userDescription": "Get labels on behalf of user.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 1
+ },
+ "Application": {
+ "adminDisplayName": "Get labels application scope.",
+ "adminDescription": "Allows the app to get sensitivity labels.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/dataSecurityAndGovernance/sensitivityLabels": "least=DelegatedWork,Application",
+ "/security/dataSecurityAndGovernance/sensitivityLabels/{id}": "least=DelegatedWork,Application",
+ "/security/dataSecurityAndGovernance/sensitivityLabels/{id}/rights": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "SensitivityLabels.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Get labels app scope.",
+ "adminDescription": "Allows the app to get sensitivity labels.",
+ "userDisplayName": "Get labels on behalf of user",
+ "userDescription": "Get labels on behalf of user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 1
+ },
+ "Application": {
+ "adminDisplayName": "Get labels app scope.",
+ "adminDescription": "Allows the app to get sensitivity labels.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/dataSecurityAndGovernance/sensitivityLabels": "",
+ "/security/dataSecurityAndGovernance/sensitivityLabels/{id}": "",
+ "/security/dataSecurityAndGovernance/sensitivityLabels/{id}/rights": "",
+ "/users/{userId}/security/dataSecurityAndGovernance/sensitivityLabels": "least=DelegatedWork,Application",
+ "/users/{userId}/security/dataSecurityAndGovernance/sensitivityLabels/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "DcsMsGraphSchemaAdmins"
+ }
+ },
+ "ServiceActivity-Exchange.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Exchange service activity",
+ "adminDescription": "Allows the app to read all Exchange service activity, on behalf of the signed-in user.",
+ "userDisplayName": "Read all Exchange service activity",
+ "userDescription": "Allows the app to read all Exchange service activity, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Exchange service activity",
+ "adminDescription": "Allows the app to read all Exchange service activity, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/serviceActivity/getActiveUserMetricsForDesktopMailByReadEmail(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForEmailByModernAuthentication(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForiOSOrAndroidMailByReadEmail(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForOutlookMacByReadEmail(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForOutlookMobileByReadEmail(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForOutlookWebByAppOpening(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForOutlookWebByReadEmail(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getConnectivityMetricsForExchange(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMessageVolumeMetricsForEmailDelivery(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CustomerMonitoringGraph"
+ }
+ },
+ "ServiceActivity-Microsoft365Web.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Microsoft 365 Web service activity",
+ "adminDescription": "Allows the app to read all Microsoft 365 Web service activity, on behalf of the signed-in user.",
+ "userDisplayName": "Read all Microsoft 365 Web service activity",
+ "userDescription": "Allows the app to read all Microsoft 365 Web service activity, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Microsoft 365 Web service activity",
+ "adminDescription": "Allows the app to read all Microsoft 365 Web service activity, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/serviceActivity/getActiveUserMetricsForExcelWeb(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForOneNoteWeb(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForPowerPointWeb(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForVisioWeb(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getActiveUserMetricsForWordWeb(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CustomerMonitoringGraph"
+ }
+ },
+ "ServiceActivity-OneDrive.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all One Drive service activity",
+ "adminDescription": "Allows the app to read all One Drive service activity, on behalf of the signed-in user.",
+ "userDisplayName": "Read all One Drive service activity",
+ "userDescription": "Allows the app to read all One Drive service activity, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all One Drive service activity",
+ "adminDescription": "Allows the app to read all One Drive service activity, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/serviceActivity/getDeviceMetricsForOneDriveForBusinessBydownloadOnlineOnlyFiles(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CustomerMonitoringGraph"
+ }
+ },
+ "ServiceActivity-Teams.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Teams service activity",
+ "adminDescription": "Allows the app to read all Teams service activity, on behalf of the signed-in user.",
+ "userDisplayName": "Read all Teams service activity",
+ "userDescription": "Allows the app to read all Teams service activity, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Teams service activity",
+ "adminDescription": "Allows the app to read all Teams service activity, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/reports/serviceActivity/getAudioStreamQoEMetricsForTeams(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getAudioStreamsOverUdpMetricsForTeams(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getMessageVolumeMetricsForTeamsChat(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getUsageMetricsForTeamsByLaunch(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application",
+ "/reports/serviceActivity/getUsageMetricsForTeamsByMeetingsJoined(inclusiveStartDateTime={value},exclusiveEndDateTime={value},aggregationIntervalInMinutes={value})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "CustomerMonitoringGraph"
+ }
+ },
+ "ServiceHealth.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read service health",
+ "adminDescription": "Allows the app to read your tenant's service health information on behalf of the signed-in admin user. Health information may include service issues or service health overviews.",
+ "userDisplayName": "Read service health",
+ "userDescription": "Allows the app to read your tenant's service health information on your behalf. Health information may include service issues or service health overviews.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read service health",
+ "adminDescription": "Allows the app to read your tenant's service health information on behalf of the signed-in admin user. Health information may include service issues or service health overviews.",
+ "userDisplayName": "Read service health",
+ "userDescription": "Allows the app to read your tenant's service health information on your behalf.Health information may include service issues or service health overviews.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read service health",
+ "adminDescription": "Allows the app to read your tenant's service health information, without a signed-in user. Health information may include service issues or service health overviews.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/serviceannouncement/healthoverviews": "least=DelegatedWork,Application",
+ "/admin/serviceannouncement/healthoverviews/{id}": "least=DelegatedWork,Application",
+ "/admin/serviceannouncement/issues": "least=DelegatedWork,Application",
+ "/admin/serviceannouncement/issues/{id}": "least=DelegatedWork,Application",
+ "/admin/serviceannouncement/issues/{id}/incidentreport": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ospred"
+ }
+ },
+ "ServiceMessage.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read service announcement messages",
+ "adminDescription": "Allows the app to read your tenant's service announcement messages on behalf of the signed-in admin user. Messages may include information about new or changed features.",
+ "userDisplayName": "Read service messages",
+ "userDescription": "Allows the app to read your tenant's service announcement messages on your behalf. Messages may include information about new or changed features.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read service announcement messages",
+ "adminDescription": "Allows the app to read your tenant's service announcement messages on behalf of the signed-in admin user. Messages may include information about new or changed features.",
+ "userDisplayName": "Read service messages",
+ "userDescription": "Allows the app to read your tenant's service announcement messages on your behalf. Messages may include information about new or changed features.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read service messages",
+ "adminDescription": "Allows the app to read your tenant's service announcement messages, without a signed-in user. Messages may include information about new or changed features.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/serviceannouncement/messages": "least=DelegatedWork,Application",
+ "/admin/serviceannouncement/messages/{id}": "least=DelegatedWork,Application",
+ "/admin/serviceannouncement/messages/{id}/attachments": "least=DelegatedWork,Application",
+ "/admin/serviceannouncement/messages/{id}/attachments/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ospred"
+ }
+ },
+ "ServiceMessageViewpoint.Write": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Update user status on service announcement messages",
+ "adminDescription": "Allows the app to update service announcement messages' admin user status on behalf of the signed-in admin user. The message status can be marked as read, archive, or favorite.",
+ "userDisplayName": "Update your user status on service announcement messages",
+ "userDescription": "Allows the app to update service announcement messages' status on your behalf. Your status for messages can be marked as read, archive, or favorite.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Update user status on service announcement messages",
+ "adminDescription": "Allows the app to update service announcement messages' admin user status on behalf of the signed-in admin user. The message status can be marked as read, archive, or favorite.",
+ "userDisplayName": "Update your user status on service announcement messages",
+ "userDescription": "Allows the app to update service announcement messages' status on your behalf. Your status for messages can be marked as read, archive, or favorite.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/serviceannouncement/messages/archive": "least=DelegatedWork",
+ "/admin/serviceannouncement/messages/favorite": "least=DelegatedWork",
+ "/admin/serviceannouncement/messages/markread": "least=DelegatedWork",
+ "/admin/serviceannouncement/messages/markunread": "least=DelegatedWork",
+ "/admin/serviceannouncement/messages/unarchive": "least=DelegatedWork",
+ "/admin/serviceannouncement/messages/unfavorite": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ospred"
+ }
+ },
+ "SharePointCrossTenantMigration.Manage.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read, write and manage SharePoint Cross-Tenant migration settings and tasks",
+ "adminDescription": "Allows the app to read, write and manage your tenant's SharePoint Cross-Tenant migration settings and tasks, on behalf of the signed-in user.",
+ "userDisplayName": "Read, write and manage SharePoint Cross-Tenant migration settings and tasks",
+ "userDescription": "Allows the app to read, write and manage your tenant's SharePoint Cross-Tenant migration settings and tasks, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read, write and manage SharePoint Cross-Tenant migration settings and tasks",
+ "adminDescription": "Allows the app to read, write and manage your tenant's SharePoint Cross-Tenant migration settings and tasks, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/sharepoint/migrations/crossorganizationmigrationapps": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossorganizationmigrationapps/{appId}/unregister": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossOrganizationmigrationtasks": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossOrganizationmigrationtasks/{id}/cancel": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/sharepoint/migrations/crossOrganizationGroupMappings": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossOrganizationUserMappings": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "SharePointCrossTenantMigration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read SharePoint Cross-Tenant migration settings and tasks",
+ "adminDescription": "Allows the app to read your tenant's SharePoint Cross-Tenant migration settings and tasks, on behalf of the signed-in user.",
+ "userDisplayName": "Read SharePoint Cross-Tenant migration settings and tasks",
+ "userDescription": "Allows the app to read your tenant's SharePoint Cross-Tenant migration settings and tasks, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read SharePoint Cross-Tenant migration settings and tasks",
+ "adminDescription": "Allows the app to read your tenant's SharePoint Cross-Tenant migration settings and tasks, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/sharepoint/migrations/crossOrganizationGroupMappings(sourceGroupObjectId={sourceGroupObjectId})": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossorganizationmigrationapps/{appId}": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossOrganizationmigrationtasks": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossOrganizationmigrationtasks/{id}": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossOrganizationmigrationtasks/getbysourcegroupmailnickname(sourcemailnickname={sourcemailnickname})": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossOrganizationmigrationtasks/getbysourcesiteurl(sourcesiteurl={sourcesiteurl})": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossOrganizationmigrationtasks/getbysourceuserprincipalname(sourceprincipalname={sourceprincipalname})": "least=DelegatedWork,Application",
+ "/solutions/sharepoint/migrations/crossOrganizationUserMappings(sourceUserPrincipalName={sourceUserPrincipalName})": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "SharePointTenantSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read SharePoint and OneDrive tenant settings",
+ "adminDescription": "Allows the application to read the tenant-level settings in SharePoint and OneDrive on behalf of the signed-in user.",
+ "userDisplayName": "Read SharePoint and OneDrive tenant settings",
+ "userDescription": "Allows the application to read the tenant-level settings in SharePoint and OneDrive on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read SharePoint and OneDrive tenant settings",
+ "adminDescription": "Allows the application to read the tenant-level settings of SharePoint and OneDrive, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/sharepoint/settings": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "spacgraph"
+ }
+ },
+ "SharePointTenantSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and change SharePoint and OneDrive tenant settings",
+ "adminDescription": "Allows the application to read and change the tenant-level settings of SharePoint and OneDrive on behalf of the signed-in user.",
+ "userDisplayName": "Read and change SharePoint and OneDrive tenant settings",
+ "userDescription": "Allows the application to read and change the tenant-level settings of SharePoint and OneDrive on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and change SharePoint and OneDrive tenant settings",
+ "adminDescription": "Allows the application to read and change the tenant-level settings of SharePoint and OneDrive, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/sharepoint/settings": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "spacgraph"
+ }
+ },
+ "ShortNotes.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read short notes of the signed-in user",
+ "adminDescription": "Allows the app to read all the short notes a sign-in user has access to.",
+ "userDisplayName": "Read your short notes",
+ "userDescription": "Allows the app to read your short notes.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read short notes of the signed-in user",
+ "adminDescription": "Allows the app to read all the short notes a sign-in user has access to.",
+ "userDisplayName": "Read your short notes",
+ "userDescription": "Allows the app to read your short notes.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/notes": "least=DelegatedWork,DelegatedPersonal",
+ "/me/notes/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/notes/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/me/notes/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/notes/{id}/attachments/{id}/$value": "least=DelegatedWork,DelegatedPersonal",
+ "/me/notes/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes/{id}/attachments/{id}/$value": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes/delta": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stickynotes"
+ }
+ },
+ "ShortNotes.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all users' short notes",
+ "adminDescription": "Allows the app to read all the short notes without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/notes": "least=Application",
+ "/users/{id}/notes/{id}": "least=Application",
+ "/users/{id}/notes/{id}/attachments": "least=Application",
+ "/users/{id}/notes/{id}/attachments/{id}": "least=Application",
+ "/users/{id}/notes/{id}/attachments/{id}/$value": "least=Application",
+ "/users/{id}/notes/delta": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stickynotes"
+ }
+ },
+ "ShortNotes.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read, create, edit, and delete short notes of the signed-in user",
+ "adminDescription": "Allows the app to read, create, edit, and delete short notes of a signed-in user.",
+ "userDisplayName": "Read, create, edit, and delete your short notes",
+ "userDescription": "Allows the app to read, create, edit, and delete your short notes.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read, create, edit, and delete short notes of the signed-in user",
+ "adminDescription": "Allows the app to read, create, edit, and delete short notes of a signed-in user.",
+ "userDisplayName": "Read, create, edit, and delete your short notes",
+ "userDescription": "Allows the app to read, create, edit, and delete your short notes.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/notes": "",
+ "/me/notes/{id}": "",
+ "/me/notes/{id}/attachments": "",
+ "/me/notes/{id}/attachments/{id}": "",
+ "/me/notes/{id}/attachments/{id}/$value": "",
+ "/me/notes/delta": "",
+ "/users/{id}/notes": "",
+ "/users/{id}/notes/{id}": "",
+ "/users/{id}/notes/{id}/attachments": "",
+ "/users/{id}/notes/{id}/attachments/{id}": "",
+ "/users/{id}/notes/{id}/attachments/{id}/$value": "",
+ "/users/{id}/notes/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/notes": "least=DelegatedWork,DelegatedPersonal",
+ "/me/notes/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes/{id}/attachments": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/me/notes/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/notes/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/notes/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/notes/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stickynotes"
+ }
+ },
+ "ShortNotes.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read, create, edit, and delete all users' short notes",
+ "adminDescription": "Allows the app to read, create, edit, and delete all the short notes without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/notes": "",
+ "/users/{id}/notes/{id}": "",
+ "/users/{id}/notes/{id}/attachments": "",
+ "/users/{id}/notes/{id}/attachments/{id}": "",
+ "/users/{id}/notes/{id}/attachments/{id}/$value": "",
+ "/users/{id}/notes/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/notes": "least=Application",
+ "/users/{id}/notes/{id}/attachments": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/notes/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/notes/{id}": "least=Application",
+ "/users/{id}/notes/{id}/attachments/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "stickynotes"
+ }
+ },
+ "SignInIdentifier.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read SignInIdentifiers",
+ "adminDescription": "Allows the app to read your organization's sign-in identifiers, on behalf of the signed-in user.",
+ "userDisplayName": "Read all sign-in identifiers",
+ "userDescription": "Allows the app to read your organization's sign-in identifiers, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all sign-in identifiers",
+ "adminDescription": "Allows the app to read your organization's sign-in identifiers, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/signInIdentifiers": "least=DelegatedWork,Application",
+ "/identity/signInIdentifiers/{name}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "SignInIdentifier.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all sign-in identifiers",
+ "adminDescription": "Allows the app to read and write your organization's sign-in identifiers, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all sign-in identifiers",
+ "userDescription": "Allows the app to read and write your organization's sign-in identifiers, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all sign-in identifiers",
+ "adminDescription": "Allows the app to read and write your organization's sign-in identifiers, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/identity/signInIdentifiers": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/signInIdentifiers/{name}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "Sites.Archive.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Archive/Unarchive Site Collections, on behalf of the signed-in user",
+ "adminDescription": "Allow the application to archive/unarchive site collections on behalf of the signed in user.",
+ "userDisplayName": "Archive/Unarchive Site Collections, on behalf of the signed-in user",
+ "userDescription": "Allow the application to archive/unarchive site collections on behalf of the signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Archive/unarchive Site Collections without a signed in user.",
+ "adminDescription": "Allow the application to archive/unarchive site collections without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/archive": "least=DelegatedWork,Application",
+ "/sites/{id}/unarchive": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "spauthsg"
+ }
+ },
+ "Sites.FullControl.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Have full control of all site collections",
+ "adminDescription": "Allows the application to have full control of all site collections on behalf of the signed-in user.",
+ "userDisplayName": "Have full control of all your site collections",
+ "userDescription": "Allow the application to have full control of all site collections on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Have full control of all site collections",
+ "adminDescription": "Allows the application to have full control of all site collections on behalf of the signed-in user.",
+ "userDisplayName": "Have full control of all your site collections",
+ "userDescription": "Allow the application to have full control of all site collections on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Have full control of all site collections",
+ "adminDescription": "Allows the app to have full control of all site collections without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/items/{id}/workbook/names/{id}": "",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "",
+ "/me/drive/root:/{id}:/workbook/names/{id}": "",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": "",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}": "",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}": "",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/columns": "",
+ "/sites/{id}/contenttypes": "",
+ "/sites/{id}/contenttypes/{id}/columns": "",
+ "/sites/{id}/lists/{id}/columns": "",
+ "/sites/{id}/lists/{id}/contenttypes/{id}/columns": "",
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions": "",
+ "/sites/{id}/pageTemplates": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/sites/{id}/columns/{id}": "",
+ "/sites/{id}/contenttypes/{id}": "",
+ "/sites/{id}/contenttypes/{id}/columns/{id}": "",
+ "/sites/{id}/lists/{id}/columns/{id}": "",
+ "/sites/{id}/lists/{id}/contenttypes/{id}": "",
+ "/sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}": "",
+ "/sites/{id}/lists/{id}/items/{id}/permissions/{id}": "",
+ "/sites/{id}/lists/{id}/permissions/{id}": "",
+ "/sites/{id}/pageTemplates/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/archive": "",
+ "/sites/{id}/contenttypes/{id}/associatewithhubsites": "",
+ "/sites/{id}/contenttypes/{id}/copytodefaultcontentlocation": "",
+ "/sites/{id}/contenttypes/addcopyfromcontenttypehub": "",
+ "/sites/{id}/items/{id}/versions/{id}/restoreversion": "",
+ "/sites/{id}/lists/{id}/contenttypes/addcopy": "",
+ "/sites/{id}/lists/{id}/contenttypes/addcopyfromcontenttypehub": "",
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}/restore": "",
+ "/sites/{id}/lists/{id}/items/{id}/permissions": "",
+ "/sites/{id}/lists/{id}/items/{id}/versions/{id}/restoreversion": "",
+ "/sites/{id}/lists/{id}/permissions": "",
+ "/sites/{id}/pages/{id}/saveAsTemplate": "",
+ "/sites/{id}/pages/createFromTemplate": "",
+ "/sites/{id}/unarchive": "",
+ "/sites/id/contenttypes/id/copytodefaultcontentlocation": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}/content": "",
+ "/sites/{id}/contenttypes/{id}/ispublished": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes/getcompatiblehubcontenttypes": "",
+ "/sites/{id}/getapplicablecontenttypesforlist": "",
+ "/sites/{id}/lists/{id}/contenttypes": "",
+ "/sites/{id}/lists/{id}/contenttypes/getcompatiblehubcontenttypes": "",
+ "/sites/{id}/lists/{id}/items/{id}/permissions": "",
+ "/sites/{id}/lists/{id}/operations": "",
+ "/sites/{id}/lists/{id}/operations/{id}": "",
+ "/sites/{id}/lists/{id}/permissions": "",
+ "/sites/{id}/operations": "",
+ "/sites/{id}/operations/{id}": "",
+ "/sites/{id}/permissions": "least=DelegatedWork,Application",
+ "/sites/{id}/searchCustomIndex(q={value})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/contenttypes/{id}/publish": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/sites/{id}/contenttypes/{id}/unpublish": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/permissions": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/sites/{id}/permissions/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/sites/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{drive-id}/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{group-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{group-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{site-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{site-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{user-id}/drive/items/{itemId}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{user-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/extensions": "",
+ "/drives/{id}/items/{id}/extensions/{id}": "",
+ "/sites/{id}/extensions": "",
+ "/sites/{id}/extensions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/sites": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/sharepoint/grounding/fetchResources": "",
+ "/drives/{id}/items/{id}/checkAccess": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/sites/getOperationStatus(operationId='{id}')": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/retentionLabel": "",
+ "/groups/{id}/drive/items/{id}/retentionLabel": "",
+ "/me/drive/items/{id}/retentionLabel": "",
+ "/users/{user-id}/drive/items/{item-id}/retentionLabel": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/bundles/{driveItemId}/archive": "",
+ "/drive/bundles/{driveItemId}/unarchive": "",
+ "/drive/following/{driveItemId}/archive": "",
+ "/drive/following/{driveItemId}/unarchive": "",
+ "/drive/items/{driveItemId}/archive": "",
+ "/drive/items/{driveItemId}/unarchive": "",
+ "/drive/root/archive": "",
+ "/drive/root/unarchive": "",
+ "/drive/special/{driveItemId}/archive": "",
+ "/drive/special/{driveItemId}/unarchive": "",
+ "/drives/{drivesId}/root/archive": "",
+ "/drives/{drivesId}/root/unarchive": "",
+ "/shares/{sharesId}/driveItem/archive": "",
+ "/shares/{sharesId}/driveItem/unarchive": "",
+ "/shares/{sharesId}/root/archive": "",
+ "/shares/{sharesId}/root/unarchive": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Sites.Manage.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create, edit, and delete items and lists in all site collections",
+ "adminDescription": "Allows the application to create or delete document libraries and lists in all site collections on behalf of the signed-in user.",
+ "userDisplayName": "Create, edit, and delete items and lists in all your site collections",
+ "userDescription": "Allow the application to create or delete document libraries and lists in all site collections on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Create, edit, and delete items and lists in all site collections",
+ "adminDescription": "Allows the app to create or delete document libraries and lists in all site collections without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/items/{id}/workbook/names/{id}": "",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "",
+ "/me/drive/root:/{id}:/workbook/names/{id}": "",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": "",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}": "",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}": "",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/columns": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes/{id}/columns": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/columns": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/contenttypes/{id}/columns": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions": "",
+ "/sites/{id}/lists/{id}/items/{id}/permissions": "",
+ "/sites/{id}/lists/{id}/permissions": "",
+ "/sites/{id}/pageTemplates": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/sites/{id}/columns/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes/{id}/columns/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/columns/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/contenttypes/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/permissions/{id}": "",
+ "/sites/{id}/lists/{id}/permissions/{id}": "",
+ "/sites/{id}/pageTemplates/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/contentModels/{id}/applyToDrive": "least=DelegatedWork,Application",
+ "/sites/{id}/contentModels/{id}/removeFromDrive": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes/{id}/associatewithhubsites": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes/{id}/copytodefaultcontentlocation": "",
+ "/sites/{id}/contenttypes/addcopyfromcontenttypehub": "least=DelegatedWork,Application",
+ "/sites/{id}/documentProcessingJobs": "least=DelegatedWork,Application",
+ "/sites/{id}/items/{id}/versions/{id}/restoreversion": "",
+ "/sites/{id}/lists": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/contenttypes/addcopy": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/contenttypes/addcopyfromcontenttypehub": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}/restore": "",
+ "/sites/{id}/lists/{id}/items/{id}/versions/{id}/restoreversion": "",
+ "/sites/{id}/pages/{id}/saveAsTemplate": "",
+ "/sites/{id}/pages/createFromTemplate": "",
+ "/sites/id/contenttypes/id/copytodefaultcontentlocation": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}/content": "",
+ "/sites/{id}/contentModels/{id}": "",
+ "/sites/{id}/contentModels/{modelId}/getAppliedDrives": "",
+ "/sites/{id}/contentModels/getByName": "",
+ "/sites/{id}/contenttypes/getcompatiblehubcontenttypes": "least=DelegatedWork,Application",
+ "/sites/{id}/documentProcessingJobs/{id}": "",
+ "/sites/{id}/getapplicablecontenttypesforlist": "",
+ "/sites/{id}/lists/{id}/contenttypes": "",
+ "/sites/{id}/lists/{id}/contenttypes/getcompatiblehubcontenttypes": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/operations": "",
+ "/sites/{id}/lists/{id}/operations/{id}": "",
+ "/sites/{id}/operations": "",
+ "/sites/{id}/operations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/sites/{id}/lists/{id}/items/{id}": "",
+ "/sites/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{drive-id}/root:/{item-path}/media/reactions": "least=DelegatedWork",
+ "/drives/{id}/items/{id}/media/reactions": "least=DelegatedWork",
+ "/groups/{group-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork",
+ "/groups/{group-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork",
+ "/me/drive/items/{item-id}/media/reactions": "least=DelegatedWork",
+ "/me/drive/root:/{item-path}/media/reactions": "least=DelegatedWork",
+ "/sites/{site-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork",
+ "/sites/{site-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork",
+ "/users/{user-id}/drive/items/{itemId}/media/reactions": "least=DelegatedWork",
+ "/users/{user-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/extensions": "",
+ "/drives/{id}/items/{id}/extensions/{id}": "",
+ "/sites/{id}/extensions": "",
+ "/sites/{id}/extensions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/sharepoint/grounding/fetchResources": "",
+ "/drives/{id}/items/{id}/checkAccess": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/bundles/{driveItemId}/archive": "",
+ "/drive/bundles/{driveItemId}/unarchive": "",
+ "/drive/following/{driveItemId}/archive": "",
+ "/drive/following/{driveItemId}/unarchive": "",
+ "/drive/items/{driveItemId}/archive": "",
+ "/drive/items/{driveItemId}/unarchive": "",
+ "/drive/root/archive": "",
+ "/drive/root/unarchive": "",
+ "/drive/special/{driveItemId}/archive": "",
+ "/drive/special/{driveItemId}/unarchive": "",
+ "/drives/{drivesId}/root/archive": "",
+ "/drives/{drivesId}/root/unarchive": "",
+ "/shares/{sharesId}/driveItem/archive": "",
+ "/shares/{sharesId}/driveItem/unarchive": "",
+ "/shares/{sharesId}/root/archive": "",
+ "/shares/{sharesId}/root/unarchive": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Sites.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read items in all site collections",
+ "adminDescription": "Allows the application to read documents and list items in all site collections on behalf of the signed-in user",
+ "userDisplayName": "Read items in all site collections",
+ "userDescription": "Allow the application to read documents and list items in all site collections on your behalf",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read items in all site collections",
+ "adminDescription": "Allows the application to read documents and list items in all site collections on behalf of the signed-in user",
+ "userDisplayName": "Read items in all site collections",
+ "userDescription": "Allow the application to read documents and list items in all site collections on your behalf",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read items in all site collections ",
+ "adminDescription": "Allows the app to read documents and list items in all site collections without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/items/{id}": "",
+ "/drive/items/{id}/content": "",
+ "/drive/items/{id}/contentStream": "",
+ "/drive/root:/{id}:/content": "",
+ "/drive/root:/{id}:/contentStream": "",
+ "/drive/root/createdbyuser/trendingaround": "least=DelegatedWork,Application",
+ "/drive/root/lastmodifiedbyuser/trendingaround": "least=DelegatedWork,Application",
+ "/drives/{id}": "",
+ "/drives/{id}/activities": "",
+ "/drives/{id}/items/{id}": "",
+ "/drives/{id}/items/{id}/activities": "",
+ "/drives/{id}/items/{id}/analytics": "",
+ "/drives/{id}/items/{id}/analytics/alltime": "",
+ "/drives/{id}/items/{id}/analytics/lastsevendays": "",
+ "/drives/{id}/items/{id}/capabilities": "",
+ "/drives/{id}/items/{id}/children": "",
+ "/drives/{id}/items/{id}/content": "",
+ "/drives/{id}/items/{id}/contentStream": "",
+ "/drives/{id}/items/{id}/extensions": "",
+ "/drives/{id}/items/{id}/extensions/{id}": "",
+ "/drives/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}/content": "",
+ "/drives/{id}/items/{id}/officeActivities": "",
+ "/drives/{id}/items/{id}/permissions": "",
+ "/drives/{id}/items/{id}/permissions/{id}": "",
+ "/drives/{id}/items/{id}/streams": "",
+ "/drives/{id}/items/{id}/streams/{id}": "",
+ "/drives/{id}/items/{id}/streams/{id}/content": "",
+ "/drives/{id}/items/{id}/thumbnails": "",
+ "/drives/{id}/items/{id}/versions": "",
+ "/drives/{id}/items/{id}/versions/{id}": "",
+ "/drives/{id}/items/{id}/versions/{id}/content": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/drives/{id}/root:/{id}": "",
+ "/drives/{id}/root:/{id}:/children": "",
+ "/drives/{id}/root:/{id}:/streams": "",
+ "/drives/{id}/root:/{id}:/streams/{id}": "",
+ "/drives/{id}/root:/{id}:/streams/{id}/content": "",
+ "/drives/{id}/root/delta": "",
+ "/drives/{id}/root/search(q={value})": "",
+ "/groups/{id}/drive": "",
+ "/groups/{id}/drive/items/{id}": "",
+ "/groups/{id}/drive/items/{id}/children": "",
+ "/groups/{id}/drive/items/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/contentStream": "",
+ "/groups/{id}/drive/items/{id}/permissions": "",
+ "/groups/{id}/drive/items/{id}/permissions/{id}": "",
+ "/groups/{id}/drive/items/{id}/streams": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/thumbnails": "",
+ "/groups/{id}/drive/items/{id}/versions": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/groups/{id}/drive/root:/{id}": "",
+ "/groups/{id}/drive/root:/{id}:/streams": "",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/groups/{id}/drive/root/delta": "",
+ "/groups/{id}/drive/root/search(q={value})": "",
+ "/groups/{id}/drives": "",
+ "/groups/{id}/sites/root": "least=DelegatedWork,Application",
+ "/shares/{id}/driveitem/content": "",
+ "/shares/{id}/driveitem/contentStream": "",
+ "/sites": "least=DelegatedWork,Application",
+ "/sites/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}:/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/analytics": "",
+ "/sites/{id}/analytics/alltime": "",
+ "/sites/{id}/analytics/lastsevendays": "",
+ "/sites/{id}/columns": "least=DelegatedWork,Application",
+ "/sites/{id}/columns/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/contentModels/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/contentModels/{id}/getAppliedDrives": "least=DelegatedWork,Application",
+ "/sites/{id}/contentModels/getByName": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes/{id}/columns": "least=DelegatedWork,Application",
+ "/sites/{id}/contenttypes/{id}/columns/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/documentProcessingJobs/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/drive": "",
+ "/sites/{id}/drive/items/{id}": "",
+ "/sites/{id}/drive/items/{id}/capabilities": "",
+ "/sites/{id}/drive/items/{id}/children": "",
+ "/sites/{id}/drive/items/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/contentStream": "",
+ "/sites/{id}/drive/items/{id}/officeActivities": "",
+ "/sites/{id}/drive/items/{id}/permissions": "",
+ "/sites/{id}/drive/items/{id}/permissions/{id}": "",
+ "/sites/{id}/drive/items/{id}/streams": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/thumbnails": "",
+ "/sites/{id}/drive/items/{id}/versions": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/sites/{id}/drive/root:/{id}": "",
+ "/sites/{id}/drive/root:/{id}:/streams": "",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/sites/{id}/drive/root/delta": "",
+ "/sites/{id}/drive/root/search(q={value})": "",
+ "/sites/{id}/drives": "",
+ "/sites/{id}/extensions": "",
+ "/sites/{id}/extensions/{id}": "",
+ "/sites/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/sites/{id}/getapplicablecontenttypesforlist": "least=DelegatedWork,Application",
+ "/sites/{id}/items/{id}/versions": "least=DelegatedWork,Application",
+ "/sites/{id}/items/{id}/versions/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/activities": "",
+ "/sites/{id}/lists/{id}/columns": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/columns/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/contenttypes": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/contenttypes/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/contenttypes/{id}/columns": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/activities": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/alltime": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/lastsevendays": "",
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/driveitem": "",
+ "/sites/{id}/lists/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/sites/{id}/lists/{id}/items/{id}/permissions": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/permissions/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/versions": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/versions/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/delta": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/operations": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/operations/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/permissions": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/permissions/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/migration/migrationJobs/{id}/progressEvents": "least=DelegatedWork,Application",
+ "/sites/{id}/operations": "least=DelegatedWork,Application",
+ "/sites/{id}/operations/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/pages": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns/{id}/webparts": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}/getpositionofwebpart": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/verticalsection": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/verticalsection/webparts": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/verticalsection/webparts/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/canvaslayout/verticalsection/webparts/{id}/getpositionofwebpart": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/getwebpartsbyposition(horizontalsectionid={value},columnid={value},webpartindex={value},isinverticalsection={value})": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/webparts": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/webparts/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/webparts/{id}/getpositionofwebpart": "least=DelegatedWork,Application",
+ "/sites/{id}/pageTemplates": "least=DelegatedWork,Application",
+ "/sites/{id}/pageTemplates/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/searchCustomIndex(q={value})": "least=DelegatedWork,Application",
+ "/sites/{id}/settings": "least=DelegatedWork,Application",
+ "/sites/{id}/sites": "least=DelegatedWork,Application",
+ "/sites/root": "least=DelegatedWork,Application",
+ "/teams/{id}/channels/{id}/filesfolder": "",
+ "/users/{id}/drive": "",
+ "/users/{id}/drive/following": "",
+ "/users/{id}/drive/items/{id}": "",
+ "/users/{id}/drive/items/{id}/children": "",
+ "/users/{id}/drive/items/{id}/content": "",
+ "/users/{id}/drive/items/{id}/contentStream": "",
+ "/users/{id}/drive/items/{id}/permissions": "",
+ "/users/{id}/drive/items/{id}/permissions/{id}": "",
+ "/users/{id}/drive/items/{id}/streams": "",
+ "/users/{id}/drive/items/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/users/{id}/drive/items/{id}/thumbnails": "",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}": "",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions": "",
+ "/users/{id}/drive/items/{id}/versions/{id}": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions/current": "",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names": "least=Application",
+ "/users/{id}/drive/recent": "",
+ "/users/{id}/drive/root": "",
+ "/users/{id}/drive/root:/{id}": "",
+ "/users/{id}/drive/root:/{id}:/content": "",
+ "/users/{id}/drive/root:/{id}:/contentStream": "",
+ "/users/{id}/drive/root:/{id}:/permissions": "",
+ "/users/{id}/drive/root:/{id}:/streams": "",
+ "/users/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/users/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names": "least=Application",
+ "/users/{id}/drive/root/children": "",
+ "/users/{id}/drive/root/delta": "",
+ "/users/{id}/drive/root/search(q={value})": "",
+ "/users/{id}/drive/sharedwithme": "",
+ "/users/{id}/drives": "",
+ "/users/{id}/homesite": "least=DelegatedWork,Application",
+ "/users/{id}/insights/shared": "least=DelegatedWork,Application",
+ "/users/{id}/insights/trending": "least=DelegatedWork,Application",
+ "/users/{id}/insights/trending/{id}/resource": "least=DelegatedWork,Application",
+ "/users/{id}/insights/used": "least=DelegatedWork,Application",
+ "/users/{id}/insights/used/{id}/resource": "least=DelegatedWork,Application",
+ "/users/{id}/trendingaround": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/sites/delta": "least=Application",
+ "/sites/getAllSites": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/drive": "",
+ "/me/drive/following": "",
+ "/me/drive/items/{id}": "",
+ "/me/drive/items/{id}/capabilities": "",
+ "/me/drive/items/{id}/children": "",
+ "/me/drive/items/{id}/content": "",
+ "/me/drive/items/{id}/contentStream": "",
+ "/me/drive/items/{id}/officeActivities": "",
+ "/me/drive/items/{id}/permissions": "",
+ "/me/drive/items/{id}/permissions/{id}": "",
+ "/me/drive/items/{id}/streams": "",
+ "/me/drive/items/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/streams/{id}/content": "",
+ "/me/drive/items/{id}/thumbnails": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}/content": "",
+ "/me/drive/items/{id}/versions": "",
+ "/me/drive/items/{id}/versions/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/content": "",
+ "/me/drive/items/{id}/versions/{id}/streams": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/me/drive/items/{id}/versions/current": "",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names": "",
+ "/me/drive/recent": "",
+ "/me/drive/root": "",
+ "/me/drive/root:/{id}": "",
+ "/me/drive/root:/{id}:/content": "",
+ "/me/drive/root:/{id}:/contentStream": "",
+ "/me/drive/root:/{id}:/permissions": "",
+ "/me/drive/root:/{id}:/streams": "",
+ "/me/drive/root:/{id}:/streams/{id}": "",
+ "/me/drive/root:/{id}:/streams/{id}/content": "",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names": "",
+ "/me/drive/root/children": "",
+ "/me/drive/root/delta": "",
+ "/me/drive/root/search(q={value})": "",
+ "/me/drive/sharedwithme": "",
+ "/me/drives": "",
+ "/me/insights/shared": "least=DelegatedWork",
+ "/me/insights/trending": "least=DelegatedWork",
+ "/me/insights/trending/{id}/resource": "least=DelegatedWork",
+ "/me/insights/used": "least=DelegatedWork",
+ "/me/insights/used/{id}/resource": "least=DelegatedWork",
+ "/me/trendingaround": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/cortexdrivebatch": "",
+ "/drives/{id}/items/{id}/extractsensitivitylabels": "",
+ "/drives/{id}/items/{id}/follow": "",
+ "/drives/{id}/items/{id}/preview": "",
+ "/drives/{id}/querycortexitemsnippetsinbatch": "",
+ "/drives/{id}/root:/{id}/extractsensitivitylabels": "",
+ "/groups/{id}/drive/items/{id}/extractsensitivitylabels": "",
+ "/groups/{id}/drive/items/{id}/follow": "",
+ "/groups/{id}/drive/items/{id}/preview": "",
+ "/groups/{id}/drive/root:/{id}/extractsensitivitylabels": "",
+ "/me/drive/items/{id}/extractsensitivitylabels": "",
+ "/me/drive/items/{id}/follow": "",
+ "/me/drive/items/{id}/preview": "",
+ "/me/drive/items/{id}/unfollow": "",
+ "/me/drive/items/{id}/workbook/names/add": "least=Application",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names/add": "least=Application",
+ "/me/drive/root:/{id}:/workbook/names/add": "least=Application",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names/add": "least=Application",
+ "/me/drive/root:/{id}/extractsensitivitylabels": "",
+ "/search/query": "",
+ "/shares/{id}/driveitem/preview": "",
+ "/sites/{id}/drive/items/{id}/extractsensitivitylabels": "",
+ "/sites/{id}/drive/items/{id}/follow": "",
+ "/sites/{id}/drive/items/{id}/preview": "",
+ "/sites/{id}/drive/root:/{id}/extractsensitivitylabels": "",
+ "/users/{id}/drive/items/{id}/extractsensitivitylabels": "",
+ "/users/{id}/drive/items/{id}/follow": "",
+ "/users/{id}/drive/items/{id}/preview": "",
+ "/users/{id}/drive/items/{id}/unfollow": "",
+ "/users/{id}/drive/items/{id}/workbook/names/add": "least=Application",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names/add": "least=Application",
+ "/users/{id}/drive/root:/{id}:/workbook/names/add": "least=Application",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names/add": "least=Application",
+ "/users/{id}/drive/root:/{id}/extractsensitivitylabels": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/following/{id}": "",
+ "/users/{id}/drive/following/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/drive/special/{id}": "",
+ "/users/{id}/drive/special/{id}/children": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/drive/special/{id}": "",
+ "/me/drive/special/{id}/children": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/copilot/searchNextPage": "",
+ "/me/followedsites": "least=DelegatedWork",
+ "/me/homesite": "least=DelegatedWork",
+ "/users/{id}/followedsites": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/retrieval": "",
+ "/copilot/search": "",
+ "/search/grounding": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/sharepoint/grounding/fetchResources": "",
+ "/drives/{drive-id}/items/{item-id}/checkAccess": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Sites.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Edit or delete items in all site collections",
+ "adminDescription": "Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user.",
+ "userDisplayName": "Edit or delete items in all site collections",
+ "userDescription": "Allow the application to edit or delete documents and list items in all site collections on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Edit or delete items in all site collections",
+ "adminDescription": "Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user.",
+ "userDisplayName": "Edit or delete items in all site collections",
+ "userDescription": "Allow the application to edit or delete documents and list items in all site collections on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write items in all site collections",
+ "adminDescription": "Allows the app to create, read, update, and delete documents and list items in all site collections without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/items/{id}": "",
+ "/drive/items/{id}/content": "",
+ "/drive/items/{id}/contentStream": "",
+ "/drive/root:/{id}:/content": "",
+ "/drive/root:/{id}:/contentStream": "",
+ "/drives/{id}": "",
+ "/drives/{id}/activities": "",
+ "/drives/{id}/items/{id}/activities": "",
+ "/drives/{id}/items/{id}/analytics": "",
+ "/drives/{id}/items/{id}/analytics/alltime": "",
+ "/drives/{id}/items/{id}/analytics/lastsevendays": "",
+ "/drives/{id}/items/{id}/capabilities": "",
+ "/drives/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}": "",
+ "/drives/{id}/items/{id}/media/previewThumbnailsQualitySets/{id}/sprites/{id}/content": "",
+ "/drives/{id}/items/{id}/officeActivities": "",
+ "/drives/{id}/items/{id}/permissions": "",
+ "/drives/{id}/items/{id}/streams": "",
+ "/drives/{id}/items/{id}/streams/{id}": "",
+ "/drives/{id}/items/{id}/streams/{id}/content": "",
+ "/drives/{id}/items/{id}/thumbnails": "",
+ "/drives/{id}/items/{id}/versions": "",
+ "/drives/{id}/items/{id}/versions/{id}": "",
+ "/drives/{id}/items/{id}/versions/{id}/content": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/drives/{id}/root:/{id}": "",
+ "/drives/{id}/root:/{id}:/children": "",
+ "/drives/{id}/root:/{id}:/streams": "",
+ "/drives/{id}/root:/{id}:/streams/{id}": "",
+ "/drives/{id}/root:/{id}:/streams/{id}/content": "",
+ "/drives/{id}/root/delta": "",
+ "/drives/{id}/root/search(q={value})": "",
+ "/groups/{id}/drive": "",
+ "/groups/{id}/drive/items/{id}/permissions": "",
+ "/groups/{id}/drive/items/{id}/streams": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/thumbnails": "",
+ "/groups/{id}/drive/items/{id}/versions": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/groups/{id}/drive/root:/{id}": "",
+ "/groups/{id}/drive/root:/{id}:/streams": "",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/groups/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/groups/{id}/drive/root/delta": "",
+ "/groups/{id}/drive/root/search(q={value})": "",
+ "/groups/{id}/drives": "",
+ "/groups/{id}/sites/root": "",
+ "/shares/{id}": "",
+ "/shares/{id}/driveitem": "",
+ "/shares/{id}/driveitem/content": "",
+ "/shares/{id}/driveitem/contentStream": "",
+ "/sites": "",
+ "/sites/{id}": "",
+ "/sites/{id}:/{id}": "",
+ "/sites/{id}/analytics": "",
+ "/sites/{id}/analytics/alltime": "",
+ "/sites/{id}/analytics/lastsevendays": "",
+ "/sites/{id}/columns": "",
+ "/sites/{id}/columns/{id}": "",
+ "/sites/{id}/contentModels/{id}": "",
+ "/sites/{id}/contentModels/{id}/getAppliedDrives": "",
+ "/sites/{id}/contentModels/getByName": "",
+ "/sites/{id}/contenttypes": "",
+ "/sites/{id}/contenttypes/{id}": "",
+ "/sites/{id}/contenttypes/{id}/columns": "",
+ "/sites/{id}/contenttypes/{id}/columns/{id}": "",
+ "/sites/{id}/documentProcessingJobs/{id}": "",
+ "/sites/{id}/drive": "",
+ "/sites/{id}/drive/items/{id}/capabilities": "",
+ "/sites/{id}/drive/items/{id}/officeActivities": "",
+ "/sites/{id}/drive/items/{id}/permissions": "",
+ "/sites/{id}/drive/items/{id}/streams": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/thumbnails": "",
+ "/sites/{id}/drive/items/{id}/versions": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/sites/{id}/drive/root:/{id}": "",
+ "/sites/{id}/drive/root:/{id}:/streams": "",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/sites/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/sites/{id}/drive/root/delta": "",
+ "/sites/{id}/drive/root/search(q={value})": "",
+ "/sites/{id}/drives": "",
+ "/sites/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/sites/{id}/getapplicablecontenttypesforlist": "",
+ "/sites/{id}/items/{id}/versions": "",
+ "/sites/{id}/items/{id}/versions/{id}": "",
+ "/sites/{id}/lists": "",
+ "/sites/{id}/lists/{id}": "",
+ "/sites/{id}/lists/{id}/activities": "",
+ "/sites/{id}/lists/{id}/columns": "",
+ "/sites/{id}/lists/{id}/columns/{id}": "",
+ "/sites/{id}/lists/{id}/contenttypes": "",
+ "/sites/{id}/lists/{id}/contenttypes/{id}": "",
+ "/sites/{id}/lists/{id}/contenttypes/{id}/columns": "",
+ "/sites/{id}/lists/{id}/contenttypes/{id}/columns/{id}": "",
+ "/sites/{id}/lists/{id}/items/{id}/activities": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/alltime": "",
+ "/sites/{id}/lists/{id}/items/{id}/analytics/lastsevendays": "",
+ "/sites/{id}/lists/{id}/items/{id}/driveitem": "",
+ "/sites/{id}/lists/{id}/items/{id}/getactivitiesbyinterval(startdatetime={value},enddatetime={value},interval={value})": "",
+ "/sites/{id}/lists/{id}/items/{id}/permissions": "",
+ "/sites/{id}/lists/{id}/items/{id}/permissions/{id}": "",
+ "/sites/{id}/lists/{id}/items/{id}/versions": "",
+ "/sites/{id}/lists/{id}/items/{id}/versions/{id}": "",
+ "/sites/{id}/lists/{id}/items/delta": "",
+ "/sites/{id}/lists/{id}/operations": "",
+ "/sites/{id}/lists/{id}/operations/{id}": "",
+ "/sites/{id}/lists/{id}/permissions": "",
+ "/sites/{id}/lists/{id}/permissions/{id}": "",
+ "/sites/{id}/operations": "",
+ "/sites/{id}/operations/{id}": "",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections": "",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}": "",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns": "",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns/{id}": "",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns/{id}/webparts": "",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}": "",
+ "/sites/{id}/pages/{id}/canvaslayout/horizontalsections/{id}/columns/{id}/webparts/{id}/getpositionofwebpart": "",
+ "/sites/{id}/pages/{id}/canvaslayout/verticalsection": "",
+ "/sites/{id}/pages/{id}/canvaslayout/verticalsection/webparts": "",
+ "/sites/{id}/pages/{id}/canvaslayout/verticalsection/webparts/{id}": "",
+ "/sites/{id}/pages/{id}/canvaslayout/verticalsection/webparts/{id}/getpositionofwebpart": "",
+ "/sites/{id}/pages/{id}/getwebpartsbyposition(horizontalsectionid={value},columnid={value},webpartindex={value},isinverticalsection={value})": "",
+ "/sites/{id}/pages/{id}/webparts": "",
+ "/sites/{id}/pages/{id}/webparts/{id}": "",
+ "/sites/{id}/pages/{id}/webparts/{id}/getpositionofwebpart": "",
+ "/sites/{id}/searchCustomIndex(q={value})": "",
+ "/sites/{id}/settings": "",
+ "/sites/{id}/sites": "",
+ "/sites/root": "",
+ "/teams/{id}/channels/{id}/filesfolder": "",
+ "/users/{id}/drive": "",
+ "/users/{id}/drive/following": "",
+ "/users/{id}/drive/items/{id}/permissions": "",
+ "/users/{id}/drive/items/{id}/streams": "",
+ "/users/{id}/drive/items/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/streams/{id}/content": "",
+ "/users/{id}/drive/items/{id}/thumbnails": "",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}": "",
+ "/users/{id}/drive/items/{id}/thumbnails/{id}/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions": "",
+ "/users/{id}/drive/items/{id}/versions/{id}": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/users/{id}/drive/items/{id}/versions/current": "",
+ "/users/{id}/drive/recent": "",
+ "/users/{id}/drive/root": "",
+ "/users/{id}/drive/root:/{id}:/content": "",
+ "/users/{id}/drive/root:/{id}:/contentStream": "",
+ "/users/{id}/drive/root:/{id}:/permissions": "",
+ "/users/{id}/drive/root:/{id}:/streams": "",
+ "/users/{id}/drive/root:/{id}:/streams/{id}": "",
+ "/users/{id}/drive/root:/{id}:/streams/{id}/content": "",
+ "/users/{id}/drive/root/delta": "",
+ "/users/{id}/drive/root/search(q={value})": "",
+ "/users/{id}/drive/sharedwithme": "",
+ "/users/{id}/drives": "",
+ "/users/{id}/insights/shared": "",
+ "/users/{id}/insights/trending": "",
+ "/users/{id}/insights/trending/{id}/resource": "",
+ "/users/{id}/insights/used": "",
+ "/users/{id}/insights/used/{id}/resource": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/sites/delta": "",
+ "/sites/getAllSites": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/drive": "",
+ "/me/drive/following": "",
+ "/me/drive/items/{id}/capabilities": "",
+ "/me/drive/items/{id}/officeActivities": "",
+ "/me/drive/items/{id}/permissions": "",
+ "/me/drive/items/{id}/permissions/{id}": "",
+ "/me/drive/items/{id}/streams": "",
+ "/me/drive/items/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/streams/{id}/content": "",
+ "/me/drive/items/{id}/thumbnails": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}": "",
+ "/me/drive/items/{id}/thumbnails/{id}/{id}/content": "",
+ "/me/drive/items/{id}/versions": "",
+ "/me/drive/items/{id}/versions/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/content": "",
+ "/me/drive/items/{id}/versions/{id}/streams": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}/content": "",
+ "/me/drive/items/{id}/versions/current": "",
+ "/me/drive/recent": "",
+ "/me/drive/root": "",
+ "/me/drive/root:/{id}:/content": "",
+ "/me/drive/root:/{id}:/contentStream": "",
+ "/me/drive/root:/{id}:/permissions": "",
+ "/me/drive/root:/{id}:/streams": "",
+ "/me/drive/root:/{id}:/streams/{id}": "",
+ "/me/drive/root:/{id}:/streams/{id}/content": "",
+ "/me/drive/root/delta": "",
+ "/me/drive/root/search(q={value})": "",
+ "/me/drive/sharedwithme": "",
+ "/me/drive/special/{id}": "",
+ "/me/drive/special/{id}/children": "",
+ "/me/drives": "",
+ "/me/insights/shared": "",
+ "/me/insights/trending": "",
+ "/me/insights/trending/{id}/resource": "",
+ "/me/insights/used": "",
+ "/me/insights/used/{id}/resource": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/root:/{id}:/createuploadsession": "least=Application",
+ "/drives/{id}/cortexdrivebatch": "",
+ "/drives/{id}/items/{id}/assignsensitivitylabel": "",
+ "/drives/{id}/items/{id}/checkin": "",
+ "/drives/{id}/items/{id}/checkout": "",
+ "/drives/{id}/items/{id}/copy": "",
+ "/drives/{id}/items/{id}/createlink": "",
+ "/drives/{id}/items/{id}/createuploadsession": "least=Application",
+ "/drives/{id}/items/{id}/discardCheckout": "",
+ "/drives/{id}/items/{id}/extensions": "",
+ "/drives/{id}/items/{id}/extensions/{id}": "",
+ "/drives/{id}/items/{id}/extractsensitivitylabels": "",
+ "/drives/{id}/items/{id}/follow": "",
+ "/drives/{id}/items/{id}/invite": "",
+ "/drives/{id}/items/{id}/permissions/{id}/revokegrants": "",
+ "/drives/{id}/items/{id}/preview": "",
+ "/drives/{id}/items/{id}/streams/{id}": "",
+ "/drives/{id}/items/{id}/streams/{id}/appendContent": "",
+ "/drives/{id}/items/{id}/versions/{id}/restoreversion": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}": "",
+ "/drives/{id}/items/{id}/versions/{id}/streams/{id}/appendContent": "",
+ "/drives/{id}/querycortexitemsnippetsinbatch": "",
+ "/drives/{id}/root:/{id}/assignsensitivitylabel": "",
+ "/drives/{id}/root:/{id}/extractsensitivitylabels": "",
+ "/groups/{id}/drive/items/{id}/assignsensitivitylabel": "",
+ "/groups/{id}/drive/items/{id}/checkin": "",
+ "/groups/{id}/drive/items/{id}/checkout": "",
+ "/groups/{id}/drive/items/{id}/copy": "",
+ "/groups/{id}/drive/items/{id}/createlink": "",
+ "/groups/{id}/drive/items/{id}/createuploadsession": "least=Application",
+ "/groups/{id}/drive/items/{id}/discardCheckout": "",
+ "/groups/{id}/drive/items/{id}/extractsensitivitylabels": "",
+ "/groups/{id}/drive/items/{id}/follow": "",
+ "/groups/{id}/drive/items/{id}/invite": "",
+ "/groups/{id}/drive/items/{id}/permissions/{id}/revokegrants": "",
+ "/groups/{id}/drive/items/{id}/preview": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/streams/{id}/appendContent": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/restoreversion": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/groups/{id}/drive/items/{id}/versions/{id}/streams/{id}/appendContent": "",
+ "/groups/{id}/drive/root:/{id}/assignsensitivitylabel": "",
+ "/groups/{id}/drive/root:/{id}/extractsensitivitylabels": "",
+ "/me/drive/items/{id}:/{id}:/createuploadsession": "least=Application",
+ "/me/drive/items/{id}/assignsensitivitylabel": "",
+ "/me/drive/items/{id}/checkin": "",
+ "/me/drive/items/{id}/checkout": "",
+ "/me/drive/items/{id}/copy": "",
+ "/me/drive/items/{id}/createlink": "",
+ "/me/drive/items/{id}/createuploadsession": "least=Application",
+ "/me/drive/items/{id}/discardCheckout": "",
+ "/me/drive/items/{id}/extensions": "",
+ "/me/drive/items/{id}/extensions/{id}": "",
+ "/me/drive/items/{id}/extractsensitivitylabels": "",
+ "/me/drive/items/{id}/follow": "",
+ "/me/drive/items/{id}/invite": "",
+ "/me/drive/items/{id}/permissions/{id}/revokegrants": "",
+ "/me/drive/items/{id}/preview": "",
+ "/me/drive/items/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/streams/{id}/appendContent": "",
+ "/me/drive/items/{id}/unfollow": "",
+ "/me/drive/items/{id}/versions/{id}/restoreversion": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/me/drive/items/{id}/versions/{id}/streams/{id}/appendContent": "",
+ "/me/drive/root:/{id}:/createuploadsession": "least=Application",
+ "/me/drive/root:/{id}/assignsensitivitylabel": "",
+ "/me/drive/root:/{id}/extractsensitivitylabels": "",
+ "/shares/{id}/driveitem/preview": "",
+ "/shares/{id}/permission/grant": "",
+ "/sites/{id}/contenttypes/{id}/copytodefaultcontentlocation": "least=DelegatedWork,Application",
+ "/sites/{id}/drive/items/{id}/assignsensitivitylabel": "",
+ "/sites/{id}/drive/items/{id}/checkin": "",
+ "/sites/{id}/drive/items/{id}/checkout": "",
+ "/sites/{id}/drive/items/{id}/copy": "",
+ "/sites/{id}/drive/items/{id}/createlink": "",
+ "/sites/{id}/drive/items/{id}/createuploadsession": "least=Application",
+ "/sites/{id}/drive/items/{id}/discardCheckout": "",
+ "/sites/{id}/drive/items/{id}/extractsensitivitylabels": "",
+ "/sites/{id}/drive/items/{id}/follow": "",
+ "/sites/{id}/drive/items/{id}/invite": "",
+ "/sites/{id}/drive/items/{id}/permissions/{id}/revokegrants": "",
+ "/sites/{id}/drive/items/{id}/preview": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/streams/{id}/appendContent": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/restoreversion": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/sites/{id}/drive/items/{id}/versions/{id}/streams/{id}/appendContent": "",
+ "/sites/{id}/drive/root:/{id}/assignsensitivitylabel": "",
+ "/sites/{id}/drive/root:/{id}/extractsensitivitylabels": "",
+ "/sites/{id}/extensions": "",
+ "/sites/{id}/extensions/{id}": "",
+ "/sites/{id}/items/{id}/versions/{id}/restoreversion": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/createlink": "",
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}/restore": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/driveitem/permissions/{id}/revokegrants": "",
+ "/sites/{id}/lists/{id}/items/{id}/permissions": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/versions/{id}/restoreversion": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/permissions": "least=DelegatedWork,Application",
+ "/sites/{id}/migration/migrationJobs": "least=DelegatedWork,Application",
+ "/sites/{id}/migration/provisionMigrationContainers": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}/publish": "",
+ "/sites/{id}/pages/{id}/saveAsTemplate": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/createFromTemplate": "least=DelegatedWork,Application",
+ "/sites/id/contenttypes/id/copytodefaultcontentlocation": "least=DelegatedWork,Application",
+ "/users/{id}/drive/items/{id}:/{id}:/createuploadsession": "least=Application",
+ "/users/{id}/drive/items/{id}/assignsensitivitylabel": "",
+ "/users/{id}/drive/items/{id}/checkin": "",
+ "/users/{id}/drive/items/{id}/checkout": "",
+ "/users/{id}/drive/items/{id}/copy": "",
+ "/users/{id}/drive/items/{id}/createlink": "",
+ "/users/{id}/drive/items/{id}/createuploadsession": "least=Application",
+ "/users/{id}/drive/items/{id}/discardCheckout": "",
+ "/users/{id}/drive/items/{id}/extractsensitivitylabels": "",
+ "/users/{id}/drive/items/{id}/follow": "",
+ "/users/{id}/drive/items/{id}/invite": "",
+ "/users/{id}/drive/items/{id}/permissions/{id}/revokegrants": "",
+ "/users/{id}/drive/items/{id}/preview": "",
+ "/users/{id}/drive/items/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/streams/{id}/appendContent": "",
+ "/users/{id}/drive/items/{id}/unfollow": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/restoreversion": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}": "",
+ "/users/{id}/drive/items/{id}/versions/{id}/streams/{id}/appendContent": "",
+ "/users/{id}/drive/root:/{id}:/createuploadsession": "least=Application",
+ "/users/{id}/drive/root:/{id}/assignsensitivitylabel": "",
+ "/users/{id}/drive/root:/{id}/extractsensitivitylabels": "",
+ "/users/{id}/followedsites/add": "least=DelegatedWork,Application",
+ "/users/{id}/followedsites/remove": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}": "",
+ "/drives/{id}/items/{id}/extensions": "",
+ "/drives/{id}/items/{id}/extensions/{id}": "",
+ "/drives/{id}/items/{id}/permissions/{id}": "",
+ "/groups/{id}/drive/items/{id}": "",
+ "/groups/{id}/drive/items/{id}/permissions/{id}": "",
+ "/sites/{id}/drive/items/{id}": "",
+ "/sites/{id}/drive/items/{id}/permissions/{id}": "",
+ "/sites/{id}/extensions": "",
+ "/sites/{id}/extensions/{id}": "",
+ "/sites/{id}/lists/{id}/items/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/pages/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/pageTemplates/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/drive/items/{id}": "",
+ "/users/{id}/drive/items/{id}/permissions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}:/{id}:/content": "",
+ "/drives/{id}/items/{id}:/{id}:/contentStream": "",
+ "/groups/{id}/drive/items/{id}:/{id}:/content": "",
+ "/groups/{id}/drive/items/{id}:/{id}:/contentStream": "",
+ "/me/drive/items/{id}:/{id}:/content": "",
+ "/me/drive/items/{id}:/{id}:/contentStream": "",
+ "/me/drive/root:/foldera/fileb.txt:/content": "",
+ "/me/drive/root:/foldera/fileb.txt:/contentStream": "",
+ "/sites/{id}/drive/items/{id}:/{id}:/content": "",
+ "/sites/{id}/drive/items/{id}:/{id}:/contentStream": "",
+ "/users/{id}/drive/items/{id}:/{id}:/content": "",
+ "/users/{id}/drive/items/{id}:/{id}:/contentStream": "",
+ "/users/{id}/drive/root:/foldera/fileb.txt:/content": "",
+ "/users/{id}/drive/root:/foldera/fileb.txt:/contentStream": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/children": "",
+ "/groups/{id}/drive/items/{id}/children": "",
+ "/me/drive/items/{id}/children": "",
+ "/me/drive/root/children": "",
+ "/sites/{id}/drive/items/{id}/children": "",
+ "/sites/{id}/lists/{id}/items": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions": "least=DelegatedWork,Application",
+ "/sites/{id}/pages": "least=DelegatedWork,Application",
+ "/sites/{id}/pageTemplates": "least=DelegatedWork,Application",
+ "/users/{id}/drive/items/{id}/children": "",
+ "/users/{id}/drive/root/children": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/content": "",
+ "/drives/{id}/items/{id}/contentStream": "",
+ "/groups/{id}/drive/items/{id}/content": "",
+ "/groups/{id}/drive/items/{id}/contentStream": "",
+ "/me/drive/items/{id}/content": "",
+ "/me/drive/items/{id}/contentStream": "",
+ "/me/drive/root:/{id}": "least=Application",
+ "/sites/{id}/drive/items/{id}/content": "",
+ "/sites/{id}/drive/items/{id}/contentStream": "",
+ "/users/{id}/drive/items/{id}/content": "",
+ "/users/{id}/drive/items/{id}/contentStream": "",
+ "/users/{id}/drive/root:/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drives/{id}/list/subscriptions/socketio": "",
+ "/drives/{id}/root/subscriptions/socketio": "",
+ "/groups/{id}/drive/root/subscriptions/socketio": "",
+ "/me/drive/root/subscriptions/socketio": "",
+ "/me/followedsites": "",
+ "/sites/{id}/lists/{id}/drive/root/subscriptions/socketio": "",
+ "/users/{id}/drive/root/subscriptions/socketio": "",
+ "/users/{id}/followedsites": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/drive/following/{id}": "",
+ "/me/drive/items/{id}/workbook/names/{id}": "",
+ "/me/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "",
+ "/me/drive/root:/{id}:/workbook/names/{id}": "",
+ "/me/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": "",
+ "/sites/{id}/lists/{id}/items/{id}/permissions/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/permissions/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/migration/migrationJobs/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/drive/following/{id}": "",
+ "/users/{id}/drive/items/{id}/workbook/names/{id}": "",
+ "/users/{id}/drive/items/{id}/workbook/worksheets/{id}/names/{id}": "",
+ "/users/{id}/drive/root:/{id}:/workbook/names/{id}": "",
+ "/users/{id}/drive/root:/{id}:/workbook/worksheets/{id}/names/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/drive/special/{id}": "",
+ "/users/{id}/drive/special/{id}/children": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/lists": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/officeActivities": "",
+ "/me/drive/items/{id}/officeActivities": "least=Application",
+ "/sites/{id}/drive/items/{id}/officeActivities": "least=Application",
+ "/sites/{id}/lists/{id}/items/{id}/fields": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/items/{id}/permissions/{id}": "least=DelegatedWork,Application",
+ "/sites/{id}/lists/{id}/permissions/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/drives/{drive-id}/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/drives/{id}/items/{id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{group-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/groups/{group-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{site-id}/drive/items/{item-id}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/sites/{site-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{user-id}/drive/items/{itemId}/media/reactions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{user-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/drives/{id}/items/{id}/retentionLabel": "",
+ "/groups/{id}/drive/items/{id}/retentionLabel": "",
+ "/me/drive/items/{id}/retentionLabel": "",
+ "/users/{user-id}/drive/items/{item-id}/retentionLabel": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/copilot/sharepoint/grounding/fetchResources": "",
+ "/drives/{drive-id}/items/{item-id}/checkAccess": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/drive/bundles/{driveItemId}/archive": "",
+ "/drive/bundles/{driveItemId}/unarchive": "",
+ "/drive/following/{driveItemId}/archive": "",
+ "/drive/following/{driveItemId}/unarchive": "",
+ "/drive/items/{driveItemId}/archive": "",
+ "/drive/items/{driveItemId}/unarchive": "",
+ "/drive/root/archive": "",
+ "/drive/root/unarchive": "",
+ "/drive/special/{driveItemId}/archive": "",
+ "/drive/special/{driveItemId}/unarchive": "",
+ "/drives/{drivesId}/root/archive": "",
+ "/drives/{drivesId}/root/unarchive": "",
+ "/shares/{sharesId}/driveItem/archive": "",
+ "/shares/{sharesId}/driveItem/unarchive": "",
+ "/shares/{sharesId}/root/archive": "",
+ "/shares/{sharesId}/root/unarchive": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "GraphSPOApprovers"
+ }
+ },
+ "Sites.Selected": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Access selected Sites, on behalf of the signed-in user",
+ "adminDescription": "Allow the application to access a subset of site collections on behalf of the signed-in user. The specific site collections and the permissions granted will be configured in SharePoint Online.",
+ "userDisplayName": "Access selected Sites, on behalf of the signed-in user",
+ "userDescription": "Allow the application to access a subset of site collections on behalf of the signed-in user. The specific site collections and the permissions granted will be configured in SharePoint Online.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Access selected site collections",
+ "adminDescription": "Allow the application to access a subset of site collections without a signed in user. The specific site collections and the permissions granted will be configured in SharePoint Online.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/lists/{id}/items/{id}/documentsetversions/{id}/restore": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "spauthsg"
+ }
+ },
+ "SMTP.Send": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Send emails from mailboxes using SMTP AUTH.",
+ "adminDescription": "Allows the app to be able to send emails from the user's mailbox using the SMTP AUTH client submission protocol.",
+ "userDisplayName": "Access to sending emails from your mailbox.",
+ "userDescription": "Allows the app to send emails on your behalf from your mailbox.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Send emails from mailboxes using SMTP AUTH.",
+ "adminDescription": "Allows the app to be able to send emails from the user's mailbox using the SMTP AUTH client submission protocol.",
+ "userDisplayName": "Access to sending emails from your mailbox.",
+ "userDescription": "Allows the app to send emails on your behalf from your mailbox.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "exospm_sg"
+ }
+ },
+ "SpiffeTrustDomain.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read SPIFFE trust domains and child resources",
+ "adminDescription": "Allows the app to read your organization's SPIFFE trust domains and child resources on behalf of the user.",
+ "userDisplayName": "Read SPIFFE trust domains and child resources",
+ "userDescription": "Allows the app to read your organization's SPIFFE trust domains and child resources on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read SPIFFE trust domains and child resources",
+ "adminDescription": "Allows the app to read your organization's SPIFFE trust domains and child resources without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/spiffeTrustDomains": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/agents": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/agents/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/agents/{id}/selectors": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/agents/{id}/workloads": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/federationRelationships": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/federationRelationships/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}/attestationMethods": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}/attestationMethods/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/rootRotations": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/rootRotations/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloadAuthorizationPolicies": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloadAuthorizationPolicies/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/agents": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/linkedIdentities": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/linkedIdentities/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/selectors": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "wicklow-admins"
+ }
+ },
+ "SpiffeTrustDomain.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write SPIFFE trust domains and child resources",
+ "adminDescription": "Allows the app to read and write your organization's SPIFFE trust domains and child resources on behalf of the user.",
+ "userDisplayName": "Read and write SPIFFE trust domains and child resources",
+ "userDescription": "Allows the app to read and write your organization's SPIFFE trust domains and child resources on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write SPIFFE trust domains and child resources",
+ "adminDescription": "Allows the app to read and write your organization's SPIFFE trust domains and child resources without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/spiffeTrustDomains": "",
+ "/identity/spiffeTrustDomains/{id}": "",
+ "/identity/spiffeTrustDomains/{id}/agents": "",
+ "/identity/spiffeTrustDomains/{id}/agents/{id}": "",
+ "/identity/spiffeTrustDomains/{id}/agents/{id}/selectors": "",
+ "/identity/spiffeTrustDomains/{id}/agents/{id}/workloads": "",
+ "/identity/spiffeTrustDomains/{id}/federationRelationships": "",
+ "/identity/spiffeTrustDomains/{id}/federationRelationships/{id}": "",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities": "",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}": "",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}/attestationMethods": "",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}/attestationMethods/{id}": "",
+ "/identity/spiffeTrustDomains/{id}/rootRotations": "",
+ "/identity/spiffeTrustDomains/{id}/rootRotations/{id}": "",
+ "/identity/spiffeTrustDomains/{id}/workloadAuthorizationPolicies": "",
+ "/identity/spiffeTrustDomains/{id}/workloadAuthorizationPolicies/{id}": "",
+ "/identity/spiffeTrustDomains/{id}/workloads": "",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}": "",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/agents": "",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/linkedIdentities": "",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/linkedIdentities/{id}": "",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/selectors": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/identity/spiffeTrustDomains": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/agents": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/federationRelationships": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}/attestationMethods": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/rootRotations": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloadAuthorizationPolicies": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/agents": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/linkedIdentities": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/identity/spiffeTrustDomains/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/agents/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/federationRelationships/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}/attestationMethods/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloadAuthorizationPolicies/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/linkedIdentities/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/identity/spiffeTrustDomains": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/agents": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/agents/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}/attestationMethods": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/localAuthorities/{id}/attestationMethods/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloadAuthorizationPolicies": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloadAuthorizationPolicies/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/agents": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/linkedIdentities": "least=DelegatedWork,Application",
+ "/identity/spiffeTrustDomains/{id}/workloads/{id}/linkedIdentities/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "wicklow-admins"
+ }
+ },
+ "Storyline.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all Viva Engage storylines",
+ "adminDescription": "Allows the app to modify the Viva Engage storyline and read all storyline properties on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all Viva Engage storylines",
+ "userDescription": "Allows the app to create Viva Engage storyline items and read all storyline properties on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all Viva Engage storylines",
+ "adminDescription": "Allows the app to modify Viva Engage storylines, read all storylines properties, update storyline properties, and delete storyline properties without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/employeeExperience/storyline/microsoft.graph.follow": "least=DelegatedWork,Application",
+ "/users/{id}/employeeExperience/storyline/microsoft.graph.unfollow": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/employeeExperience/storyline": "",
+ "/users/{id}/employeeExperience/storyline/followers": "",
+ "/users/{id}/employeeExperience/storyline/followings": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ve-msgraph-owners"
+ }
+ },
+ "SubjectRightsRequest.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read subject rights requests",
+ "adminDescription": "Allows the app to read subject rights requests on behalf of the signed-in user",
+ "userDisplayName": "Read data subject requests",
+ "userDescription": "Allows the app to read subject rights requests on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/privacy/subjectrightsrequests": "least=DelegatedWork",
+ "/privacy/subjectrightsrequests{subjectrightsrequestid}/getfinalreport": "least=DelegatedWork",
+ "/privacy/subjectrightsrequests/{id}": "least=DelegatedWork",
+ "/privacy/subjectrightsrequests/{id}/getfinalattachment": "least=DelegatedWork",
+ "/privacy/subjectrightsrequests/{id}/notes": "least=DelegatedWork",
+ "/security/subjectrightsrequests": "least=DelegatedWork",
+ "/security/subjectrightsrequests{subjectrightsrequestid}/getfinalreport": "least=DelegatedWork",
+ "/security/subjectrightsrequests/{id}": "least=DelegatedWork",
+ "/security/subjectrightsrequests/{id}/getfinalattachment": "least=DelegatedWork",
+ "/security/subjectrightsrequests/{id}/notes": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "PrivacySolutionAdmin"
+ }
+ },
+ "SubjectRightsRequest.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write subject rights requests",
+ "adminDescription": "Allows the app to read and write subject rights requests on behalf of the signed-in user",
+ "userDisplayName": "Read and write data subject requests",
+ "userDescription": "Allows the app to read and write subject rights requests on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/privacy/subjectrightsrequests": "least=DelegatedWork",
+ "/privacy/subjectrightsrequests/{id}/notes": "least=DelegatedWork",
+ "/security/subjectrightsrequests": "least=DelegatedWork",
+ "/security/subjectrightsrequests/{id}/notes": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/privacy/subjectrightsrequests{subjectrightsrequestid}/getfinalreport": "",
+ "/privacy/subjectrightsrequests/{id}/getfinalattachment": "",
+ "/security/subjectrightsrequests{subjectrightsrequestid}/getfinalreport": "",
+ "/security/subjectrightsrequests/{id}/getfinalattachment": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/privacy/subjectrightsrequests/{id}": "least=DelegatedWork",
+ "/security/subjectrightsrequests/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "PrivacySolutionAdmin"
+ }
+ },
+ "Synchronization.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Azure AD synchronization data",
+ "adminDescription": "Allows the app to read Azure AD synchronization information, on behalf of the signed-in user.",
+ "userDisplayName": "Read all Azure AD synchronization data",
+ "userDescription": "Allows the app to read Azure AD synchronization information, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Azure AD synchronization data. ",
+ "adminDescription": "Allows the application to read Azure AD synchronization information, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/applications/{id}/synchronization/templates": "least=DelegatedWork",
+ "/applications/{id}/synchronization/templates/{id}": "least=DelegatedWork",
+ "/applications/{id}/synchronization/templates/{id}/schema": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/templates": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/templates/{id}": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/templates/{id}/schema": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "SynchronizationGraphPermissionOwners"
+ }
+ },
+ "Synchronization.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all Azure AD synchronization data",
+ "adminDescription": "Allows the app to configure the Azure AD synchronization service, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all Azure AD synchronization data",
+ "userDescription": "Allows the app to configure the Azure AD synchronization service, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all Azure AD synchronization data. ",
+ "adminDescription": "Allows the application to configure the Azure AD synchronization service, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/applications/{id}/synchronization/acquireaccesstoken": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/acquireaccesstoken": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/pause": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/provisionondemand": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/restart": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema/parseexpression": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/start": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/validateconnectivity": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/validatecredentials": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/templates/{id}/schema/parseexpression": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/applications/{id}/synchronization/templates": "least=DelegatedWork",
+ "/applications/{id}/synchronization/templates/{id}/schema/filteroperators": "least=DelegatedWork",
+ "/applications/{id}/synchronization/templates/{id}/schema/functions": "least=DelegatedWork",
+ "/reports/reconciliations/provisioning": "",
+ "/reports/reconciliations/provisioning/{id}": "",
+ "/reports/reconciliations/provisioning/{id}/identities": "",
+ "/reports/reconciliations/provisioning/{id}/identities/{id}": "",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema/filteroperators": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema/functions": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/templates": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/templates/{id}": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/templates/{id}/schema": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/templates/{id}/schema/filteroperators": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/templates/{id}/schema/functions": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/applications/{id}/synchronization/templates/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/applications/{id}/synchronization/templates/{id}/schema": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/schema": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/synchronization/jobs": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/synchronization/jobs/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/synchronization/secrets": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/synchronization/connectivityparameters": "least=DelegatedWork",
+ "/serviceprincipals/{id}/synchronization/jobs/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "SynchronizationGraphPermissionOwners"
+ }
+ },
+ "SynchronizationData-User.Upload": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Upload user data to the identity synchronization service",
+ "adminDescription": "Allows the app to upload bulk user data to the identity synchronization service, on behalf of the signed-in user.",
+ "userDisplayName": "Bulk upload user data to identity synchronization service",
+ "userDescription": "Allows the app to upload bulk user data to the identity synchronization service, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Upload user data to the identity synchronization service",
+ "adminDescription": "Allows the application to upload bulk user data to the identity synchronization service, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/bulkupload": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "syncfabricadmins"
+ }
+ },
+ "SynchronizationData-User.Upload.OwnedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Upload user data to the identity sync service for apps that this application creates or owns",
+ "adminDescription": "Allows the application to upload bulk user data to the identity synchronization service for apps that this application creates or owns, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/serviceprincipals/{id}/synchronization/jobs/{id}/bulkupload": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "syncfabricadmins"
+ }
+ },
+ "Tasks.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's tasks and task lists",
+ "adminDescription": "Allows the app to read the signed-in user's tasks and task lists, including any shared with the user. Doesn't include permission to create, delete, or update anything.",
+ "userDisplayName": "Read your tasks and task lists",
+ "userDescription": "Allows the app to read your tasks and task lists, including any shared with you. Doesn't include permission to create, delete, or update anything.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read user's tasks and task lists",
+ "adminDescription": "Allows the app to read the signed-in user's tasks and task lists, including any shared with the user. Doesn't include permission to create, delete, or update anything.",
+ "userDisplayName": "Read your tasks and task lists",
+ "userDescription": "Allows the app to read your tasks and task lists, including any shared with you. Doesn't include permission to create, delete, or update anything.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/root/createdbyuser/planner/plans": "least=DelegatedWork",
+ "/drive/root/createdbyuser/planner/tasks": "least=DelegatedWork",
+ "/groups/{id}/planner/plans": "least=DelegatedWork",
+ "/groups/{id}/planner/plans_v2": "least=DelegatedWork",
+ "/groups/{id}/planner/plans/delta": "least=DelegatedWork",
+ "/me/planner": "least=DelegatedWork",
+ "/me/planner/all/delta": "least=DelegatedWork",
+ "/me/planner/favoriteplans": "least=DelegatedWork",
+ "/me/planner/myDayTasks": "least=DelegatedWork",
+ "/me/planner/plans": "least=DelegatedWork",
+ "/me/planner/plans_v2": "least=DelegatedWork",
+ "/me/planner/recentplans": "least=DelegatedWork",
+ "/me/planner/tasks": "least=DelegatedWork",
+ "/me/planner/tasks_v2": "least=DelegatedWork",
+ "/me/planner/tasks/delta": "least=DelegatedWork",
+ "/planner/buckets": "least=DelegatedWork",
+ "/planner/buckets/{id}": "least=DelegatedWork",
+ "/planner/buckets/{id}/tasks": "least=DelegatedWork",
+ "/planner/dependencies/{id}": "least=DelegatedWork",
+ "/planner/goals/{id}": "least=DelegatedWork",
+ "/planner/plans": "least=DelegatedWork",
+ "/planner/plans_v2": "least=DelegatedWork",
+ "/planner/plans_v2/{id}": "least=DelegatedWork",
+ "/planner/plans_v2/{id}/buckets": "least=DelegatedWork",
+ "/planner/plans_v2/{id}/contexts": "least=DelegatedWork",
+ "/planner/plans_v2/{id}/customFieldDefinitions": "least=DelegatedWork",
+ "/planner/plans_v2/{id}/dependencies": "least=DelegatedWork",
+ "/planner/plans_v2/{id}/goals": "least=DelegatedWork",
+ "/planner/plans_v2/{id}/historyItems": "least=DelegatedWork",
+ "/planner/plans_v2/{id}/tasks": "least=DelegatedWork",
+ "/planner/plans/{id}": "least=DelegatedWork",
+ "/planner/plans/{id}/buckets": "least=DelegatedWork",
+ "/planner/plans/{id}/buckets/delta": "least=DelegatedWork",
+ "/planner/plans/{id}/dependencies": "least=DelegatedWork",
+ "/planner/plans/{id}/details": "least=DelegatedWork",
+ "/planner/plans/{id}/getUsageRights": "least=DelegatedWork",
+ "/planner/plans/{id}/goals": "least=DelegatedWork",
+ "/planner/plans/{id}/historyItems": "least=DelegatedWork",
+ "/planner/plans/{id}/tasks": "least=DelegatedWork",
+ "/planner/rosters/{id}": "least=DelegatedWork",
+ "/planner/rosters/{id}/members": "least=DelegatedWork",
+ "/planner/rosters/{id}/members/{id}": "least=DelegatedWork",
+ "/planner/rosters/{id}/plans": "least=DelegatedWork",
+ "/planner/rosters/{id}/plans/delta": "least=DelegatedWork",
+ "/planner/tasks": "least=DelegatedWork",
+ "/planner/tasks_v2": "least=DelegatedWork",
+ "/planner/tasks_v2/{id}": "least=DelegatedWork",
+ "/planner/tasks_v2/{id}/checklist": "least=DelegatedWork",
+ "/planner/tasks_v2/{id}/links": "least=DelegatedWork",
+ "/planner/tasks_v2/{id}/userAssignments": "least=DelegatedWork",
+ "/planner/tasks/{id}": "least=DelegatedWork",
+ "/planner/tasks/{id}/assignedtotaskboardformat": "least=DelegatedWork",
+ "/planner/tasks/{id}/buckettaskboardformat": "least=DelegatedWork",
+ "/planner/tasks/{id}/details": "least=DelegatedWork",
+ "/planner/tasks/{id}/messages": "least=DelegatedWork",
+ "/planner/tasks/{id}/progresstaskboardformat": "least=DelegatedWork",
+ "/planner/tasks/delta": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/planner/plans": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/planner/plans_v2": "least=DelegatedWork",
+ "/users/{id}/planner": "least=DelegatedWork",
+ "/users/{id}/planner/all/delta": "least=DelegatedWork",
+ "/users/{id}/planner/favoriteplans": "least=DelegatedWork",
+ "/users/{id}/planner/myDayTasks": "least=DelegatedWork",
+ "/users/{id}/planner/plans": "least=DelegatedWork",
+ "/users/{id}/planner/plans_v2": "least=DelegatedWork",
+ "/users/{id}/planner/recentplans": "least=DelegatedWork",
+ "/users/{id}/planner/rosterplans": "least=DelegatedWork",
+ "/users/{id}/planner/tasks": "least=DelegatedWork",
+ "/users/{id}/planner/tasks_v2": "least=DelegatedWork",
+ "/users/{id}/planner/tasks/delta": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/outlook/taskfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskfolders/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}/taskfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}/taskfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}/taskfolders/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/tasks/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/alltasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}/tasks/{id}/checklistitems/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}/tasks/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/checklistitems": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/checklistitems/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/linkedresources": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/linkedresources/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/delta": "",
+ "/users/{id}/outlook/taskfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskfolders/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}/taskfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}/taskfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}/taskfolders/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/tasks/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/alltasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}/tasks/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/checklistitems": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/linkedresources": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/delta": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/tasks/lists/{id}/tasks/{id}/checklistitems": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/tasks/lists/{id}/tasks/{id}/linkedresources": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/tasks/lists/{id}/tasks/{id}/linkedresources/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/linkedresources": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/linkedresources/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/me/todo/lists/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TodoOnGraph"
+ }
+ },
+ "Tasks.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all users' tasks and tasklist",
+ "adminDescription": "Allows the app to read all users' tasks and task lists in your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/root/createdbyuser/planner/tasks": "least=Application",
+ "/groups/{id}/planner/plans": "least=Application",
+ "/groups/{id}/planner/plans_v2": "least=Application",
+ "/groups/{id}/planner/plans/delta": "least=Application",
+ "/me/planner": "least=Application",
+ "/me/planner/myDayTasks": "least=Application",
+ "/me/planner/tasks": "least=Application",
+ "/me/planner/tasks_v2": "least=Application",
+ "/me/planner/tasks/delta": "least=Application",
+ "/me/tasks/lists/{id}/tasks/{id}/checklistitems/{id}": "least=Application",
+ "/me/todo/lists": "least=Application",
+ "/me/todo/lists/{id}": "least=Application",
+ "/me/todo/lists/{id}/tasks": "least=Application",
+ "/me/todo/lists/{id}/tasks/{id}": "least=Application",
+ "/me/todo/lists/{id}/tasks/{id}/attachments": "least=Application",
+ "/me/todo/lists/{id}/tasks/{id}/attachments/{id}": "least=Application",
+ "/me/todo/lists/{id}/tasks/{id}/checklistitems": "least=Application",
+ "/me/todo/lists/{id}/tasks/{id}/checklistitems/{id}": "least=Application",
+ "/me/todo/lists/{id}/tasks/{id}/linkedresources": "least=Application",
+ "/me/todo/lists/{id}/tasks/{id}/linkedresources/{id}": "least=Application",
+ "/me/todo/lists/{id}/tasks/delta": "",
+ "/me/todo/lists/delta": "least=Application",
+ "/planner/buckets": "least=Application",
+ "/planner/buckets/{id}": "least=Application",
+ "/planner/buckets/{id}/tasks": "least=Application",
+ "/planner/dependencies/{id}": "least=Application",
+ "/planner/goals/{id}": "least=Application",
+ "/planner/plans": "least=Application",
+ "/planner/plans_v2": "least=Application",
+ "/planner/plans_v2/{id}": "least=Application",
+ "/planner/plans_v2/{id}/buckets": "least=Application",
+ "/planner/plans_v2/{id}/contexts": "least=Application",
+ "/planner/plans_v2/{id}/customFieldDefinitions": "least=Application",
+ "/planner/plans_v2/{id}/dependencies": "least=Application",
+ "/planner/plans_v2/{id}/goals": "least=Application",
+ "/planner/plans_v2/{id}/historyItems": "least=Application",
+ "/planner/plans_v2/{id}/tasks": "least=Application",
+ "/planner/plans/{id}": "least=Application",
+ "/planner/plans/{id}/buckets": "least=Application",
+ "/planner/plans/{id}/buckets/delta": "least=Application",
+ "/planner/plans/{id}/dependencies": "least=Application",
+ "/planner/plans/{id}/details": "least=Application",
+ "/planner/plans/{id}/goals": "least=Application",
+ "/planner/plans/{id}/historyItems": "least=Application",
+ "/planner/plans/{id}/tasks": "least=Application",
+ "/planner/rosters/{id}": "least=Application",
+ "/planner/rosters/{id}/members": "least=Application",
+ "/planner/rosters/{id}/members/{id}": "least=Application",
+ "/planner/rosters/{id}/plans": "least=Application",
+ "/planner/rosters/{id}/plans/delta": "least=Application",
+ "/planner/tasks": "least=Application",
+ "/planner/tasks_v2": "least=Application",
+ "/planner/tasks_v2/{id}": "least=Application",
+ "/planner/tasks_v2/{id}/checklist": "least=Application",
+ "/planner/tasks_v2/{id}/links": "least=Application",
+ "/planner/tasks_v2/{id}/userAssignments": "least=Application",
+ "/planner/tasks/{id}": "least=Application",
+ "/planner/tasks/{id}/assignedtotaskboardformat": "least=Application",
+ "/planner/tasks/{id}/buckettaskboardformat": "least=Application",
+ "/planner/tasks/{id}/details": "least=Application",
+ "/planner/tasks/{id}/progresstaskboardformat": "least=Application",
+ "/planner/tasks/delta": "least=Application",
+ "/teams/{id}/channels/{id}/planner/plans": "least=Application",
+ "/teams/{id}/channels/{id}/planner/plans_v2": "least=Application",
+ "/users/{id}/planner": "least=Application",
+ "/users/{id}/planner/myDayTasks": "least=Application",
+ "/users/{id}/planner/rosterplans": "least=Application",
+ "/users/{id}/planner/tasks": "least=Application",
+ "/users/{id}/planner/tasks_v2": "least=Application",
+ "/users/{id}/planner/tasks/delta": "least=Application",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems/{id}": "least=Application",
+ "/users/{id}/todo/lists": "least=Application",
+ "/users/{id}/todo/lists/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/checklistitems": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/linkedresources": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/delta": "least=Application",
+ "/users/{id}/todo/lists/delta": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TodoOnGraph"
+ }
+ },
+ "Tasks.Read.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user and shared tasks",
+ "adminDescription": "Allows the app to read tasks a user has permissions to access, including their own and shared tasks.",
+ "userDisplayName": "Read your and shared tasks",
+ "userDescription": "Allows the app to read tasks you have permissions to access, including your own and shared tasks.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TodoOnGraph"
+ }
+ },
+ "Tasks.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create, read, update, and delete user's tasks and task lists",
+ "adminDescription": "Allows the app to create, read, update, and delete the signed-in user's tasks and task lists, including any shared with the user.",
+ "userDisplayName": "Create, read, update, and delete your tasks and task lists",
+ "userDescription": "Allows the app to create, read, update, and delete your tasks and task lists, including any shared with you.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Create, read, update, and delete user's tasks and task lists",
+ "adminDescription": "Allows the app to create, read, update, and delete the signed-in user's tasks and task lists, including any shared with the user.",
+ "userDisplayName": "Create, read, update, and delete your tasks and task lists",
+ "userDescription": "Allows the app to create, read, update, and delete your tasks and task lists, including any shared with you.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/root/createdbyuser/planner/plans": "",
+ "/drive/root/createdbyuser/planner/tasks": "",
+ "/groups/{id}/planner/plans": "",
+ "/groups/{id}/planner/plans_v2": "",
+ "/me/planner/all/delta": "",
+ "/me/planner/favoriteplans": "",
+ "/me/planner/myDayTasks": "",
+ "/me/planner/plans": "",
+ "/me/planner/plans_v2": "",
+ "/me/planner/recentplans": "",
+ "/me/planner/tasks": "",
+ "/me/planner/tasks_v2": "",
+ "/planner/buckets/{id}/tasks": "",
+ "/planner/copyPlanOperations/{id}": "least=DelegatedWork",
+ "/planner/plans_v2/{id}": "",
+ "/planner/plans_v2/{id}/buckets": "",
+ "/planner/plans_v2/{id}/dependencies": "",
+ "/planner/plans_v2/{id}/goals": "",
+ "/planner/plans_v2/{id}/historyItems": "",
+ "/planner/plans_v2/{id}/tasks": "",
+ "/planner/plans/{id}/buckets": "",
+ "/planner/plans/{id}/dependencies": "",
+ "/planner/plans/{id}/goals": "",
+ "/planner/plans/{id}/historyItems": "",
+ "/planner/plans/{id}/tasks": "",
+ "/planner/rosters/{id}/plans": "",
+ "/planner/tasks_v2/{id}": "",
+ "/teams/{id}/channels/{id}/planner/plans": "",
+ "/teams/{id}/channels/{id}/planner/plans_v2": "",
+ "/users/{id}/planner/all/delta": "",
+ "/users/{id}/planner/favoriteplans": "",
+ "/users/{id}/planner/myDayTasks": "",
+ "/users/{id}/planner/plans": "",
+ "/users/{id}/planner/plans_v2": "",
+ "/users/{id}/planner/recentplans": "",
+ "/users/{id}/planner/rosterplans": "",
+ "/users/{id}/planner/tasks": "",
+ "/users/{id}/planner/tasks_v2": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/outlook/taskfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskfolders/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}/taskfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}/taskfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}/taskfolders/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}/taskfolders/{id}/tasks/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/tasks/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/tasks/{id}/complete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/tasks/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/alltasks/{id}/move": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}/tasks/{id}/move": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/attachments/createuploadsession": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskfolders/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}/taskfolders": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}/taskfolders/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}/taskfolders/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}/taskfolders/{id}/tasks/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/tasks/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/tasks/{id}/complete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/tasks/{id}/permanentDelete": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/alltasks/{id}/move": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/move": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments/createuploadsession": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/outlook/taskfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/taskgroups/{id}/taskfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/taskgroups/{id}/taskfolders/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/planner": "least=DelegatedWork",
+ "/planner/plans/{id}/details": "least=DelegatedWork",
+ "/planner/tasks/{id}/assignedtotaskboardformat": "least=DelegatedWork",
+ "/planner/tasks/{id}/buckettaskboardformat": "least=DelegatedWork",
+ "/planner/tasks/{id}/details": "least=DelegatedWork",
+ "/planner/tasks/{id}/progresstaskboardformat": "least=DelegatedWork",
+ "/users/{id}/planner": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/tasks/alltasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}/tasks/{id}/checklistitems/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/checklistitems/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/linkedresources/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/alltasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/tasks/lists": "least=DelegatedWork,DelegatedPersonal",
+ "/me/tasks/lists/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/checklistitems": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/{id}/tasks/{id}/linkedresources": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}/tasks": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/checklistitems": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/linkedresources": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/tasks/lists/{id}/tasks/{id}/checklistitems": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/me/tasks/lists/{id}/tasks/{id}/linkedresources": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/linkedresources": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/tasks/lists/{id}/tasks/{id}/linkedresources/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/linkedresources/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/tasks/lists/{id}/tasks/delta": "",
+ "/me/tasks/lists/delta": "",
+ "/me/todo/lists/{id}/tasks/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/me/todo/lists/delta": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/tasks/lists/{id}/tasks/delta": "",
+ "/users/{id}/tasks/lists/delta": "",
+ "/users/{id}/todo/lists/{id}/tasks/delta": "",
+ "/users/{id}/todo/lists/delta": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/me/todo/lists/{id}/tasks/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/planner/buckets": "least=DelegatedWork",
+ "/planner/plans": "least=DelegatedWork",
+ "/planner/rosters/{id}/members": "least=DelegatedWork",
+ "/planner/tasks": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/planner/buckets/{id}": "least=DelegatedWork",
+ "/planner/dependencies/{id}": "least=DelegatedWork",
+ "/planner/goals/{id}": "least=DelegatedWork",
+ "/planner/plans/{id}": "least=DelegatedWork",
+ "/planner/tasks/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/planner/copyPlanOperations": "least=DelegatedWork",
+ "/planner/dependencies": "least=DelegatedWork",
+ "/planner/goals/{id}": "least=DelegatedWork",
+ "/planner/plans/{id}/archive": "least=DelegatedWork",
+ "/planner/plans/{id}/extendExpiry": "least=DelegatedWork",
+ "/planner/plans/{id}/unarchive": "least=DelegatedWork",
+ "/planner/rosters": "least=DelegatedWork",
+ "/planner/rosters/{id}/assignSensitivityLabel": "least=DelegatedWork",
+ "/planner/tasks/{id}/messages": "least=DelegatedWork",
+ "/planner/undo": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/planner/rosters/{id}": "least=DelegatedWork",
+ "/planner/rosters/{id}/members/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/planner/tasks/{taskId}/messages/{id}/setReaction": "least=DelegatedWork",
+ "/planner/tasks/{taskId}/messages/{id}/unsetReaction": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/planner/tasks/{id}/messages/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/todo/lists/{id}/tasks": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TodoOnGraph"
+ }
+ },
+ "Tasks.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all users' tasks and tasklists",
+ "adminDescription": "Allows the app to create, read, update and delete all users' tasks and task lists in your organization, without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/drive/root/createdbyuser/planner/tasks": "",
+ "/groups/{id}/planner/plans": "",
+ "/groups/{id}/planner/plans_v2": "",
+ "/me/planner": "",
+ "/me/planner/myDayTasks": "",
+ "/me/planner/tasks": "",
+ "/me/planner/tasks_v2": "",
+ "/me/todo/lists/{id}/tasks/delta": "least=Application",
+ "/me/todo/lists/delta": "",
+ "/planner/buckets/{id}/tasks": "",
+ "/planner/plans_v2/{id}": "",
+ "/planner/plans_v2/{id}/buckets": "",
+ "/planner/plans_v2/{id}/dependencies": "",
+ "/planner/plans_v2/{id}/goals": "",
+ "/planner/plans_v2/{id}/historyItems": "",
+ "/planner/plans_v2/{id}/tasks": "",
+ "/planner/plans/{id}/buckets": "",
+ "/planner/plans/{id}/dependencies": "",
+ "/planner/plans/{id}/goals": "",
+ "/planner/plans/{id}/historyItems": "",
+ "/planner/plans/{id}/tasks": "",
+ "/planner/rosters/{id}/plans": "",
+ "/planner/tasks_v2/{id}": "",
+ "/teams/{id}/channels/{id}/planner/plans": "",
+ "/teams/{id}/channels/{id}/planner/plans_v2": "",
+ "/users/{id}/planner": "",
+ "/users/{id}/planner/myDayTasks": "",
+ "/users/{id}/planner/rosterplans": "",
+ "/users/{id}/planner/tasks": "",
+ "/users/{id}/planner/tasks_v2": "",
+ "/users/{id}/todo/lists/{id}/tasks/delta": "",
+ "/users/{id}/todo/lists/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/planner/buckets/{id}": "least=Application",
+ "/planner/dependencies/{id}": "least=Application",
+ "/planner/goals/{id}": "least=Application",
+ "/planner/plans/{id}": "least=Application",
+ "/planner/tasks/{id}": "least=Application",
+ "/users/{id}/tasks/lists/{id}/tasks/{id}/checklistitems/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/checklistitems/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/linkedresources/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/planner/buckets": "least=Application",
+ "/planner/dependencies": "least=Application",
+ "/planner/goals": "least=Application",
+ "/planner/plans": "least=Application",
+ "/planner/rosters/{id}/members": "least=Application",
+ "/planner/tasks": "least=Application",
+ "/users/{id}/todo/lists": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/checklistitems": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/linkedresources": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/planner/rosters/{id}": "least=Application",
+ "/planner/rosters/{id}/members/{id}": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/planner/plans/{id}/archive": "least=Application",
+ "/planner/plans/{id}/extendExpiry": "least=Application",
+ "/planner/plans/{id}/unarchive": "least=Application",
+ "/planner/rosters": "least=Application",
+ "/planner/rosters/{id}/assignSensitivityLabel": "least=Application",
+ "/planner/undo": "least=Application",
+ "/users/{id}/todo/lists/{id}/tasks/{id}/attachments/createuploadsession": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/planner/plans/{id}/details": "least=Application",
+ "/planner/tasks/{id}/assignedtotaskboardformat": "least=Application",
+ "/planner/tasks/{id}/buckettaskboardformat": "least=Application",
+ "/planner/tasks/{id}/details": "least=Application",
+ "/planner/tasks/{id}/progresstaskboardformat": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/todo/lists/{id}/tasks": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TodoOnGraph"
+ }
+ },
+ "Tasks.ReadWrite.Shared": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user and shared tasks",
+ "adminDescription": "Allows the app to create, read, update, and delete tasks a user has permissions to, including their own and shared tasks.",
+ "userDisplayName": "Read and write to your and shared tasks",
+ "userDescription": "Allows the app to read, update, create, and delete tasks you have permissions to access, including your own and shared tasks.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TodoOnGraph"
+ }
+ },
+ "Team.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create teams",
+ "adminDescription": "Allows the app to create teams on behalf of the signed-in user.",
+ "userDisplayName": "Create teams",
+ "userDescription": "Allows the app to create teams on your behalf. ",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Create teams",
+ "adminDescription": "Allows the app to create teams without a signed-in user. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams": "least=DelegatedWork,Application",
+ "/teams/{id}/clone": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Team.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the names and descriptions of teams",
+ "adminDescription": "Read the names and descriptions of teams, on behalf of the signed-in user.",
+ "userDisplayName": "Read the names and descriptions of teams",
+ "userDescription": "Read the names and descriptions of teams, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Get a list of all teams",
+ "adminDescription": "Get a list of all teams, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/joinedteams": "least=DelegatedWork,Application",
+ "/teams": "least=DelegatedWork,Application",
+ "/teams/{id}": "least=DelegatedWork",
+ "/teamwork/deletedteams": "least=DelegatedWork,Application",
+ "/users/{id}/joinedteams": "least=DelegatedWork,Application",
+ "/users/{id}/teamwork/associatedteams": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamMember.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the members of teams",
+ "adminDescription": "Read the members of teams, on behalf of the signed-in user.",
+ "userDisplayName": "Read the members of teams",
+ "userDescription": "Read the members of teams, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read the members of all teams",
+ "adminDescription": "Read the members of all teams, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/members": "least=DelegatedWork",
+ "/teams/{id}/members/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamMember.Read.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/members/{id}": "",
+ "/teams/{id}/members": "least=Application",
+ "/teams/{id}/members/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamMember.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Add and remove members from teams",
+ "adminDescription": "Add and remove members from teams, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner.",
+ "userDisplayName": "Add and remove members from teams and channels",
+ "userDescription": "Add and remove members from teams, on your behalf. Also allows changing a member's role, for example from owner to non-owner.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Add and remove members from all teams",
+ "adminDescription": "Add and remove members from all teams, without a signed-in user. Also allows changing a team member's role, for example from owner to non-owner.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/members": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/members": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/members/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/members/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/members/add": "",
+ "/teams/{id}/members/remove": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamMember.ReadWriteNonOwnerRole.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Add and remove non-owner members from teams",
+ "adminDescription": "Add and remove non-owner members from teams, on behalf of the signed-in user. Does not allow changing a member's role to or from owner.",
+ "userDisplayName": "Add and remove non-owner members from teams",
+ "userDescription": "Add and remove non-owner members from teams, on your behalf. Does not allow changing a member's role to or from owner.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Add and remove non-owner members from all teams",
+ "adminDescription": "Add and remove non-owner members from all teams, without a signed-in user. Does not allow changing a member's role to or from owner.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/members": "least=DelegatedWork,Application",
+ "/teams/{id}/members/add": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/members/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsActivity.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's teamwork activity feed",
+ "adminDescription": "Allows the app to read the signed-in user's teamwork activity feed.",
+ "userDisplayName": "Read your teamwork activity feed",
+ "userDescription": "Allows the app to read your teamwork activity feed.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsActivity.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all users' teamwork activity feed",
+ "adminDescription": "Allows the app to read all users' teamwork activity feed, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsActivity.Send": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Send a teamwork activity as the user",
+ "adminDescription": "Allows the app to create new notifications in users' teamwork activity feeds on behalf of the signed in user. These notifications may not be discoverable or be held or governed by compliance policies.",
+ "userDisplayName": "Send a teamwork activity",
+ "userDescription": "Allows the app to create new activities in your teamwork activity feed, and send new activities to other users' activity feed, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Send a teamwork activity to any user",
+ "adminDescription": "Allows the app to create new notifications in users' teamwork activity feeds without a signed in user. These notifications may not be discoverable or be held or governed by compliance policies.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/markActivityNotificationChainAsInactionable": "least=DelegatedWork",
+ "/chats/{id}/recallActivityNotificationChainForRecipient": "least=DelegatedWork",
+ "/chats/{id}/sendactivitynotification": "least=DelegatedWork",
+ "/teams/{id}/markActivityNotificationChainAsInactionable": "least=DelegatedWork",
+ "/teams/{id}/recallActivityNotificationChainForRecipient": "least=DelegatedWork",
+ "/teams/{id}/sendactivitynotification": "least=DelegatedWork",
+ "/teamwork/sendactivitynotificationtorecipients": "least=DelegatedWork",
+ "/users/{id}/teamwork/markActivityNotificationChainAsInactionable": "least=DelegatedWork",
+ "/users/{id}/teamwork/recallActivityNotificationChainForRecipient": "least=DelegatedWork",
+ "/users/{id}/teamwork/sendactivitynotification": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/activityNotificationOperations/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsActivity.Send.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/markActivityNotificationChainAsInactionable": "least=Application",
+ "/chats/{id}/recallActivityNotificationChainForRecipient": "least=Application",
+ "/chats/{id}/sendactivitynotification": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsActivity.Send.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/markActivityNotificationChainAsInactionable": "least=Application",
+ "/teams/{id}/recallActivityNotificationChainForRecipient": "least=Application",
+ "/teams/{id}/sendactivitynotification": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsActivity.Send.User": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teamwork/sendactivitynotificationtorecipients": "least=Application",
+ "/users/{id}/teamwork/markActivityNotificationChainAsInactionable": "least=Application",
+ "/users/{id}/teamwork/recallActivityNotificationChainForRecipient": "least=Application",
+ "/users/{id}/teamwork/sendactivitynotification": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsApp.Read.Group": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "TeamsAppInstallation.ManageSelectedForChat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage installation and permission grants of selected Teams apps in chats",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data.",
+ "userDisplayName": "Manage installation and permission grants of selected Teams apps in chats",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ManageSelectedForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage installation and permission grants of selected Teams apps in all chats",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps in any chat, without a signed-in user. Gives the ability to manage permission grants for accessing those specific chats' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/installations": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ManageSelectedForTeam": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage installation and permission grants of selected Teams apps in teams",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data.",
+ "userDisplayName": "Manage installation and permission grants of selected Teams apps in teams",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps": "",
+ "/teams/{id}/channels/{id}/enabledApps/{id}": "",
+ "/teams/{id}/installedapps": "",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps/$ref": "least=DelegatedWork",
+ "/teams/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps/{id}/$ref": "least=DelegatedWork",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ManageSelectedForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage installation and permission grants of selected Teams apps in all teams",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps in any team, without a signed-in user. Gives the ability to manage permission grants for accessing those specific teams' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/installations": "least=Application",
+ "/teams/{id}/channels/{id}/enabledApps": "",
+ "/teams/{id}/channels/{id}/enabledApps/{id}": "",
+ "/teams/{id}/installedapps": "",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps/$ref": "least=Application",
+ "/teams/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps/{id}/$ref": "least=Application",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ManageSelectedForUser": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage installation and permission grants of selected Teams apps in users' personal scope",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall seleected Teams apps in user accounts, on behalf of the signed-in user. Gives the ability to manage permission grants for accessing those specific users' data.",
+ "userDisplayName": "Manage installation and permission grants of selected Teams apps in users' personal scope",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall seleected Teams apps in user accounts, on behalf of the signed-in user. Gives the ability to manage permission grants for accessing those specific users' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/permissiongrants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ManageSelectedForUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage installation and permission grants of selected Teams apps for all user accounts",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps in any user account, without a signed-in user. Gives the ability to manage permission grants for accessing those specific users' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/installations": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/permissiongrants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read installed Teams apps for all installation scopes",
+ "adminDescription": "Allows the app to read the Teams apps that are installed in any scope, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/chats/{id}/installedapps": "",
+ "/chats/{id}/installedapps/{id}": "",
+ "/chats/{id}/permissiongrants": "",
+ "/teams/{id}/channels/{id}/enabledApps": "",
+ "/teams/{id}/channels/{id}/enabledApps/{id}": "",
+ "/teams/{id}/installedapps": "",
+ "/teams/{id}/installedapps/{id}": "",
+ "/teams/{id}/permissiongrants": "",
+ "/users/{id}/teamwork/installedapps": "",
+ "/users/{id}/teamwork/installedapps/{id}": "",
+ "/users/{id}/teamwork/installedapps/{id}/chat": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.Read.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "least=Application",
+ "/chats/{id}/installedapps": "",
+ "/chats/{id}/installedapps/{id}": "",
+ "/chats/{id}/permissiongrants": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.Read.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/teams/{id}/channels/{id}/enabledApps": "least=Application",
+ "/teams/{id}/channels/{id}/enabledApps/{id}": "least=Application",
+ "/teams/{id}/installedapps": "least=Application",
+ "/teams/{id}/installedapps/{id}": "least=Application",
+ "/teams/{id}/permissiongrants": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.Read.User": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/users/{id}/teamwork/installedapps": "",
+ "/users/{id}/teamwork/installedapps/{id}": "",
+ "/users/{id}/teamwork/installedapps/{id}/chat": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadForChat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read installed Teams apps in chats",
+ "adminDescription": "Allows the app to read the Teams apps that are installed in chats the signed-in user can access. Does not give the ability to read application-specific settings.",
+ "userDisplayName": "Read installed Teams apps in chats",
+ "userDescription": "Allows the app to read the Teams apps that are installed in chats that you can access. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": "least=DelegatedWork",
+ "/chats/{id}/installedapps/{id}": "least=DelegatedWork",
+ "/chats/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read installed Teams apps for all chats",
+ "adminDescription": "Allows the app to read the Teams apps that are installed in any chat, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/chats/{id}/installedapps": "least=Application",
+ "/chats/{id}/installedapps/{id}": "least=Application",
+ "/chats/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadForTeam": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read installed Teams apps in teams",
+ "adminDescription": "Allows the app to read the Teams apps that are installed in teams the signed-in user can access. Does not give the ability to read application-specific settings.",
+ "userDisplayName": "Read installed Teams apps in teams",
+ "userDescription": "Allows the app to read the Teams apps that are installed in teams that you can access. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/enabledApps/{id}": "least=DelegatedWork",
+ "/teams/{id}/installedapps": "least=DelegatedWork",
+ "/teams/{id}/installedapps/{id}": "",
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read installed Teams apps for all teams",
+ "adminDescription": "Allows the app to read the Teams apps that are installed in any team, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/teams/{id}/channels/{id}/enabledApps": "",
+ "/teams/{id}/channels/{id}/enabledApps/{id}": "",
+ "/teams/{id}/installedapps": "",
+ "/teams/{id}/installedapps/{id}": "",
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadForUser": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's installed Teams apps",
+ "adminDescription": "Allows the app to read the Teams apps that are installed for the signed-in user. Does not give the ability to read application-specific settings.",
+ "userDisplayName": "Read your installed Teams apps",
+ "userDescription": "Allows the app to read the Teams apps that are installed for you. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps/{id}": "",
+ "/teams/{id}/installedapps/{id}": "",
+ "/users/{id}/teamwork/installedapps": "least=DelegatedWork",
+ "/users/{id}/teamwork/installedapps/{id}": "least=DelegatedWork",
+ "/users/{id}/teamwork/installedapps/{id}/chat": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadForUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read installed Teams apps for all users",
+ "adminDescription": "Allows the app to read the Teams apps that are installed for any user, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/users/{id}/teamwork/installedapps": "least=Application",
+ "/users/{id}/teamwork/installedapps/{id}": "least=Application",
+ "/users/{id}/teamwork/installedapps/{id}/chat": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadSelectedForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read selected installed Teams apps in all chats",
+ "adminDescription": "Allows the app to read the selected Teams apps that are installed in any chat, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/installations": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadSelectedForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read selected installed Teams apps in all teams",
+ "adminDescription": "Allows the app to read the selected Teams apps that are installed in any team, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/installations": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadSelectedForUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read selected installed Teams apps for all users",
+ "adminDescription": "Allows an app to read, install, upgrade, and uninstall selected apps to any user, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/installations": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentForChat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage installed Teams apps in chats",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data.",
+ "userDisplayName": "Manage installation and permission grants of Teams apps in chats",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage installation and permission grants of Teams apps for all chats",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in any chat, without a signed-in user. Gives the ability to manage permission grants for accessing those specific chats' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentForTeam": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage installed Teams apps in teams",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data.",
+ "userDisplayName": "Manage installation and permission grants of Teams apps in teams",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps": "",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage installation and permission grants of Teams apps for all teams",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in any team, without a signed-in user. Gives the ability to manage permission grants for accessing those specific teams' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": "",
+ "/teams/87654321-0abc-zqf0-321456789q/installedapps": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentForUser": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage installation and permission grants of Teams apps in users' personal scope",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in user accounts, on behalf of the signed-in user. Gives the ability to manage permission grants for accessing those specific users' data.",
+ "userDisplayName": "Manage installation and permission grants of Teams apps on your user account",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps for your account, on your behalf. Gives the ability to manage permission grants for accessing your data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/permissiongrants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentForUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage installation and permission grants of Teams apps in all user accounts",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in any user account, without a signed-in user. Gives the ability to manage permission grants for accessing those specific users' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/users/{id}/permissiongrants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentSelfForChat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the Teams app to manage itself and its permission grants in chats",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access, and manage its permission grants for accessing those specific chats' data.",
+ "userDisplayName": "Allow the Teams app to manage itself and its permission grants in chats",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access, and manage its permission grants for accessing those specific chats' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentSelfForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the Teams app to manage itself and its permission grants for all chats",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself for any chat, without a signed-in user, and manage its permission grants for accessing those specific chats' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentSelfForTeam": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the Teams app to manage itself and its permission grants in teams",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in teams the signed-in user can access, and manage its permission grants for accessing those specific teams' data.",
+ "userDisplayName": "Allow the Teams app to manage itself and its permission grants in teams",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in teams the signed-in user can access, and manage its permission grants for accessing those specific teams' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": "",
+ "/teams/87654321-0abc-zqf0-321456789q/installedapps": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the Teams app to manage itself and its permission grants for all teams",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself for any team, without a signed-in user, and manage its permission grants for accessing those specific teams' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": "",
+ "/teams/87654321-0abc-zqf0-321456789q/installedapps": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentSelfForUser": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the Teams app to manage itself and its permission grants in user accounts",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in user accounts, and manage its permission grants for accessing those specific users' data, on behalf of the signed-in user.",
+ "userDisplayName": "Allow the Teams app to manage itself and its permission grants on your user account",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in your account, and manage its permission grants for accessing your data, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/permissiongrants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteAndConsentSelfForUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the Teams app to manage itself and its permission grants in all user accounts",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself for any user account, without a signed-in user, and manage its permission grants for accessing those specific users' data.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/permissiongrants": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteForChat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage installed Teams apps in chats",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Does not give the ability to read application-specific settings.",
+ "userDisplayName": "Manage installed Teams apps in chats",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in chats you can access. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage Teams apps for all chats",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in any chat, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/chats/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteForTeam": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage installed Teams apps in teams",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings.",
+ "userDisplayName": "Manage installed Teams apps in teams",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in teams you can access. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps": "",
+ "/teams/{id}/channels/{id}/enabledApps/{id}": "",
+ "/teams/{id}/installedapps": "",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps/$ref": "",
+ "/teams/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps/{id}/$ref": "",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": "",
+ "/teams/87654321-0abc-zqf0-321456789q/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage Teams apps for all teams",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps in any team, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps": "",
+ "/teams/{id}/channels/{id}/enabledApps/{id}": "",
+ "/teams/{id}/installedapps": "",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps/$ref": "",
+ "/teams/{id}/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/enabledApps/{id}/$ref": "",
+ "/teams/{id}/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": "",
+ "/teams/87654321-0abc-zqf0-321456789q/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteForUser": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage user's installed Teams apps",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps installed for the signed-in user. Does not give the ability to read application-specific settings.",
+ "userDisplayName": "Manage your installed Teams apps",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps installed for you. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/chat": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteForUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage Teams apps for all users",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall Teams apps for any user, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appCatalogs/teamsApps/{id}/installations": "",
+ "/users/{id}/teamwork/installedapps/{id}/chat": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelectedForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage selected installed Teams apps in all chats",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps in any chat, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/installations": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelectedForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage selected installed Teams apps in all teams",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps in any team, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/installations": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelectedForUser": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage selected Teams apps installed for a user",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps installed for the signed in user. Does not give the ability to read application-specific settings.",
+ "userDisplayName": "Manage selected Teams apps installed for a user",
+ "userDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps installed for the signed in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/chat": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelectedForUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage selected Teams apps installed for all users",
+ "adminDescription": "Allows the app to read, install, upgrade, and uninstall selected Teams apps for any user, without a signed-in user. Does not give the ability to read application-specific settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/chat": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/appcatalogs/teamsapps/{id}/appdefinitions/{id}/installations": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelfForChat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the Teams app to manage itself in chats",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access.",
+ "userDisplayName": "Allow the Teams app to manage itself in chats",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in chats you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelfForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the Teams app to manage itself for all chats",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself for any chat, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/installedapps/{id}/upgrade": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelfForTeam": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the app to manage itself in teams",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself to teams the signed-in user can access.",
+ "userDisplayName": "Allow the Teams app to manage itself in teams",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself to teams you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": "least=DelegatedWork",
+ "/teams/87654321-0abc-zqf0-321456789q/installedapps": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelfForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the Teams app to manage itself for all teams",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself in any team, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/installedapps/{id}/upgrade": "least=Application",
+ "/teams/87654321-0abc-zqf0-321456789q/installedapps": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/permissiongrants": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelfForUser": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the Teams app to manage itself for a user",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself for the signed-in user.",
+ "userDisplayName": "Allow the Teams app to manage itself for you",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself for you.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/chat": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsAppInstallation.ReadWriteSelfForUser.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the app to manage itself for all users",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall itself to any user, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/chat": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/installedapps/{id}/upgrade": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read teams' settings",
+ "adminDescription": "Read all teams' settings, on behalf of the signed-in user.",
+ "userDisplayName": "Read teams' settings",
+ "userDescription": "Read all teams' settings, on your behalf.",
+ "requiresAdminConsent": true
+ },
+ "Application": {
+ "adminDisplayName": "Read all teams' settings",
+ "adminDescription": "Read all team's settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/joinedteams": "",
+ "/teams": "",
+ "/teams/{id}": "",
+ "/users/{id}/joinedteams": "",
+ "/users/{id}/teamwork/associatedteams": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamSettings.Read.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and change teams' settings",
+ "adminDescription": "Read and change all teams' settings, on behalf of the signed-in user.",
+ "userDisplayName": "Read and change teams' settings",
+ "userDescription": "Read and change all teams' settings, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and change all teams' settings",
+ "adminDescription": "Read and change all teams' settings, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/joinedteams": "",
+ "/teams": "",
+ "/users/{id}/joinedteams": "",
+ "/users/{id}/teamwork/associatedteams": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/archive": "least=DelegatedWork",
+ "/teams/{id}/unarchive": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamSettings.ReadWrite.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/archive": "least=Application",
+ "/teams/{id}/unarchive": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsPolicyUserAssign.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and Write Teams policy user assignment and unassigment for all policy types.",
+ "adminDescription": "Allow the app to read or write/update the policy assignment and unassigment for Teams users for all policy type categories.",
+ "userDisplayName": "Read and Write Teams policy user assignment and unassigment for all policy types.",
+ "userDescription": "Allow the app to read or write/update the policy assignment and unassigment for Teams users for all policy type categories.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and Write Teams policy user assignment and unassigment for all policy types.",
+ "adminDescription": "Allow the app to read or write/update the policy assignment and unassigment for Teams users for all policy type categories.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/teams/policy/userAssignments/assign": "least=DelegatedWork,Application",
+ "/admin/teams/policy/userAssignments/unassign": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/teams/policy/getPolicyId": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IC3AdminGatewayEngg"
+ }
+ },
+ "TeamsResourceAccount.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Teams resource accounts",
+ "adminDescription": "Allows the app to read your tenant's resource accounts on behalf of the signed-in admin user.",
+ "userDisplayName": "Read Teams resource accounts",
+ "userDescription": "Allows the app to read your tenant's resource accounts on behalf of the signed-in admin user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Teams resource accounts",
+ "adminDescription": "Allows the app to read your tenant's resource accounts without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/teams/resourceAccounts": "least=DelegatedWork,Application",
+ "/admin/teams/resourceAccounts/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IC3_Agent_Provisioning_Approvers"
+ }
+ },
+ "TeamsTab.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create tabs in Microsoft Teams.",
+ "adminDescription": "Allows the app to create tabs in any team in Microsoft Teams, on behalf of the signed-in user. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs.",
+ "userDisplayName": "Create tabs in Microsoft Teams.",
+ "userDescription": "Allows the app to create tabs in any team in Microsoft Teams, on your behalf. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Create tabs in Microsoft Teams.",
+ "adminDescription": "Allows the app to create tabs in any team in Microsoft Teams, without a signed-in user. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/tabs": "least=DelegatedWork,Application",
+ "/teams/{id}/channels/{id}/tabs": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.Create.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/tabs": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.Create.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.Delete.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/chats/{id}/tabs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.Delete.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read tabs in Microsoft Teams.",
+ "adminDescription": "Read the names and settings of tabs inside any team in Microsoft Teams, on behalf of the signed-in user. This does not give access to the content inside the tabs.",
+ "userDisplayName": "Read tabs in Microsoft Teams.",
+ "userDescription": "Read the names and settings of tabs inside any team in Microsoft Teams, on your behalf. This does not give access to the content inside the tabs.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read tabs in Microsoft Teams.",
+ "adminDescription": "Read the names and settings of tabs inside any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs. ",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/tabs": "least=DelegatedWork,Application",
+ "/chats/{id}/tabs/{id}": "least=DelegatedWork,Application",
+ "/teams/{id}/channels/{id}/tabs": "least=DelegatedWork",
+ "/teams/{id}/channels/{id}/tabs/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.Read.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/tabs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.Read.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs": "least=Application",
+ "/teams/{id}/channels/{id}/tabs/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write tabs in Microsoft Teams.",
+ "adminDescription": "Read and write tabs in any team in Microsoft Teams, on behalf of the signed-in user. This does not give access to the content inside the tabs.",
+ "userDisplayName": "Read and write tabs in Microsoft Teams.",
+ "userDescription": "Read and write tabs in any team in Microsoft Teams, on your behalf. This does not give access to the content inside the tabs.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write tabs in Microsoft Teams.",
+ "adminDescription": "Read and write tabs in any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/tabs": "",
+ "/teams/{id}/channels/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}/tabs/{id}": "",
+ "/teams/{id}/channels/{id}/tabs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWrite.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}/tabs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWrite.Group": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWriteForChat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the Teams app to manage all tabs in chats",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs in chats the signed-in user can access.",
+ "userDisplayName": "Allow the Teams app to manage all tabs in chats",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs in chats you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "requiresAdminConsent": true
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/tabs/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}/tabs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWriteForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the Teams app to manage all tabs for all chats",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs for any chat, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/chats/{id}/tabs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWriteForTeam": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the Teams app to manage all tabs in teams",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs to teams the signed-in user can access.",
+ "userDisplayName": "Allow the app to manage all tabs in teams",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs to teams you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWriteForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the Teams app to manage all tabs for all teams",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall all tabs in any team, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWriteSelfForChat": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the Teams app to manage only its own tabs in chats",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs in chats the signed-in user can access.",
+ "userDisplayName": "Allow the Teams app to manage only its own tabs in chats",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs in chats you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}/tabs/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWriteSelfForChat.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the Teams app to manage only its own tabs for all chats",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs for any chat, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}/tabs/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWriteSelfForTeam": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Allow the Teams app to manage only its own tabs in teams",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs to teams the signed-in user can access.",
+ "userDisplayName": "Allow the Teams app to manage only its own tabs in teams",
+ "userDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs to teams you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTab.ReadWriteSelfForTeam.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Allow the Teams app to manage only its own tabs for all teams",
+ "adminDescription": "Allows a Teams app to read, install, upgrade, and uninstall its own tabs in any team, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/channels/{id}/tabs/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamsTelephoneNumber.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Tenant-Acquired Telephone Number Details",
+ "adminDescription": "Allows the app to read your tenant's acquired telephone number details on behalf of the signed-in admin user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.",
+ "userDisplayName": "Read Tenant-Acquired Telephone Number Details",
+ "userDescription": "Allows the app to read your tenant's acquired telephone number details on behalf of the signed-in admin user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Tenant-Acquired Telephone Number Details",
+ "adminDescription": "Allows the app to read your tenant's acquired telephone number details, without a signed-in user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/teams/telephoneNumberManagement/numberAssignments": "least=DelegatedWork,Application",
+ "/admin/teams/telephoneNumberManagement/numberAssignments/{id}": "least=DelegatedWork,Application",
+ "/admin/teams/telephoneNumberManagement/operations/{operationId}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TNM Devs"
+ }
+ },
+ "TeamsTelephoneNumber.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and Modify Tenant-Acquired Telephone Number Details",
+ "adminDescription": "Allows the app to read and modify your tenant's acquired telephone number details on behalf of the signed-in admin user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.",
+ "userDisplayName": "Read and Modify Tenant-Acquired Telephone Number Details",
+ "userDescription": "Allows the app to read and modify your tenant's acquired telephone number details on behalf of the signed-in admin user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and Modify Tenant-Acquired Telephone Number Details",
+ "adminDescription": "Allows the app to read your tenant's acquired telephone number details, without a signed-in user. Acquired telephone numbers may include attributes related to assigned object, emergency location, network site, etc.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/teams/telephoneNumberManagement/numberAssignments": "",
+ "/admin/teams/telephoneNumberManagement/numberAssignments/{id}": "",
+ "/admin/teams/telephoneNumberManagement/operations/{operationId}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/teams/telephoneNumberManagement/numberAssignments/assignNumber": "least=DelegatedWork,Application",
+ "/admin/teams/telephoneNumberManagement/numberAssignments/unassignNumber": "least=DelegatedWork,Application",
+ "/admin/teams/telephoneNumberManagement/numberAssignments/updateNumber": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TNM Devs"
+ }
+ },
+ "TeamsUserConfiguration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Teams user configurations",
+ "adminDescription": "Allows the app to read your tenant's user configurations on behalf of the signed-in admin user. User configuration may include attributes related to user, such as telephone number, assigned policies, etc.",
+ "userDisplayName": "Read Teams user configurations",
+ "userDescription": "Allows the app to read your tenant's user configurations on behalf of the signed-in admin user. User configuration may include attributes related to user, such as telephone number, assigned policies, etc.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Teams user configurations",
+ "adminDescription": "Allows the app to read your tenant's user configurations, without a signed-in user. User configuration may include attributes related to user, such as telephone number, assigned policies, etc.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/teams/userConfigurations": "least=DelegatedWork,Application",
+ "/admin/teams/userConfigurations/{id}": "least=DelegatedWork,Application",
+ "/admin/teams/userConfigurations/{id}/user": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IC3AdminGatewayEngg"
+ }
+ },
+ "TeamTemplates.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read available Teams templates",
+ "adminDescription": "Allows the app to read the available Teams templates, on behalf of the signed-in user.",
+ "userDisplayName": "Read available Teams templates",
+ "userDescription": "Read available Teams templates, on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/teamtemplates": "least=DelegatedWork",
+ "/teamwork/teamtemplates/{id}/definitions/{id}": "least=DelegatedWork",
+ "/teamwork/teamtemplates/{id}/definitions/{id}/teamdefinition": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "msteamttvxsg"
+ }
+ },
+ "TeamTemplates.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all available Teams Templates",
+ "adminDescription": "Allows the app to read all available Teams Templates, without a signed-user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/teamtemplates": "least=Application",
+ "/teamwork/teamtemplates/{id}/definitions/{id}": "least=Application",
+ "/teamwork/teamtemplates/{id}/definitions/{id}/teamdefinition": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "msteamttvxsg"
+ }
+ },
+ "Teamwork.Migrate.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedPersonal": {
+ "adminDisplayName": "",
+ "adminDescription": "",
+ "userDisplayName": "",
+ "userDescription": "",
+ "requiresAdminConsent": false
+ },
+ "Application": {
+ "adminDisplayName": "Create and update chat and channel messages with anyone's identity and with any timestamp",
+ "adminDescription": "Allows the app to create and update chat and channel messages, without a signed in user. The app specifies which user appears as the sender, and can backdate the message to appear as if it was sent long ago. The messages can be sent to any chat or channel in the organization.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/chats/{id}/completemigration": "least=Application",
+ "/chats/{id}/messages": "",
+ "/chats/{id}/startmigration": "least=Application",
+ "/chats/{id}/unhideChatForAllUsers": "least=Application",
+ "/teams": "",
+ "/teams/{id}/channels": "",
+ "/teams/{id}/channels/{id}/completemigration": "least=Application",
+ "/teams/{id}/channels/{id}/messages": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies": "",
+ "/teams/{id}/channels/{id}/startmigration": "least=Application",
+ "/teams/{id}/completemigration": "least=Application",
+ "/users/{id}/teamwork/sections": "",
+ "/users/{id}/teamwork/sections/{id}/items": "",
+ "/users/{id}/teamwork/sections/{id}/items/{id}/move": "",
+ "/users/{id}/teamwork/sections/{id}/items/reorder": "",
+ "/users/{id}/teamwork/sections/reorder": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/chats/{id}/messages/{id}": "",
+ "/teams/{id}/channels/{id}/messages/{id}": "",
+ "/teams/{id}/channels/{id}/messages/{id}/replies/{id}": "",
+ "/users/{id}/teamwork/sections/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections/{id}": "",
+ "/users/{id}/teamwork/sections/{id}/items/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "Teamwork.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read organizational teamwork settings",
+ "adminDescription": "Allows the app to read the teamwork settings of the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read organizational teamwork settings",
+ "userDescription": "Allows the app to read the teamwork settings of your organization, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read organizational teamwork settings",
+ "adminDescription": "Allows the app to read all teamwork settings of the organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkAppSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Teams app settings",
+ "adminDescription": "Allows the app to read the Teams app settings on behalf of the signed-in user.",
+ "userDisplayName": "Read Teams app settings",
+ "userDescription": "Allows the app to read the Teams app settings on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Teams app settings",
+ "adminDescription": "Allows the app to read the Teams app settings without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/teamsappsettings": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkAppSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Teams app settings",
+ "adminDescription": "Allows the app to read and write the Teams app settings on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Teams app settings",
+ "userDescription": "Allows the app to read and write the Teams app settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Teams app settings",
+ "adminDescription": "Allows the app to read and write the Teams app settings without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teamwork/teamsappsettings": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkCustomEmoji.Create": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Create custom emoji",
+ "adminDescription": "Create custom emoji on behalf of the signed-in user.",
+ "userDisplayName": "Create custom emoji",
+ "userDescription": "Create custom emoji on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teamwork/messaging/customemoji": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkCustomEmoji.Create.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Create custom emoji",
+ "adminDescription": "Create custom emoji without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teamwork/messaging/customemoji": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkCustomEmoji.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read custom emoji",
+ "adminDescription": "Read custom emoji on behalf of the signed-in user.",
+ "userDisplayName": "Read custom emoji",
+ "userDescription": "Read custom emoji on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/messaging/customemoji": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkCustomEmoji.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read custom emoji",
+ "adminDescription": "Read custom emoji without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/messaging/customemoji": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkDevice.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Teams devices",
+ "adminDescription": "Allow the app to read the management data for Teams devices on behalf of the signed-in user.",
+ "userDisplayName": "Read Teams devices",
+ "userDescription": "Allow the app to read the management data for Teams devices on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Teams devices",
+ "adminDescription": "Allow the app to read the management data for Teams devices, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/devices": "least=DelegatedWork,Application",
+ "/teamwork/devices/{id}": "least=DelegatedWork,Application",
+ "/teamwork/devices/{id}/activity": "least=DelegatedWork,Application",
+ "/teamwork/devices/{id}/configuration": "least=DelegatedWork,Application",
+ "/teamwork/devices/{id}/health": "least=DelegatedWork,Application",
+ "/teamwork/devices/{id}/operations": "least=DelegatedWork,Application",
+ "/teamwork/devices/{id}/operations/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkDevice.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Teams devices",
+ "adminDescription": "Allow the app to read and write the management data for Teams devices on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Teams devices",
+ "userDescription": "Allow the app to read and write the management data for Teams devices on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write Teams devices",
+ "adminDescription": "Allow the app to read and write the management data for Teams devices, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/devices": "",
+ "/teamwork/devices/{id}": "",
+ "/teamwork/devices/{id}/activity": "",
+ "/teamwork/devices/{id}/configuration": "",
+ "/teamwork/devices/{id}/health": "",
+ "/teamwork/devices/{id}/operations": "",
+ "/teamwork/devices/{id}/operations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teamwork/devices/{id}/restart": "least=DelegatedWork,Application",
+ "/teamwork/devices/{id}/rundiagnostics": "least=DelegatedWork,Application",
+ "/teamwork/devices/{id}/updatesoftware": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkSection.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user's teamwork sections (folders) in Teams",
+ "adminDescription": "Allows the app to read the signed-in user's teamwork sections (folders) for organizing chats and channels in Teams.",
+ "userDisplayName": "Read your teamwork sections (folders) in Teams",
+ "userDescription": "Allows the app to read your teamwork sections (folders) for organizing chats and channels in Teams.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}/hostedContents": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}/hostedContents/{id}": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}/hostedContents/{id}/$value": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}/items": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}/items/{id}": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/delta": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkSection.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all users' teamwork sections in Teams",
+ "adminDescription": "Allows the app to read all users' teamwork sections (folders) for organizing chats and channels in Teams, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections": "least=Application",
+ "/users/{id}/teamwork/sections/{id}": "least=Application",
+ "/users/{id}/teamwork/sections/{id}/hostedContents": "least=Application",
+ "/users/{id}/teamwork/sections/{id}/hostedContents/{id}": "least=Application",
+ "/users/{id}/teamwork/sections/{id}/hostedContents/{id}/$value": "least=Application",
+ "/users/{id}/teamwork/sections/{id}/items": "least=Application",
+ "/users/{id}/teamwork/sections/{id}/items/{id}": "least=Application",
+ "/users/{id}/teamwork/sections/delta": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkSection.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user's teamwork sections (folders) in Teams",
+ "adminDescription": "Allows the app to read and write the signed-in user's teamwork sections (folders) for organizing chats and channels in Teams.",
+ "userDisplayName": "Read and write your teamwork sections (folders) in Teams",
+ "userDescription": "Allows the app to read and write your teamwork sections (folders) for organizing chats and channels in Teams.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections": "",
+ "/users/{id}/teamwork/sections/{id}": "",
+ "/users/{id}/teamwork/sections/{id}/hostedContents": "",
+ "/users/{id}/teamwork/sections/{id}/hostedContents/{id}": "",
+ "/users/{id}/teamwork/sections/{id}/hostedContents/{id}/$value": "",
+ "/users/{id}/teamwork/sections/{id}/items": "",
+ "/users/{id}/teamwork/sections/{id}/items/{id}": "",
+ "/users/{id}/teamwork/sections/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}/items": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}/items/{id}/move": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}/items/reorder": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/reorder": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections/{id}": "least=DelegatedWork",
+ "/users/{id}/teamwork/sections/{id}/items/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkSection.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all users' teamwork sections in Teams",
+ "adminDescription": "Allows the app to read and write all users' teamwork sections (folders) for organizing chats and channels in Teams, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections": "",
+ "/users/{id}/teamwork/sections/{id}": "",
+ "/users/{id}/teamwork/sections/{id}/hostedContents": "",
+ "/users/{id}/teamwork/sections/{id}/hostedContents/{id}": "",
+ "/users/{id}/teamwork/sections/{id}/hostedContents/{id}/$value": "",
+ "/users/{id}/teamwork/sections/{id}/items": "",
+ "/users/{id}/teamwork/sections/{id}/items/{id}": "",
+ "/users/{id}/teamwork/sections/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections": "least=Application",
+ "/users/{id}/teamwork/sections/{id}/items": "least=Application",
+ "/users/{id}/teamwork/sections/{id}/items/{id}/move": "least=Application",
+ "/users/{id}/teamwork/sections/{id}/items/reorder": "least=Application",
+ "/users/{id}/teamwork/sections/reorder": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/sections/{id}": "least=Application",
+ "/users/{id}/teamwork/sections/{id}/items/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkTag.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read tags in Teams",
+ "adminDescription": "Allows the app to read tags in Teams, on behalf of the signed-in user.",
+ "userDisplayName": "Read tags in Teams",
+ "userDescription": "Allows the app to read tags in Teams, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/tags": "least=DelegatedWork",
+ "/teams/{id}/tags/{id}": "least=DelegatedWork",
+ "/teams/{id}/tags/{id}/members": "least=DelegatedWork",
+ "/teams/{id}/tags/{id}/members/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkTag.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read tags in Teams",
+ "adminDescription": "Allows the app to read tags in Teams without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/tags": "",
+ "/teams/{id}/tags/{id}": "",
+ "/teams/{id}/tags/{id}/members": "",
+ "/teams/{id}/tags/{id}/members/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkTag.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write tags in Teams",
+ "adminDescription": "Allows the app to read and write tags in Teams, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write tags in Teams",
+ "userDescription": "Allows the app to read and write tags in Teams, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/tags": "",
+ "/teams/{id}/tags/{id}": "",
+ "/teams/{id}/tags/{id}/members": "",
+ "/teams/{id}/tags/{id}/members/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/tags": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/tags/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/tags/{id}/members/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkTag.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write tags in Teams",
+ "adminDescription": "Allows the app to read and write tags in Teams without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teams/{id}/tags": "",
+ "/teams/{id}/tags/{id}": "",
+ "/teams/{id}/tags/{id}/members": "",
+ "/teams/{id}/tags/{id}/members/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teams/{id}/tags": "",
+ "/teams/{id}/tags/{id}/members": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/teams/{id}/tags/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/teams/{id}/tags/{id}/members/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkTargetedMessage.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all targeted messages of group chat or channel",
+ "adminDescription": "Allows the app to read all group chat or channel targeted messages in Microsoft Teams.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/getAllRetainedTargetedMessages": "least=Application",
+ "/users/{id}/teamwork/getAllTargetedMessages": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkTargetedMessage.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Update targeted messages of group chat or channel belonging to the user",
+ "adminDescription": "Allows the user to update group chat or channel targeted messages in Microsoft Teams.",
+ "userDisplayName": "Update targeted messages belonging to the user",
+ "userDescription": "Update targeted messages of group chat or channel on your behalf",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/chats/{id}/targetedMessages/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/teamwork/deleteTargetedMessage": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TeamworkUserInteraction.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all of the possible Teams interactions between the user and other users",
+ "adminDescription": "Allows the app to read all of the possible Teams interactions between the signed-in user and other users",
+ "userDisplayName": "Read all of the possible Teams interactions between you and other users",
+ "userDescription": "Allows the app to read all of the possible Teams interactions between you and other users.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/teamwork/determineIfInteractionIsAllowed": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "TenantGovernance-Invitation.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Tenant Governance invitations",
+ "adminDescription": "Allows the application to list and read all Tenant Governance invitations on behalf of the signed-in user.",
+ "userDisplayName": "Read Tenant Governance invitations",
+ "userDescription": "Allows the application to list and read all Tenant Governance invitations on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Tenant Governance invitations",
+ "adminDescription": "Allows the application to list and read all Tenant Governance invitations without a signed-in user.",
+ "userDisplayName": "Read Tenant Governance invitations",
+ "userDescription": "Allows the application to list and read all Tenant Governance invitations.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceInvitations": "least=Application,DelegatedWork",
+ "/directory/tenantGovernance/governanceInvitations/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-Invitation.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Tenant Governance invitations",
+ "adminDescription": "Allows the application to list, read, create, and delete Tenant Governance invitations on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Tenant Governance invitations",
+ "userDescription": "Allows the application to list, read, create, and delete Tenant Governance invitations on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceInvitations": "",
+ "/directory/tenantGovernance/governanceInvitations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceInvitations": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceInvitations/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-PolicyTemplate.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Tenant Governance policy templates",
+ "adminDescription": "Allows the application to list and read all Tenant Governance policy templates on behalf of the signed-in user.",
+ "userDisplayName": "Read Tenant Governance policy templates",
+ "userDescription": "Allows the application to list and read all Tenant Governance policy templates on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Tenant Governance policy templates",
+ "adminDescription": "Allows the application to list and read all Tenant Governance policy templates without a signed-in user.",
+ "userDisplayName": "Read Tenant Governance policy templates",
+ "userDescription": "Allows the application to list and read all Tenant Governance policy templates.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governancePolicyTemplates": "least=Application,DelegatedWork",
+ "/directory/tenantGovernance/governancePolicyTemplates/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-PolicyTemplate.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Tenant Governance policy templates",
+ "adminDescription": "Allows the application to list, read, create, update, and delete Tenant Governance policy templates on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Tenant Governance policy templates",
+ "userDescription": "Allows the application to list, read, create, update, and delete Tenant Governance policy templates on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governancePolicyTemplates": "",
+ "/directory/tenantGovernance/governancePolicyTemplates/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governancePolicyTemplates": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governancePolicyTemplates/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governancePolicyTemplates/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-RelatedTenant.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read related tenants",
+ "adminDescription": "Allows the application to list and read related tenants information on behalf of the signed-in user.",
+ "userDisplayName": "Read related tenants",
+ "userDescription": "Allows the application to list and read related tenants information on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read related tenants",
+ "adminDescription": "Allows the application to list and read related tenants information without a signed-in user.",
+ "userDisplayName": "Read related tenants",
+ "userDescription": "Allows the application to list and read related tenants information.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/relatedTenants": "least=Application,DelegatedWork",
+ "/directory/tenantGovernance/relatedTenants/{id}": "least=Application,DelegatedWork",
+ "/directory/tenantGovernance/relatedTenants/refreshStatus": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-RelatedTenant.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write related tenants",
+ "adminDescription": "Allows the application to list, read, and refresh related tenants information on behalf of the signed-in user.",
+ "userDisplayName": "Read and write related tenants",
+ "userDescription": "Allows the application to list, read, and refresh related tenants information on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/relatedTenants": "",
+ "/directory/tenantGovernance/relatedTenants/{id}": "",
+ "/directory/tenantGovernance/relatedTenants/refreshStatus": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/relatedTenants/refresh": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-Relationship.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Tenant Governance relationships",
+ "adminDescription": "Allows the application to list and read all Tenant Governance relationships on behalf of the signed-in user.",
+ "userDisplayName": "Read Tenant Governance relationships",
+ "userDescription": "Allows the application to list and read all Tenant Governance relationships on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Tenant Governance relationships",
+ "adminDescription": "Allows the application to list and read all Tenant Governance relationships without a signed-in user.",
+ "userDisplayName": "Read Tenant Governance relationships",
+ "userDescription": "Allows the application to list and read all Tenant Governance relationships.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceRelationships": "least=Application,DelegatedWork",
+ "/directory/tenantGovernance/governanceRelationships/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-Relationship.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Tenant Governance relationships",
+ "adminDescription": "Allows the application to list, read, and update Tenant Governance relationships on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Tenant Governance relationships",
+ "userDescription": "Allows the application to list, read, and update Tenant Governance relationships on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceRelationships": "",
+ "/directory/tenantGovernance/governanceRelationships/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceRelationships/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-Request.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Tenant Governance requests",
+ "adminDescription": "Allows the application to list and read all Tenant Governance requests on behalf of the signed-in user.",
+ "userDisplayName": "Read Tenant Governance requests",
+ "userDescription": "Allows the application to list and read all Tenant Governance requests on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Tenant Governance requests",
+ "adminDescription": "Allows the application to list and read all Tenant Governance requests without a signed-in user.",
+ "userDisplayName": "Read Tenant Governance requests",
+ "userDescription": "Allows the application to list and read all Tenant Governance requests.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceRequests": "least=Application,DelegatedWork",
+ "/directory/tenantGovernance/governanceRequests/{id}": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-Request.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Tenant Governance requests",
+ "adminDescription": "Allows the application to list, read, create, and update Tenant Governance requests on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Tenant Governance requests",
+ "userDescription": "Allows the application to list, read, create, and update Tenant Governance requests on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceRequests": "",
+ "/directory/tenantGovernance/governanceRequests/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceRequests": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/governanceRequests/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-Setting.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Tenant Governance settings",
+ "adminDescription": "Allows the application to read Tenant Governance settings on behalf of the signed-in user.",
+ "userDisplayName": "Read Tenant Governance settings",
+ "userDescription": "Allows the application to read Tenant Governance settings on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Tenant Governance settings",
+ "adminDescription": "Allows the application to read Tenant Governance settings without a signed-in user.",
+ "userDisplayName": "Read Tenant Governance settings",
+ "userDescription": "Allows the application to read Tenant Governance settings.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/settings": "least=Application,DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TenantGovernance-Setting.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Tenant Governance settings",
+ "adminDescription": "Allows the application to read Tenant Governance settings and update them on behalf of the signed-in user.",
+ "userDisplayName": "Read and write Tenant Governance settings",
+ "userDescription": "Allows the application to read Tenant Governance settings and update them on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/settings": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/settings": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/tenantGovernance/settings/enableRelatedTenants": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "entratenantgov"
+ }
+ },
+ "TermStore.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read term store data",
+ "adminDescription": "Allows the app to read the term store data that the signed-in user has access to. This includes all sets, groups and terms in the term store.",
+ "userDisplayName": "Read term store data",
+ "userDescription": "Allows the app to read the term store data that you have access to. This includes all sets, groups and terms in the term store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/sites/{id}/termstore": "least=DelegatedWork",
+ "/sites/{id}/termstore/groups": "least=DelegatedWork",
+ "/sites/{id}/termstore/groups/{id}": "least=DelegatedWork",
+ "/sites/{id}/termstore/groups/{id}/sets": "least=DelegatedWork",
+ "/sites/{id}/termstore/groups/{id}/sets/{id}/terms/{id}": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}/children": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}/relations": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}/terms/{id}": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}/terms/{id}/children": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}/terms/{id}/relations": "least=DelegatedWork",
+ "/termstore": "least=DelegatedWork",
+ "/termstore/groups": "least=DelegatedWork",
+ "/termstore/groups/{id}": "least=DelegatedWork",
+ "/termstore/groups/{id}/sets": "least=DelegatedWork",
+ "/termstore/groups/{id}/sets/{id}/terms/{id}": "least=DelegatedWork",
+ "/termstore/sets/{id}": "least=DelegatedWork",
+ "/termstore/sets/{id}/children": "least=DelegatedWork",
+ "/termstore/sets/{id}/relations": "least=DelegatedWork",
+ "/termstore/sets/{id}/terms/{id}": "least=DelegatedWork",
+ "/termstore/sets/{id}/terms/{id}/children": "least=DelegatedWork",
+ "/termstore/sets/{id}/terms/{id}/relations": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "TermStore.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write term store data",
+ "adminDescription": "Allows the app to read or modify data that the signed-in user has access to. This includes all sets, groups and terms in the term store.",
+ "userDisplayName": "Read and write term store data",
+ "userDescription": "Allows the app to read or modify data that you have access to. This includes all sets, groups and terms in the term store.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/sites/{id}/termstore": "least=DelegatedWork",
+ "/termstore": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/termstore/groups": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}/children": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}/terms/{id}/children": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}/terms/{id}/relations": "least=DelegatedWork",
+ "/termstore/groups": "least=DelegatedWork",
+ "/termstore/sets/{id}/children": "least=DelegatedWork",
+ "/termstore/sets/{id}/terms/{id}/children": "least=DelegatedWork",
+ "/termstore/sets/{id}/terms/{id}/relations": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/sites/{id}/termstore/groups/{id}": "least=DelegatedWork",
+ "/termstore/groups/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/sites/{id}/termstore/groups/{id}/sets": "",
+ "/sites/{id}/termstore/groups/{id}/sets/{id}/terms/{id}": "",
+ "/sites/{id}/termstore/sets/{id}/relations": "",
+ "/termstore/groups/{id}/sets": "",
+ "/termstore/groups/{id}/sets/{id}/terms/{id}": "",
+ "/termstore/sets/{id}/relations": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/sites/{id}/termstore/sets": "least=DelegatedWork",
+ "/termstore/sets": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/sites/{id}/termstore/sets/{id}": "least=DelegatedWork",
+ "/sites/{id}/termstore/sets/{id}/terms/{id}": "least=DelegatedWork",
+ "/termstore/sets/{id}": "least=DelegatedWork",
+ "/termstore/sets/{id}/terms/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "ThreatAssessment.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read threat assessment requests",
+ "adminDescription": "Allows an app to read your organization's threat assessment requests, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/informationprotection/threatassessmentrequests": "least=Application",
+ "/informationprotection/threatassessmentrequests/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TAPermApprover"
+ }
+ },
+ "ThreatAssessment.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write threat assessment requests",
+ "adminDescription": "Allows an app to read your organization's threat assessment requests on behalf of the signed-in user. Also allows the app to create new requests to assess threats received by your organization on behalf of the signed-in user.",
+ "userDisplayName": "Read and write threat assessment requests",
+ "userDescription": "Allows an app to read your organization's threat assessment requests on your behalf. Also allows the app to create new requests to assess threats received by your organization on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/informationprotection/threatassessmentrequests": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/informationprotection/threatassessmentrequests/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TAPermApprover"
+ }
+ },
+ "ThreatHunting.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Run hunting queries and read saved hunting queries",
+ "adminDescription": "Allows the app to run hunting queries and read saved hunting queries, on behalf of the signed-in user.",
+ "userDisplayName": "Run hunting queries and read saved hunting queries",
+ "userDescription": "Allows the app to run hunting queries that you can execute and read saved hunting queries that you can access.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Run hunting queries and read shared saved hunting queries",
+ "adminDescription": "Allows the app to run hunting queries and read shared saved hunting queries, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/runhuntingquery": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/gethuntingschematables": "least=DelegatedWork,Application",
+ "/security/gethuntingschematables()": "least=DelegatedWork,Application",
+ "/security/gethuntingschematables(workspaceid={workspaceid})": "least=DelegatedWork,Application",
+ "/security/getrunhuntingquery": "least=DelegatedWork,Application",
+ "/security/huntingFunctions": "least=DelegatedWork,Application",
+ "/security/huntingFunctions/{id}": "least=DelegatedWork,Application",
+ "/security/threathunting/queries": "least=DelegatedWork,Application",
+ "/security/threathunting/queries/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ine-dataplatform"
+ }
+ },
+ "ThreatIndicators.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all threat indicators",
+ "adminDescription": "Allows the app to read all the indicators for your organization, on behalf of the signed-in user.",
+ "userDisplayName": "Read all threat indicators",
+ "userDescription": "Allows the app to read all the indicators for your organization, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all threat indicators",
+ "adminDescription": "Allows the app to read all the indicators for your organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "sipsapidev"
+ }
+ },
+ "ThreatIndicators.ReadWrite.OwnedBy": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage threat indicators this app creates or owns",
+ "adminDescription": "Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), on behalf of the signed-in user. It cannot update any threat indicators it does not own.",
+ "userDisplayName": "Manage threat indicators this app creates or owns",
+ "userDescription": "Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), on your behalf. It cannot update any threat indicators that it is not an owner of.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Manage threat indicators this app creates or owns",
+ "adminDescription": "Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), without a signed-in user. It cannot update any threat indicators it does not own.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/tiindicators": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/tiindicators/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/tiindicators/deletetiindicators": "least=DelegatedWork,Application",
+ "/security/tiindicators/deletetiindicatorsbyexternalid": "least=DelegatedWork,Application",
+ "/security/tiindicators/submittiindicators": "least=DelegatedWork,Application",
+ "/security/tiindicators/updatetiindicators": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "secgraphschema"
+ }
+ },
+ "ThreatIntelligence.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all threat intelligence information",
+ "adminDescription": "Allows the app to read threat intelligence information, such as indicators, observations, and articles, on behalf of the signed-in user.",
+ "userDisplayName": "Read threat intelligence Information",
+ "userDescription": "Allows the app to read threat intelligence information, such as indicators, observations, and articles, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Threat Intelligence Information",
+ "adminDescription": "Allows the app to read threat intellgence information, such as indicators, observations, and and articles, without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/threatintelligence/articleindicators/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/articles": "least=DelegatedWork,Application",
+ "/security/threatintelligence/articles/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/articles/{id}/indicators": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hostcomponents/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hostcookies/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hostpairs/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}/childhostpairs": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}/components": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}/cookies": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}/hostpairs": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}/parenthostpairs": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}/passivedns": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}/passivednsreverse": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}/reputation": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosts/{id}/trackers": "least=DelegatedWork,Application",
+ "/security/threatintelligence/hosttrackers/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/intelprofileindicators/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/intelprofiles": "least=DelegatedWork,Application",
+ "/security/threatintelligence/intelprofiles/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/intelprofiles/{id}/indicators": "least=DelegatedWork,Application",
+ "/security/threatintelligence/passivednsrecords/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/vulnerabilities/{id}": "least=DelegatedWork,Application",
+ "/security/threatintelligence/vulnerabilities/{id}/components": "least=DelegatedWork,Application",
+ "/security/threatintelligence/vulnerabilities/{id}/components/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "riskiq-dev"
+ }
+ },
+ "ThreatSubmission.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all threat submissions",
+ "adminDescription": "Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user.",
+ "userDisplayName": "Read all threat submissions",
+ "userDescription": "Allows the app to read your organization's threat submissions and threat submission policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all of the organization's threat submissions",
+ "adminDescription": "Allows the app to read your organization's threat submissions and to view threat submission policies without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/threatsubmission/emailthreats": "least=Application",
+ "/security/threatsubmission/emailthreats/{id}": "least=Application",
+ "/security/threatsubmission/emailthreatsubmissionpolicies": "least=Application",
+ "/security/threatsubmission/emailthreatsubmissionpolicies/{id}": "least=Application",
+ "/security/threatsubmission/filethreats": "least=Application",
+ "/security/threatsubmission/filethreats/{id}": "least=Application",
+ "/security/threatsubmission/urlthreats": "least=Application",
+ "/security/threatsubmission/urlthreats/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "IdentityReq"
+ }
+ },
+ "ThreatSubmission.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all threat submissions",
+ "adminDescription": "Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submissions on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all threat submissions",
+ "userDescription": "Allows the app to read your organization's threat submissions and threat submission policies on your behalf. Also allows the app to create new threat submissions on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all of the organization's threat submissions",
+ "adminDescription": "Allows the app to read your organization's threat submissions and threat submission policies without a signed-in user. Also allows the app to create new threat submissions without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/emailthreats/{id}/review": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/threatsubmission/emailthreats/{id}": "",
+ "/security/threatsubmission/emailthreatsubmissionpolicies": "",
+ "/security/threatsubmission/emailthreatsubmissionpolicies/{id}": "",
+ "/security/threatsubmission/filethreats/{id}": "",
+ "/security/threatsubmission/urlthreats/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/threatsubmission/emailthreats": "least=Application",
+ "/security/threatsubmission/filethreats": "least=Application",
+ "/security/threatsubmission/urlthreats": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "ThreatSubmissionPolicy.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all threat submission policies",
+ "adminDescription": "Allows the app to read your organization's threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submission policies on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all threat submission policies",
+ "userDescription": "Allows the app to read your organization's threat submission policies on your behalf. Also allows the app to create new threat submission policies on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all of the organization's threat submission policies",
+ "adminDescription": "Allows the app to read your organization's threat submission policies without a signed-in user. Also allows the app to create new threat submission polices without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/security/threatsubmission/emailthreatsubmissionpolicies/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/security/threatsubmission/emailthreatsubmissionpolices/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/security/threatsubmission/emailthreatsubmissionpolicies": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ThreatAPIApprovers"
+ }
+ },
+ "TrustFrameworkKeySet.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read trust framework key sets",
+ "adminDescription": "Allows the app to read trust framework key set properties on behalf of the signed-in user.",
+ "userDisplayName": "Read trust framework key sets",
+ "userDescription": "Allows the app to read trust framework key sets, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read trust framework key sets",
+ "adminDescription": "Allows the app to read trust framework key set properties without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/trustframework/keysets": "least=DelegatedWork,Application",
+ "/trustframework/keysets/{id}": "least=DelegatedWork,Application",
+ "/trustframework/keysets/{id}/getactivekey": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "TrustFrameworkKeySet.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write trust framework key sets",
+ "adminDescription": "Allows the app to read and write trust framework key set properties on behalf of the signed-in user.",
+ "userDisplayName": "Read and write trust framework key sets",
+ "userDescription": "Allows the app to read or write trust framework key sets, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write trust framework key sets",
+ "adminDescription": "Allows the app to read and write trust framework key set properties without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/trustframework/keysets": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/trustframework/keysets/{id}": "least=DelegatedWork,Application",
+ "/trustframework/keysets/{id}/keys_v2/{keyId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/trustframework/keysets/{id}/generatekey": "least=DelegatedWork,Application",
+ "/trustframework/keysets/{id}/uploadcertificate": "least=DelegatedWork,Application",
+ "/trustframework/keysets/{id}/uploadpkcs12": "least=DelegatedWork,Application",
+ "/trustframework/keysets/{id}/uploadsecret": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/trustframework/keysets/{id}/getactivekey": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cpimmsgraphadmins"
+ }
+ },
+ "UnifiedGroupMember.Read.AsGuest": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read unified group memberships as guest",
+ "adminDescription": "Allows the app to read basic unified group properties, memberships and owners of the group the signed-in guest is a member of.",
+ "userDisplayName": "Read unified group memberships as guest",
+ "userDescription": "Allows the app to read basic unified group properties, memberships and owners of the group you are a member of.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [],
+ "ownerInfo": {
+ "ownerSecurityGroup": "AADGroupsPreAuth"
+ }
+ },
+ "User-ConvertToInternal.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Convert an external user to internal memeber user",
+ "adminDescription": "Allow the app to convert an external user to an internal member user, on behalf of signed-in user.",
+ "userDisplayName": "Convert an external user to internal member user",
+ "userDescription": "Allow the app to convert an external user to an internal member user on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Convert an external user to internal member user",
+ "adminDescription": "Allow the app to convert an external user to an internal member user, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/convertExternalToInternalMemberUser": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User-Mail.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Update other mails property for all users",
+ "adminDescription": "Allows the app to update other mails property for all users for all users, on behalf of the signed-in user.",
+ "userDisplayName": "Update other mails property for all users",
+ "userDescription": "Allows the app to Update other mails property for all users, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Update other mails property for all users",
+ "adminDescription": "Allows the app to update other mails property for all users, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User-OnPremisesSyncBehavior.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and update the on-premises sync behavior of users",
+ "adminDescription": "Allows the app to read and update the on-premises sync behavior of users on behalf of the signed-in user.",
+ "userDisplayName": "Read and update the on-premises sync behavior of users",
+ "userDescription": "Allows the app to update the on-premises sync behavior of users on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read and update the on-premises sync behavior of users",
+ "adminDescription": "Allows the app to update the on-premises sync behavior of all users without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/onPremisesSyncBehavior": "least=DelegatedWork,Application",
+ "/users/onPremisesSyncBehavior": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "ddsappperm"
+ }
+ },
+ "User-PasswordProfile.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Update password profile property and reset password for all users",
+ "adminDescription": "Allows the app to update password profile property and reset password for all users for all users, on behalf of the signed-in user.",
+ "userDisplayName": "Update password profile property and reset password for all users",
+ "userDescription": "Allows the app to update password profile property and reset password for all users, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Update password profile property and reset password for all users",
+ "adminDescription": "Allows the app to update password profile property and reset password for all users, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/changePassword": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User-Phone.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Update business phones and mobile phone properties for all users",
+ "adminDescription": "Allows the app to update business phones and mobile phone properties for all users, on behalf of the signed-in user.",
+ "userDisplayName": "Update business phones and mobile phone properties for all users",
+ "userDescription": "Allows the app to update business phones and mobile phone properties for all users, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Update business phones and mobile phone properties for all users",
+ "adminDescription": "Allows the app to update business phones and mobile phone properties for all users, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.DeleteRestore.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Delete and restore user accounts",
+ "adminDescription": "Allows the app to delete and restore users' accounts, on behalf of the signed-in user.",
+ "userDisplayName": "Delete and restore user accounts",
+ "userDescription": "Allows the app to delete and restore users' accounts, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Delete and restore user accounts",
+ "adminDescription": "Allows the app to delete and restore users' accounts, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/deletedItems/{id}/restore": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.EnableDisableAccount.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Enable and disable user accounts",
+ "adminDescription": "Allows the app to enable and disable users' accounts, on behalf of the signed-in user.",
+ "userDisplayName": "Enable and disable user accounts",
+ "userDescription": "Allows the app to enable and disable users' accounts, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Enable and disable user accounts",
+ "adminDescription": "Allows the app to enable and disable users' accounts, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.Export.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Export user's data",
+ "adminDescription": "Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).",
+ "userDisplayName": "Export user's data",
+ "userDescription": "Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).",
+ "requiresAdminConsent": true
+ },
+ "Application": {
+ "adminDisplayName": "Export user's data",
+ "adminDescription": "Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/datapolicyoperations/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/exportpersonaldata": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.Invite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Invite guest users to the organization",
+ "adminDescription": "Allows the app to invite guest users to the organization, on behalf of the signed-in user.",
+ "userDisplayName": "Invite guest users to the organization",
+ "userDescription": "Allows the app to invite guest users to the organization, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Invite guest users to the organization",
+ "adminDescription": "Allows the app to invite guest users to the organization, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/invitations": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "aadb2bpreauthapp"
+ }
+ },
+ "User.ManageIdentities.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Manage user identities",
+ "adminDescription": "Allows the app to read, update and delete identities that are associated with a user's account that the signed-in user has access to. This controls the identities users can sign-in with.",
+ "userDisplayName": "Manage user identities",
+ "userDescription": "Allows the app to read, update and delete identities that are associated with a user's account that you have access to. This controls the identities users can sign-in with.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Manage all users' identities",
+ "adminDescription": "Allows the app to read, update and delete identities that are associated with a user's account, without a signed in user. This controls the identities users can sign-in with.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Sign in and read user profile",
+ "adminDescription": "Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.",
+ "userDisplayName": "Sign you in and read your profile",
+ "userDescription": "Allows you to sign in to the app with your organizational account and let the app read your profile. It also allows the app to read basic company information.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Sign in and read user profile",
+ "adminDescription": "Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.",
+ "userDisplayName": "Sign you in and read your profile",
+ "userDescription": "Allows you to sign in to the app with your organizational account and let the app read your profile. It also allows the app to read basic company information.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/applications": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmemberobjects": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmemberobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/people/itemInsights": "least=DelegatedWork",
+ "/education/me/user": "",
+ "/education/users/{id}/user": "",
+ "/me/accessibleTenants": "least=DelegatedWork",
+ "/me/agentSignInSessions": "least=DelegatedWork",
+ "/me/agentSignInSessions/{id}": "least=DelegatedWork",
+ "/me/analytics/settings": "least=DelegatedWork",
+ "/me/cloudLicensing/assignmentErrors": "",
+ "/me/cloudLicensing/assignmentErrors/{id}": "",
+ "/me/cloudLicensing/assignments": "",
+ "/me/cloudLicensing/assignments/{id}": "",
+ "/me/cloudLicensing/assignments/{id}/allotment": "",
+ "/me/cloudLicensing/usageRights": "",
+ "/me/cloudLicensing/usageRights/{id}": "",
+ "/me/cloudLicensing/usageRights/{id}/assignments": "",
+ "/me/cloudLicensing/waitingMembers": "",
+ "/me/cloudLicensing/waitingMembers/{id}": "",
+ "/me/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/me/directreports": "least=DelegatedWork",
+ "/me/drive": "",
+ "/me/drives": "",
+ "/me/exportpersonaldata": "least=DelegatedWork",
+ "/me/extensions": "least=DelegatedWork",
+ "/me/findmeetingtimes": "least=DelegatedWork",
+ "/me/findroomlists": "least=DelegatedWork",
+ "/me/findrooms": "least=DelegatedWork",
+ "/me/memberof": "least=DelegatedWork",
+ "/me/memberof/{id}": "least=DelegatedWork",
+ "/me/onenote": "least=DelegatedWork",
+ "/me/outlook": "least=DelegatedWork",
+ "/me/owneddevices": "least=DelegatedWork",
+ "/me/ownedobjects": "least=DelegatedWork",
+ "/me/photo": "least=DelegatedWork",
+ "/me/photos": "least=DelegatedWork",
+ "/me/photos/{id}": "least=DelegatedWork",
+ "/me/registereddevices": "least=DelegatedWork",
+ "/me/settings": "least=DelegatedWork",
+ "/me/settings/contactmergesuggestions": "least=DelegatedWork",
+ "/me/settings/iteminsights": "least=DelegatedWork",
+ "/me/sponsorof": "least=DelegatedWork",
+ "/me/sponsors": "least=DelegatedWork",
+ "/me/transitivememberof": "least=DelegatedWork",
+ "/networkaccess/tls/trustedCertificateAuthorities": "least=DelegatedWork",
+ "/networkaccess/tls/trustedCertificateAuthorities/{id}": "least=DelegatedWork",
+ "/organization": "",
+ "/organization/{id}/branding": "least=DelegatedWork",
+ "/organization/{id}/branding/localizations": "least=DelegatedWork",
+ "/organization/{id}/branding/localizations/{id}": "least=DelegatedWork",
+ "/organization/{id}/settings": "least=DelegatedWork",
+ "/organization/{id}/settings/profilecardproperties": "least=DelegatedWork",
+ "/organization/{id}/settings/profilecardproperties/{id}": "least=DelegatedWork",
+ "/schemaextensions": "least=DelegatedWork",
+ "/schemaextensions/{id}": "least=DelegatedWork",
+ "/users/{id}/analytics/settings": "least=DelegatedWork",
+ "/users/{id}/cloudLicensing/assignmentErrors": "",
+ "/users/{id}/cloudLicensing/assignmentErrors/{id}": "",
+ "/users/{id}/cloudLicensing/assignments": "",
+ "/users/{id}/cloudLicensing/assignments/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/users/{id}/cloudLicensing/usageRights": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/waitingMembers": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/users/{id}/deleteddatetime": "least=DelegatedWork",
+ "/users/{id}/directreports": "least=DelegatedWork",
+ "/users/{id}/licenseDetails/getTeamsLicensingDetails": "least=DelegatedWork",
+ "/users/{id}/memberof": "least=DelegatedWork",
+ "/users/{id}/memberof/{id}": "least=DelegatedWork",
+ "/users/{id}/owneddevices": "least=DelegatedWork",
+ "/users/{id}/ownedobjects": "least=DelegatedWork",
+ "/users/{id}/photo": "least=DelegatedWork",
+ "/users/{id}/photos": "least=DelegatedWork",
+ "/users/{id}/photos/{id}": "least=DelegatedWork",
+ "/users/{id}/registereddevices": "least=DelegatedWork",
+ "/users/{id}/settings/contactmergesuggestions": "least=DelegatedWork",
+ "/users/{id}/settings/iteminsights": "least=DelegatedWork",
+ "/users/{id}/sponsorof": "least=DelegatedWork",
+ "/users/{id}/sponsors": "least=DelegatedWork",
+ "/users/{id}/transitivememberof": "least=DelegatedWork",
+ "/users/{id}/usagerights": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me": "least=DelegatedWork,DelegatedPersonal",
+ "/me/createdobjects": "least=DelegatedWork,DelegatedPersonal",
+ "/me/licensedetails": "least=DelegatedPersonal",
+ "/me/outlook/supportedlanguages": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/supportedtimezones": "least=DelegatedWork,DelegatedPersonal",
+ "/me/outlook/supportedtimezones(timezonestandard={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/account": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/account/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/addresses": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/addresses/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/anniversaries": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/anniversaries/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/awards": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/awards/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/certifications": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/certifications/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/educationalactivities": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/educationalactivities/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/emails": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/emails/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/interests": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/interests/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/languages": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/languages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/names/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/notes": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/patents": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/patents/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/phones": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/phones/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/positions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/positions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/projects": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/projects/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/publications": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/publications/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/skills": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/skills/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/webaccounts": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/webaccounts/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/websites": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/websites/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/responsibilities": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}": "least=DelegatedPersonal",
+ "/users/{id}/createdobjects": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/licensedetails": "least=DelegatedPersonal",
+ "/users/{id}/outlook/supportedlanguages": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/supportedtimezones": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/outlook/supportedtimezones(timezonestandard={value})": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/account": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/account/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/addresses": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/addresses/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/anniversaries": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/anniversaries/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/awards": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/awards/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/certifications": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/certifications/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/educationalactivities": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/educationalactivities/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/emails": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/emails/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/interests": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/interests/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/languages": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/languages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/names/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/notes": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/patents": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/patents/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/phones": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/phones/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/positions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/positions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/projects": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/projects/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/publications": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/publications/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/skills": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/skills/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/webaccounts": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/webaccounts/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/websites": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/websites/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/responsibilities": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/profile/names": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/names": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/profile/notes/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/responsibilities/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/notes/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/responsibilities/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/translateexchangeids": "least=DelegatedPersonal",
+ "/users/{id}/translateexchangeids": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/settings/regionalandlanguagesettings": "least=DelegatedWork",
+ "/users/{id}/transitivereports/$count": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' full profiles and company properties",
+ "adminDescription": "Allows the app to read the full set of user properties of all users in the organization and read company properties, on behalf of the signed-in user.",
+ "userDisplayName": "Read all users' full profiles and company properties",
+ "userDescription": "Allows the app to read the full set of user properties of all users in the organization and read company properties, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' full profiles and company properties",
+ "adminDescription": "Allows the app to read the full set of user properties of all users in the organization and read company properties without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmembergroups": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmembergroups": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmembergroups": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmembergroups": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmembergroups": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/getmembergroups": "",
+ "/users/{id}/getmemberobjects": "",
+ "/users/{id}/translateexchangeids": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/getmembergroups": "",
+ "/me/getmemberobjects": "",
+ "/me/translateexchangeids": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/datapolicyoperations/{id}": "",
+ "/groups/{id}/cloudLicensing/assignments": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/groups/{id}/cloudLicensing/usageRights": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/organization": "",
+ "/organization/{id}": "",
+ "/settings/regionalandlanguagesettings": "least=Application",
+ "/users": "",
+ "/users/{id}": "",
+ "/users/{id}/accessibleTenants": "least=DelegatedWork,Application",
+ "/users/{id}/cloudLicensing/assignmentErrors": "",
+ "/users/{id}/cloudLicensing/assignmentErrors/{id}": "",
+ "/users/{id}/cloudLicensing/assignments": "",
+ "/users/{id}/cloudLicensing/assignments/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/users/{id}/cloudLicensing/usageRights": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/waitingMembers": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/users/{id}/createdobjects": "least=Application",
+ "/users/{id}/directreports": "least=Application",
+ "/users/{id}/findroomlists": "least=Application",
+ "/users/{id}/findrooms": "least=Application",
+ "/users/{id}/findrooms(roomlist={value})": "least=Application",
+ "/users/{id}/invitedBy": "least=DelegatedWork,Application",
+ "/users/{id}/joinedteams": "",
+ "/users/{id}/licensedetails": "",
+ "/users/{id}/manager": "least=DelegatedWork,Application",
+ "/users/{id}/organizationalUnitParent": "least=DelegatedWork,Application",
+ "/users/{id}/owneddevices": "least=Application",
+ "/users/{id}/ownedobjects": "least=Application",
+ "/users/{id}/registereddevices": "least=Application",
+ "/users/{id}/settings": "least=DelegatedWork,Application",
+ "/users/{id}/sponsorof": "least=Application",
+ "/users/{id}/sponsors": "least=Application",
+ "/users/{id}/transitivememberof": "least=Application",
+ "/users/{id}/transitivereports/$count": "",
+ "/users/{id}/usagerights": "least=Application",
+ "/users/delta": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/people/itemInsights": "",
+ "/me": "",
+ "/me/cloudLicensing/assignmentErrors": "",
+ "/me/cloudLicensing/assignmentErrors/{id}": "",
+ "/me/cloudLicensing/assignments": "",
+ "/me/cloudLicensing/assignments/{id}": "",
+ "/me/cloudLicensing/assignments/{id}/allotment": "",
+ "/me/cloudLicensing/usageRights": "",
+ "/me/cloudLicensing/usageRights/{id}": "",
+ "/me/cloudLicensing/usageRights/{id}/assignments": "",
+ "/me/cloudLicensing/waitingMembers": "",
+ "/me/cloudLicensing/waitingMembers/{id}": "",
+ "/me/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/me/createdobjects": "",
+ "/me/directreports": "",
+ "/me/findroomlists": "",
+ "/me/findrooms": "",
+ "/me/findrooms(roomlist={value})": "",
+ "/me/joinedteams": "",
+ "/me/licensedetails": "",
+ "/me/manager": "least=DelegatedWork",
+ "/me/memberof/{id}": "",
+ "/me/outlook/supportedlanguages": "",
+ "/me/outlook/supportedtimezones": "",
+ "/me/outlook/supportedtimezones(timezonestandard={value})": "",
+ "/me/owneddevices": "",
+ "/me/ownedobjects": "",
+ "/me/profile": "",
+ "/me/profile/account": "",
+ "/me/profile/account/{id}": "",
+ "/me/profile/addresses": "",
+ "/me/profile/addresses/{id}": "",
+ "/me/profile/anniversaries": "",
+ "/me/profile/anniversaries/{id}": "",
+ "/me/profile/awards": "",
+ "/me/profile/awards/{id}": "",
+ "/me/profile/certifications": "",
+ "/me/profile/certifications/{id}": "",
+ "/me/profile/educationalactivities": "",
+ "/me/profile/educationalactivities/{id}": "",
+ "/me/profile/emails": "",
+ "/me/profile/emails/{id}": "",
+ "/me/profile/interests": "",
+ "/me/profile/interests/{id}": "",
+ "/me/profile/languages": "",
+ "/me/profile/languages/{id}": "",
+ "/me/profile/names/{id}": "",
+ "/me/profile/notes": "",
+ "/me/profile/patents": "",
+ "/me/profile/patents/{id}": "",
+ "/me/profile/phones": "",
+ "/me/profile/phones/{id}": "",
+ "/me/profile/positions": "",
+ "/me/profile/positions/{id}": "",
+ "/me/profile/projects": "",
+ "/me/profile/projects/{id}": "",
+ "/me/profile/publications": "",
+ "/me/profile/publications/{id}": "",
+ "/me/profile/skills": "",
+ "/me/profile/skills/{id}": "",
+ "/me/profile/webaccounts": "",
+ "/me/profile/webaccounts/{id}": "",
+ "/me/profile/websites": "",
+ "/me/profile/websites/{id}": "",
+ "/me/registereddevices": "",
+ "/me/responsibilities": "",
+ "/me/settings": "",
+ "/me/sponsorof": "",
+ "/me/sponsors": "",
+ "/me/transitivememberof": "",
+ "/organization/{id}/branding": "",
+ "/organization/{id}/branding/localizations": "",
+ "/organization/{id}/branding/localizations/{id}": "",
+ "/organization/{id}/settings": "",
+ "/organization/{id}/settings/iteminsights": "least=DelegatedWork",
+ "/organization/{id}/settings/peopleinsights": "least=DelegatedWork",
+ "/organization/{id}/settings/profilecardproperties": "",
+ "/organization/{id}/settings/profilecardproperties/{id}": "",
+ "/users/{id}/settings/shiftpreferences": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/deleteddatetime": "least=Application",
+ "/users/{id}/memberof/{id}": "least=Application",
+ "/users/{id}/outlook/supportedlanguages": "least=Application",
+ "/users/{id}/outlook/supportedtimezones": "least=Application",
+ "/users/{id}/outlook/supportedtimezones(timezonestandard={value})": "least=Application",
+ "/users/{id}/photo": "",
+ "/users/{id}/photos": "",
+ "/users/{id}/photos/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/profile": "least=Application",
+ "/users/{id}/profile/account": "least=Application",
+ "/users/{id}/profile/account/{id}": "least=Application",
+ "/users/{id}/profile/addresses": "least=Application",
+ "/users/{id}/profile/addresses/{id}": "least=Application",
+ "/users/{id}/profile/anniversaries": "least=Application",
+ "/users/{id}/profile/anniversaries/{id}": "least=Application",
+ "/users/{id}/profile/awards": "least=Application",
+ "/users/{id}/profile/awards/{id}": "least=Application",
+ "/users/{id}/profile/certifications": "least=Application",
+ "/users/{id}/profile/certifications/{id}": "least=Application",
+ "/users/{id}/profile/educationalactivities": "least=Application",
+ "/users/{id}/profile/educationalactivities/{id}": "least=Application",
+ "/users/{id}/profile/emails": "least=Application",
+ "/users/{id}/profile/emails/{id}": "least=Application",
+ "/users/{id}/profile/interests": "least=Application",
+ "/users/{id}/profile/interests/{id}": "least=Application",
+ "/users/{id}/profile/languages": "least=Application",
+ "/users/{id}/profile/languages/{id}": "least=Application",
+ "/users/{id}/profile/names/{id}": "least=Application",
+ "/users/{id}/profile/notes": "least=Application",
+ "/users/{id}/profile/patents": "least=Application",
+ "/users/{id}/profile/patents/{id}": "least=Application",
+ "/users/{id}/profile/phones": "least=Application",
+ "/users/{id}/profile/phones/{id}": "least=Application",
+ "/users/{id}/profile/positions": "least=Application",
+ "/users/{id}/profile/positions/{id}": "least=Application",
+ "/users/{id}/profile/projects": "least=Application",
+ "/users/{id}/profile/projects/{id}": "least=Application",
+ "/users/{id}/profile/publications": "least=Application",
+ "/users/{id}/profile/publications/{id}": "least=Application",
+ "/users/{id}/profile/skills": "least=Application",
+ "/users/{id}/profile/skills/{id}": "least=Application",
+ "/users/{id}/profile/webaccounts": "least=Application",
+ "/users/{id}/profile/webaccounts/{id}": "least=Application",
+ "/users/{id}/profile/websites": "least=Application",
+ "/users/{id}/profile/websites/{id}": "least=Application",
+ "/users/{id}/responsibilities": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/profile/names": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/profile/notes/{id}": "least=Application",
+ "/users/{id}/responsibilities/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/profile/names": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/profile/notes/{id}": "",
+ "/me/responsibilities/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.ReadBasic.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' basic profiles",
+ "adminDescription": "Allows the app to read a basic set of profile properties of other users in your organization on behalf of the signed-in user. This includes display name, first and last name, email address, photo, id and security identifier. Also allows the app to read the full profile of the signed-in user.",
+ "userDisplayName": "Read all users' basic profiles",
+ "userDescription": "Allows the app to read a basic set of profile properties of other users in your organization on your behalf. Includes display name, first and last name, email address, photo, id and security identifier. Also allows the app to read the full profile of the signed-in user.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' basic profiles",
+ "adminDescription": "Allows the app to read a basic set of profile properties of users in your organization, without a signed-in user. This includes display name, first and last name, email address, photo, id and security identifier.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me": "",
+ "/me/deleteddatetime": "least=DelegatedWork",
+ "/me/findroomlists": "",
+ "/me/findrooms": "",
+ "/me/findrooms(roomlist={value})": "least=DelegatedWork",
+ "/me/outlook/supportedlanguages": "",
+ "/me/outlook/supportedtimezones": "",
+ "/me/outlook/supportedtimezones(timezonestandard={value})": "",
+ "/me/photo": "",
+ "/me/photos": "",
+ "/me/photos/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users": "least=DelegatedWork,Application",
+ "/users/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/findroomlists": "least=DelegatedWork",
+ "/users/{id}/findrooms": "least=DelegatedWork",
+ "/users/{id}/findrooms(roomlist={value})": "least=DelegatedWork",
+ "/users/{id}/outlook/supportedlanguages": "",
+ "/users/{id}/outlook/supportedtimezones": "",
+ "/users/{id}/outlook/supportedtimezones(timezonestandard={value})": "",
+ "/users/{id}/photo": "",
+ "/users/{id}/photos": "",
+ "/users/{id}/photos/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/profile": "",
+ "/me/profile/account": "",
+ "/me/profile/account/{id}": "",
+ "/me/profile/addresses": "",
+ "/me/profile/addresses/{id}": "",
+ "/me/profile/anniversaries": "",
+ "/me/profile/anniversaries/{id}": "",
+ "/me/profile/awards": "",
+ "/me/profile/awards/{id}": "",
+ "/me/profile/certifications": "",
+ "/me/profile/certifications/{id}": "",
+ "/me/profile/educationalactivities": "",
+ "/me/profile/educationalactivities/{id}": "",
+ "/me/profile/emails": "",
+ "/me/profile/emails/{id}": "",
+ "/me/profile/interests": "",
+ "/me/profile/interests/{id}": "",
+ "/me/profile/languages": "",
+ "/me/profile/languages/{id}": "",
+ "/me/profile/names/{id}": "",
+ "/me/profile/notes": "",
+ "/me/profile/patents": "",
+ "/me/profile/patents/{id}": "",
+ "/me/profile/phones": "",
+ "/me/profile/phones/{id}": "",
+ "/me/profile/positions": "",
+ "/me/profile/positions/{id}": "",
+ "/me/profile/projects": "",
+ "/me/profile/projects/{id}": "",
+ "/me/profile/publications": "",
+ "/me/profile/publications/{id}": "",
+ "/me/profile/skills": "",
+ "/me/profile/skills/{id}": "",
+ "/me/profile/webaccounts": "",
+ "/me/profile/webaccounts/{id}": "",
+ "/me/profile/websites": "",
+ "/me/profile/websites/{id}": "",
+ "/me/responsibilities": "",
+ "/users/{id}/profile": "",
+ "/users/{id}/profile/account": "",
+ "/users/{id}/profile/account/{id}": "",
+ "/users/{id}/profile/addresses": "",
+ "/users/{id}/profile/addresses/{id}": "",
+ "/users/{id}/profile/anniversaries": "",
+ "/users/{id}/profile/anniversaries/{id}": "",
+ "/users/{id}/profile/awards": "",
+ "/users/{id}/profile/awards/{id}": "",
+ "/users/{id}/profile/certifications": "",
+ "/users/{id}/profile/certifications/{id}": "",
+ "/users/{id}/profile/educationalactivities": "",
+ "/users/{id}/profile/educationalactivities/{id}": "",
+ "/users/{id}/profile/emails": "",
+ "/users/{id}/profile/emails/{id}": "",
+ "/users/{id}/profile/interests": "",
+ "/users/{id}/profile/interests/{id}": "",
+ "/users/{id}/profile/languages": "",
+ "/users/{id}/profile/languages/{id}": "",
+ "/users/{id}/profile/names/{id}": "",
+ "/users/{id}/profile/notes": "",
+ "/users/{id}/profile/patents": "",
+ "/users/{id}/profile/patents/{id}": "",
+ "/users/{id}/profile/phones": "",
+ "/users/{id}/profile/phones/{id}": "",
+ "/users/{id}/profile/positions": "",
+ "/users/{id}/profile/positions/{id}": "",
+ "/users/{id}/profile/projects": "",
+ "/users/{id}/profile/projects/{id}": "",
+ "/users/{id}/profile/publications": "",
+ "/users/{id}/profile/publications/{id}": "",
+ "/users/{id}/profile/skills": "",
+ "/users/{id}/profile/skills/{id}": "",
+ "/users/{id}/profile/webaccounts": "",
+ "/users/{id}/profile/webaccounts/{id}": "",
+ "/users/{id}/profile/websites": "",
+ "/users/{id}/profile/websites/{id}": "",
+ "/users/{id}/responsibilities": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/profile/names": "",
+ "/users/{id}/profile/names": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/profile/notes/{id}": "",
+ "/me/responsibilities/{id}": "",
+ "/users/{id}/profile/notes/{id}": "",
+ "/users/{id}/responsibilities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/translateexchangeids": "least=DelegatedWork",
+ "/users/{id}/translateexchangeids": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write access to user profile",
+ "adminDescription": "Allows the app to read your profile and basic company information. It also allows the app to update your profile information on your behalf.",
+ "userDisplayName": "Read and update your profile",
+ "userDescription": "Allows the app to read your profile and basic company information, and discover your group membership, reports and manager. It also allows the app to update your profile information on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write access to user profile",
+ "adminDescription": "Allows the app to read your profile. It also allows the app to update your profile information on your behalf.",
+ "userDisplayName": "Read and update your profile",
+ "userDescription": "Allows the app to read your profile, and discover your group membership, reports and manager. It also allows the app to update your profile information on your behalf.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me": "",
+ "/me/createdobjects": "",
+ "/users/{id}/createdobjects": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/reprocessAssignments": "",
+ "/me/invalidateallrefreshtokens": "",
+ "/organization/{id}/settings/profilecardproperties": "least=DelegatedWork",
+ "/users/{id}/cloudLicensing/assignments/reprocessAssignments": "",
+ "/users/{id}/invalidateallrefreshtokens": "",
+ "/users/validatepassword": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/invalidateallrefreshtokens": "least=DelegatedPersonal",
+ "/users/{id}/invalidateallrefreshtokens": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/me/photo": "least=DelegatedWork",
+ "/users/{id}/photo": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/me/profile": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/profile/account": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/addresses": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/anniversaries": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/awards": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/certifications": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/educationalactivities": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/emails": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/interests": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/languages": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/names": "",
+ "/me/profile/notes": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/patents": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/phones": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/positions": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/projects": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/publications": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/skills": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/webaccounts": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/websites": "least=DelegatedWork,DelegatedPersonal",
+ "/me/responsibilities": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/account": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/addresses": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/anniversaries": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/awards": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/certifications": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/educationalactivities": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/emails": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/interests": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/languages": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/names": "",
+ "/users/{id}/profile/notes": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/patents": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/phones": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/positions": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/projects": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/publications": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/skills": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/webaccounts": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/websites": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/responsibilities": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments": "",
+ "/users/{id}/cloudLicensing/assignments": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/profile/account/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/addresses/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/anniversaries/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/awards/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/certifications/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/educationalactivities/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/emails/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/interests/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/languages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/names/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/notes/{id}": "",
+ "/me/profile/patents/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/phones/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/positions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/projects/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/publications/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/skills/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/webaccounts/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/profile/websites/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/responsibilities/{id}": "",
+ "/users/{id}/profile/account/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/addresses/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/anniversaries/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/awards/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/certifications/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/educationalactivities/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/emails/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/interests/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/languages/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/names/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/notes/{id}": "",
+ "/users/{id}/profile/patents/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/phones/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/positions/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/projects/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/publications/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/skills/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/webaccounts/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/profile/websites/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/responsibilities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/me/settings": "least=DelegatedWork",
+ "/users/{id}/settings": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/settings/contactmergesuggestions": "least=DelegatedWork",
+ "/me/settings/iteminsights": "least=DelegatedWork",
+ "/users/{id}/settings/contactmergesuggestions": "least=DelegatedWork",
+ "/users/{id}/settings/iteminsights": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/translateexchangeids": "",
+ "/users/{id}/translateexchangeids": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/{id}": "",
+ "/organization/{id}/settings/profilecardproperties/{id}": "least=DelegatedWork",
+ "/users/{id}/cloudLicensing/assignments/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/settings/regionalandlanguagesettings": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": "least=DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/people/itemInsights": "",
+ "/me/cloudLicensing/assignmentErrors": "",
+ "/me/cloudLicensing/assignmentErrors/{id}": "",
+ "/me/cloudLicensing/assignments/{id}/allotment": "",
+ "/me/cloudLicensing/usageRights": "",
+ "/me/cloudLicensing/usageRights/{id}": "",
+ "/me/cloudLicensing/usageRights/{id}/assignments": "",
+ "/me/cloudLicensing/waitingMembers": "",
+ "/me/cloudLicensing/waitingMembers/{id}": "",
+ "/me/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/users/{id}/cloudLicensing/assignmentErrors": "",
+ "/users/{id}/cloudLicensing/assignmentErrors/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/users/{id}/cloudLicensing/usageRights": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/waitingMembers": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/users/{id}/usagerights": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/me/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' full profiles",
+ "adminDescription": "Allows the app to read and write the full set of profile properties, reports, and managers of other users in your organization, and read basic company properties, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all users' full profiles",
+ "userDescription": "Allows the app to read and write the full set of profile properties, reports, and managers of other users in your organization, and read basic company properties, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' full profiles",
+ "adminDescription": "Allows the app to read and update user profiles and read basic company properties without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/contacts/{id}/checkmembergroups": "",
+ "/contacts/{id}/checkmemberobjects": "",
+ "/contacts/{id}/getmemberobjects": "",
+ "/devices/{id}/checkmembergroups": "",
+ "/devices/{id}/checkmemberobjects": "",
+ "/devices/{id}/getmemberobjects": "",
+ "/directoryobjects/{id}/checkmembergroups": "",
+ "/directoryobjects/{id}/checkmemberobjects": "",
+ "/directoryobjects/{id}/getmemberobjects": "",
+ "/groups/{id}/checkmembergroups": "",
+ "/groups/{id}/checkmemberobjects": "",
+ "/groups/{id}/getmemberobjects": "",
+ "/invitations": "",
+ "/serviceprincipals/{id}/checkmembergroups": "",
+ "/serviceprincipals/{id}/checkmemberobjects": "",
+ "/serviceprincipals/{id}/getmemberobjects": "",
+ "/users/{id}/assignlicense": "",
+ "/users/{id}/checkmembergroups": "",
+ "/users/{id}/checkmemberobjects": "",
+ "/users/{id}/cloudLicensing/assignments/reprocessAssignments": "",
+ "/users/{id}/convertExternalToInternalMemberUser": "",
+ "/users/{id}/extendlifecycle": "least=DelegatedWork,Application",
+ "/users/{id}/getmemberobjects": "",
+ "/users/{id}/reprocesslicenseassignment": "least=DelegatedWork,Application",
+ "/users/{id}/revokesigninsessions": "",
+ "/users/{id}/translateexchangeids": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/checkmembergroups": "",
+ "/me/checkmemberobjects": "",
+ "/me/cloudLicensing/assignments/reprocessAssignments": "",
+ "/me/getmemberobjects": "",
+ "/me/revokesigninsessions": "",
+ "/me/translateexchangeids": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/people/itemInsights": "",
+ "/me": "",
+ "/me/cloudLicensing/assignmentErrors": "",
+ "/me/cloudLicensing/assignmentErrors/{id}": "",
+ "/me/cloudLicensing/assignments/{id}/allotment": "",
+ "/me/cloudLicensing/usageRights": "",
+ "/me/cloudLicensing/usageRights/{id}": "",
+ "/me/cloudLicensing/usageRights/{id}/assignments": "",
+ "/me/cloudLicensing/waitingMembers": "",
+ "/me/cloudLicensing/waitingMembers/{id}": "",
+ "/me/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/me/createdobjects": "",
+ "/me/directreports": "",
+ "/me/joinedteams": "",
+ "/me/licensedetails": "",
+ "/me/manager": "",
+ "/me/owneddevices": "",
+ "/me/ownedobjects": "",
+ "/me/registereddevices": "",
+ "/me/sponsorof": "",
+ "/me/sponsors": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/groups/{id}/cloudLicensing/usageRights": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}": "",
+ "/groups/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/accessibleTenants": "",
+ "/users/{id}/cloudLicensing/assignmentErrors": "",
+ "/users/{id}/cloudLicensing/assignmentErrors/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment": "",
+ "/users/{id}/cloudLicensing/usageRights": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}": "",
+ "/users/{id}/cloudLicensing/usageRights/{id}/assignments": "",
+ "/users/{id}/cloudLicensing/waitingMembers": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}": "",
+ "/users/{id}/cloudLicensing/waitingMembers/{id}/allotment": "",
+ "/users/{id}/createdobjects": "",
+ "/users/{id}/directreports": "",
+ "/users/{id}/joinedteams": "",
+ "/users/{id}/licensedetails": "",
+ "/users/{id}/owneddevices": "",
+ "/users/{id}/ownedobjects": "",
+ "/users/{id}/registereddevices": "",
+ "/users/{id}/sponsorof": "",
+ "/users/{id}/usagerights": "",
+ "/users/delta": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/profile": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/me/profile": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments": "",
+ "/users/{id}/cloudLicensing/assignments": "",
+ "/users/{id}/profile/account": "least=Application",
+ "/users/{id}/profile/addresses": "least=Application",
+ "/users/{id}/profile/anniversaries": "least=Application",
+ "/users/{id}/profile/awards": "least=Application",
+ "/users/{id}/profile/certifications": "least=Application",
+ "/users/{id}/profile/educationalactivities": "least=Application",
+ "/users/{id}/profile/emails": "least=Application",
+ "/users/{id}/profile/interests": "least=Application",
+ "/users/{id}/profile/languages": "least=Application",
+ "/users/{id}/profile/names": "",
+ "/users/{id}/profile/notes": "least=Application",
+ "/users/{id}/profile/patents": "least=Application",
+ "/users/{id}/profile/phones": "least=Application",
+ "/users/{id}/profile/positions": "least=Application",
+ "/users/{id}/profile/projects": "least=Application",
+ "/users/{id}/profile/publications": "least=Application",
+ "/users/{id}/profile/skills": "least=Application",
+ "/users/{id}/profile/webaccounts": "least=Application",
+ "/users/{id}/profile/websites": "least=Application",
+ "/users/{id}/responsibilities": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments": "",
+ "/me/profile/account": "",
+ "/me/profile/addresses": "",
+ "/me/profile/anniversaries": "",
+ "/me/profile/awards": "",
+ "/me/profile/certifications": "",
+ "/me/profile/educationalactivities": "",
+ "/me/profile/emails": "",
+ "/me/profile/interests": "",
+ "/me/profile/languages": "",
+ "/me/profile/names": "",
+ "/me/profile/notes": "",
+ "/me/profile/patents": "",
+ "/me/profile/phones": "",
+ "/me/profile/positions": "",
+ "/me/profile/projects": "",
+ "/me/profile/publications": "",
+ "/me/profile/skills": "",
+ "/me/profile/webaccounts": "",
+ "/me/profile/websites": "",
+ "/me/responsibilities": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}": "",
+ "/users/{id}/cloudLicensing/assignments/{id}": "",
+ "/users/{id}/profile/account/{id}": "least=Application",
+ "/users/{id}/profile/addresses/{id}": "least=Application",
+ "/users/{id}/profile/anniversaries/{id}": "least=Application",
+ "/users/{id}/profile/awards/{id}": "least=Application",
+ "/users/{id}/profile/certifications/{id}": "least=Application",
+ "/users/{id}/profile/educationalactivities/{id}": "least=Application",
+ "/users/{id}/profile/emails/{id}": "least=Application",
+ "/users/{id}/profile/interests/{id}": "least=Application",
+ "/users/{id}/profile/languages/{id}": "least=Application",
+ "/users/{id}/profile/names/{id}": "least=Application",
+ "/users/{id}/profile/notes/{id}": "",
+ "/users/{id}/profile/patents/{id}": "least=Application",
+ "/users/{id}/profile/phones/{id}": "least=Application",
+ "/users/{id}/profile/positions/{id}": "least=Application",
+ "/users/{id}/profile/projects/{id}": "least=Application",
+ "/users/{id}/profile/publications/{id}": "least=Application",
+ "/users/{id}/profile/skills/{id}": "least=Application",
+ "/users/{id}/profile/webaccounts/{id}": "least=Application",
+ "/users/{id}/profile/websites/{id}": "least=Application",
+ "/users/{id}/responsibilities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/{id}": "",
+ "/me/profile/account/{id}": "",
+ "/me/profile/addresses/{id}": "",
+ "/me/profile/anniversaries/{id}": "",
+ "/me/profile/awards/{id}": "",
+ "/me/profile/certifications/{id}": "",
+ "/me/profile/educationalactivities/{id}": "",
+ "/me/profile/emails/{id}": "",
+ "/me/profile/interests/{id}": "",
+ "/me/profile/languages/{id}": "",
+ "/me/profile/names/{id}": "",
+ "/me/profile/notes/{id}": "",
+ "/me/profile/patents/{id}": "",
+ "/me/profile/phones/{id}": "",
+ "/me/profile/positions/{id}": "",
+ "/me/profile/projects/{id}": "",
+ "/me/profile/publications/{id}": "",
+ "/me/profile/skills/{id}": "",
+ "/me/profile/webaccounts/{id}": "",
+ "/me/profile/websites/{id}": "",
+ "/me/responsibilities/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/settings": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/settings/contactinsights": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/me/cloudLicensing/assignments/{id}/assignedTo/$ref": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/settings": "",
+ "/organization/{id}/settings/iteminsights": "",
+ "/organization/{id}/settings/peopleinsights": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/organization/{id}/settings/profilecardproperties": "",
+ "/users/validatepassword": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/organization/{id}/settings/profilecardproperties/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/settings/regionalandlanguagesettings": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/groups/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/groups/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/settings/regionalandlanguagesettings": "least=Application",
+ "/users/{id}/cloudLicensing/assignments/{id}/allotment/$ref": "",
+ "/users/{id}/cloudLicensing/assignments/{id}/assignedTo/$ref": "",
+ "/users/{id}/getTeamsLicensingDetails": "least=Application,DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/users": "least=DelegatedWork,Application",
+ "/users/{id}/sponsors": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/getTeamsLicensingDetails": "least=Application,DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/manager": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/photo": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "PATCH",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/settings/shiftpreferences": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/sponsors/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/deletedItems/{id}/restore": "",
+ "/users/{id}/getTeamsLicensingDetails": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "User.ReadWrite.CrossCloud": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write profiles of users that originate from an external cloud.",
+ "adminDescription": "Allows the app to read and update external cloud user profiles without a signed in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/photo": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/directory/deletedItems/{id}/restore": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "idsync"
+ }
+ },
+ "User.RevokeSessions.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Revoke all sign in sessions for a user",
+ "adminDescription": "Allow the app to revoke all sign in sessions for a user, on behalf of a signed-in user.",
+ "userDisplayName": "Revokes all sign in sessions for a user",
+ "userDescription": "Allow the app to revoke all sign in sessions for a user on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Revoke all sign in sessions for a user",
+ "adminDescription": "Allow the app to revoke all sign in sessions for a user, without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/agentSignInSessions/{id}/revoke": "least=DelegatedWork,Application",
+ "/me/invalidateAllRefreshTokens": "least=DelegatedWork,Application",
+ "/me/revokesigninsessions": "least=DelegatedWork,Application",
+ "/users/{id}/agentSignInSessions/{id}/revoke": "least=DelegatedWork,Application",
+ "/users/{id}/invalidateAllRefreshTokens": "least=DelegatedWork,Application",
+ "/users/{id}/revokeSignInSessions": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "azureaduserentity"
+ }
+ },
+ "UserActivity.ReadWrite.CreatedByApp": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write app activity to users' activity feed",
+ "adminDescription": "Allows the app to read and report the signed-in user's activity in the app.",
+ "userDisplayName": "Read and write app activity to your activity feed",
+ "userDescription": "Allows the app to read and report your activity in the app.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read and write app activity to users' activity feed",
+ "adminDescription": "Allows the app to read and report the signed-in user's activity in the app.",
+ "userDisplayName": "Read and write app activity to your activity feed",
+ "userDescription": "Allows the app to read and report your activity in the app.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/activities": "least=DelegatedWork,DelegatedPersonal",
+ "/me/activities/recent": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/activities": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/activities/recent": "least=DelegatedWork,DelegatedPersonal"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "DELETE",
+ "PUT"
+ ],
+ "paths": {
+ "/me/activities/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/activities/{id}/historyitems/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/activities/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/activities/{id}/historyitems/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "afsadmins"
+ }
+ },
+ "UserAuthenticationMethod.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user authentication methods.",
+ "adminDescription": "Allows the app to read the signed-in user's authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like the signed-in user's passwords, or to sign-in or otherwise use the signed-in user's authentication methods.",
+ "userDisplayName": "Read your authentication methods.",
+ "userDescription": "Allows the app to read your authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like your passwords, or to sign-in or otherwise use your authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": "",
+ "/me/authentication/emailmethods/{id}": "",
+ "/me/authentication/fido2Methods": "",
+ "/me/authentication/fido2Methods/{id}": "",
+ "/me/authentication/hardwareOathMethods": "",
+ "/me/authentication/hardwareOathMethods/{id}": "",
+ "/me/authentication/methods": "least=DelegatedWork",
+ "/me/authentication/methods/{id}": "least=DelegatedWork",
+ "/me/authentication/methods/{id}/isUpdateSupported": "least=DelegatedWork",
+ "/me/authentication/microsoftauthenticatormethods": "",
+ "/me/authentication/microsoftauthenticatormethods/{id}": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "",
+ "/me/authentication/passwordmethods": "",
+ "/me/authentication/passwordmethods/{id}": "",
+ "/me/authentication/passwordmethods/{id}/isUpdateSupported": "",
+ "/me/authentication/phonemethods": "",
+ "/me/authentication/phonemethods/{id}": "",
+ "/me/authentication/platformCredentialMethods": "",
+ "/me/authentication/platformCredentialMethods/{id}": "",
+ "/me/authentication/qrcodepinmethod": "",
+ "/me/authentication/qrcodepinmethod/pin": "",
+ "/me/authentication/qrcodepinmethod/standardqrcode": "",
+ "/me/authentication/qrcodepinmethod/temporaryqrcode": "",
+ "/me/authentication/softwareoathmethods": "",
+ "/me/authentication/softwareoathmethods/{id}": "",
+ "/me/authentication/temporaryaccesspassmethods": "",
+ "/me/authentication/temporaryaccesspassmethods/{id}": "",
+ "/me/authentication/windowshelloforbusinessmethods": "",
+ "/me/authentication/windowshelloforbusinessmethods/{id}": "",
+ "/users/{id}/authentication/emailmethods": "",
+ "/users/{id}/authentication/emailmethods/{id}": "",
+ "/users/{id}/authentication/externalauthenticationmethods": "",
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": "",
+ "/users/{id}/authentication/federatedIdentityCredentialMethods": "least=DelegatedWork",
+ "/users/{id}/authentication/federatedIdentityCredentialMethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/fido2Methods": "",
+ "/users/{id}/authentication/fido2Methods/{id}": "",
+ "/users/{id}/authentication/hardwareOathMethods": "",
+ "/users/{id}/authentication/hardwareOathMethods/{id}": "",
+ "/users/{id}/authentication/methods": "",
+ "/users/{id}/authentication/methods/{id}": "",
+ "/users/{id}/authentication/methods/{id}/isUpdateSupported": "least=DelegatedWork",
+ "/users/{id}/authentication/microsoftauthenticatormethods": "",
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "",
+ "/users/{id}/authentication/operations/{id}": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "",
+ "/users/{id}/authentication/passwordmethods": "",
+ "/users/{id}/authentication/passwordmethods/{id}": "",
+ "/users/{id}/authentication/passwordmethods/{id}/isUpdateSupported": "",
+ "/users/{id}/authentication/phonemethods": "",
+ "/users/{id}/authentication/phonemethods/{id}": "",
+ "/users/{id}/authentication/platformCredentialMethods": "",
+ "/users/{id}/authentication/platformCredentialMethods/{id}": "",
+ "/users/{id}/authentication/qrcodepinmethod": "",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": "",
+ "/users/{id}/authentication/softwareoathmethods": "",
+ "/users/{id}/authentication/softwareoathmethods/{id}": "",
+ "/users/{id}/authentication/temporaryaccesspassmethods": "",
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": "",
+ "/users/{id}/authentication/windowshelloforbusinessmethods": "",
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthenticationMethod.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' authentication methods",
+ "adminDescription": "Allows the app to read authentication methods of all users in your organization that the signed-in user has access to. Authentication methods include things like a user's phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' authentication methods",
+ "userDescription": "Allows the app to read authentication methods of all users you have access to in your organization. Authentication methods include things like a user's phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": " Read all users' authentication methods",
+ "adminDescription": " Allows the app to read authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user's phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": "least=Application",
+ "/me/authentication/emailmethods/{id}": "least=Application",
+ "/me/authentication/hardwareOathMethods": "",
+ "/me/authentication/hardwareOathMethods/{id}": "",
+ "/me/authentication/methods": "least=Application",
+ "/me/authentication/methods/{id}": "least=Application",
+ "/me/authentication/microsoftauthenticatormethods": "least=Application",
+ "/me/authentication/microsoftauthenticatormethods/{id}": "least=Application",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods": "least=Application",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=Application",
+ "/me/authentication/passwordmethods": "least=Application",
+ "/me/authentication/passwordmethods/{id}": "least=Application",
+ "/me/authentication/phonemethods": "least=Application",
+ "/me/authentication/phonemethods/{id}": "least=Application",
+ "/me/authentication/platformCredentialMethods": "least=Application",
+ "/me/authentication/platformCredentialMethods/{id}": "least=Application",
+ "/me/authentication/qrcodepinmethod": "least=Application",
+ "/me/authentication/qrcodepinmethod/pin": "least=Application",
+ "/me/authentication/qrcodepinmethod/standardqrcode": "least=Application",
+ "/me/authentication/qrcodepinmethod/temporaryqrcode": "least=Application",
+ "/me/authentication/softwareoathmethods": "least=Application",
+ "/me/authentication/softwareoathmethods/{id}": "least=Application",
+ "/me/authentication/temporaryaccesspassmethods": "least=Application",
+ "/me/authentication/temporaryaccesspassmethods/{id}": "least=Application",
+ "/me/authentication/windowshelloforbusinessmethods": "least=Application",
+ "/me/authentication/windowshelloforbusinessmethods/{id}": "least=Application",
+ "/users/{id}/authentication/emailmethods": "",
+ "/users/{id}/authentication/emailmethods/{id}": "",
+ "/users/{id}/authentication/externalauthenticationmethods": "",
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": "",
+ "/users/{id}/authentication/federatedIdentityCredentialMethods": "least=Application",
+ "/users/{id}/authentication/federatedIdentityCredentialMethods/{id}": "least=Application",
+ "/users/{id}/authentication/fido2Methods/{id}": "",
+ "/users/{id}/authentication/hardwareOathMethods": "",
+ "/users/{id}/authentication/hardwareOathMethods/{id}": "",
+ "/users/{id}/authentication/methods": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/methods/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/microsoftauthenticatormethods": "",
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "",
+ "/users/{id}/authentication/passwordmethods": "",
+ "/users/{id}/authentication/passwordmethods/{id}": "",
+ "/users/{id}/authentication/phonemethods": "",
+ "/users/{id}/authentication/phonemethods/{id}": "",
+ "/users/{id}/authentication/platformCredentialMethods": "",
+ "/users/{id}/authentication/platformCredentialMethods/{id}": "",
+ "/users/{id}/authentication/qrcodepinmethod": "",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": "",
+ "/users/{id}/authentication/resourcekeyauthenticationmethods": "",
+ "/users/{id}/authentication/resourcekeyauthenticationmethods/{id}": "",
+ "/users/{id}/authentication/softwareoathmethods": "",
+ "/users/{id}/authentication/softwareoathmethods/{id}": "",
+ "/users/{id}/authentication/temporaryaccesspassmethods": "",
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": "",
+ "/users/{id}/authentication/windowshelloforbusinessmethods": "",
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/operations/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthenticationMethod.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write user authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like the signed-in user's passwords, or to sign-in or otherwise use the signed-in user's authentication methods. ",
+ "userDisplayName": "Read and write your authentication methods",
+ "userDescription": "Allows the app to read and write your authentication methods, including phone numbers and Authenticator app settings.This does not allow the app to see secret information like your passwords, or to sign-in or otherwise use your authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": "least=DelegatedWork",
+ "/me/authentication/phonemethods": "least=DelegatedWork",
+ "/users/{id}/authentication/emailmethods": "",
+ "/users/{id}/authentication/externalauthenticationmethods": "",
+ "/users/{id}/authentication/hardwareOathMethods": "",
+ "/users/{id}/authentication/phonemethods": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods/{id}": "least=DelegatedWork",
+ "/me/authentication/phonemethods/{id}": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod/pin": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod/standardqrcode": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod/temporaryqrcode": "least=DelegatedWork",
+ "/users/{id}/authentication/emailmethods/{id}": "",
+ "/users/{id}/authentication/phonemethods/{id}": "",
+ "/users/{id}/authentication/qrcodepinmethod": "",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/fido2Methods/{id}": "",
+ "/users/{id}/authentication/fido2Methods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/fido2Methods": "",
+ "/me/authentication/fido2Methods/{id}": "",
+ "/me/authentication/hardwareoathmethods": "",
+ "/me/authentication/methods": "",
+ "/me/authentication/methods/{id}": "",
+ "/me/authentication/methods/{id}/isUpdateSupported": "",
+ "/me/authentication/microsoftauthenticatormethods": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/me/authentication/passwordmethods": "",
+ "/me/authentication/passwordmethods/{id}": "",
+ "/me/authentication/passwordmethods/{id}/isUpdateSupported": "",
+ "/me/authentication/platformCredentialMethods": "",
+ "/me/authentication/softwareoathmethods": "",
+ "/me/authentication/temporaryaccesspassmethods": "",
+ "/me/authentication/windowshelloforbusinessmethods": "",
+ "/users/{id}/authentication/federatedIdentityCredentialMethods": "",
+ "/users/{id}/authentication/fido2Methods": "",
+ "/users/{id}/authentication/fido2Methods/{id}": "",
+ "/users/{id}/authentication/methods": "",
+ "/users/{id}/authentication/methods/{id}": "",
+ "/users/{id}/authentication/methods/{id}/isUpdateSupported": "",
+ "/users/{id}/authentication/microsoftauthenticatormethods": "",
+ "/users/{id}/authentication/operations/{id}": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/users/{id}/authentication/passwordmethods": "",
+ "/users/{id}/authentication/passwordmethods/{id}": "",
+ "/users/{id}/authentication/passwordmethods/{id}/isUpdateSupported": "",
+ "/users/{id}/authentication/platformCredentialMethods": "",
+ "/users/{id}/authentication/softwareoathmethods": "",
+ "/users/{id}/authentication/temporaryaccesspassmethods": "",
+ "/users/{id}/authentication/windowshelloforbusinessmethods": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/hardwareoathmethods/{id}": "least=DelegatedWork",
+ "/me/authentication/microsoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/me/authentication/platformCredentialMethods/{id}": "least=DelegatedWork",
+ "/me/authentication/softwareoathmethods/{id}": "least=DelegatedWork",
+ "/me/authentication/temporaryaccesspassmethods/{id}": "least=DelegatedWork",
+ "/me/authentication/windowshelloforbusinessmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": "",
+ "/users/{id}/authentication/federatedIdentityCredentialMethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/hardwareOathMethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/platformCredentialMethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/softwareoathmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/fido2Methods": "",
+ "/me/authentication/hardwareOathMethods": "",
+ "/me/authentication/hardwareOathMethods/{id}/activate": "",
+ "/me/authentication/hardwareOathMethods/assignAndActivate": "",
+ "/me/authentication/hardwareOathMethods/assignAndActivateBySerialNumber": "",
+ "/me/authentication/hardwareOathMethods/deactivate": "",
+ "/me/authentication/phonemethods/{id}/disablesmssignin": "",
+ "/me/authentication/phonemethods/{id}/enablesmssignin": "",
+ "/users/{id}/authentication/hardwareOathMethods/{id}/activate": "",
+ "/users/{id}/authentication/hardwareOathMethods/assignAndActivate": "",
+ "/users/{id}/authentication/hardwareOathMethods/assignAndActivateBySerialNumber": "",
+ "/users/{id}/authentication/hardwareOathMethods/deactivate": "",
+ "/users/{id}/authentication/phonemethods/{id}/disablesmssignin": "",
+ "/users/{id}/authentication/phonemethods/{id}/enablesmssignin": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthenticationMethod.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' authentication methods.",
+ "adminDescription": " Allows the app to read and write authentication methods of all users in your organization that the signed-in user has access to. Authentication methods include things like a user's phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' authentication methods",
+ "userDescription": "Allows the app to read and write authentication methods of all users you have access to in your organization. Authentication methods include things like a user's phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' authentication methods ",
+ "adminDescription": "Allows the application to read and write authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user's phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 4
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": "least=Application",
+ "/me/authentication/hardwareOathMethods": "least=DelegatedWork,Application",
+ "/me/authentication/phonemethods": "least=Application",
+ "/users/{id}/authentication/emailmethods": "least=Application",
+ "/users/{id}/authentication/externalauthenticationmethods": "",
+ "/users/{id}/authentication/federatedIdentityCredentialMethods": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/hardwareOathMethods": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/phonemethods": "least=Application",
+ "/users/{id}/authentication/temporaryaccesspassmethods": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods/{id}": "least=Application",
+ "/me/authentication/phonemethods/{id}": "least=Application",
+ "/me/authentication/qrcodepinmethod": "least=Application",
+ "/me/authentication/qrcodepinmethod/pin": "least=Application",
+ "/me/authentication/qrcodepinmethod/standardqrcode": "least=Application",
+ "/me/authentication/qrcodepinmethod/temporaryqrcode": "least=Application",
+ "/users/{id}/authentication/emailmethods/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/phonemethods/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/qrcodepinmethod": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/authentication/fido2Methods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/methods": "",
+ "/me/authentication/methods/{id}": "",
+ "/me/authentication/microsoftauthenticatormethods": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/me/authentication/passwordmethods": "",
+ "/me/authentication/passwordmethods/{id}": "",
+ "/me/authentication/platformCredentialMethods": "",
+ "/me/authentication/softwareoathmethods": "",
+ "/me/authentication/temporaryaccesspassmethods": "",
+ "/me/authentication/windowshelloforbusinessmethods": "",
+ "/users/{id}/authentication/federatedIdentityCredentialMethods": "",
+ "/users/{id}/authentication/fido2Methods/creationOptions": "",
+ "/users/{id}/authentication/methods": "",
+ "/users/{id}/authentication/methods/{id}": "",
+ "/users/{id}/authentication/microsoftauthenticatormethods": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/users/{id}/authentication/passwordmethods": "",
+ "/users/{id}/authentication/passwordmethods/{id}": "",
+ "/users/{id}/authentication/platformCredentialMethods": "",
+ "/users/{id}/authentication/softwareoathmethods": "",
+ "/users/{id}/authentication/windowshelloforbusinessmethods": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/hardwareoathmethods/{id}": "least=DelegatedWork,Application",
+ "/me/authentication/microsoftauthenticatormethods/{id}": "least=Application",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=Application",
+ "/me/authentication/platformCredentialMethods/{id}": "least=Application",
+ "/me/authentication/softwareoathmethods/{id}": "least=Application",
+ "/me/authentication/temporaryaccesspassmethods/{id}": "least=Application",
+ "/me/authentication/windowshelloforbusinessmethods/{id}": "least=Application",
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": "",
+ "/users/{id}/authentication/federatedIdentityCredentialMethods/{id}": "least=Application",
+ "/users/{id}/authentication/fido2Methods/{id}": "",
+ "/users/{id}/authentication/hardwareOathMethods/{id}": "",
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "least=Application",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=Application",
+ "/users/{id}/authentication/platformCredentialMethods/{id}": "least=Application",
+ "/users/{id}/authentication/resourcekeyauthenticationmethods/{id}": "",
+ "/users/{id}/authentication/softwareoathmethods/{id}": "least=Application",
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": "least=Application",
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/hardwareOathMethods/{id}/activate": "least=Application",
+ "/me/authentication/hardwareOathMethods/assignAndActivate": "least=Application",
+ "/me/authentication/hardwareOathMethods/assignAndActivateBySerialNumber": "least=Application",
+ "/me/authentication/hardwareOathMethods/deactivate": "least=Application",
+ "/me/authentication/phonemethods/{id}/disablesmssignin": "least=Application",
+ "/me/authentication/phonemethods/{id}/enablesmssignin": "least=Application",
+ "/users/{id}/authentication/fido2Methods": "",
+ "/users/{id}/authentication/hardwareOathMethods/{id}/activate": "",
+ "/users/{id}/authentication/hardwareOathMethods/assignAndActivate": "",
+ "/users/{id}/authentication/hardwareOathMethods/assignAndActivateBySerialNumber": "",
+ "/users/{id}/authentication/hardwareOathMethods/deactivate": "",
+ "/users/{id}/authentication/phonemethods/{id}/disablesmssignin": "",
+ "/users/{id}/authentication/phonemethods/{id}/enablesmssignin": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/authentication/methods/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod": "least=Application",
+ "/users/{id}/authentication/qrcodepinmethod": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/authentication/methods/{id}/disablesmssignin": "least=DelegatedWork",
+ "/users/{id}/authentication/methods/{id}/enablesmssignin": "least=DelegatedWork",
+ "/users/{id}/authentication/methods/{id}/resetpassword": "least=DelegatedWork",
+ "/users/{id}/authentication/passwordmethods/{id}/resetpassword": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/operations/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/authentication/phonemethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Email.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's email authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's email authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your email authentication methods",
+ "userDescription": "Allows the app to read your email authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": "least=DelegatedWork",
+ "/me/authentication/emailmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/emailmethods": "least=DelegatedWork",
+ "/users/{id}/authentication/emailmethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Email.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' email methods",
+ "adminDescription": "Allows the app to read email methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' email methods",
+ "userDescription": "Allows the app to read email methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' email methods",
+ "adminDescription": "Allows the app to read email methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": "",
+ "/me/authentication/emailmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/emailmethods": "least=Application",
+ "/users/{id}/authentication/emailmethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Email.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's email authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's email authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your email authentication methods",
+ "userDescription": "Allows the app to read and write your email authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": "",
+ "/me/authentication/emailmethods/{id}": "",
+ "/users/{id}/authentication/emailmethods": "",
+ "/users/{id}/authentication/emailmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": "least=DelegatedWork",
+ "/users/{id}/authentication/emailmethods": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/emailmethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Email.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' email methods.",
+ "adminDescription": "Allows the app to read and write email methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' email methods",
+ "userDescription": "Allows the app to read and write email methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' email methods",
+ "adminDescription": "Allows the application to read and write email methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": "",
+ "/me/authentication/emailmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/emailmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/emailmethods": "",
+ "/users/{id}/authentication/emailmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/authentication/emailmethods": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/authentication/emailmethods/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-External.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's external authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's external authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your external authentication methods",
+ "userDescription": "Allows the app to read your external authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/externalauthenticationmethods": "least=DelegatedWork",
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-External.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' external authentication methods",
+ "adminDescription": "Allows the app to read external authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' external authentication methods",
+ "userDescription": "Allows the app to read external authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' external authentication methods",
+ "adminDescription": "Allows the app to read external authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/externalauthenticationmethods": "least=Application",
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-External.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's external authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's external authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your external authentication methods",
+ "userDescription": "Allows the app to read and write your external authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/externalauthenticationmethods": "",
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/authentication/externalauthenticationmethods": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-External.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' external methods.",
+ "adminDescription": "Allows the app to read and write external authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' external authentication methods",
+ "userDescription": "Allows the app to read and write external authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' external authentication methods",
+ "adminDescription": "Allows the application to read and write external authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/externalauthenticationmethods": "",
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/authentication/externalauthenticationmethods": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/authentication/externalauthenticationmethods/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-HardwareOATH.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's HardwareOATH authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's HardwareOATH authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your HardwareOATH authentication methods",
+ "userDescription": "Allows the app to read your HardwareOATH authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/hardwareOathMethods": "least=DelegatedWork",
+ "/me/authentication/hardwareOathMethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/hardwareOathMethods": "least=DelegatedWork",
+ "/users/{id}/authentication/hardwareOathMethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-HardwareOATH.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' HardwareOATH authentication methods",
+ "adminDescription": "Allows the app to read HardwareOATH authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' HardwareOATH authentication methods",
+ "userDescription": "Allows the app to read HardwareOATH authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' HardwareOATH authentication methods",
+ "adminDescription": "Allows the app to read HardwareOATH authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/hardwareOathMethods": "",
+ "/me/authentication/hardwareOathMethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/hardwareOathMethods": "least=Application",
+ "/users/{id}/authentication/hardwareOathMethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-HardwareOATH.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's HardwareOATH authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's HardwareOATH authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your HardwareOATH authentication methods",
+ "userDescription": "Allows the app to read and write your HardwareOATH authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/hardwareOathMethods": "",
+ "/me/authentication/hardwareOathMethods/{id}": "",
+ "/users/{id}/authentication/hardwareOathMethods": "",
+ "/users/{id}/authentication/hardwareOathMethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/hardwareOathMethods": "least=DelegatedWork",
+ "/me/authentication/hardwareOathMethods/{id}/activate": "least=DelegatedWork",
+ "/me/authentication/hardwareOathMethods/assignAndActivate": "least=DelegatedWork",
+ "/me/authentication/hardwareOathMethods/assignAndActivateBySerialNumber": "least=DelegatedWork",
+ "/me/authentication/hardwareOathMethods/deactivate": "least=DelegatedWork",
+ "/users/{id}/authentication/hardwareOathMethods": "least=DelegatedWork",
+ "/users/{id}/authentication/hardwareOathMethods/{id}/activate": "least=DelegatedWork",
+ "/users/{id}/authentication/hardwareOathMethods/assignAndActivate": "least=DelegatedWork",
+ "/users/{id}/authentication/hardwareOathMethods/assignAndActivateBySerialNumber": "least=DelegatedWork",
+ "/users/{id}/authentication/hardwareOathMethods/deactivate": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/hardwareOathMethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/hardwareOathMethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-HardwareOATH.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' HardwareOATH methods.",
+ "adminDescription": "Allows the app to read and write HardwareOATH authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' HardwareOATH authentication methods",
+ "userDescription": "Allows the app to read and write HardwareOATH authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' HardwareOATH authentication methods",
+ "adminDescription": "Allows the application to read and write HardwareOATH authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/hardwareOathMethods": "",
+ "/me/authentication/hardwareOathMethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/hardwareOathMethods": "",
+ "/me/authentication/hardwareOathMethods/{id}/activate": "",
+ "/me/authentication/hardwareOathMethods/assignAndActivate": "",
+ "/me/authentication/hardwareOathMethods/assignAndActivateBySerialNumber": "",
+ "/me/authentication/hardwareOathMethods/deactivate": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/hardwareOathMethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/hardwareOathMethods": "",
+ "/users/{id}/authentication/hardwareOathMethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/authentication/hardwareOathMethods": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/hardwareOathMethods/{id}/activate": "least=Application",
+ "/users/{id}/authentication/hardwareOathMethods/assignAndActivate": "least=Application",
+ "/users/{id}/authentication/hardwareOathMethods/assignAndActivateBySerialNumber": "least=Application",
+ "/users/{id}/authentication/hardwareOathMethods/deactivate": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/authentication/hardwareOathMethods/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-MicrosoftAuthApp.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's Microsoft Authenticator authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's Microsoft Authenticator authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your Microsoft Authenticator authentication methods",
+ "userDescription": "Allows the app to read your Microsoft Authenticator authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/microsoftauthenticatormethods": "least=DelegatedWork",
+ "/me/authentication/microsoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods": "least=DelegatedWork",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/microsoftauthenticatormethods": "least=DelegatedWork",
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods": "least=DelegatedWork",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-MicrosoftAuthApp.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' Microsoft authentication methods",
+ "adminDescription": "Allows the app to read Microsoft authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' Microsoft authentication methods",
+ "userDescription": "Allows the app to read Microsoft authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' Microsoft authentication methods",
+ "adminDescription": "Allows the app to read Microsoft authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/microsoftauthenticatormethods": "",
+ "/me/authentication/microsoftauthenticatormethods/{id}": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/microsoftauthenticatormethods": "least=Application",
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "least=Application",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods": "least=Application",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-MicrosoftAuthApp.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's Microsoft Authenticator authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's Microsoft Authenticator authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your Microsoft Authenticator authentication methods",
+ "userDescription": "Allows the app to read and write your Microsoft Authenticator authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/microsoftauthenticatormethods": "",
+ "/me/authentication/microsoftauthenticatormethods/{id}": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "",
+ "/users/{id}/authentication/microsoftauthenticatormethods": "",
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/microsoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-MicrosoftAuthApp.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' Microsoft Authentication methods.",
+ "adminDescription": "Allows the app to read and write Microsoft Authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' Microsoft Authentication methods",
+ "userDescription": "Allows the app to read and write Microsoft Authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' Microsoft Authentication methods",
+ "adminDescription": "Allows the application to read and write Microsoft Authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/microsoftauthenticatormethods": "",
+ "/me/authentication/microsoftauthenticatormethods/{id}": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/microsoftauthenticatormethods/{id}": "",
+ "/me/authentication/passwordlessmicrosoftauthenticatormethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/microsoftauthenticatormethods": "",
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods": "",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/authentication/microsoftauthenticatormethods/{id}": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/passwordlessmicrosoftauthenticatormethods/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Passkey.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's passkey authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's passkey authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your passkey authentication methods",
+ "userDescription": "Allows the app to read your passkey authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/fido2Methods": "least=DelegatedWork",
+ "/me/authentication/fido2Methods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/fido2Methods": "least=DelegatedWork",
+ "/users/{id}/authentication/fido2Methods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Passkey.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' passkey authentication methods",
+ "adminDescription": "Allows the app to read passkey authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' passkey authentication methods",
+ "userDescription": "Allows the app to read passkey authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' passkey authentication methods",
+ "adminDescription": "Allows the app to read passkey authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/fido2Methods": "least=Application",
+ "/users/{id}/authentication/fido2Methods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Passkey.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's passkey authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's passkey authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your passkey authentication methods",
+ "userDescription": "Allows the app to read and write your passkey authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/fido2Methods": "",
+ "/me/authentication/fido2Methods/{id}": "",
+ "/me/authentication/fido2Methods/creationOptions": "least=DelegatedWork",
+ "/users/{id}/authentication/fido2Methods": "",
+ "/users/{id}/authentication/fido2Methods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/fido2Methods": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/fido2Methods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/fido2Methods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Passkey.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' passkey methods.",
+ "adminDescription": "Allows the app to read and write passkey authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' passkey authentication methods",
+ "userDescription": "Allows the app to read and write passkey authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' passkey authentication methods",
+ "adminDescription": "Allows the application to read and write passkey authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/fido2Methods/{id}": "",
+ "/users/{id}/authentication/fido2Methods/creationOptions": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/authentication/fido2Methods": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/authentication/fido2Methods/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Password.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's password authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's password authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your password authentication methods",
+ "userDescription": "Allows the app to read your password authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/passwordmethods": "least=DelegatedWork",
+ "/me/authentication/passwordmethods/{id}": "least=DelegatedWork",
+ "/me/authentication/passwordmethods/{id}/isUpdateSupported": "least=DelegatedWork",
+ "/users/{id}/authentication/passwordmethods": "least=DelegatedWork",
+ "/users/{id}/authentication/passwordmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/passwordmethods/{id}/isUpdateSupported": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Password.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' password authentication methods",
+ "adminDescription": "Allows the app to read password authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' password authentication methods",
+ "userDescription": "Allows the app to read password authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' password authentication methods",
+ "adminDescription": "Allows the app to read password authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/passwordmethods": "",
+ "/me/authentication/passwordmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/passwordmethods": "least=Application",
+ "/users/{id}/authentication/passwordmethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Password.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's password authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's password authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your password authentication methods",
+ "userDescription": "Allows the app to read and write your password authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/passwordmethods": "",
+ "/me/authentication/passwordmethods/{id}": "",
+ "/me/authentication/passwordmethods/{id}/isUpdateSupported": "",
+ "/users/{id}/authentication/passwordmethods": "",
+ "/users/{id}/authentication/passwordmethods/{id}": "",
+ "/users/{id}/authentication/passwordmethods/{id}/isUpdateSupported": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Password.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' password methods.",
+ "adminDescription": "Allows the app to read and write password authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' password authentication methods",
+ "userDescription": "Allows the app to read and write password authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' password authentication methods",
+ "adminDescription": "Allows the application to read and write password authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/passwordmethods": "",
+ "/me/authentication/passwordmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/passwordmethods": "",
+ "/users/{id}/authentication/passwordmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/authentication/passwordmethods/{id}/changepassword": "least=DelegatedWork",
+ "/users/{id}/authentication/passwordmethods/{id}/resetpassword": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Phone.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's phone authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's phone authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your phone authentication methods",
+ "userDescription": "Allows the app to read your phone authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/phonemethods": "least=DelegatedWork",
+ "/me/authentication/phonemethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/phonemethods": "least=DelegatedWork",
+ "/users/{id}/authentication/phonemethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Phone.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' phone authentication methods",
+ "adminDescription": "Allows the app to read phone authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' phone authentication methods",
+ "userDescription": "Allows the app to read phone authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' phone authentication methods",
+ "adminDescription": "Allows the app to read phone authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/phonemethods": "",
+ "/me/authentication/phonemethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/phonemethods": "least=Application",
+ "/users/{id}/authentication/phonemethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Phone.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's phone authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's phone authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your phone authentication methods",
+ "userDescription": "Allows the app to read and write your phone authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/phonemethods": "",
+ "/me/authentication/phonemethods/{id}": "",
+ "/users/{id}/authentication/phonemethods": "",
+ "/users/{id}/authentication/phonemethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/phonemethods": "least=DelegatedWork",
+ "/me/authentication/phonemethods/{id}/disablesmssignin": "least=DelegatedWork",
+ "/me/authentication/phonemethods/{id}/enablesmssignin": "least=DelegatedWork",
+ "/users/{id}/authentication/phonemethods": "least=DelegatedWork",
+ "/users/{id}/authentication/phonemethods/{id}/disablesmssignin": "least=DelegatedWork",
+ "/users/{id}/authentication/phonemethods/{id}/enablesmssignin": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/phonemethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/phonemethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-Phone.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' phone methods.",
+ "adminDescription": "Allows the app to read and write Phone methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' phone methods",
+ "userDescription": "Allows the app to read and write phone methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' phone methods",
+ "adminDescription": "Allows the application to read and write phone methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/phonemethods": "",
+ "/me/authentication/phonemethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/phonemethods": "",
+ "/me/authentication/phonemethods/{id}/disablesmssignin": "",
+ "/me/authentication/phonemethods/{id}/enablesmssignin": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/phonemethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/phonemethods": "",
+ "/users/{id}/authentication/phonemethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/authentication/phonemethods": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/phonemethods/{id}/disablesmssignin": "least=Application",
+ "/users/{id}/authentication/phonemethods/{id}/enablesmssignin": "least=Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/authentication/phonemethods/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/authentication/phonemethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-PlatformCred.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's platform credential authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's platform credential authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your platform credential authentication methods",
+ "userDescription": "Allows the app to read your platform credential authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/platformCredentialMethods": "least=DelegatedWork",
+ "/me/authentication/platformCredentialMethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/platformCredentialMethods": "least=DelegatedWork",
+ "/users/{id}/authentication/platformCredentialMethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-PlatformCred.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' platform credentials methods",
+ "adminDescription": "Allows the app to read platform credentials methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' platform credentials methods",
+ "userDescription": "Allows the app to read platform credentials methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' platform credentials methods",
+ "adminDescription": "Allows the app to read platform credentials methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/platformCredentialMethods": "",
+ "/me/authentication/platformCredentialMethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/platformCredentialMethods": "least=Application",
+ "/users/{id}/authentication/platformCredentialMethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-PlatformCred.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's platform credential authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's platform credential authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your platform credential authentication methods",
+ "userDescription": "Allows the app to read and write your platform credential authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/platformCredentialMethods": "",
+ "/me/authentication/platformCredentialMethods/{id}": "",
+ "/users/{id}/authentication/platformCredentialMethods": "",
+ "/users/{id}/authentication/platformCredentialMethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/platformCredentialMethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/platformCredentialMethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-PlatformCred.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' platform credentials methods.",
+ "adminDescription": "Allows the app to read and write platform credentials methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' platform credentials methods",
+ "userDescription": "Allows the app to read and write platform credentials methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' platform credentials methods",
+ "adminDescription": "Allows the application to read and write platform credentials methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/platformCredentialMethods": "",
+ "/me/authentication/platformCredentialMethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/platformCredentialMethods/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/platformCredentialMethods": "",
+ "/users/{id}/authentication/platformCredentialMethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/authentication/platformCredentialMethods/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-QR.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's QR authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's QR authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your QR authentication methods",
+ "userDescription": "Allows the app to read your QR authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod/pin": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod/standardqrcode": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod/temporaryqrcode": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-QR.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' QR methods",
+ "adminDescription": "Allows the app to read QR authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' QR methods",
+ "userDescription": "Allows the app to read QR authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' QR methods",
+ "adminDescription": "Allows the app to read QR authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod": "",
+ "/me/authentication/qrcodepinmethod/pin": "",
+ "/me/authentication/qrcodepinmethod/standardqrcode": "",
+ "/me/authentication/qrcodepinmethod/temporaryqrcode": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/qrcodepinmethod": "least=Application",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "least=Application",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "least=Application",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-QR.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's QR authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's QR authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your QR authentication methods",
+ "userDescription": "Allows the app to read and write your QR authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod": "",
+ "/me/authentication/qrcodepinmethod/pin": "",
+ "/me/authentication/qrcodepinmethod/standardqrcode": "",
+ "/me/authentication/qrcodepinmethod/temporaryqrcode": "",
+ "/users/{id}/authentication/qrcodepinmethod": "",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod/pin": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod/standardqrcode": "least=DelegatedWork",
+ "/me/authentication/qrcodepinmethod/temporaryqrcode": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod": "least=DelegatedWork",
+ "/users/{id}/authentication/qrcodepinmethod": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-QR.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' QR methods.",
+ "adminDescription": "Allows the app to read and write QR authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' QR methods",
+ "userDescription": "Allows the app to read and write QR authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' QR methods",
+ "adminDescription": "Allows the application to read and write QR authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/me/authentication/qrcodepinmethod": "",
+ "/me/authentication/qrcodepinmethod/pin": "",
+ "/me/authentication/qrcodepinmethod/standardqrcode": "",
+ "/me/authentication/qrcodepinmethod/temporaryqrcode": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PUT"
+ ],
+ "paths": {
+ "/users/{id}/authentication/qrcodepinmethod": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/qrcodepinmethod": "",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/authentication/qrcodepinmethod": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/qrcodepinmethod/pin": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/qrcodepinmethod/standardqrcode": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/qrcodepinmethod/temporaryqrcode": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-ResourceKey.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the keys associated with the user representing a resource account.",
+ "adminDescription": "Allows the app to read the keys associated with the user representing a resource account.",
+ "userDisplayName": "Read the keys associated with the user representing a resource account.",
+ "userDescription": "Allows the user to read the keys associated with the user representing a resource account.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' external authentication methods",
+ "adminDescription": "Allows the app to read the keys associated with the user representing a resource account.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/resourcekeyauthenticationmethods": "least=DelegatedWork,Application",
+ "/users/{id}/authentication/resourcekeyauthenticationmethods/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "UserAuthMethod-ResourceKey.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and delete the keys associated with the user representing a resource account.",
+ "adminDescription": "Allows the app to read and delete the keys associated with the user representing a resource account.",
+ "userDisplayName": "Read and delete the keys associated with the user representing a resource account.",
+ "userDescription": "Allows the user to read and delete the keys associated with the user representing a resource account.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and delete all users' external authentication methods",
+ "adminDescription": "Allows the app to read and delete the keys associated with the user representing a resource account.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/authentication/resourcekeyauthenticationmethods/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/resourcekeyauthenticationmethods": "",
+ "/users/{id}/authentication/resourcekeyauthenticationmethods/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "adrsmsgraph"
+ }
+ },
+ "UserAuthMethod-SoftwareOATH.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's SoftwareOATH authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's SoftwareOATH authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your SoftwareOATH authentication methods",
+ "userDescription": "Allows the app to read your SoftwareOATH authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/softwareoathmethods": "least=DelegatedWork",
+ "/me/authentication/softwareoathmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/softwareoathmethods": "least=DelegatedWork",
+ "/users/{id}/authentication/softwareoathmethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-SoftwareOATH.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' SoftwareOATH methods",
+ "adminDescription": "Allows the app to read SoftwareOATH authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' SoftwareOATH methods",
+ "userDescription": "Allows the app to read SoftwareOATH authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' SoftwareOATH methods",
+ "adminDescription": "Allows the app to read SoftwareOATH authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/softwareoathmethods": "",
+ "/me/authentication/softwareoathmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/softwareoathmethods": "least=Application",
+ "/users/{id}/authentication/softwareoathmethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-SoftwareOATH.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's SoftwareOATH authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's SoftwareOATH authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your SoftwareOATH authentication methods",
+ "userDescription": "Allows the app to read and write your SoftwareOATH authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/softwareoathmethods": "",
+ "/me/authentication/softwareoathmethods/{id}": "",
+ "/users/{id}/authentication/softwareoathmethods": "",
+ "/users/{id}/authentication/softwareoathmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/softwareoathmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/softwareoathmethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-SoftwareOATH.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' SoftwareOATH methods.",
+ "adminDescription": "Allows the app to read and write SoftwareOATH authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' SoftwareOATH methods",
+ "userDescription": "Allows the app to read and write SoftwareOATH authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' SoftwareOATH methods",
+ "adminDescription": "Allows the application to read and write SoftwareOATH authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/softwareoathmethods": "",
+ "/me/authentication/softwareoathmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/softwareoathmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/softwareoathmethods": "",
+ "/users/{id}/authentication/softwareoathmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/authentication/softwareoathmethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-TAP.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's Temporary Access Pass authentication methods",
+ "adminDescription": "Allows the app to read the signed-in user's Temporary Access Pass authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your Temporary Access Pass authentication methods",
+ "userDescription": "Allows the app to read your Temporary Access Pass authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/temporaryaccesspassmethods": "least=DelegatedWork",
+ "/me/authentication/temporaryaccesspassmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/temporaryaccesspassmethods": "least=DelegatedWork",
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-TAP.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' Temporary Access Pass methods",
+ "adminDescription": "Allows the app to read Temporary Access Pass authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' Temporary Access Pass methods",
+ "userDescription": "Allows the app to read Temporary Access Pass authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' Temporary Access Pass methods",
+ "adminDescription": "Allows the app to read Temporary Access Pass authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/temporaryaccesspassmethods": "",
+ "/me/authentication/temporaryaccesspassmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/temporaryaccesspassmethods": "least=Application",
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-TAP.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's Temporary Access Pass authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's Temporary Access Pass authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your Temporary Access Pass authentication methods",
+ "userDescription": "Allows the app to read and write your Temporary Access Pass authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/temporaryaccesspassmethods": "",
+ "/me/authentication/temporaryaccesspassmethods/{id}": "",
+ "/users/{id}/authentication/temporaryaccesspassmethods": "",
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/temporaryaccesspassmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/temporaryaccesspassmethods": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-TAP.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' Temporary Access Pass methods.",
+ "adminDescription": "Allows the app to read and write Temporary Access Pass authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' Temporary Access Pass methods",
+ "userDescription": "Allows the app to read and write Temporary Access Pass authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' Temporary Access Pass methods",
+ "adminDescription": "Allows the application to read and write Temporary Access Pass authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/temporaryaccesspassmethods": "",
+ "/me/authentication/temporaryaccesspassmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/temporaryaccesspassmethods/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/authentication/temporaryaccesspassmethods": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/temporaryaccesspassmethods": "",
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/authentication/temporaryaccesspassmethods": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/authentication/temporaryaccesspassmethods/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-WindowsHello.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read the signed-in user's Windows Hello methods",
+ "adminDescription": "Allows the app to read the signed-in user's Windows Hello authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read your Windows Hello authentication methods",
+ "userDescription": "Allows the app to read your Windows Hello authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/windowshelloforbusinessmethods": "least=DelegatedWork",
+ "/me/authentication/windowshelloforbusinessmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/windowshelloforbusinessmethods": "least=DelegatedWork",
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-WindowsHello.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all users' Windows Hello methods",
+ "adminDescription": "Allows the app to read Windows Hello authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read all users' Windows Hello methods",
+ "userDescription": "Allows the app to read Windows Hello authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all users' Windows Hello methods",
+ "adminDescription": "Allows the app to read Windows Hello authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/windowshelloforbusinessmethods": "",
+ "/me/authentication/windowshelloforbusinessmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/windowshelloforbusinessmethods": "least=Application",
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-WindowsHello.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write the signed-in user's Windows Hello authentication methods",
+ "adminDescription": "Allows the app to read and write the signed-in user's Windows Hello authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write your Windows Hello authentication methods",
+ "userDescription": "Allows the app to read and write your Windows Hello authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/windowshelloforbusinessmethods": "",
+ "/me/authentication/windowshelloforbusinessmethods/{id}": "",
+ "/users/{id}/authentication/windowshelloforbusinessmethods": "",
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/windowshelloforbusinessmethods/{id}": "least=DelegatedWork",
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserAuthMethod-WindowsHello.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all users' Windows Hello methods.",
+ "adminDescription": "Allows the app to read and write Windows Hello authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "userDisplayName": "Read and write all users' Windows Hello methods",
+ "userDescription": "Allows the app to read and write Windows Hello authentication methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all users' Windows Hello authentication methods",
+ "adminDescription": "Allows the application to read and write Windows Hello authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/authentication/windowshelloforbusinessmethods": "",
+ "/me/authentication/windowshelloforbusinessmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/me/authentication/windowshelloforbusinessmethods/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/authentication/windowshelloforbusinessmethods": "",
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/users/{id}/authentication/windowshelloforbusinessmethods/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mfateam"
+ }
+ },
+ "UserCloudClipboard.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read cloud clipboard items",
+ "adminDescription": "Allows the app to read cloud clipboard data on behalf of the signed-in user.",
+ "userDisplayName": "Read cloud clipboard items",
+ "userDescription": "Allows the app to read your cloud clipboard items.",
+ "requiresAdminConsent": false
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read cloud clipboard items",
+ "adminDescription": "Allows the app to read cloud clipboard data on behalf of the signed-in user.",
+ "userDisplayName": "Read cloud clipboard items",
+ "userDescription": "Allows the app to read your cloud clipboard items.",
+ "requiresAdminConsent": false
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/cloudClipboard/items": "least=DelegatedWork,DelegatedPersonal",
+ "/me/cloudClipboard/items/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/cloudClipboard/items": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/cloudClipboard/items/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "afsdev"
+ }
+ },
+ "UserShiftPreferences.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all user shift preferences",
+ "adminDescription": "Allows the app to read all users' shift schedule preferences without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/settings/shiftpreferences": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "UserShiftPreferences.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write all user shift preferences",
+ "adminDescription": "Allows the app to manage all users' shift schedule preferences without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/users/{id}/settings/shiftpreferences": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {}
+ },
+ "UserTeamwork.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read user teamwork settings",
+ "adminDescription": "Allows the app to read the teamwork settings of the signed-in user.",
+ "userDisplayName": "Read your teamwork settings.",
+ "userDescription": "Allows the app to read your teamwork settings, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "UserTeamwork.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all user teamwork settings",
+ "adminDescription": "Allows the app to read all user teamwork settings without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/teamwork": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "TeamsGraph1PPreAuthPermissionsApprovers"
+ }
+ },
+ "UserWindowsSettings.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read windows settings and their values stored for all devices in cloud",
+ "adminDescription": "Allows the app to read windows settings which are stored in cloud and their values on behalf of the signed-in user.",
+ "userDisplayName": "Read windows settings and their values stored for all devices in cloud",
+ "userDescription": "Allows the app to read your windows settings which are stored in cloud and their values.",
+ "requiresAdminConsent": false
+ },
+ "DelegatedPersonal": {
+ "adminDisplayName": "Read windows settings and their values stored for all devices in cloud",
+ "adminDescription": "Allows the app to read windows settings which are stored in cloud and their values on behalf of the signed-in user.",
+ "userDisplayName": "Read windows settings and their values stored for all devices in cloud",
+ "userDescription": "Allows the app to read your windows settings which are stored in cloud and their values.",
+ "requiresAdminConsent": false
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "DelegatedPersonal"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/settings/windows": "least=DelegatedWork,DelegatedPersonal",
+ "/me/settings/windows/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/me/settings/windows/{id}/instances": "least=DelegatedWork,DelegatedPersonal",
+ "/me/settings/windows/{id}/instances/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/settings/windows": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/settings/windows/{id}": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/settings/windows/{id}/instances": "least=DelegatedWork,DelegatedPersonal",
+ "/users/{id}/settings/windows/{id}/instances/{id}": "least=DelegatedWork,DelegatedPersonal"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "afsdev"
+ }
+ },
+ "UserWindowsSettings.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read windows settings for all devices",
+ "adminDescription": "Allows the app to read a user's windows settings which are stored in cloud and their values on behalf of the signed-in user.",
+ "userDisplayName": "Read your windows settings for all devices",
+ "userDescription": "Allows the app to read your windows settings which are stored in cloud and their values.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/settings/windows": "",
+ "/users/{id}/settings/windows/{id}": "",
+ "/users/{id}/settings/windows/{id}/instances": "",
+ "/users/{id}/settings/windows/{id}/instances/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "afsdev"
+ }
+ },
+ "UserWindowsSettings.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write windows settings for all devices",
+ "adminDescription": "Allows the app to read and write a user's windows settings which are stored in cloud and their values on behalf of the signed-in user.",
+ "userDisplayName": "Read and write your windows settings for all devices",
+ "userDescription": "Allows the app to read and write your windows settings which are stored in cloud and their values.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/settings/windows": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "afsdev"
+ }
+ },
+ "VerifiedId-Profile.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read Verified Id profiles",
+ "adminDescription": "This role can read Verified Id profiles in a tenant.",
+ "userDisplayName": "Read Verified Id profiles",
+ "userDescription": "This role can read Verified Id profiles in a tenant.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read Verified Id profiles",
+ "adminDescription": "This role can read Verified Id profiles in a tenant.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/identity/verifiedId/profiles": "least=DelegatedWork,Application",
+ "/identity/verifiedId/profiles/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cred_recovery"
+ }
+ },
+ "VerifiedId-Profile.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write Verified Id profiles",
+ "adminDescription": "This role can read and write Verified Id profiles in a tenant.",
+ "userDisplayName": "Read and write Verified Id profiles",
+ "userDescription": "This role can read and write Verified Id profiles in a tenant.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH",
+ "POST"
+ ],
+ "paths": {
+ "/identity/verifiedId/profiles": "least=DelegatedWork",
+ "/identity/verifiedId/profiles/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "cred_recovery"
+ }
+ },
+ "VirtualAppointment.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read a user's virtual appointments",
+ "adminDescription": "Allows an application to read virtual appointments for the signed-in user. Only an organizer or participant user can read their virtual appointments.",
+ "userDisplayName": "Read your virtual appointments.",
+ "userDescription": "Allows the app to read virtual appointments on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}/getvirtualappointmentjoinweburl": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/getvirtualappointmentjoinweburl": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "vvgraphadmins"
+ }
+ },
+ "VirtualAppointment.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read all virtual appointments for users, as authorized by online meetings application access policy",
+ "adminDescription": "Allows the application to read virtual appointments for all users, without a signed-in user. The app must also be authorized to access an individual user's data by the online meetings application access policy.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/getvirtualappointmentjoinweburl": "least=Application",
+ "/users/{id}/onlinemeetings/{id}/virtualappointment": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "vvgraphadmins"
+ }
+ },
+ "VirtualAppointment.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write a user's virtual appointments.",
+ "adminDescription": "Allows an application to read and write virtual appointments for the signed-in user. Only an organizer or participant user can read and write their virtual appointments.",
+ "userDisplayName": "Read and write your virtual appointments",
+ "userDescription": "Allows the app to read and write virtual appointments on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}/getvirtualappointmentjoinweburl": "",
+ "/users/{id}/onlinemeetings/{id}/getvirtualappointmentjoinweburl": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "vvgraphadmins"
+ }
+ },
+ "VirtualAppointment.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read-write all virtual appointments for users, as authorized by online meetings app access policy",
+ "adminDescription": "Allows the application to read and write virtual appointments for all users, without a signed-in user. The app must also be authorized to access an individual user's data by the online meetings application access policy.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/getvirtualappointmentjoinweburl": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "vvgraphadmins"
+ }
+ },
+ "VirtualAppointmentNotification.Send": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Send notification regarding virtual appointments for the signed-in user",
+ "adminDescription": "Allows an application to send notifications for virtual appointments for the signed-in user.",
+ "userDisplayName": "Send notification regarding virtual appointments",
+ "userDescription": "Allows the app to send notification regarding virtual appointments on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ },
+ "Application": {
+ "adminDisplayName": "Send notification regarding virtual appointments as any user",
+ "adminDescription": "Allows the application to send notification regarding virtual appointments as any user, without a signed-in user. The app must also be authorized to access an individual user's data by the online meetings application access policy.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/me/onlinemeetings/{id}/sendVirtualAppointmentReminderSms": "least=DelegatedWork",
+ "/me/onlinemeetings/{id}/sendVirtualAppointmentSms": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/sendVirtualAppointmentReminderSms": "least=DelegatedWork",
+ "/users/{id}/onlinemeetings/{id}/sendVirtualAppointmentSms": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/users/{id}/onlinemeetings/{id}/sendVirtualAppointmentReminderSms": "least=Application",
+ "/users/{id}/onlinemeetings/{id}/sendVirtualAppointmentSms": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "vvgraphadmins"
+ }
+ },
+ "VirtualEvent.Read": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read your virtual events",
+ "adminDescription": "Allows the app to read virtual events created by the you",
+ "userDisplayName": "Read your virtual events",
+ "userDescription": "Allows the app to read virtual events created by the you",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/townhalls/{id}": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/presenters/{id}": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/presenters/{id}/sessions": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/sessions": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/sessions/{id}": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/sessions/{id}/presenters": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/getByUserRole(role={userRole})": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/registrations/{id}": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/sessions": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/sessions/{id}": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/getByUserRole(role={userRole})": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "VirtualEvent.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read your virtual events",
+ "adminDescription": "Allows the app to read all virtual events without a signed-in user",
+ "userDisplayName": "Read your virtual events",
+ "userDescription": "Allows the app to read all virtual events without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/townhalls": "least=Application",
+ "/solutions/virtualEvents/townhalls/{id}": "",
+ "/solutions/virtualEvents/townhalls/{id}/presenters/{id}": "least=Application",
+ "/solutions/virtualEvents/townhalls/{id}/presenters/{id}/sessions": "least=Application",
+ "/solutions/virtualEvents/townhalls/{id}/sessions": "least=Application",
+ "/solutions/virtualEvents/townhalls/{id}/sessions/{id}": "least=Application",
+ "/solutions/virtualEvents/townhalls/{id}/sessions/{id}/presenters": "least=Application",
+ "/solutions/virtualEvents/townhalls/getByUserIdAndRole(userId={userId}, role={userRole})": "least=Application",
+ "/solutions/virtualEvents/webinars/{id}": "",
+ "/solutions/virtualEvents/webinars/{id}/registrations/{id}": "",
+ "/solutions/virtualEvents/webinars/{id}/sessions": "least=Application",
+ "/solutions/virtualEvents/webinars/{id}/sessions/{id}": "least=Application",
+ "/solutions/virtualEvents/webinars/getByUserIdAndRole(userId={userId}, role={userRole})": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "VirtualEvent.Read.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read virtual event details",
+ "adminDescription": "Read information for this webinars or town halls, including schedules, speakers, and event settings and webinar registrations.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/townhalls/{id}": "least=Application",
+ "/solutions/virtualEvents/webinars/{id}": "least=Application",
+ "/solutions/virtualEvents/webinars/{id}/registrations": "least=Application",
+ "/solutions/virtualEvents/webinars/{id}/registrations/{id}": "least=Application",
+ "/solutions/virtualEvents/webinars/{webinarId}/registrations/{registrationId}/sessions": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "VirtualEvent.ReadWrite": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write your virtual events",
+ "adminDescription": "Allows the app to read and write virtual events for you",
+ "userDisplayName": "Read and write your virtual events",
+ "userDescription": "Allows the app to read and write virtual events for you",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/townhalls/{id}": "",
+ "/solutions/virtualEvents/townhalls/{id}/presenters/{id}": "",
+ "/solutions/virtualEvents/townhalls/{id}/presenters/{id}/sessions": "",
+ "/solutions/virtualEvents/townhalls/{id}/sessions": "",
+ "/solutions/virtualEvents/townhalls/{id}/sessions/{id}": "",
+ "/solutions/virtualEvents/townhalls/{id}/sessions/{id}/presenters": "",
+ "/solutions/virtualEvents/townhalls/getByUserRole(role={userRole})": "",
+ "/solutions/virtualEvents/webinars/{id}": "",
+ "/solutions/virtualEvents/webinars/{id}/registrations/{id}": "",
+ "/solutions/virtualEvents/webinars/{id}/sessions": "",
+ "/solutions/virtualEvents/webinars/{id}/sessions/{id}": "",
+ "/solutions/virtualEvents/webinars/getByUserRole(role={userRole})": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/townhalls": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/cancel": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/presenters": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/publish": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/setExternalEventInformation": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/cancel": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/publish": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/registrations": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/registrations/{id}/approve": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/registrations/{id}/cancel": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/registrations/{id}/reject": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/setExternalEventInformation": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/townhalls/{id}": "least=DelegatedWork",
+ "/solutions/virtualEvents/townhalls/{id}/presenters/{id}": "least=DelegatedWork",
+ "/solutions/virtualEvents/webinars/{id}/registrations/{id}": "least=DelegatedWork"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/townhalls/{id}/presenters/{id}": "least=DelegatedWork"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "VirtualEventRegistration-Anon.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Read and write anonymous users' virtual event registrations",
+ "adminDescription": "Allows the app to read and write anonymous users' virtual event registrations, without a signed-in user",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/webinars/{id}/registrations": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/webinars/{id}/registrations/{id}": ""
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "VirtualEventRegistration-Anon.ReadWrite.Chat": {
+ "authorizationType": "RSC",
+ "schemes": {
+ "Application": {
+ "adminDisplayName": "Manage virtual event registrations",
+ "adminDescription": "Register attendees and cancel registrations for this webinar.",
+ "requiresAdminConsent": false,
+ "privilegeLevel": 2
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/solutions/virtualEvents/webinars/{webinarId}/registrations": "least=Application",
+ "/solutions/virtualEvents/webinars/{webinarId}/registrations/{registrationId}/cancel": "least=Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "RtsAvengersSG"
+ }
+ },
+ "WindowsUpdates.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Windows update deployment settings",
+ "adminDescription": "Allows the app to read all Windows update deployment settings for the organization on behalf of the signed-in user.",
+ "userDisplayName": "Read all Windows update deployment settings",
+ "userDescription": "Allows the app to read all Windows update deployment settings for the organization on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Windows update deployment settings",
+ "adminDescription": "Allows the app to read all Windows update deployment settings for the organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/windows/updates/catalog/entries": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/applicableCatalogSummaries": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/applicableCatalogSummaries/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/applicableCatalogSummaries/{id}/aggregatedDevices": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/applicableCatalogSummaries/{id}/catalogEntry": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/deviceProfiles": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/deviceProfiles/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/drivers": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/drivers/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/drivers/{id}/deviceStatuses": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/drivers/{id}/deviceStatuses/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/policyAssignments": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/policyAssignments/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/data/policyAssignments/{id}/deviceProfile": "least=DelegatedWork,Application",
+ "/admin/windows/updates/deploymentaudiences": "least=DelegatedWork,Application",
+ "/admin/windows/updates/deploymentaudiences/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/deploymentaudiences/{id}/exclusions": "least=DelegatedWork,Application",
+ "/admin/windows/updates/deploymentaudiences/{id}/members": "least=DelegatedWork,Application",
+ "/admin/windows/updates/deployments": "least=DelegatedWork,Application",
+ "/admin/windows/updates/deployments/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/knownIssues": "least=DelegatedWork,Application",
+ "/admin/windows/updates/knownIssues/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/knownIssues/Default.findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/knownIssues/findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/applicableCatalogs": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/applicableCatalogs/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/applicableCatalogs/{id}/catalogEntry": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/applicableCatalogs/{id}/devices": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/applicableContent": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/approvals": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/approvals/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/rings": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/rings/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/{id}/Default.getKnownIssuesByTimeRange(daysInPast={daysInPast},includeAllActive={includeAllActive})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/{id}/editions": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/{id}/getKnownIssuesByTimeRange(daysInPast={daysInPast},includeAllActive={includeAllActive})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/{id}/knownIssues": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/Default.findByCatalogId(catalogID={catalogID})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/Default.findByEndOfService(monthsFromToday={monthsFromToday})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/Default.findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/findByCatalogId(catalogID={catalogID})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/findByEndOfService(monthsFromToday={monthsFromToday})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/products/findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
+ "/admin/windows/updates/resourceconnections": "least=DelegatedWork,Application",
+ "/admin/windows/updates/resourceconnections/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/resourceconnections/microsoft.graph.windowsupdates.operationalinsightsconnection": "least=DelegatedWork,Application",
+ "/admin/windows/updates/tenantSettings": "least=DelegatedWork,Application",
+ "/admin/windows/updates/tenantSettings/mdmAppSettings": "least=DelegatedWork,Application",
+ "/admin/windows/updates/tenantSettings/mdmAppSettings/{mdmAppId}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/{id}/microsoft.graph.windowsupdates.updatableassetgroup/members": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/microsoft.graph.windowsupdates.azureaddevice": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/microsoft.graph.windowsupdates.updatableassetgroup": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatepolicies": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatepolicies/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatepolicies/{id}/compliancechanges": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatepolicies/{id}/compliancechanges/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatepolicies/{id}/compliancechanges/microsoft.graph.windowsupdates.contentapproval": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "autopatchgraph"
+ }
+ },
+ "WindowsUpdates.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write all Windows update deployment settings",
+ "adminDescription": "Allows the app to read and write all Windows update deployment settings for the organization on behalf of the signed-in user.",
+ "userDisplayName": "Read and write all Windows update deployment settings",
+ "userDescription": "Allows the app to read and write all Windows update deployment settings for the organization on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all Windows update deployment settings",
+ "adminDescription": "Allows the app to read and write all Windows update deployment settings for the organization without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/admin/windows/updates/catalog/entries": "",
+ "/admin/windows/updates/data/applicableCatalogSummaries": "",
+ "/admin/windows/updates/data/applicableCatalogSummaries/{id}": "",
+ "/admin/windows/updates/data/applicableCatalogSummaries/{id}/aggregatedDevices": "",
+ "/admin/windows/updates/data/applicableCatalogSummaries/{id}/catalogEntry": "",
+ "/admin/windows/updates/data/deviceProfiles": "",
+ "/admin/windows/updates/data/deviceProfiles/{id}": "",
+ "/admin/windows/updates/data/drivers": "",
+ "/admin/windows/updates/data/drivers/{id}": "",
+ "/admin/windows/updates/data/drivers/{id}/deviceStatuses": "",
+ "/admin/windows/updates/data/drivers/{id}/deviceStatuses/{id}": "",
+ "/admin/windows/updates/data/policyAssignments": "",
+ "/admin/windows/updates/data/policyAssignments/{id}": "",
+ "/admin/windows/updates/data/policyAssignments/{id}/deviceProfile": "",
+ "/admin/windows/updates/deploymentaudiences/{id}/exclusions": "",
+ "/admin/windows/updates/deploymentaudiences/{id}/members": "",
+ "/admin/windows/updates/knownIssues": "",
+ "/admin/windows/updates/knownIssues/{id}": "",
+ "/admin/windows/updates/knownIssues/Default.findByKbNumber(kbNumber={kbNumber})": "",
+ "/admin/windows/updates/knownIssues/findByKbNumber(kbNumber={kbNumber})": "",
+ "/admin/windows/updates/policies/{id}/applicableCatalogs": "",
+ "/admin/windows/updates/policies/{id}/applicableCatalogs/{id}": "",
+ "/admin/windows/updates/policies/{id}/applicableCatalogs/{id}/catalogEntry": "",
+ "/admin/windows/updates/policies/{id}/applicableCatalogs/{id}/devices": "",
+ "/admin/windows/updates/policies/{id}/applicableContent": "",
+ "/admin/windows/updates/products": "",
+ "/admin/windows/updates/products/{id}": "",
+ "/admin/windows/updates/products/{id}/Default.getKnownIssuesByTimeRange(daysInPast={daysInPast},includeAllActive={includeAllActive})": "",
+ "/admin/windows/updates/products/{id}/editions": "",
+ "/admin/windows/updates/products/{id}/getKnownIssuesByTimeRange(daysInPast={daysInPast},includeAllActive={includeAllActive})": "",
+ "/admin/windows/updates/products/{id}/knownIssues": "",
+ "/admin/windows/updates/products/Default.findByCatalogId(catalogID={catalogID})": "",
+ "/admin/windows/updates/products/Default.findByEndOfService(monthsFromToday={monthsFromToday})": "",
+ "/admin/windows/updates/products/Default.findByKbNumber(kbNumber={kbNumber})": "",
+ "/admin/windows/updates/products/findByCatalogId(catalogID={catalogID})": "",
+ "/admin/windows/updates/products/findByEndOfService(monthsFromToday={monthsFromToday})": "",
+ "/admin/windows/updates/products/findByKbNumber(kbNumber={kbNumber})": "",
+ "/admin/windows/updates/resourceconnections/microsoft.graph.windowsupdates.operationalinsightsconnection": "",
+ "/admin/windows/updates/updatableassets/{id}/microsoft.graph.windowsupdates.updatableassetgroup/members": "",
+ "/admin/windows/updates/updatableassets/microsoft.graph.windowsupdates.azureaddevice": "",
+ "/admin/windows/updates/updatableassets/microsoft.graph.windowsupdates.updatableassetgroup": "",
+ "/admin/windows/updates/updatepolicies/{id}/compliancechanges/microsoft.graph.windowsupdates.contentapproval": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/admin/windows/updates/deploymentaudiences": "least=DelegatedWork,Application",
+ "/admin/windows/updates/deployments": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/approvals": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/rings": "least=DelegatedWork,Application",
+ "/admin/windows/updates/resourceconnections": "least=DelegatedWork,Application",
+ "/admin/windows/updates/tenantSettings/mdmAppSettings": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatepolicies": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatepolicies/{id}/compliancechanges": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET"
+ ],
+ "paths": {
+ "/admin/windows/updates/deploymentaudiences/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/resourceconnections/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/windows/updates/deployments/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/approvals/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/policies/{id}/rings/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatepolicies/{id}": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatepolicies/{id}/compliancechanges/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/admin/windows/updates/tenantSettings": "least=DelegatedWork,Application",
+ "/admin/windows/updates/tenantSettings/mdmAppSettings/{mdmAppId}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/admin/windows/updates/deployments/{id}/audience/updateaudiencebyid": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/{id}/addmembers": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/{id}/addmembersbyid": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/{id}/removemembers": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/{id}/removemembersbyid": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/enrollassets": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/enrollassetsbyid": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/unenrollassets": "least=DelegatedWork,Application",
+ "/admin/windows/updates/updatableassets/unenrollassetsbyid": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "autopatchgraph"
+ }
+ },
+ "WorkforceIntegration.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read workforce integrations",
+ "adminDescription": "Allows the app to read workforce integrations, to synchronize data from Microsoft Teams Shifts, on behalf of the signed-in user.",
+ "userDisplayName": "Read workforce integrations",
+ "userDescription": "Allows the app to read workforce integrations, to synchronize data from Microsoft Teams Shifts, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read workforce integrations",
+ "adminDescription": "Allows the app to read workforce integrations without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/teamwork/workforceintegrations": "least=DelegatedWork,Application",
+ "/teamwork/workforceintegrations/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "shifts-service-sg"
+ }
+ },
+ "WorkforceIntegration.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and write workforce integrations",
+ "adminDescription": "Allows the app to manage workforce integrations, to synchronize data from Microsoft Teams Shifts, on behalf of the signed-in user.",
+ "userDisplayName": "Read and write workforce integrations",
+ "userDescription": "Allows the app to manage workforce integrations, to synchronize data from Microsoft Teams Shifts, on your behalf.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and write all workforce integrations",
+ "adminDescription": "Allows the app to manage workforce integrations without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET",
+ "POST"
+ ],
+ "paths": {
+ "/teamwork/workforceintegrations": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE",
+ "GET",
+ "PATCH"
+ ],
+ "paths": {
+ "/teamwork/workforceintegrations/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "shifts-service-sg"
+ }
+ },
+ "Zone.Read.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read all Zones in Microsoft Defender for Cloud",
+ "adminDescription": "Allows the app to read all Zones and their environments in Microsoft Defender for Cloud for the signed-in user.",
+ "userDisplayName": "Read all Zones in Microsoft Defender for Cloud",
+ "userDescription": "Allows the app to read all Zones and their environments in Microsoft Defender for Cloud on behalf of the signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read all Zones in Microsoft Defender for Cloud",
+ "adminDescription": "Allows the app to read all Zones and their environments in Microsoft Defender for Cloud without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/zones": "least=DelegatedWork,Application",
+ "/security/zones/{id}": "least=DelegatedWork,Application",
+ "/security/zones/{id}/environments": "least=DelegatedWork,Application",
+ "/security/zones/{id}/environments/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mdcdefall"
+ }
+ },
+ "Zone.ReadWrite.All": {
+ "authorizationType": "oAuth2",
+ "schemes": {
+ "DelegatedWork": {
+ "adminDisplayName": "Read and manage all Zones in Microsoft Defender for Cloud",
+ "adminDescription": "Allows the app to read, create, update, and delete Zones and manage their environments in Microsoft Defender for Cloud for the signed-in user.",
+ "userDisplayName": "Read and manage all Zones in Microsoft Defender for Cloud",
+ "userDescription": "Allows the app to read, create, update, and delete Zones and manage their environments in Microsoft Defender for Cloud on behalf of the signed-in user..",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ },
+ "Application": {
+ "adminDisplayName": "Read and manage all Zones in Microsoft Defender for Cloud",
+ "adminDescription": "Allows the app to read, create, update, and delete Zones and manage their environments in Microsoft Defender for Cloud without a signed-in user.",
+ "requiresAdminConsent": true,
+ "privilegeLevel": 3
+ }
+ },
+ "pathSets": [
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "GET"
+ ],
+ "paths": {
+ "/security/zones": "",
+ "/security/zones/{id}": "",
+ "/security/zones/{id}/environments": "",
+ "/security/zones/{id}/environments/{id}": ""
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "POST"
+ ],
+ "paths": {
+ "/security/zones": "least=DelegatedWork,Application",
+ "/security/zones/{id}/environments": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "DELETE"
+ ],
+ "paths": {
+ "/security/zones/{id}": "least=DelegatedWork,Application",
+ "/security/zones/{id}/environments/{id}": "least=DelegatedWork,Application"
+ }
+ },
+ {
+ "schemeKeys": [
+ "DelegatedWork",
+ "Application"
+ ],
+ "methods": [
+ "PATCH"
+ ],
+ "paths": {
+ "/security/zones/{id}": "least=DelegatedWork,Application"
+ }
+ }
+ ],
+ "ownerInfo": {
+ "ownerSecurityGroup": "mdcdefall"
+ }
+ }
+ }
+}
\ No newline at end of file
From f119cbde5cd7adc314d366cd75350883a7b12ecd Mon Sep 17 00:00:00 2001
From: Zacgoose <107489668+Zacgoose@users.noreply.github.com>
Date: Fri, 16 Oct 2026 14:35:10 +0800
Subject: [PATCH 2/2] chore(api): annotate Graph permissions across the backend
and roll them up into the spec
- writes Permission: lines into the .NOTES of every function that calls Graph
- moves the annotated nested helpers (OneDrive and sharing-link scans, CA identity coverage, PIM removal, group cache batches, GDAP trace, site permission removal, app password policy, NudgeMFA) into their own files, passing what they read from the parent as parameters
- regenerates openapi.json with x-cipp-permissions and x-cipp-permission-index
---
backend/Config/openapi.json | 33592 +++++++++++++++-
.../Activity Triggers/BEC/Push-BECRun.ps1 | 7 +
.../Push-DBCacheOneDriveLongPaths.ps1 | 3 +
.../Get-CIPPGraphIdentityLabel.ps1 | 8 +
.../Get-CIPPOneDriveHasNonStandardAccess.ps1 | 32 +
.../Get-CIPPOneDriveSiteRow.ps1 | 217 +
.../Get-CIPPSpoPrincipalType.ps1 | 10 +
.../Get-CIPPSpoUserUpn.ps1 | 7 +
.../New-CIPPGraphIdentityGrant.ps1 | 83 +
.../New-CIPPOneDriveSkippedSiteRow.ps1 | 22 +
.../New-CIPPSpoRoleAssignmentGrant.ps1 | 30 +
.../New-CIPPSpoUserGrant.ps1 | 34 +
...sh-DBCacheOneDriveRootPermissionsBatch.ps1 | 479 +-
.../Test-CIPPGraphGuestIdentity.ps1 | 7 +
.../Test-CIPPOneDriveOwnerPrincipal.ps1 | 11 +
.../Test-CIPPSpoGuestUser.ps1 | 6 +
.../Push-ExecAddMultiTenantApp.ps1 | 2 +
.../Push-ExecAlertsListAllTenants.ps1 | 2 +
.../Push-ExecAppApprovalTemplate.ps1 | 9 +
.../Push-ExecIncidentsListAllTenants.ps1 | 2 +
.../Push-ExecJITAdminListAllTenants.ps1 | 3 +
.../Push-ExecMdoAlertsListAllTenants.ps1 | 2 +
.../Push-ExecOnboardTenantQueue.ps1 | 6 +
.../Push-ExecTestMessageTrace.ps1 | 3 +
.../Push-ListBasicAuthAllTenants.ps1 | 2 +
...istConditionalAccessPoliciesAllTenants.ps1 | 8 +
.../Add-CIPPSharingRows.ps1 | 31 +
.../ConvertTo-CIPPSharingRow.ps1 | 72 +
.../Get-CIPPIdentityLabel.ps1 | 5 +
...Push-DBCacheSharePointSiteSharingLinks.ps1 | 126 +-
.../Test-CIPPExternalIdentity.ps1 | 12 +
.../Push-DBCacheStorageCleanupScanBatch.ps1 | 2 +
.../Standards/Push-CIPPStandardsList.ps1 | 12 +
.../Alerts/Get-CIPPAlertAdminPassword.ps1 | 3 +
.../Alerts/Get-CIPPAlertApnCertExpiry.ps1 | 2 +
.../Alerts/Get-CIPPAlertAppSecretExpiry.ps1 | 2 +
.../Public/Alerts/Get-CIPPAlertAppleTerms.ps1 | 2 +
.../Alerts/Get-CIPPAlertDefenderAlerts.ps1 | 2 +
.../Alerts/Get-CIPPAlertDefenderIncidents.ps1 | 2 +
.../Alerts/Get-CIPPAlertDefenderMalware.ps1 | 2 +
.../Alerts/Get-CIPPAlertDefenderStatus.ps1 | 2 +
...Get-CIPPAlertDeletedUserOneDriveAccess.ps1 | 2 +
.../Alerts/Get-CIPPAlertDepTokenExpiry.ps1 | 2 +
.../Alerts/Get-CIPPAlertDeviceCompliance.ps1 | 2 +
...t-CIPPAlertDeviceComplianceGracePeriod.ps1 | 2 +
.../Get-CIPPAlertEntraConnectSyncStatus.ps1 | 2 +
.../Get-CIPPAlertEntraLicenseUtilization.ps1 | 2 +
.../Get-CIPPAlertGlobalAdminAllowList.ps1 | 2 +
.../Get-CIPPAlertGlobalAdminNoAltEmail.ps1 | 2 +
.../Get-CIPPAlertGroupMembershipChange.ps1 | 2 +
.../Alerts/Get-CIPPAlertHuntressRogueApps.ps1 | 2 +
.../Get-CIPPAlertIntuneApprovalRequests.ps1 | 2 +
.../Get-CIPPAlertLicenseAssignmentErrors.ps1 | 2 +
.../Get-CIPPAlertLicensedUsersWithRoles.ps1 | 3 +
.../Get-CIPPAlertLongLivedAppCredentials.ps1 | 2 +
.../Public/Alerts/Get-CIPPAlertMFAAdmins.ps1 | 4 +
.../Alerts/Get-CIPPAlertMFAAlertUsers.ps1 | 3 +
.../Alerts/Get-CIPPAlertNewAppApproval.ps1 | 3 +
.../Alerts/Get-CIPPAlertNewMFADevice.ps1 | 2 +
.../Alerts/Get-CIPPAlertNewRiskyUsers.ps1 | 2 +
.../Public/Alerts/Get-CIPPAlertNewRole.ps1 | 2 +
.../Public/Alerts/Get-CIPPAlertNoCAConfig.ps1 | 3 +
.../Alerts/Get-CIPPAlertOnedriveQuota.ps1 | 2 +
.../Public/Alerts/Get-CIPPAlertQuotaUsed.ps1 | 2 +
.../Alerts/Get-CIPPAlertReportOnlyCA.ps1 | 3 +
.../Get-CIPPAlertRoleEscalableGroups.ps1 | 5 +
.../Get-CIPPAlertSecDefaultsDisabled.ps1 | 3 +
.../Alerts/Get-CIPPAlertSecDefaultsUpsell.ps1 | 2 +
.../Alerts/Get-CIPPAlertSecureScore.ps1 | 2 +
.../Alerts/Get-CIPPAlertSmtpAuthSuccess.ps1 | 2 +
.../Alerts/Get-CIPPAlertTenantAccess.ps1 | 2 +
.../Get-CIPPAlertUserReportedPhishing.ps1 | 2 +
.../Alerts/Get-CIPPAlertVppTokenExpiry.ps1 | 2 +
...nvoke-CIPPBaselineActivityBasedTimeout.ps1 | 4 +
.../Invoke-CIPPBaselineAppDeploy.ps1 | 6 +
...Invoke-CIPPBaselineAppManagementPolicy.ps1 | 2 +
...CIPPBaselineAppleEnrollmentTypeProfile.ps1 | 8 +
...e-CIPPBaselineAssignmentFilterTemplate.ps1 | 2 +
.../Invoke-CIPPBaselineAutopilotProfile.ps1 | 2 +
...BaselineCollaborationDomainRestriction.ps1 | 3 +
...voke-CIPPBaselineConsentPolicySettings.ps1 | 5 +
.../Invoke-CIPPBaselineCopilotLimitedMode.ps1 | 2 +
...Invoke-CIPPBaselineCreateSharedMailbox.ps1 | 2 +
...e-CIPPBaselineCustomBannedPasswordList.ps1 | 4 +
.../Invoke-CIPPBaselineDefenderASRPolicy.ps1 | 2 +
.../Invoke-CIPPBaselineDefenderAVPolicy.ps1 | 2 +
...e-CIPPBaselineDefenderCompliancePolicy.ps1 | 3 +
.../Invoke-CIPPBaselineDefenderEDRPolicy.ps1 | 2 +
...ke-CIPPBaselineDefenderExclusionPolicy.ps1 | 2 +
.../Invoke-CIPPBaselineDeleteCAPolicy.ps1 | 2 +
...CIPPBaselineDeployCheckChromeExtension.ps1 | 5 +
...PBaselineDeviceEnrollmentConfiguration.ps1 | 2 +
.../Invoke-CIPPBaselineDevicePrepProfile.ps1 | 8 +
...e-CIPPBaselineDeviceRegistrationPolicy.ps1 | 3 +
...voke-CIPPBaselineDisableM365GroupUsers.ps1 | 5 +
...CIPPBaselineDisableSelfServiceLicenses.ps1 | 2 +
...ke-CIPPBaselineEmailAsAlternateLoginId.ps1 | 3 +
...e-CIPPBaselineEnableAppConsentRequests.ps1 | 5 +
.../Invoke-CIPPBaselineEnableFIDO2.ps1 | 3 +
.../Invoke-CIPPBaselineExcludedfileExt.ps1 | 2 +
...-CIPPBaselineExternalComplianceTrusted.ps1 | 3 +
.../Invoke-CIPPBaselineExternalMFATrusted.ps1 | 3 +
...nvoke-CIPPBaselineFIDO2PasskeyProfiles.ps1 | 2 +
...lineGlobalSecureAccessCompliantNetwork.ps1 | 19 +
.../Invoke-CIPPBaselineGroupTemplate.ps1 | 2 +
...CIPPBaselineIntuneDeviceRetirementDays.ps1 | 3 +
...oke-CIPPBaselineM365GroupGuestSettings.ps1 | 5 +
.../Executors/Invoke-CIPPBaselineMDMScope.ps1 | 4 +
.../Invoke-CIPPBaselineMFAPushApps.ps1 | 2 +
.../Invoke-CIPPBaselineMailContacts.ps1 | 2 +
...e-CIPPBaselineMigrateOneDriveShortcuts.ps1 | 2 +
.../Invoke-CIPPBaselineOauthConsent.ps1 | 5 +
.../Invoke-CIPPBaselinePhishProtection.ps1 | 4 +
.../Invoke-CIPPBaselineProfilePhotos.ps1 | 3 +
...elineRestrictThirdPartyStorageServices.ps1 | 2 +
...e-CIPPBaselineReusableSettingsTemplate.ps1 | 2 +
.../Invoke-CIPPBaselineSPOVersionControl.ps1 | 2 +
...oke-CIPPBaselineSecureScoreRemediation.ps1 | 2 +
.../Invoke-CIPPBaselineSmartLockout.ps1 | 4 +
...e-CIPPBaselinesharingDomainRestriction.ps1 | 2 +
.../Get-CIPPBaselineDevicePrepGroup.ps1 | 2 +
.../Get-CIPPBaselineAutopilotProfileState.ps1 | 2 +
...PBaselineDefenderCompliancePolicyState.ps1 | 2 +
...Get-CIPPBaselineDevicePrepProfileState.ps1 | 2 +
...neDisableExchangeOnlinePowerShellState.ps1 | 3 +
.../Get-CIPPBaselineDisableGuestsState.ps1 | 3 +
...-CIPPBaselineDisableInactiveUsersState.ps1 | 2 +
.../Get-CIPPBaselineOauthConsentState.ps1 | 2 +
.../Get-CIPPBaselinePhishProtectionState.ps1 | 2 +
...IPPBaselinePlannerBlockTaskDeleteState.ps1 | 2 +
.../Get-CIPPBaselineUsageLocationState.ps1 | 2 +
.../Modules/CIPPCore/Public/Add-CIPPAlias.ps1 | 4 +
.../Public/Add-CIPPApplicationPermission.ps1 | 8 +
.../Public/Add-CIPPCACoverageReason.ps1 | 14 +
.../Public/Add-CIPPDelegatedPermission.ps1 | 10 +
.../CIPPCore/Public/Add-CIPPGroupMember.ps1 | 2 +
.../CIPPCore/Public/Add-CIPPGroupOwner.ps1 | 2 +
.../Public/Add-CIPPMacOSShellScript.ps1 | 4 +
.../Public/Add-CIPPPackagedApplication.ps1 | 2 +
.../Public/Add-CIPPW32ScriptApplication.ps1 | 3 +
.../Public/Add-CIPPWin32LobAppContent.ps1 | 2 +
.../CIPPCore/Public/Add-CIPPWinGetApp.ps1 | 2 +
.../Get-CippAuditLogSearchResults.ps1 | 2 +
.../AuditLogs/Get-CippAuditLogSearches.ps1 | 2 +
.../AuditLogs/New-CippAuditLogSearch.ps1 | 2 +
.../AuditLogs/New-CippAuditLogSearchV2.ps1 | 2 +
.../Authentication/Add-CIPPSSOAppSecret.ps1 | 4 +
.../Grant-CippAppGraphConsent.ps1 | 6 +
.../Authentication/Initialize-CIPPAuth.ps1 | 2 +
.../Authentication/New-CIPPAPIConfig.ps1 | 10 +
.../Authentication/New-CIPPMcpResourceApp.ps1 | 7 +
.../Public/Authentication/New-CIPPSSOApp.ps1 | 5 +
.../Repair-CippApiIdentifierUri.ps1 | 4 +
.../Authentication/Set-CIPPMCPClientApp.ps1 | 3 +
.../Set-CippMcpResourcePreAuth.ps1 | 3 +
.../Test-CIPPAccessUserRole.ps1 | 2 +
.../Update-CIPPSAMRedirectUri.ps1 | 3 +
.../Update-CIPPSSOPreconsent.ps1 | 6 +
.../Update-CIPPSSORedirectUri.ps1 | 3 +
.../Public/BEC/Get-CIPPBecBlastRadius.ps1 | 2 +
.../Public/BEC/Get-CIPPBecColleagueSample.ps1 | 2 +
.../BEC/Get-CIPPBecCorrelatedUserPeers.ps1 | 2 +
.../Public/BEC/Get-CIPPBecDirectoryAudits.ps1 | 2 +
.../Public/BEC/Get-CIPPBecIPGuidance.ps1 | 2 +
.../Public/BEC/Get-CIPPBecIPPeers.ps1 | 2 +
.../BEC/Get-CIPPBecReceivedMailFindings.ps1 | 2 +
.../BEC/Get-CIPPBecRegisteredDevices.ps1 | 2 +
.../Public/BEC/Get-CIPPBecRiskState.ps1 | 3 +
.../Public/BEC/Get-CIPPBecUserGrants.ps1 | 4 +
.../Public/BEC/Invoke-CIPPBecContainment.ps1 | 3 +
.../Public/BEC/New-CIPPBecRunRequest.ps1 | 2 +
.../BEC/New-CIPPBecTargetedCAPolicy.ps1 | 3 +
.../Public/BEC/Remove-CIPPBecSharingLinks.ps1 | 3 +
.../BEC/Remove-CIPPBecTargetedCAPolicy.ps1 | 3 +
.../Public/BEC/Search-CIPPBecSignIn.ps1 | 2 +
.../Public/Clear-CIPPOnPremisesAttributes.ps1 | 4 +
.../Public/Compare-CIPPIntuneAssignments.ps1 | 3 +
.../CustomData/Invoke-CustomDataSync.ps1 | 5 +
.../Public/Enable-CIPPMDEConnector.ps1 | 3 +
.../Start-UpdateTokensTimer.ps1 | 5 +
.../Timer Functions/Start-UserSyncTimer.ps1 | 2 +
.../Expand-CIPPCACoverageGuestBlock.ps1 | 79 +
.../Find-CIPPGDAPTransitiveGroupPath.ps1 | 82 +
.../CIPPCore/Public/Get-CIPPBiosPassword.ps1 | 2 +
.../CIPPCore/Public/Get-CIPPBitlockerKey.ps1 | 3 +
.../Get-CIPPCACoverageGuestCategory.ps1 | 10 +
.../Get-CIPPCACoverageGuestHomeTenantId.ps1 | 8 +
.../Get-CIPPCAPolicyIdentityCoverage.ps1 | 197 +-
.../Public/Get-CIPPCAPolicyImpact.ps1 | 3 +
.../Modules/CIPPCore/Public/Get-CIPPDrift.ps1 | 12 +
...PPEnrollmentTimeDeviceMembershipTarget.ps1 | 2 +
.../Public/Get-CIPPEwsPermissionApps.ps1 | 5 +
.../CIPPCore/Public/Get-CIPPFileVaultKey.ps1 | 2 +
.../CIPPCore/Public/Get-CIPPGroupType.ps1 | 2 +
...CIPPIntuneAdminTemplateDefinitionValue.ps1 | 5 +
.../CIPPCore/Public/Get-CIPPIntunePolicy.ps1 | 5 +
.../Public/Get-CIPPIntuneReportExportJob.ps1 | 2 +
.../CIPPCore/Public/Get-CIPPLAPSPassword.ps1 | 4 +
.../Public/Get-CIPPLicenseOverview.ps1 | 7 +
.../Public/Get-CIPPLicenseRecommendation.ps1 | 4 +
.../CIPPCore/Public/Get-CIPPMFAState.ps1 | 11 +
.../Public/Get-CIPPMacOSLapsPassword.ps1 | 2 +
.../CIPPCore/Public/Get-CIPPPerUserMFA.ps1 | 5 +
.../Get-CIPPReusableSettingsFromPolicy.ps1 | 4 +
.../Public/Get-CIPPSchemaExtensions.ps1 | 7 +
.../Public/Get-CIPPShadowAIReport.ps1 | 2 +
...Get-CIPPSharePointLibraryRootChildUris.ps1 | 3 +
.../Get-CIPPSharePointSiteUsageRows.ps1 | 4 +
.../Public/Get-CIPPTenantCapabilities.ps1 | 4 +
.../Public/Get-CippPartnerTenantInfo.ps1 | 2 +
.../Get-CIPPAppPasswordPolicyMaxEnd.ps1 | 19 +
.../Get-CIPPOmaSettingDecryptedValue.ps1 | 2 +
.../GraphHelper/Get-CippSamPermissions.ps1 | 3 +
.../GraphHelper/Get-SharePointAdminLink.ps1 | 2 +
.../Public/GraphHelper/Get-Tenants.ps1 | 4 +
.../Invoke-CIPPIntuneApprovalRetry.ps1 | 2 +
.../GraphHelper/New-CIPPMFAConnectorToken.ps1 | 5 +
.../Public/GraphHelper/New-ExoRequest.ps1 | 5 +
.../Update-AppManagementPolicy.ps1 | 6 +
.../GraphRequests/Get-GraphRequestList.ps1 | 2 +
.../Public/Invoke-CIPPCATemplateBatch.ps1 | 4 +
.../Invoke-CIPPMigrateOneDriveShortCuts.ps1 | 4 +
.../Public/Invoke-CIPPOffboardingJob.ps1 | 4 +
.../Invoke-CIPPSharePointTemplateDeploy.ps1 | 2 +
.../Public/New-CIPPApplicationCopy.ps1 | 7 +
.../Public/New-CIPPAssignmentFilter.ps1 | 1 +
.../CIPPCore/Public/New-CIPPBackupTask.ps1 | 9 +
.../Public/New-CIPPCACoverageReason.ps1 | 32 +
.../CIPPCore/Public/New-CIPPCAPolicy.ps1 | 17 +
.../CIPPCore/Public/New-CIPPCATemplate.ps1 | 7 +
.../CIPPCore/Public/New-CIPPDeviceAction.ps1 | 4 +
.../Public/New-CIPPGDAPRoleMapping.ps1 | 3 +
.../Modules/CIPPCore/Public/New-CIPPGroup.ps1 | 1 +
.../Public/New-CIPPIntuneAppDeployment.ps1 | 3 +
.../Public/New-CIPPIntuneReportExportJob.ps1 | 2 +
.../Public/New-CIPPIntuneTemplate.ps1 | 4 +
.../Public/New-CIPPOneDriveShortCut.ps1 | 9 +
.../CIPPCore/Public/New-CIPPRestoreTask.ps1 | 13 +
.../Public/New-CIPPSharePointFolder.ps1 | 4 +
.../Public/New-CIPPSharepointSite.ps1 | 3 +
.../Modules/CIPPCore/Public/New-CIPPTAP.ps1 | 4 +
.../Modules/CIPPCore/Public/New-CIPPTeam.ps1 | 3 +
.../CIPPCore/Public/New-CIPPTeamChannel.ps1 | 3 +
.../CIPPCore/Public/New-CIPPTemplateRun.ps1 | 8 +
.../CIPPCore/Public/New-CIPPTravelPolicy.ps1 | 2 +
.../Modules/CIPPCore/Public/New-CippUser.ps1 | 4 +
.../Public/PIM/Get-CIPPPIMRoleAssignments.ps1 | 7 +
.../Public/PIM/Get-CIPPPIMRolePolicies.ps1 | 2 +
.../Invoke-CIPPPIMActiveAssignmentRemoval.ps1 | 44 +
.../PIM/Invoke-CIPPPIMAssignmentAction.ps1 | 49 +-
.../PIM/Send-CIPPPIMScheduleRequest.ps1 | 5 +
.../Public/PIM/Set-CIPPPIMRoleSettings.ps1 | 2 +
.../Public/Remove-CIPPAutopilotProfile.ps1 | 6 +
.../Public/Remove-CIPPGraphSitePermission.ps1 | 25 +
.../CIPPCore/Public/Remove-CIPPGroup.ps1 | 5 +
.../Public/Remove-CIPPGroupMember.ps1 | 2 +
.../CIPPCore/Public/Remove-CIPPGroupOwner.ps1 | 2 +
.../Public/Remove-CIPPGroupOwnerships.ps1 | 3 +
.../CIPPCore/Public/Remove-CIPPGroups.ps1 | 7 +
.../CIPPCore/Public/Remove-CIPPLicense.ps1 | 7 +
.../Public/Remove-CIPPTravelPolicy.ps1 | 4 +
.../CIPPCore/Public/Remove-CIPPUser.ps1 | 4 +
.../CIPPCore/Public/Remove-CIPPUserMFA.ps1 | 2 +
.../Public/Remove-CIPPUserTeamsPhoneDIDs.ps1 | 5 +
.../Public/Resolve-CIPPCADependencies.ps1 | 7 +
.../Public/Resolve-CIPPDirectoryId.ps1 | 5 +
...Resolve-CIPPIntuneAdminTemplateBinding.ps1 | 4 +
.../Resolve-CIPPIntuneTargetedMobileApps.ps1 | 2 +
.../Public/Resolve-CIPPNudgeMFATarget.ps1 | 34 +
.../Resolve-CIPPSharePointLibraryRootUri.ps1 | 2 +
.../CIPPCore/Public/Revoke-CIPPSessions.ps1 | 4 +
.../Invoke-CIPPCAWhatIf.ps1 | 2 +
.../Select-CIPPIntuneAvailableSetting.ps1 | 2 +
.../CIPPCore/Public/Send-CIPPAlert.ps1 | 4 +
.../Public/Set-CIPPAssignedApplication.ps1 | 7 +
.../Public/Set-CIPPAssignedPolicy.ps1 | 5 +
.../Public/Set-CIPPAuthenticationPolicy.ps1 | 5 +
.../CIPPCore/Public/Set-CIPPCAExclusion.ps1 | 6 +
.../Set-CIPPCAPolicyServiceException.ps1 | 5 +
.../Public/Set-CIPPCopyGroupMembers.ps1 | 6 +
.../Set-CIPPDefaultAPDeploymentProfile.ps1 | 10 +
.../Public/Set-CIPPDefaultAPEnrollment.ps1 | 5 +
.../Public/Set-CIPPDefenderASRPolicy.ps1 | 4 +
.../Public/Set-CIPPDefenderAVPolicy.ps1 | 4 +
.../Set-CIPPDefenderCompliancePolicy.ps1 | 4 +
.../Public/Set-CIPPDefenderEDRPolicy.ps1 | 4 +
.../Set-CIPPDefenderExclusionPolicy.ps1 | 4 +
.../CIPPCore/Public/Set-CIPPDeviceState.ps1 | 3 +
...PPEnrollmentTimeDeviceMembershipTarget.ps1 | 2 +
.../Public/Set-CIPPGDAPAutoExtend.ps1 | 5 +
.../Public/Set-CIPPGDAPInviteGroups.ps1 | 6 +
.../CIPPCore/Public/Set-CIPPGroupLicense.ps1 | 5 +
.../CIPPCore/Public/Set-CIPPIntunePolicy.ps1 | 4 +
.../CIPPCore/Public/Set-CIPPManager.ps1 | 4 +
.../CIPPCore/Public/Set-CIPPNamedLocation.ps1 | 6 +
.../Public/Set-CIPPOneDriveSharing.ps1 | 4 +
.../CIPPCore/Public/Set-CIPPPerUserMFA.ps1 | 2 +
.../CIPPCore/Public/Set-CIPPProfilePhoto.ps1 | 6 +
.../Public/Set-CIPPRegistrationCampaign.ps1 | 3 +
.../Public/Set-CIPPRequirePasswordChange.ps1 | 3 +
.../CIPPCore/Public/Set-CIPPResetPassword.ps1 | 6 +
.../CIPPCore/Public/Set-CIPPSAMAdminRoles.ps1 | 6 +
.../Set-CIPPSharePointObjectPermission.ps1 | 3 +
.../Public/Set-CIPPSharePointPerms.ps1 | 2 +
.../Public/Set-CIPPSharePointSiteMember.ps1 | 5 +
.../CIPPCore/Public/Set-CIPPSignInState.ps1 | 5 +
.../CIPPCore/Public/Set-CIPPSponsor.ps1 | 4 +
.../Modules/CIPPCore/Public/Set-CIPPUser.ps1 | 8 +
.../CIPPCore/Public/Set-CIPPUserJITAdmin.ps1 | 10 +
.../Public/Set-CIPPUserJITAdminProperties.ps1 | 4 +
.../CIPPCore/Public/Set-CIPPUserLicense.ps1 | 5 +
.../Public/Set-CIPPUserSchemaProperties.ps1 | 2 +
.../Set-CIPPVacationGroupMembership.ps1 | 2 +
.../Start-CIPPSharePointLibraryCopy.ps1 | 3 +
.../Sync-CIPPReusablePolicySettings.ps1 | 5 +
.../Update-CIPPDynamicTenantGroups.ps1 | 3 +
.../Public/Test-CIPPAccessPermissions.ps1 | 5 +
.../CIPPCore/Public/Test-CIPPAccessTenant.ps1 | 7 +
...Test-CIPPCACoverageExternalTenantMatch.ps1 | 17 +
.../Public/Test-CIPPGDAPGroupMappings.ps1 | 3 +
.../Public/Test-CIPPGDAPRelationships.ps1 | 8 +
.../Public/Tools/Get-CippReportTenantName.ps1 | 2 +
.../Public/Update-CIPPSAMCertificate.ps1 | 3 +
.../Webhooks/Get-CIPPPartnerUserLookup.ps1 | 2 +
.../Webhooks/Invoke-CIPPWebhookProcessing.ps1 | 4 +
.../Webhooks/Push-AuditLogDownloadV2.ps1 | 2 +
.../Webhooks/Test-CIPPAuditLogRules.ps1 | 7 +
.../Set-CIPPDBCacheActiveUserDetail.ps1 | 2 +
...-CIPPDBCacheActivityBasedTimeoutPolicy.ps1 | 2 +
...t-CIPPDBCacheAdminConsentRequestPolicy.ps1 | 2 +
.../Set-CIPPDBCacheAdminReportSettings.ps1 | 2 +
.../Set-CIPPDBCacheAdministrativeUnits.ps1 | 2 +
.../Set-CIPPDBCacheAppRoleAssignments.ps1 | 2 +
.../Public/DBCache/Set-CIPPDBCacheApps.ps1 | 2 +
...t-CIPPDBCacheAuthenticationFlowsPolicy.ps1 | 2 +
...CIPPDBCacheAuthenticationMethodsPolicy.ps1 | 3 +
.../Set-CIPPDBCacheAuthorizationPolicy.ps1 | 2 +
...CIPPDBCacheAutopilotDeploymentProfiles.ps1 | 2 +
.../Set-CIPPDBCacheB2BManagementPolicy.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheBitlockerKeys.ps1 | 2 +
...t-CIPPDBCacheConditionalAccessPolicies.ps1 | 4 +
.../Set-CIPPDBCacheCopilotAdminSettings.ps1 | 2 +
.../Set-CIPPDBCacheCopilotPolicySettings.ps1 | 2 +
.../Set-CIPPDBCacheCopilotUserCountTrend.ps1 | 2 +
...Set-CIPPDBCacheCrossTenantAccessPolicy.ps1 | 2 +
...-CIPPDBCacheDefaultAppManagementPolicy.ps1 | 2 +
...PDBCacheDeviceEnrollmentConfigurations.ps1 | 2 +
...et-CIPPDBCacheDeviceRegistrationPolicy.ps1 | 2 +
.../Public/DBCache/Set-CIPPDBCacheDevices.ps1 | 2 +
...et-CIPPDBCacheDirectoryRecommendations.ps1 | 2 +
.../Public/DBCache/Set-CIPPDBCacheDomains.ps1 | 2 +
.../Public/DBCache/Set-CIPPDBCacheGroups.ps1 | 78 +-
.../Public/DBCache/Set-CIPPDBCacheGuests.ps1 | 2 +
...et-CIPPDBCacheHomeRealmDiscoveryPolicy.ps1 | 2 +
...CIPPDBCacheIntuneAppProtectionPolicies.ps1 | 6 +
...neAppleUserInitiatedEnrollmentProfiles.ps1 | 3 +
.../Set-CIPPDBCacheIntuneApplications.ps1 | 5 +
...Set-CIPPDBCacheIntuneAssignmentFilters.ps1 | 4 +
.../Set-CIPPDBCacheIntuneBrandingProfile.ps1 | 2 +
...et-CIPPDBCacheIntuneCompliancePolicies.ps1 | 5 +
...CIPPDBCacheIntuneConfigurationPolicies.ps1 | 2 +
...heIntuneDeviceEnrollmentConfigurations.ps1 | 3 +
.../Set-CIPPDBCacheIntuneMobileApps.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheIntunePolicies.ps1 | 2 +
.../Set-CIPPDBCacheIntuneReusableSettings.ps1 | 4 +
.../DBCache/Set-CIPPDBCacheIntuneScripts.ps1 | 8 +
...tuneWindowsAutopilotDeploymentProfiles.ps1 | 2 +
.../Set-CIPPDBCacheM365AppUserDetail.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheMDEOnboarding.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheMailboxUsage.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheMailboxes.ps1 | 2 +
...t-CIPPDBCacheManagedDeviceCleanupRules.ps1 | 2 +
...PPDBCacheManagedDeviceEncryptionStates.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheManagedDevices.ps1 | 2 +
.../Set-CIPPDBCacheMessageCenterMessages.ps1 | 2 +
...PDBCacheMobileDeviceManagementPolicies.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheMoeraDmarc.ps1 | 2 +
.../Set-CIPPDBCacheNamePronunciation.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheNetworkAccess.ps1 | 4 +
.../Set-CIPPDBCacheOAuth2PermissionGrants.ps1 | 2 +
.../Set-CIPPDBCacheOfficeActivations.ps1 | 2 +
.../Set-CIPPDBCacheOneDriveLongPaths.ps1 | 4 +
.../DBCache/Set-CIPPDBCacheOneDriveQuotas.ps1 | 2 +
...Set-CIPPDBCacheOneDriveRootPermissions.ps1 | 2 +
.../Set-CIPPDBCacheOneDriveRootShortcuts.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheOneDriveUsage.ps1 | 3 +
.../DBCache/Set-CIPPDBCacheOrganization.ps1 | 2 +
.../Set-CIPPDBCacheOrganizationBranding.ps1 | 2 +
.../DBCache/Set-CIPPDBCachePIMSettings.ps1 | 3 +
...Set-CIPPDBCachePermissionGrantPolicies.ps1 | 2 +
.../Set-CIPPDBCachePhotoUpdateSettings.ps1 | 2 +
.../Set-CIPPDBCachePlannerUserPolicies.ps1 | 2 +
.../DBCache/Set-CIPPDBCachePronouns.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheRiskDetections.ps1 | 2 +
.../Set-CIPPDBCacheRiskyServicePrincipals.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheRiskyUsers.ps1 | 2 +
...DBCacheRoleAssignmentScheduleInstances.ps1 | 2 +
.../Set-CIPPDBCacheRoleAssignments.ps1 | 3 +
.../Set-CIPPDBCacheRoleDefinitions.ps1 | 2 +
...et-CIPPDBCacheRoleEligibilitySchedules.ps1 | 2 +
.../Set-CIPPDBCacheRoleManagementPolicies.ps1 | 1 +
.../Public/DBCache/Set-CIPPDBCacheRoles.ps1 | 3 +
.../DBCache/Set-CIPPDBCacheSecureScore.ps1 | 3 +
...-CIPPDBCacheSecureScoreControlProfiles.ps1 | 2 +
.../Set-CIPPDBCacheSecurityDefaults.ps1 | 2 +
.../Set-CIPPDBCacheSensitivityLabels.ps1 | 2 +
.../Set-CIPPDBCacheServiceHealthIssues.ps1 | 2 +
.../Set-CIPPDBCacheServiceHealthOverviews.ps1 | 2 +
...PDBCacheServicePrincipalRiskDetections.ps1 | 2 +
.../Set-CIPPDBCacheServicePrincipals.ps1 | 2 +
.../DBCache/Set-CIPPDBCacheSettings.ps1 | 3 +
...Set-CIPPDBCacheSharePointAdminSettings.ps1 | 2 +
.../Set-CIPPDBCacheSharePointPermissions.ps1 | 2 +
.../Set-CIPPDBCacheSharePointSharingLinks.ps1 | 3 +
.../DBCache/Set-CIPPDBCacheSiteActivity.ps1 | 7 +
.../Set-CIPPDBCacheStorageCleanupScan.ps1 | 2 +
.../Public/DBCache/Set-CIPPDBCacheTeams.ps1 | 4 +
.../DBCache/Set-CIPPDBCacheTeamsActivity.ps1 | 4 +
.../DBCache/Set-CIPPDBCacheTeamsVoice.ps1 | 4 +
...Set-CIPPDBCacheUserRegistrationDetails.ps1 | 2 +
.../Public/DBCache/Set-CIPPDBCacheUsers.ps1 | 2 +
.../DBCache/Write-CIPPDBCacheGroupBatch.ps1 | 76 +
.../CIPP/Core/Invoke-ExecSAMCertificate.ps1 | 2 +
.../Core/Invoke-ExecServicePrincipals.ps1 | 5 +
.../CIPP/Core/Invoke-ListDirectoryObjects.ps1 | 2 +
.../CIPP/MCP/Invoke-PublicMcpRegister.ps1 | 3 +
.../CIPP/Settings/Invoke-ExecApiClient.ps1 | 5 +
.../CIPP/Settings/Invoke-ExecCustomData.ps1 | 6 +
.../CIPP/Settings/Invoke-ExecCustomRole.ps1 | 2 +
.../Invoke-ExecExchangeRoleRepair.ps1 | 3 +
.../CIPP/Settings/Invoke-ExecGDAPTrace.ps1 | 109 +-
.../CIPP/Setup/Invoke-ExecAddTenant.ps1 | 3 +
.../CIPP/Setup/Invoke-ExecListAppId.ps1 | 5 +
.../CIPP/Setup/Invoke-ExecSSOSetup.ps1 | 3 +
.../Contacts/Invoke-ListContacts.ps1 | 2 +
.../Administration/Invoke-ExecHVEUser.ps1 | 4 +
.../Invoke-ExecModifyCalPerms.ps1 | 2 +
.../Invoke-ExecModifyContactPerms.ps1 | 2 +
.../Invoke-ExecModifyMBPerms.ps1 | 3 +
...Invoke-ListSharedMailboxAccountEnabled.ps1 | 2 +
.../Resources/Invoke-ListRoomLists.ps1 | 2 +
.../Invoke-ExecMailQuarantineSubmit.ps1 | 2 +
...nvoke-ListMailQuarantineMessageDetails.ps1 | 2 +
.../Invoke-ListUserReportedMessage.ps1 | 3 +
.../Invoke-ListUserReportedMessages.ps1 | 2 +
.../Tools/Invoke-ExecMailTest.ps1 | 3 +
.../Tools/Invoke-ListMessageTrace.ps1 | 5 +
.../Applications/Invoke-AddEdgeApp.ps1 | 3 +
.../Applications/Invoke-AddOfficeApp.ps1 | 3 +
.../Applications/Invoke-ExecAssignApp.ps1 | 2 +
.../Applications/Invoke-ExecSyncVPP.ps1 | 3 +
.../Endpoint/Applications/Invoke-ListApps.ps1 | 3 +
.../Invoke-ListDetectedAppDevices.ps1 | 2 +
.../Applications/Invoke-ListDetectedApps.ps1 | 4 +
.../Applications/Invoke-RemoveApp.ps1 | 2 +
.../Invoke-AddCorporateDeviceIdentifier.ps1 | 2 +
.../Autopilot/Invoke-ExecAssignAPDevice.ps1 | 2 +
.../Invoke-ExecAssignAutopilotProfile.ps1 | 4 +
.../Autopilot/Invoke-ExecRenameAPDevice.ps1 | 2 +
.../Invoke-ExecSetAPDeviceGroupTag.ps1 | 2 +
.../Autopilot/Invoke-ExecSyncAPDevices.ps1 | 2 +
.../Autopilot/Invoke-ListAPDevices.ps1 | 2 +
.../Autopilot/Invoke-ListAutopilotconfig.ps1 | 4 +
.../Autopilot/Invoke-RemoveAPDevice.ps1 | 3 +
.../MEM/Invoke-AddIntuneReusableSetting.ps1 | 3 +
.../MEM/Invoke-EditAssignmentFilter.ps1 | 2 +
.../Endpoint/MEM/Invoke-EditPolicy.ps1 | 3 +
.../MEM/Invoke-ExecAssignmentFilter.ps1 | 2 +
.../Endpoint/MEM/Invoke-ExecDeviceAction.ps1 | 2 +
.../Invoke-ExecRemoveEnrollmentProfile.ps1 | 3 +
.../Endpoint/MEM/Invoke-ExecSyncDEP.ps1 | 3 +
.../Invoke-ListAndroidEnrollmentProfiles.ps1 | 3 +
.../MEM/Invoke-ListAppProtectionPolicies.ps1 | 4 +
.../Invoke-ListAppleEnrollmentProfiles.ps1 | 3 +
.../MEM/Invoke-ListAssignmentFilters.ps1 | 3 +
.../MEM/Invoke-ListCompliancePolicies.ps1 | 3 +
.../Endpoint/MEM/Invoke-ListDefenderState.ps1 | 3 +
.../Endpoint/MEM/Invoke-ListDeviceDetails.ps1 | 4 +
.../MEM/Invoke-ListIntuneApprovalRequests.ps1 | 2 +
.../Endpoint/MEM/Invoke-ListIntuneIntents.ps1 | 2 +
.../Endpoint/MEM/Invoke-ListIntunePolicy.ps1 | 9 +
.../Endpoint/MEM/Invoke-ListIntuneScript.ps1 | 6 +
.../Invoke-RemoveIntuneReusableSetting.ps1 | 2 +
.../Invoke-ListAllTenantDeviceCompliance.ps1 | 2 +
.../Endpoint/Reports/Invoke-ListDevices.ps1 | 2 +
.../Groups/Invoke-AddGroupTeam.ps1 | 2 +
.../Groups/Invoke-EditGroup.ps1 | 9 +
.../Groups/Invoke-ListGroups.ps1 | 6 +
.../Roles/Invoke-ListPIMRoles.ps1 | 2 +
.../Administration/Roles/Invoke-ListRoles.ps1 | 5 +
.../Administration/Users/Invoke-AddGuest.ps1 | 2 +
.../Users/Invoke-AddUserBulk.ps1 | 2 +
.../Users/Invoke-ExecBECBulkCheck.ps1 | 2 +
.../Users/Invoke-ExecBECRemediate.ps1 | 2 +
.../Users/Invoke-ExecBulkLicense.ps1 | 2 +
.../Users/Invoke-ExecDismissRiskyUser.ps1 | 2 +
.../Users/Invoke-ExecJITAdmin.ps1 | 4 +
.../Users/Invoke-ExecPasswordNeverExpires.ps1 | 2 +
.../Invoke-ExecRemoveOneDriveShortCut.ps1 | 2 +
.../Invoke-ExecReprocessUserLicenses.ps1 | 2 +
.../Users/Invoke-ExecRestoreDeleted.ps1 | 2 +
.../Users/Invoke-ExecSendPush.ps1 | 2 +
.../Users/Invoke-ExecSetDefaultMFAMethod.ps1 | 2 +
.../Users/Invoke-ExecSetUserPhoto.ps1 | 3 +
.../Users/Invoke-ListGuestUsers.ps1 | 2 +
.../Users/Invoke-ListJITAdmin.ps1 | 4 +
.../Users/Invoke-ListUserCounts.ps1 | 3 +
.../Users/Invoke-ListUserDevices.ps1 | 3 +
.../Users/Invoke-ListUserGroups.ps1 | 2 +
.../Users/Invoke-ListUserMailboxDetails.ps1 | 3 +
.../Invoke-ListUserOneDriveShortcuts.ps1 | 4 +
.../Users/Invoke-ListUserPhoto.ps1 | 2 +
.../Users/Invoke-ListUserSigninLogs.ps1 | 2 +
.../Administration/Users/Invoke-ListUsers.ps1 | 2 +
.../Administration/Users/Invoke-PatchUser.ps1 | 2 +
.../Invoke-ListAzureADConnectStatus.ps1 | 2 +
.../Identity/Reports/Invoke-ListBasicAuth.ps1 | 2 +
.../Reports/Invoke-ListObjectHistory.ps1 | 2 +
.../Identity/Reports/Invoke-ListSignIns.ps1 | 2 +
.../Invoke-AddSensitivityLabelTemplate.ps1 | 2 +
.../Defender/Invoke-ListMDEOnboarding.ps1 | 2 +
.../Incidents/Invoke-ExecAlertsList.ps1 | 2 +
.../Incidents/Invoke-ExecIncidentsList.ps1 | 2 +
.../Incidents/Invoke-ExecMdoAlertsList.ps1 | 2 +
.../Incidents/Invoke-ExecSetMdoAlert.ps1 | 2 +
.../Incidents/Invoke-ExecSetSecurityAlert.ps1 | 2 +
.../Invoke-ExecSetSecurityIncident.ps1 | 2 +
.../Teams-Sharepoint/Invoke-AddTeam.ps1 | 2 +
.../Invoke-ExecBulkRemoveSharingLinks.ps1 | 2 +
.../Invoke-ExecReactivateSite.ps1 | 3 +
.../Invoke-ExecRemoveSPOExternalUser.ps1 | 3 +
.../Invoke-ExecRemoveSharingLink.ps1 | 2 +
...cRemoveTeamsVoicePhoneNumberAssignment.ps1 | 2 +
.../Invoke-ExecSiteBrowserActions.ps1 | 2 +
.../Invoke-ExecSiteBrowserPermissions.ps1 | 33 +-
...ke-ExecTeamsVoicePhoneNumberAssignment.ps1 | 4 +
.../Invoke-ListSharePointExternalUsers.ps1 | 3 +
.../Invoke-ListSharepointSettings.ps1 | 2 +
.../Invoke-ListSiteBrowser.ps1 | 5 +
.../Invoke-ListSiteBrowserPermissions.ps1 | 3 +
.../Invoke-ListSiteLibraries.ps1 | 2 +
.../Invoke-ListSiteMembers.ps1 | 4 +
.../Invoke-ListSiteUserAccess.ps1 | 3 +
.../Teams-Sharepoint/Invoke-ListSites.ps1 | 2 +
.../Teams-Sharepoint/Invoke-ListTeams.ps1 | 6 +
.../Invoke-ListTeamsVoice.ps1 | 2 +
.../Tenant/AI/Invoke-ExecCopilotSettings.ps1 | 2 +
.../AI/Invoke-ListAgent365PackageDetail.ps1 | 2 +
.../Tenant/AI/Invoke-ListCopilotSettings.ps1 | 2 +
.../Alerts/Invoke-ExecAuditLogSearch.ps1 | 2 +
.../Invoke-ExecApplication.ps1 | 2 +
.../Invoke-ExecCreateAppTemplate.ps1 | 9 +
.../Invoke-ExecManageAppCredentials.ps1 | 20 +-
.../Invoke-ListAppConsentRequests.ps1 | 3 +
.../Domains/Invoke-AddDomain.ps1 | 2 +
.../Domains/Invoke-ExecDomainAction.ps1 | 4 +
.../Domains/Invoke-ListDomains.ps1 | 2 +
.../Tenant/Invoke-AddTenant.ps1 | 2 +
.../Tenant/Invoke-ExecAddSPN.ps1 | 2 +
.../Tenant/Invoke-ExecOffboardTenant.ps1 | 10 +
.../Tenant/Invoke-ExecUpdateSecureScore.ps1 | 2 +
.../Tenant/Invoke-ListExternalTenantInfo.ps1 | 2 +
.../Administration/Tenant/Invoke-ListOrg.ps1 | 2 +
.../Tenant/Invoke-ListTenantDetails.ps1 | 2 +
.../Tenant/Invoke-ListUsersAndGroups.ps1 | 3 +
.../Conditional/Invoke-AddNamedLocation.ps1 | 2 +
.../Conditional/Invoke-EditCAPolicy.ps1 | 2 +
.../Conditional/Invoke-ExecCAExclusion.ps1 | 4 +
.../Invoke-ExecEditCAPolicyFull.ps1 | 2 +
.../Invoke-ListConditionalAccessPolicies.ps1 | 8 +
...oke-ListConditionalAccessPolicyChanges.ps1 | 2 +
.../Conditional/Invoke-ListNamedLocations.ps1 | 2 +
.../Conditional/Invoke-RemoveCAPolicy.ps1 | 2 +
.../Tenant/GDAP/Invoke-ExecAddGDAPRole.ps1 | 2 +
.../Invoke-ExecDeleteGDAPRelationship.ps1 | 2 +
.../GDAP/Invoke-ExecGDAPAccessAssignment.ps1 | 7 +
.../Tenant/GDAP/Invoke-ExecGDAPInvite.ps1 | 5 +
.../GDAP/Invoke-ExecGDAPRemoveGArole.ps1 | 3 +
.../Invoke-ExecGDAPRepairRoleMappings.ps1 | 2 +
.../GDAP/Invoke-ListGDAPAccessAssignments.ps1 | 4 +
.../Tenant/GDAP/Invoke-ListGDAPContracts.ps1 | 2 +
.../GDAP/Invoke-ListGDAPRelationships.ps1 | 3 +
.../GDAP/Invoke-ListGDAPServicePrincipals.ps1 | 2 +
.../Reports/Invoke-ListGraphReports.ps1 | 2 +
.../Invoke-ListMessageCenterMessages.ps1 | 2 +
.../Tenant/Reports/Invoke-ListOAuthApps.ps1 | 3 +
.../Reports/Invoke-ListServiceHealth.ps1 | 2 +
.../Invoke-ListServiceHealthIssues.ps1 | 2 +
.../Invoke-ListServiceHealthOverviews.ps1 | 2 +
.../Invoke-ExecUpdateDriftDeviation.ps1 | 2 +
...nvoke-CIPPStandardActivityBasedTimeout.ps1 | 3 +
.../Invoke-CIPPStandardAddDMARCToMOERA.ps1 | 1 +
.../Invoke-CIPPStandardAdminSSPR.ps1 | 1 +
.../Invoke-CIPPStandardAnonReportDisable.ps1 | 2 +
.../Invoke-CIPPStandardAppDeploy.ps1 | 5 +
...Invoke-CIPPStandardAppManagementPolicy.ps1 | 2 +
...CIPPStandardAppleEnrollmentTypeProfile.ps1 | 7 +
...e-CIPPStandardAssignmentFilterTemplate.ps1 | 2 +
...CIPPStandardAuthMethodsPolicyMigration.ps1 | 2 +
...Invoke-CIPPStandardAuthMethodsSettings.ps1 | 2 +
...voke-CIPPStandardAuthenticationMethods.ps1 | 2 +
.../Invoke-CIPPStandardAutopilotProfile.ps1 | 3 +
...Invoke-CIPPStandardAutopilotStatusPage.ps1 | 1 +
...IPPStandardBitLockerKeysForOwnedDevice.ps1 | 1 +
.../Standards/Invoke-CIPPStandardBranding.ps1 | 3 +
...StandardCollaborationDomainRestriction.ps1 | 3 +
.../Invoke-CIPPStandardCopilotLimitedMode.ps1 | 3 +
.../Invoke-CIPPStandardCopilotSettings.ps1 | 2 +
...e-CIPPStandardCustomBannedPasswordList.ps1 | 3 +
...IPPStandardDefaultPlatformRestrictions.ps1 | 2 +
.../Invoke-CIPPStandardDefenderASRPolicy.ps1 | 3 +
.../Invoke-CIPPStandardDefenderAVPolicy.ps1 | 3 +
...e-CIPPStandardDefenderCompliancePolicy.ps1 | 3 +
.../Invoke-CIPPStandardDefenderEDRPolicy.ps1 | 3 +
...ke-CIPPStandardDefenderExclusionPolicy.ps1 | 3 +
...voke-CIPPStandardDeletedUserRentention.ps1 | 2 +
...CIPPStandardDeployCheckChromeExtension.ps1 | 4 +
.../Invoke-CIPPStandardDeployMailContact.ps1 | 1 +
.../Invoke-CIPPStandardDevicePrepProfile.ps1 | 9 +
...PStandardDisableAgentBlueprintCreation.ps1 | 1 +
.../Invoke-CIPPStandardDisableAppCreation.ps1 | 1 +
.../Invoke-CIPPStandardDisableEmail.ps1 | 1 +
...tandardDisableExchangeOnlinePowerShell.ps1 | 2 +
...voke-CIPPStandardDisableGuestDirectory.ps1 | 1 +
.../Invoke-CIPPStandardDisableGuests.ps1 | 4 +
...nvoke-CIPPStandardDisableInactiveUsers.ps1 | 3 +
...voke-CIPPStandardDisableM365GroupUsers.ps1 | 5 +
.../Invoke-CIPPStandardDisableQRCodePin.ps1 | 1 +
.../Invoke-CIPPStandardDisableReshare.ps1 | 2 +
...oke-CIPPStandardDisableResourceMailbox.ps1 | 1 +
.../Invoke-CIPPStandardDisableSMS.ps1 | 1 +
...-CIPPStandardDisableSecurityGroupUsers.ps1 | 1 +
...CIPPStandardDisableSelfServiceLicenses.ps1 | 2 +
...IPPStandardDisableSharePointLegacyAuth.ps1 | 2 +
...nvoke-CIPPStandardDisableSharedMailbox.ps1 | 1 +
...voke-CIPPStandardDisableTenantCreation.ps1 | 1 +
...voke-CIPPStandardDisableUserSiteCreate.ps1 | 2 +
.../Invoke-CIPPStandardDisableViva.ps1 | 1 +
.../Invoke-CIPPStandardDisableVoice.ps1 | 1 +
...oke-CIPPStandardDisablex509Certificate.ps1 | 1 +
...ke-CIPPStandardEmailAsAlternateLoginId.ps1 | 3 +
...e-CIPPStandardEnableAppConsentRequests.ps1 | 3 +
.../Invoke-CIPPStandardEnableFIDO2.ps1 | 1 +
...Invoke-CIPPStandardEnableHardwareOAuth.ps1 | 1 +
...ke-CIPPStandardEnableNamePronunciation.ps1 | 2 +
.../Invoke-CIPPStandardEnablePronouns.ps1 | 2 +
...nvoke-CIPPStandardEnforcePrivateGroups.ps1 | 2 +
...ntWindowsHelloForBusinessConfiguration.ps1 | 2 +
.../Invoke-CIPPStandardExcludedfileExt.ps1 | 2 +
...-CIPPStandardExternalComplianceTrusted.ps1 | 2 +
.../Invoke-CIPPStandardExternalMFATrusted.ps1 | 2 +
...nvoke-CIPPStandardFIDO2PasskeyProfiles.ps1 | 2 +
.../Invoke-CIPPStandardGroupTemplate.ps1 | 2 +
.../Invoke-CIPPStandardGuestInvite.ps1 | 1 +
...ke-CIPPStandardIntuneAppTemplateDeploy.ps1 | 1 +
...e-CIPPStandardIntuneComplianceSettings.ps1 | 1 +
...ke-CIPPStandardLegacyEmailReportAddins.ps1 | 2 +
...tandardMDMEnrollmentDuringRegistration.ps1 | 2 +
.../Standards/Invoke-CIPPStandardMDMScope.ps1 | 3 +
.../Invoke-CIPPStandardMailContacts.ps1 | 3 +
.../Standards/Invoke-CIPPStandardNudgeMFA.ps1 | 37 +-
.../Invoke-CIPPStandardOauthConsent.ps1 | 5 +
.../Invoke-CIPPStandardOauthConsentLowSec.ps1 | 2 +
...voke-CIPPStandardOneDriveLicensedQuota.ps1 | 2 +
.../Invoke-CIPPStandardPIMRoleSettings.ps1 | 3 +
...CIPPStandardPWcompanionAppAllowedState.ps1 | 2 +
...rdPWdisplayAppInformationRequiredState.ps1 | 1 +
...oke-CIPPStandardPasswordExpireDisabled.ps1 | 2 +
.../Invoke-CIPPStandardPhishProtection.ps1 | 4 +
...oke-CIPPStandardPlannerBlockTaskDelete.ps1 | 2 +
.../Invoke-CIPPStandardProfilePhotos.ps1 | 3 +
...ndardRestrictThirdPartyStorageServices.ps1 | 2 +
...e-CIPPStandardReusableSettingsTemplate.ps1 | 2 +
.../Invoke-CIPPStandardSPOVersionControl.ps1 | 1 +
...oke-CIPPStandardSecureScoreRemediation.ps1 | 2 +
.../Invoke-CIPPStandardSecurityDefaults.ps1 | 2 +
.../Invoke-CIPPStandardSmartLockout.ps1 | 3 +
.../Invoke-CIPPStandardStaleEntraDevices.ps1 | 3 +
.../Standards/Invoke-CIPPStandardTAP.ps1 | 1 +
...PPStandardTeamsDisableResourceAccounts.ps1 | 1 +
...voke-CIPPStandardTenantDefaultTimezone.ps1 | 2 +
.../Invoke-CIPPStandardUndoOauth.ps1 | 1 +
.../Invoke-CIPPStandardUsageLocation.ps1 | 3 +
...voke-CIPPStandardUserPreferredLanguage.ps1 | 1 +
...nvoke-CIPPStandardWindowsBackupRestore.ps1 | 2 +
.../Invoke-CIPPStandardallowOAuthTokens.ps1 | 1 +
.../Invoke-CIPPStandardallowOTPTokens.ps1 | 1 +
.../Invoke-CIPPStandarddisableMacSync.ps1 | 2 +
...voke-CIPPStandardintuneBrandingProfile.ps1 | 2 +
.../Invoke-CIPPStandardintuneDeviceReg.ps1 | 2 +
...CIPPStandardintuneDeviceRegLocalAdmins.ps1 | 2 +
...CIPPStandardintuneDeviceRetirementDays.ps1 | 2 +
.../Invoke-CIPPStandardintuneRequireMFA.ps1 | 2 +
...PPStandardintuneRestrictUserDeviceJoin.ps1 | 2 +
...rdintuneRestrictUserDeviceRegistration.ps1 | 2 +
.../Standards/Invoke-CIPPStandardlaps.ps1 | 2 +
.../Invoke-CIPPStandardsharingCapability.ps1 | 2 +
...e-CIPPStandardsharingDomainRestriction.ps1 | 2 +
.../Sync-CippExtensionData.ps1 | 18 +
.../Public/HIBP/Get-BreachInfo.ps1 | 4 +
.../Public/Hudu/Invoke-HuduExtensionSync.ps1 | 2 +
.../Public/New-CippExtAlert.ps1 | 4 +
.../NinjaOne/Invoke-NinjaOneDeviceWebhook.ps1 | 5 +
.../Invoke-SherwebScheduledLicenseRemoval.ps1 | 2 +
.../DBCache/Set-CIPPDBCache.Memory.Tests.ps1 | 1 +
.../SharePointSharingLinks.Resume.Tests.ps1 | 6 +-
...Get-CIPPCAPolicyIdentityCoverage.Tests.ps1 | 3 +
.../Invoke-CIPPPIMAssignmentAction.Tests.ps1 | 2 +
.../Tests/Static/PIMSecureDirection.Tests.ps1 | 2 +-
709 files changed, 35975 insertions(+), 1854 deletions(-)
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPGraphIdentityLabel.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPOneDriveHasNonStandardAccess.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPOneDriveSiteRow.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPSpoPrincipalType.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPSpoUserUpn.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPGraphIdentityGrant.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPOneDriveSkippedSiteRow.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPSpoRoleAssignmentGrant.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPSpoUserGrant.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPGraphGuestIdentity.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPOneDriveOwnerPrincipal.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPSpoGuestUser.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Add-CIPPSharingRows.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/ConvertTo-CIPPSharingRow.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Get-CIPPIdentityLabel.ps1
create mode 100644 backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Test-CIPPExternalIdentity.ps1
create mode 100644 backend/Modules/CIPPCore/Public/Add-CIPPCACoverageReason.ps1
create mode 100644 backend/Modules/CIPPCore/Public/Expand-CIPPCACoverageGuestBlock.ps1
create mode 100644 backend/Modules/CIPPCore/Public/Find-CIPPGDAPTransitiveGroupPath.ps1
create mode 100644 backend/Modules/CIPPCore/Public/Get-CIPPCACoverageGuestCategory.ps1
create mode 100644 backend/Modules/CIPPCore/Public/Get-CIPPCACoverageGuestHomeTenantId.ps1
create mode 100644 backend/Modules/CIPPCore/Public/GraphHelper/Get-CIPPAppPasswordPolicyMaxEnd.ps1
create mode 100644 backend/Modules/CIPPCore/Public/New-CIPPCACoverageReason.ps1
create mode 100644 backend/Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMActiveAssignmentRemoval.ps1
create mode 100644 backend/Modules/CIPPCore/Public/PIM/Send-CIPPPIMScheduleRequest.ps1
create mode 100644 backend/Modules/CIPPCore/Public/Remove-CIPPGraphSitePermission.ps1
create mode 100644 backend/Modules/CIPPCore/Public/Resolve-CIPPNudgeMFATarget.ps1
create mode 100644 backend/Modules/CIPPCore/Public/Test-CIPPCACoverageExternalTenantMatch.ps1
create mode 100644 backend/Modules/CIPPDB/Public/DBCache/Write-CIPPDBCacheGroupBatch.ps1
diff --git a/backend/Config/openapi.json b/backend/Config/openapi.json
index bf957666a1..cac480fc74 100644
--- a/backend/Config/openapi.json
+++ b/backend/Config/openapi.json
@@ -544,6 +544,20 @@
"x-cipp-role": "Endpoint.MEM.ReadWrite",
"x-cipp-reads-via": [
"New-CIPPAssignmentFilter"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPAssignmentFilter"
+ ]
+ }
]
}
},
@@ -690,7 +704,103 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefaultAPDeploymentProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDefaultAPDeploymentProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All",
+ "DeviceManagementConfiguration.Read.All",
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefaultAPDeploymentProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsAutopilotDeploymentProfiles",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefaultAPDeploymentProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /deviceManagement/windowsAutopilotDeploymentProfiles/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDefaultAPDeploymentProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefaultAPDeploymentProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/windowsAutopilotDeploymentProfiles",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDefaultAPDeploymentProfile"
+ ]
+ }
+ ]
}
},
"/api/AddBaseline": {
@@ -970,7 +1080,330 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite"
+ "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPGroupLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/authenticationContextClassReferences",
+ "type": "Application",
+ "least": [
+ "AuthenticationContext.Read.All"
+ ],
+ "higher": [
+ "AuthenticationContext.ReadWrite.All",
+ "Policy.Read.ConditionalAccess",
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/identitySecurityDefaultsEnforcementPolicy",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /policies/identitySecurityDefaultsEnforcementPolicy",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/assignLicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGroupLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPGroup"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/authenticationContextClassReferences",
+ "type": "Application",
+ "least": [
+ "AuthenticationContext.ReadWrite.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/namedLocations",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ }
+ ]
}
},
"/api/AddCATemplate": {
@@ -1089,6 +1522,73 @@
"x-cipp-role": "Tenant.ConditionalAccess.ReadWrite",
"x-cipp-reads-via": [
"New-CIPPCATemplate"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/authenticationContextClassReferences",
+ "type": "Delegated",
+ "least": [
+ "AuthenticationContext.Read.All"
+ ],
+ "higher": [
+ "AuthenticationContext.ReadWrite.All",
+ "Policy.Read.ConditionalAccess",
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ }
]
}
},
@@ -1252,7 +1752,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.ConnectionFilter.ReadWrite"
+ "x-cipp-role": "Exchange.ConnectionFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddConnectionFilterTemplate": {
@@ -1413,7 +1987,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Contact.ReadWrite"
+ "x-cipp-role": "Exchange.Contact.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddContactTemplates": {
@@ -1533,7 +2181,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/importedDeviceIdentities/importDeviceIdentityList",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-AddCorporateDeviceIdentifier"
+ ]
+ }
+ ]
}
},
"/api/AddCustomScript": {
@@ -1946,6 +2608,115 @@
"Set-CIPPDefenderCompliancePolicy",
"Set-CIPPDefenderEDRPolicy",
"Set-CIPPDefenderExclusionPolicy"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefenderASRPolicy",
+ "Set-CIPPDefenderAVPolicy",
+ "Set-CIPPDefenderEDRPolicy",
+ "Set-CIPPDefenderExclusionPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Enable-CIPPMDEConnector",
+ "Set-CIPPDefenderCompliancePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Organization.Read.All",
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Enable-CIPPMDEConnector"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDefenderCompliancePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/configurationPolicies/{id}/assign",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDefenderASRPolicy",
+ "Set-CIPPDefenderAVPolicy",
+ "Set-CIPPDefenderEDRPolicy",
+ "Set-CIPPDefenderExclusionPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/configurationPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefenderASRPolicy",
+ "Set-CIPPDefenderAVPolicy",
+ "Set-CIPPDefenderEDRPolicy",
+ "Set-CIPPDefenderExclusionPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/mobileThreatDefenseConnectors",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDefenderCompliancePolicy"
+ ]
+ }
]
}
},
@@ -2107,6 +2878,59 @@
"Set-CIPPDefenderAVPolicy",
"Set-CIPPDefenderEDRPolicy",
"Set-CIPPDefenderExclusionPolicy"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefenderASRPolicy",
+ "Set-CIPPDefenderAVPolicy",
+ "Set-CIPPDefenderEDRPolicy",
+ "Set-CIPPDefenderExclusionPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/configurationPolicies/{id}/assign",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDefenderASRPolicy",
+ "Set-CIPPDefenderAVPolicy",
+ "Set-CIPPDefenderEDRPolicy",
+ "Set-CIPPDefenderExclusionPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/configurationPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefenderASRPolicy",
+ "Set-CIPPDefenderAVPolicy",
+ "Set-CIPPDefenderEDRPolicy",
+ "Set-CIPPDefenderExclusionPolicy"
+ ]
+ }
]
}
},
@@ -2158,7 +2982,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.DlpCompliancePolicy.ReadWrite"
+ "x-cipp-role": "Security.DlpCompliancePolicy.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddDlpCompliancePolicyTemplate": {
@@ -2273,7 +3171,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.ReadWrite"
+ "x-cipp-role": "Tenant.Administration.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /domains",
+ "type": "Application",
+ "least": [
+ "Domain.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-AddDomain"
+ ]
+ }
+ ]
}
},
"/api/AddEdgeApp": {
@@ -2367,6 +3279,94 @@
"x-cipp-any-tenant": true,
"x-cipp-reads-via": [
"Get-CIPPEdgeAppBody"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}/assignments",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-AddEdgeApp"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceAppManagement/mobileApps/{id}/assign",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceAppManagement/mobileApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-AddEdgeApp"
+ ]
+ }
]
}
},
@@ -3330,6 +4330,80 @@
"x-cipp-role": "Exchange.TransportRule.ReadWrite",
"x-cipp-reads-via": [
"ConvertTo-FieldArray"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
]
}
},
@@ -3410,7 +4484,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceEnrollmentConfigurations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefaultAPEnrollment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /deviceManagement/deviceEnrollmentConfigurations/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPDefaultAPEnrollment"
+ ]
+ }
+ ]
}
},
"/api/AddEquipmentMailbox": {
@@ -3476,7 +4580,113 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Equipment.ReadWrite"
+ "x-cipp-role": "Exchange.Equipment.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSignInState"
+ ]
+ }
+ ]
}
},
"/api/AddExConnector": {
@@ -3534,7 +4744,81 @@
}
],
"x-cipp-role": "Exchange.Connector.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddExConnectorTemplate": {
@@ -3715,6 +4999,131 @@
"x-cipp-role": "Identity.Group.ReadWrite",
"x-cipp-reads-via": [
"New-CIPPGroup"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPGroupLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/assignLicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGroupLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPGroup"
+ ]
+ }
]
}
},
@@ -4004,7 +5413,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Group.ReadWrite"
+ "x-cipp-role": "Identity.Group.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PUT /groups/{id}/team",
+ "type": "Application",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-AddGroupTeam"
+ ]
+ }
+ ]
}
},
"/api/AddGroupTemplate": {
@@ -4166,7 +5591,24 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /invitations",
+ "type": "Application",
+ "least": [
+ "User.Invite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-AddGuest"
+ ]
+ }
+ ]
}
},
"/api/AddIntunePolicyClone": {
@@ -4237,7 +5679,215 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPIntuneTargetedMobileApps"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Select-CIPPIntuneAvailableSetting"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/depOnboardingSettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceConfigurations/{id}/getOmaSettingPlainTextValue(secretReferenceValueId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPOmaSettingDecryptedValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues/{id}/presentationValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}/presentations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue",
+ "Resolve-CIPPIntuneAdminTemplateBinding"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue",
+ "Resolve-CIPPIntuneAdminTemplateBinding"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPIntuneAdminTemplateBinding"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reusablePolicySettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Sync-CIPPReusablePolicySettings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reusablePolicySettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Sync-CIPPReusablePolicySettings"
+ ]
+ }
+ ]
}
},
"/api/AddIntuneReusableSetting": {
@@ -4307,7 +5957,39 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reusablePolicySettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-AddIntuneReusableSetting"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reusablePolicySettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-AddIntuneReusableSetting"
+ ]
+ }
+ ]
}
},
"/api/AddIntuneReusableSettingTemplate": {
@@ -4505,6 +6187,122 @@
"x-cipp-reads-via": [
"Get-CIPPAppProtectionPolicyUrl",
"Test-CIPPIntuneTemplate"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Select-CIPPIntuneAvailableSetting"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceConfigurations/{id}/getOmaSettingPlainTextValue(secretReferenceValueId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPOmaSettingDecryptedValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues/{id}/presentationValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}/presentations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reusablePolicySettings/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPReusableSettingsFromPolicy"
+ ]
+ }
]
}
},
@@ -4895,7 +6693,23 @@
}
],
"x-cipp-role": "Tenant.ConditionalAccess.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/namedLocations",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Invoke-AddNamedLocation"
+ ]
+ }
+ ]
}
},
"/api/AddOfficeApp": {
@@ -5018,6 +6832,94 @@
"x-cipp-any-tenant": true,
"x-cipp-reads-via": [
"Get-CIPPOfficeAppBody"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}/assignments",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-AddOfficeApp"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceAppManagement/mobileApps/{id}/assign",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceAppManagement/mobileApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-AddOfficeApp"
+ ]
+ }
]
}
},
@@ -5116,7 +7018,23 @@
}
],
"x-cipp-role": "Identity.Role.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /policies/roleManagementPolicyAssignments",
+ "type": "Application",
+ "least": [
+ "RoleManagement.Read.All"
+ ],
+ "higher": [
+ "RoleManagementPolicy.ReadWrite.AzureADGroup"
+ ],
+ "via": [
+ "Get-CIPPPIMRolePolicies"
+ ]
+ }
+ ]
}
},
"/api/AddPolicy": {
@@ -5263,6 +7181,172 @@
"x-cipp-reads-via": [
"Get-CIPPAppProtectionPolicyUrl",
"Test-CIPPIntuneTemplate"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPIntuneTargetedMobileApps"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Select-CIPPIntuneAvailableSetting"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/depOnboardingSettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}/presentations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPIntuneAdminTemplateBinding"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPIntuneAdminTemplateBinding"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPIntuneAdminTemplateBinding"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reusablePolicySettings/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPReusableSettingsFromPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reusablePolicySettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Sync-CIPPReusablePolicySettings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reusablePolicySettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Sync-CIPPReusablePolicySettings"
+ ]
+ }
]
}
},
@@ -5341,7 +7425,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Spamfilter.ReadWrite"
+ "x-cipp-role": "Exchange.Spamfilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddRetentionCompliancePolicy": {
@@ -5392,7 +7550,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.RetentionCompliancePolicy.ReadWrite"
+ "x-cipp-role": "Security.RetentionCompliancePolicy.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddRetentionCompliancePolicyTemplate": {
@@ -5463,7 +7695,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.RetentionCompliancePolicy.ReadWrite"
+ "x-cipp-role": "Security.RetentionCompliancePolicy.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddRoomList": {
@@ -5540,7 +7846,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Room.ReadWrite"
+ "x-cipp-role": "Exchange.Room.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddRoomMailbox": {
@@ -5609,7 +7989,113 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Room.ReadWrite"
+ "x-cipp-role": "Exchange.Room.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSignInState"
+ ]
+ }
+ ]
}
},
"/api/AddSafeLinksPolicyFromTemplate": {
@@ -5678,7 +8164,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SafeLinks.ReadWrite"
+ "x-cipp-role": "Exchange.SafeLinks.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddSafeLinksPolicyTemplate": {
@@ -5955,7 +8515,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitiveInfoType.ReadWrite"
+ "x-cipp-role": "Security.SensitiveInfoType.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddSensitiveInfoTypeTemplate": {
@@ -6033,7 +8667,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitiveInfoType.ReadWrite"
+ "x-cipp-role": "Security.SensitiveInfoType.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddSensitivityLabel": {
@@ -6084,7 +8792,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitivityLabel.ReadWrite"
+ "x-cipp-role": "Security.SensitivityLabel.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddSensitivityLabelTemplate": {
@@ -6145,7 +8927,24 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitivityLabel.ReadWrite"
+ "x-cipp-role": "Security.SensitivityLabel.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /domains",
+ "type": "Delegated",
+ "least": [
+ "Domain.Read.All"
+ ],
+ "higher": [
+ "Domain.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-AddSensitivityLabelTemplate"
+ ]
+ }
+ ]
}
},
"/api/AddSharedMailbox": {
@@ -6211,7 +9010,113 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSignInState"
+ ]
+ }
+ ]
}
},
"/api/AddSite": {
@@ -6292,7 +9197,53 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSharepointSite"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSharepointSite"
+ ]
+ }
+ ]
}
},
"/api/AddSiteBulk": {
@@ -6379,7 +9330,53 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSharepointSite"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSharepointSite"
+ ]
+ }
+ ]
}
},
"/api/AddSpamFilter": {
@@ -6440,7 +9437,81 @@
}
],
"x-cipp-role": "Exchange.SpamFilter.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddSpamFilterTemplate": {
@@ -6801,7 +9872,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Teams.Group.ReadWrite"
+ "x-cipp-role": "Teams.Group.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /teams",
+ "type": "Application",
+ "least": [
+ "Team.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All",
+ "Teamwork.Migrate.All"
+ ],
+ "via": [
+ "Invoke-AddTeam"
+ ]
+ }
+ ]
}
},
"/api/AddTenant": {
@@ -7041,7 +10130,26 @@
}
],
"x-cipp-role": "Tenant.Config.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Organization.Read.All",
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-AddTenant"
+ ]
+ }
+ ]
}
},
"/api/AddTenantAllowBlockList": {
@@ -7113,7 +10221,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.ReadWrite"
+ "x-cipp-role": "Exchange.SpamFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddTenantAllowBlockListTemplate": {
@@ -7381,7 +10563,81 @@
}
],
"x-cipp-role": "Exchange.TransportRule.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/AddTransportTemplate": {
@@ -7678,6 +10934,336 @@
"x-cipp-reads-via": [
"New-CIPPUser",
"New-CIPPUserTask"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPGroupMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/owners/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSharePointSiteMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPGroupType",
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId",
+ "Set-CIPPSharePointSiteMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/memberOf",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.ReadBasic.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadBasic.All"
+ ],
+ "via": [
+ "Set-CIPPCopyGroupMembers"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId",
+ "Set-CIPPCopyGroupMembers",
+ "Set-CIPPSharePointSiteMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}/authentication/requirements",
+ "type": "Application",
+ "least": [
+ "Policy.ReadWrite.AuthenticationMethod"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPPerUserMFA"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPAlias",
+ "Set-CIPPUserLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPGroupMember",
+ "Set-CIPPCopyGroupMembers"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/owners/$ref",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSharePointSiteMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/assignLicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.ReadWrite.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PUT /users/{id}/manager/$ref",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPManager"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PUT /users/{id}/sponsors/$ref",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSponsor"
+ ]
+ }
]
}
},
@@ -7777,7 +11363,54 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/assignLicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.ReadWrite.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-AddUserBulk"
+ ]
+ }
+ ]
}
},
"/api/AddUserDefaults": {
@@ -8227,7 +11860,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/DeleteTestReport": {
@@ -8397,7 +12046,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Contact.ReadWrite"
+ "x-cipp-role": "Exchange.Contact.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/DomainAnalyser_List": {
@@ -8563,7 +12286,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.ReadWrite"
+ "x-cipp-role": "Exchange.SpamFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditAssignmentFilter": {
@@ -8629,7 +12426,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /deviceManagement/assignmentFilters/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-EditAssignmentFilter"
+ ]
+ }
+ ]
}
},
"/api/EditCAPolicy": {
@@ -8722,7 +12533,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite"
+ "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Invoke-EditCAPolicy"
+ ]
+ }
+ ]
}
},
"/api/EditContact": {
@@ -8827,7 +12654,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Contact.ReadWrite"
+ "x-cipp-role": "Exchange.Contact.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditContactTemplates": {
@@ -9033,7 +12934,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.DlpCompliancePolicy.ReadWrite"
+ "x-cipp-role": "Security.DlpCompliancePolicy.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditEquipmentMailbox": {
@@ -9102,7 +13077,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Equipment.ReadWrite"
+ "x-cipp-role": "Exchange.Equipment.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditExConnector": {
@@ -9194,7 +13243,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Connector.ReadWrite"
+ "x-cipp-role": "Exchange.Connector.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditGroup": {
@@ -9468,7 +13591,260 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Group.ReadWrite"
+ "x-cipp-role": "Identity.Group.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-EditGroup"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/owners/{id}/$ref",
+ "type": "Application",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-EditGroup"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /devices(deviceId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Device.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-EditGroup"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-EditGroup",
+ "Resolve-CIPPDirectoryId",
+ "Set-CIPPGroupLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-EditGroup",
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /groups/{id}",
+ "type": "Application",
+ "least": [
+ "Group.ManageProtection.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-EditGroup"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ManageProtection.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-EditGroup"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/assignLicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGroupLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/owners/$ref",
+ "type": "Application",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-EditGroup"
+ ]
+ }
+ ]
}
},
"/api/EditIntunePolicy": {
@@ -9923,7 +14299,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.ReadWrite"
+ "x-cipp-role": "Exchange.SpamFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditPolicy": {
@@ -10020,7 +14470,33 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /deviceManagement/groupPolicyConfigurations/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-EditPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/groupPolicyConfigurations/{id}/assign",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-EditPolicy"
+ ]
+ }
+ ]
}
},
"/api/EditQuarantinePolicy": {
@@ -10126,7 +14602,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Spamfilter.ReadWrite"
+ "x-cipp-role": "Exchange.Spamfilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditRetentionCompliancePolicy": {
@@ -10213,7 +14763,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.RetentionCompliancePolicy.ReadWrite"
+ "x-cipp-role": "Security.RetentionCompliancePolicy.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditRoomList": {
@@ -10333,7 +14957,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Room.ReadWrite"
+ "x-cipp-role": "Exchange.Room.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditRoomMailbox": {
@@ -10409,7 +15107,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Room.ReadWrite"
+ "x-cipp-role": "Exchange.Room.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditSafeAttachmentsFilter": {
@@ -10495,7 +15267,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.ReadWrite"
+ "x-cipp-role": "Exchange.SpamFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditSafeLinksPolicy": {
@@ -10755,6 +15601,80 @@
"x-cipp-role": "Exchange.SpamFilter.ReadWrite",
"x-cipp-reads-via": [
"ConvertTo-FieldArray"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
]
}
},
@@ -10952,7 +15872,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitiveInfoType.ReadWrite"
+ "x-cipp-role": "Security.SensitiveInfoType.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditSensitivityLabel": {
@@ -11028,7 +16022,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitivityLabel.ReadWrite"
+ "x-cipp-role": "Security.SensitivityLabel.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditSpamFilter": {
@@ -11109,7 +16177,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.ReadWrite"
+ "x-cipp-role": "Exchange.SpamFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditTenant": {
@@ -11569,7 +16711,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.TransportRule.ReadWrite"
+ "x-cipp-role": "Exchange.TransportRule.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/EditUser": {
@@ -11912,6 +17128,231 @@
"x-cipp-reads-via": [
"Get-CippException",
"Set-CIPPUser"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/memberOf",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.ReadBasic.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadBasic.All"
+ ],
+ "via": [
+ "Set-CIPPCopyGroupMembers"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPCopyGroupMembers",
+ "Set-CIPPUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUser",
+ "Set-CIPPUserLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPCopyGroupMembers",
+ "Set-CIPPUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/assignLicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.ReadWrite.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PUT /users/{id}/manager/$ref",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPManager"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PUT /users/{id}/sponsors/$ref",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSponsor"
+ ]
+ }
]
}
},
@@ -11981,7 +17422,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecAccessChecks": {
@@ -12101,7 +17616,331 @@
}
],
"x-cipp-role": "CIPP.AppSettings.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPAccessPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Delegated",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Test-CIPPAccessPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/memberOf",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/$count",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /me/memberOf",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /me/transitiveMemberOf",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.Read.All",
+ "GroupMember.Read.All",
+ "User.Read.All"
+ ],
+ "via": [
+ "Test-CIPPAccessTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /me",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.ReadBasic.All",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPAccessTenant",
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignments",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "RoleManagement.Read.All",
+ "RoleManagement.ReadWrite.Exchange"
+ ],
+ "via": [
+ "Test-CIPPAccessTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/exchange/roleDefinitions",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Exchange"
+ ],
+ "higher": [
+ "RoleManagement.Read.All",
+ "RoleManagement.ReadWrite.Exchange"
+ ],
+ "via": [
+ "Test-CIPPAccessTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ }
+ ]
}
},
"/api/ExecAddAlert": {
@@ -12166,7 +18005,37 @@
}
],
"x-cipp-role": "CIPP.Alert.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecAddCippCveException": {
@@ -12604,6 +18473,45 @@
"x-cipp-reads-via": [
"Add-CIPPGDAPRoleTemplate",
"New-CIPPGDAPRoleMapping"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecAddGDAPRole",
+ "New-CIPPGDAPRoleMapping"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPGDAPRoleMapping"
+ ]
+ }
]
}
},
@@ -12701,7 +18609,253 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Application.ReadWrite"
+ "x-cipp-role": "Tenant.Application.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecAppApprovalTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecAppApprovalTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/appRoleAssignments",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "DelegatedPermissionGrant.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission",
+ "Get-CippSamPermissions",
+ "Push-ExecAppApprovalTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /applications(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Push-ExecAppApprovalTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdentity.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecAppApprovalTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /applications",
+ "type": "Delegated",
+ "least": [
+ "AppRegistration.Create"
+ ],
+ "higher": [
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecAppApprovalTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /applicationTemplates/{id}/instantiate",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecAppApprovalTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals/{id}/appRoleAssignedTo",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission",
+ "Push-ExecAppApprovalTemplate"
+ ]
+ }
+ ]
}
},
"/api/ExecAddSPN": {
@@ -12748,7 +18902,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.ReadWrite"
+ "x-cipp-role": "Tenant.Administration.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecAddSPN"
+ ]
+ }
+ ]
}
},
"/api/ExecAddTenant": {
@@ -12887,7 +19057,337 @@
}
],
"x-cipp-role": "CIPP.AppSettings.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /domains",
+ "type": "Delegated",
+ "least": [
+ "Domain.Read.All"
+ ],
+ "higher": [
+ "Domain.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecAddTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Organization.Read.All",
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecAddTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')/memberOf",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Application.ReadWrite.OwnedBy",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/appRoleAssignments",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "DelegatedPermissionGrant.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission",
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles(roleTemplateId='{id}')/members/$ref",
+ "type": "Application",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles(roleTemplateId='{id}')/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals/{id}/appRoleAssignedTo",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ }
+ ]
}
},
"/api/ExecAddTrustedIP": {
@@ -13227,7 +19727,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.Alert.Read"
+ "x-cipp-role": "Security.Alert.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /security/alerts_v2",
+ "type": "Delegated",
+ "least": [
+ "SecurityAlert.Read.All"
+ ],
+ "higher": [
+ "SecurityAlert.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecAlertsList"
+ ]
+ }
+ ]
}
},
"/api/ExecApiClient": {
@@ -13545,7 +20061,233 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Extension.ReadWrite"
+ "x-cipp-role": "CIPP.Extension.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /applications/{id}",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecApiClient"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecApiClient",
+ "New-CIPPAPIConfig",
+ "New-CIPPMcpResourceApp",
+ "Set-CIPPMCPClientApp"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications/{id}",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Repair-CippApiIdentifierUri",
+ "Set-CippMcpResourcePreAuth"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecApiClient",
+ "New-CIPPMcpResourceApp",
+ "Repair-CippApiIdentifierUri"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/defaultAppManagementPolicy",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ApplicationConfiguration"
+ ],
+ "via": [
+ "New-CIPPAPIConfig"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Grant-CippAppGraphConsent",
+ "New-CIPPAPIConfig",
+ "New-CIPPMcpResourceApp"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='00000003-0000-0000-c000-000000000000')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Directory.Read.All",
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Grant-CippAppGraphConsent"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/oauth2PermissionGrants",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "DelegatedPermissionGrant.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Grant-CippAppGraphConsent"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /applications/{id}",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecApiClient",
+ "New-CIPPAPIConfig",
+ "New-CIPPMcpResourceApp",
+ "Repair-CippApiIdentifierUri",
+ "Set-CIPPMCPClientApp",
+ "Set-CippMcpResourcePreAuth"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /oauth2PermissionGrants/{id}",
+ "type": "Application",
+ "least": [
+ "Directory.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Grant-CippAppGraphConsent"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /applications/{id}/addPassword",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPAPIConfig"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /applications",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPAPIConfig",
+ "New-CIPPMcpResourceApp"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /oauth2PermissionGrants",
+ "type": "Application",
+ "least": [
+ "Directory.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Grant-CippAppGraphConsent"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /serviceprincipals",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPAPIConfig",
+ "New-CIPPMcpResourceApp"
+ ]
+ }
+ ]
}
},
"/api/ExecAPIPermissionList": {
@@ -13982,7 +20724,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Application.ReadWrite"
+ "x-cipp-role": "Tenant.Application.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /policies/defaultAppManagementPolicy",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ApplicationConfiguration"
+ ],
+ "via": [
+ "Invoke-ExecApplication"
+ ]
+ }
+ ]
}
},
"/api/ExecAppPermissionTemplate": {
@@ -14557,7 +21315,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/windowsAutopilotDeviceIdentities/{id}/UpdateDeviceProperties",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecAssignAPDevice"
+ ]
+ }
+ ]
}
},
"/api/ExecAssignApp": {
@@ -14704,7 +21476,83 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Application.ReadWrite"
+ "x-cipp-role": "Endpoint.Application.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}/assignments",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecAssignApp"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceAppManagement/mobileApps/{id}/assign",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ }
+ ]
}
},
"/api/ExecAssignAutopilotProfile": {
@@ -14775,7 +21623,53 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecAssignAutopilotProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All",
+ "DeviceManagementConfiguration.Read.All",
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecAssignAutopilotProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecAssignAutopilotProfile"
+ ]
+ }
+ ]
}
},
"/api/ExecAssignmentFilter": {
@@ -14843,7 +21737,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/assignmentFilters/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecAssignmentFilter"
+ ]
+ }
+ ]
}
},
"/api/ExecAssignPolicy": {
@@ -14937,7 +21845,43 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedPolicy"
+ ]
+ }
+ ]
}
},
"/api/ExecAuditLogSearch": {
@@ -15122,7 +22066,39 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Alert.ReadWrite"
+ "x-cipp-role": "Tenant.Alert.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /security/auditLog/queries/{id}",
+ "type": "Application",
+ "least": [
+ "AuditLogsQuery.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecAuditLogSearch"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /security/auditLog/queries",
+ "type": "Application",
+ "least": [
+ "AuditLogsQuery.Read.All"
+ ],
+ "higher": [
+ "AuditLogsQuery-CRM.Read.All",
+ "AuditLogsQuery-Endpoint.Read.All",
+ "AuditLogsQuery-Exchange.Read.All",
+ "AuditLogsQuery-OneDrive.Read.All",
+ "AuditLogsQuery-SharePoint.Read.All"
+ ],
+ "via": [
+ "New-CippAuditLogSearch"
+ ]
+ }
+ ]
}
},
"/api/ExecAutoExtendGDAP": {
@@ -15181,7 +22157,35 @@
}
],
"x-cipp-role": "Tenant.Relationship.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGDAPAutoExtend"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /tenantRelationships/delegatedAdminRelationships/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPGDAPAutoExtend"
+ ]
+ }
+ ]
}
},
"/api/ExecAzBobbyTables": {
@@ -15823,7 +22827,87 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.BaselinesRun.ReadWrite"
+ "x-cipp-role": "Tenant.BaselinesRun.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reports/exportJobs/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementApps.Read.All",
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.Read.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneReportExportJob"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reports/exportJobs",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneReportExportJob"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecBaselineStage": {
@@ -15929,7 +23013,312 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/directoryAudits",
+ "type": "Application",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBecDirectoryAudits"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Application",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecColleagueSample",
+ "Get-CIPPBecCorrelatedUserPeers",
+ "Get-CIPPBecIPPeers",
+ "Search-CIPPBecSignIn"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecIPGuidance"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identityProtection/riskDetections",
+ "type": "Delegated",
+ "least": [
+ "IdentityRiskEvent.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecRiskState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identityProtection/riskyUsers/{id}",
+ "type": "Delegated",
+ "least": [
+ "IdentityRiskyUser.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecRiskState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /security/collaboration/analyzedEmails",
+ "type": "Application",
+ "least": [
+ "SecurityAnalyzedMessage.Read.All"
+ ],
+ "higher": [
+ "SecurityAnalyzedMessage.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPBecReceivedMailFindings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBecUserGrants",
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/appRoleAssignments",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "AppRoleAssignment.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPBecUserGrants"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/authentication/methods",
+ "type": "Application",
+ "least": [
+ "UserAuthenticationMethod.Read.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/managedDevices",
+ "type": "Application",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/oauth2PermissionGrants",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecUserGrants"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/registeredDevices/microsoft.graph.device",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPBecRegisteredDevices"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPBecBlastRadius",
+ "New-CIPPBecRunRequest",
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPartnerUserLookup",
+ "Invoke-ExecBECBulkCheck",
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Push-BECRun"
+ ]
+ }
+ ]
}
},
"/api/ExecBECCheck": {
@@ -16054,7 +23443,311 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/directoryAudits",
+ "type": "Application",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBecDirectoryAudits"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Application",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecColleagueSample",
+ "Get-CIPPBecCorrelatedUserPeers",
+ "Get-CIPPBecIPPeers",
+ "Search-CIPPBecSignIn"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecIPGuidance"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identityProtection/riskDetections",
+ "type": "Delegated",
+ "least": [
+ "IdentityRiskEvent.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecRiskState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identityProtection/riskyUsers/{id}",
+ "type": "Delegated",
+ "least": [
+ "IdentityRiskyUser.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecRiskState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /security/collaboration/analyzedEmails",
+ "type": "Application",
+ "least": [
+ "SecurityAnalyzedMessage.Read.All"
+ ],
+ "higher": [
+ "SecurityAnalyzedMessage.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPBecReceivedMailFindings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBecUserGrants",
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/appRoleAssignments",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "AppRoleAssignment.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPBecUserGrants"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/authentication/methods",
+ "type": "Application",
+ "least": [
+ "UserAuthenticationMethod.Read.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/managedDevices",
+ "type": "Application",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/oauth2PermissionGrants",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecUserGrants"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/registeredDevices/microsoft.graph.device",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPBecRegisteredDevices"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPBecBlastRadius",
+ "New-CIPPBecRunRequest",
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPartnerUserLookup",
+ "Push-BECRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Push-BECRun"
+ ]
+ }
+ ]
}
},
"/api/ExecBECEvidenceExport": {
@@ -16127,7 +23820,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ }
+ ]
}
},
"/api/ExecBECIPReview": {
@@ -16226,7 +23937,124 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Application",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecColleagueSample",
+ "Get-CIPPBecCorrelatedUserPeers",
+ "Get-CIPPBecIPPeers",
+ "Search-CIPPBecSignIn"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBecIPGuidance"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPBecBlastRadius"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecBECRemediate": {
@@ -16324,7 +24152,308 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /devices/{id}",
+ "type": "Delegated",
+ "least": [
+ "Directory.AccessAsUser.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDeviceState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /drives/{id}/items/{id}/permissions/{id}",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPBecSharingLinks"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Remove-CIPPBecTargetedCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPBecTargetedCAPolicy",
+ "Remove-CIPPBecTargetedCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /shares/{id}/driveItem",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Remove-CIPPBecSharingLinks"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/authentication/methods",
+ "type": "Application",
+ "least": [
+ "UserAuthenticationMethod.Read.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPUserMFA"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPOneDriveSharing"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPBecContainment",
+ "Invoke-ExecBECRemediate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPResetPassword",
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /devices/{id}",
+ "type": "Delegated",
+ "least": [
+ "Directory.AccessAsUser.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDeviceState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /servicePrincipals/{id}",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "AgentIdentity.ReadWrite.All",
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPBecContainment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPResetPassword",
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPBecTargetedCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/authentication/methods/28c10230-6103-485e-b985-444c60001490/resetPassword",
+ "type": "Delegated",
+ "least": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPResetPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/invalidateAllRefreshTokens",
+ "type": "Delegated",
+ "least": [
+ "User.RevokeSessions.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "User.ReadWrite"
+ ],
+ "via": [
+ "Revoke-CIPPSessions"
+ ]
+ }
+ ]
}
},
"/api/ExecBECRemediationDefaults": {
@@ -16848,7 +24977,24 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.BreachLookup.Read"
+ "x-cipp-role": "CIPP.BreachLookup.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /domains",
+ "type": "Delegated",
+ "least": [
+ "Domain.Read.All"
+ ],
+ "higher": [
+ "Domain.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Get-BreachInfo"
+ ]
+ }
+ ]
}
},
"/api/ExecBulkLicense": {
@@ -16954,6 +25100,56 @@
}
],
"x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecBulkLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/assignLicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.ReadWrite.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserLicense"
+ ]
+ }
+ ],
"description": "Applies license changes to many users across many tenants in one call. The body is a JSON array; entries are grouped by tenantFilter internally, so a single call may span tenants.",
"x-cipp-override-reason": "The body is piped through Group-Object -Property tenantFilter, so the element shape is only reachable through a GroupInfo and cannot be resolved from the AST."
}
@@ -17023,7 +25219,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /drives/{id}/items/{id}/permissions/{id}",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecBulkRemoveSharingLinks"
+ ]
+ }
+ ]
}
},
"/api/ExecCaCheck": {
@@ -17117,6 +25329,23 @@
"x-cipp-role": "Tenant.ConditionalAccess.Read",
"x-cipp-reads-via": [
"New-CIPPCAWhatIfRequest"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/evaluate",
+ "type": "Application",
+ "least": [
+ "Policy.Read.ConditionalAccess"
+ ],
+ "higher": [
+ "Policy.Read.All",
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Invoke-CIPPCAWhatIf"
+ ]
+ }
]
}
},
@@ -17230,7 +25459,486 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite"
+ "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Set-CIPPNamedLocation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Remove-CIPPTravelPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPGroupType",
+ "Resolve-CIPPDirectoryId",
+ "Set-CIPPGroupLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecCAExclusion",
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/authenticationContextClassReferences",
+ "type": "Application",
+ "least": [
+ "AuthenticationContext.Read.All"
+ ],
+ "higher": [
+ "AuthenticationContext.ReadWrite.All",
+ "Policy.Read.ConditionalAccess",
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPNamedLocation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy",
+ "Remove-CIPPTravelPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecCAExclusion",
+ "Set-CIPPCAExclusion"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy",
+ "Remove-CIPPTravelPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/identitySecurityDefaultsEnforcementPolicy",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPTravelPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCAExclusion",
+ "Resolve-CIPPDirectoryId",
+ "Set-CIPPCAExclusion"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Set-CIPPNamedLocation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy",
+ "Set-CIPPCAExclusion"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /policies/identitySecurityDefaultsEnforcementPolicy",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/assignLicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGroupLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPGroupMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPGroup"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/authenticationContextClassReferences",
+ "type": "Application",
+ "least": [
+ "AuthenticationContext.ReadWrite.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/namedLocations",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCAPolicy"
+ ]
+ }
+ ]
}
},
"/api/ExecCAServiceExclusion": {
@@ -17302,7 +26010,35 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite"
+ "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPCAPolicyServiceException"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Set-CIPPCAPolicyServiceException"
+ ]
+ }
+ ]
}
},
"/api/ExecCIPPDBCache": {
@@ -17382,7 +26118,42 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.ReadWrite"
+ "x-cipp-role": "CIPP.Core.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reports/exportJobs/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementApps.Read.All",
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.Read.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneReportExportJob"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reports/exportJobs",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneReportExportJob"
+ ]
+ }
+ ]
}
},
"/api/ExecCIPPDBCacheAdmin": {
@@ -17791,7 +26562,28 @@
}
],
"x-cipp-role": "CIPP.SuperAdmin.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/transitiveMembers",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Start-UserSyncTimer"
+ ]
+ }
+ ]
}
},
"/api/ExecCloneTemplate": {
@@ -17977,7 +26769,55 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Clear-CIPPOnPremisesAttributes"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Clear-CIPPOnPremisesAttributes"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directory/deletedItems/{id}/restore",
+ "type": "Delegated",
+ "least": [
+ "User.DeleteRestore.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Clear-CIPPOnPremisesAttributes"
+ ]
+ }
+ ]
}
},
"/api/ExecClrOnPremAttributes": {
@@ -18042,7 +26882,55 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Clear-CIPPOnPremisesAttributes"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Clear-CIPPOnPremisesAttributes"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directory/deletedItems/{id}/restore",
+ "type": "Delegated",
+ "least": [
+ "User.DeleteRestore.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Clear-CIPPOnPremisesAttributes"
+ ]
+ }
+ ]
}
},
"/api/ExecCombinedSetup": {
@@ -18172,7 +27060,248 @@
}
],
"x-cipp-role": "CIPP.AppSettings.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPTemplateRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/managedAppPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPTemplateRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Select-CIPPIntuneAvailableSetting"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceCompliancePolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPTemplateRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceConfigurations/{id}/getOmaSettingPlainTextValue(secretReferenceValueId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPOmaSettingDecryptedValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues/{id}/presentationValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}/presentations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "New-CIPPTemplateRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/authenticationContextClassReferences",
+ "type": "Delegated",
+ "least": [
+ "AuthenticationContext.Read.All"
+ ],
+ "higher": [
+ "AuthenticationContext.ReadWrite.All",
+ "Policy.Read.ConditionalAccess",
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPTemplateRun"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ }
+ ]
}
},
"/api/ExecCommunityRepo": {
@@ -18268,7 +27397,23 @@
}
],
"x-cipp-role": "CIPP.TemplateLibrary.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Select-CIPPIntuneAvailableSetting"
+ ]
+ }
+ ]
}
},
"/api/ExecCompareIntunePolicy": {
@@ -18458,6 +27603,200 @@
"x-cipp-any-tenant": true,
"x-cipp-reads-via": [
"Resolve-PolicySource"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/androidManagedAppProtections",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/iosManagedAppProtections",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Compare-CIPPIntuneAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Select-CIPPIntuneAvailableSetting"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceConfigurations/{id}/getOmaSettingPlainTextValue(secretReferenceValueId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPOmaSettingDecryptedValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues/{id}/presentationValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}/presentations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue",
+ "Resolve-CIPPIntuneAdminTemplateBinding"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue",
+ "Resolve-CIPPIntuneAdminTemplateBinding"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPIntuneAdminTemplateBinding"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reusablePolicySettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Sync-CIPPReusablePolicySettings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Compare-CIPPIntuneAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reusablePolicySettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Sync-CIPPReusablePolicySettings"
+ ]
+ }
]
}
},
@@ -18667,7 +28006,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecCopilotSettings": {
@@ -18751,7 +28164,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.AI.ReadWrite"
+ "x-cipp-role": "Tenant.AI.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /copilot/admin/policySettings/{id}",
+ "type": "Delegated",
+ "least": [
+ "CopilotPolicySettings.ReadWrite"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecCopilotSettings"
+ ]
+ }
+ ]
}
},
"/api/ExecCopyForSent": {
@@ -18833,7 +28260,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecCPVPermissions": {
@@ -18900,7 +28401,305 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.AppSettings.ReadWrite"
+ "x-cipp-role": "CIPP.AppSettings.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')/memberOf",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Application.ReadWrite.OwnedBy",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/appRoleAssignments",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "DelegatedPermissionGrant.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission",
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles(roleTemplateId='{id}')/members/$ref",
+ "type": "Application",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles(roleTemplateId='{id}')/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals/{id}/appRoleAssignedTo",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ }
+ ]
}
},
"/api/ExecCPVRefresh": {
@@ -18944,7 +28743,41 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.ReadWrite"
+ "x-cipp-role": "CIPP.Core.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ }
+ ]
}
},
"/api/ExecCreateAppTemplate": {
@@ -19020,7 +28853,136 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Application.ReadWrite"
+ "x-cipp-role": "Tenant.Application.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCreateAppTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecCreateAppTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')/appRoleAssignments",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Application.ReadWrite.OwnedBy",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCreateAppTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')/oauth2PermissionGrants",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "DelegatedPermissionGrant.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCreateAppTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCreateAppTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecCreateAppTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /applications",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCreateAppTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCreateAppTemplate"
+ ]
+ }
+ ]
}
},
"/api/ExecCreateCATemplate": {
@@ -19351,7 +29313,28 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/authentication/temporaryAccessPassMethods",
+ "type": "Delegated",
+ "least": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.Read",
+ "UserAuthenticationMethod.Read.All",
+ "UserAuthenticationMethod.ReadWrite",
+ "UserAuthMethod-TAP.Read.All",
+ "UserAuthMethod-TAP.ReadWrite",
+ "UserAuthMethod-TAP.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPTAP"
+ ]
+ }
+ ]
}
},
"/api/ExecCSPLicense": {
@@ -19428,7 +29411,26 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Directory.ReadWrite"
+ "x-cipp-role": "Tenant.Directory.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-SherwebScheduledLicenseRemoval"
+ ]
+ }
+ ]
}
},
"/api/ExecCustomData": {
@@ -19636,7 +29638,268 @@
}
],
"x-cipp-role": "CIPP.AppSettings.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /applications(appId='{id}')/extensionProperties/{id}",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCustomData"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /schemaExtensions/{id}",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCustomData"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')/extensionProperties/{id}",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCustomData"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')/extensionProperties",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCustomData"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/deviceLocalCredentials/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceLocalCredential.ReadBasic.All"
+ ],
+ "higher": [
+ "DeviceLocalCredential.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLapsPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/deviceLocalCredentials",
+ "type": "Delegated",
+ "least": [
+ "DeviceLocalCredential.ReadBasic.All"
+ ],
+ "higher": [
+ "DeviceLocalCredential.Read.All"
+ ],
+ "via": [
+ "Invoke-HuduExtensionSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys/{id}",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CustomDataSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CustomDataSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /applications(appId='{id}')/extensionProperties",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecCustomData"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecCustomRole": {
@@ -19971,7 +30234,48 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.SuperAdmin.ReadWrite"
+ "x-cipp-role": "CIPP.SuperAdmin.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/transitiveMembers",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Start-UserSyncTimer"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecCustomRole"
+ ]
+ }
+ ]
}
},
"/api/ExecCustomScript": {
@@ -20102,7 +30406,37 @@
}
],
"x-cipp-role": "Tenant.Tests.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecDeleteGDAPRelationship": {
@@ -20166,7 +30500,21 @@
}
],
"x-cipp-role": "Tenant.Relationship.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /tenantRelationships/delegatedAdminRelationships/{id}/requests",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecDeleteGDAPRelationship"
+ ]
+ }
+ ]
}
},
"/api/ExecDeleteGDAPRoleMapping": {
@@ -20349,7 +30697,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.ReadWrite"
+ "x-cipp-role": "Exchange.SpamFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecDeployAppTemplate": {
@@ -20430,7 +30852,97 @@
}
],
"x-cipp-role": "Endpoint.Application.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}/assignments",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-AddEdgeApp",
+ "Invoke-AddOfficeApp"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceAppManagement/mobileApps/{id}/assign",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPAssignedApplication"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceAppManagement/mobileApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-AddEdgeApp",
+ "Invoke-AddOfficeApp"
+ ]
+ }
+ ]
}
},
"/api/ExecDeviceAction": {
@@ -20510,7 +31022,35 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/managedDevices/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPDeviceAction"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecDeviceAction"
+ ]
+ }
+ ]
}
},
"/api/ExecDeviceCodeLogon": {
@@ -20690,7 +31230,33 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Device.ReadWrite"
+ "x-cipp-role": "Identity.Device.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /devices/{id}",
+ "type": "Delegated",
+ "least": [
+ "Directory.AccessAsUser.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDeviceState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /devices/{id}",
+ "type": "Delegated",
+ "least": [
+ "Directory.AccessAsUser.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDeviceState"
+ ]
+ }
+ ]
}
},
"/api/ExecDevicePasscodeAction": {
@@ -20903,7 +31469,41 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSignInState"
+ ]
+ }
+ ]
}
},
"/api/ExecDismissRiskyUser": {
@@ -20985,7 +31585,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /riskyUsers/dismiss",
+ "type": "Delegated",
+ "least": [
+ "IdentityRiskyUser.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecDismissRiskyUser"
+ ]
+ }
+ ]
}
},
"/api/ExecDnsConfig": {
@@ -21165,7 +31779,45 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.ReadWrite"
+ "x-cipp-role": "Tenant.Administration.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /domains/{id}",
+ "type": "Application",
+ "least": [
+ "Domain.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecDomainAction"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /domains/{id}",
+ "type": "Application",
+ "least": [
+ "Domain.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecDomainAction"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /domains/{id}/verify",
+ "type": "Application",
+ "least": [
+ "Domain.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecDomainAction"
+ ]
+ }
+ ]
}
},
"/api/ExecDomainAnalyser": {
@@ -21220,7 +31872,26 @@
}
],
"x-cipp-role": "Tenant.DomainAnalyser.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ }
+ ]
}
},
"/api/ExecDriftClone": {
@@ -21511,7 +32182,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecEditCAPolicyFull": {
@@ -21593,7 +32338,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite"
+ "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Invoke-ExecEditCAPolicyFull"
+ ]
+ }
+ ]
}
},
"/api/ExecEditMailboxPermissions": {
@@ -21653,7 +32414,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecEditTemplate": {
@@ -21788,7 +32623,23 @@
}
],
"x-cipp-role": "CIPP.Core.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Select-CIPPIntuneAvailableSetting"
+ ]
+ }
+ ]
}
},
"/api/ExecEmailForward": {
@@ -21862,7 +32713,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecEmptySiteRecycleBin": {
@@ -21931,7 +32856,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.SiteRecycleBin.ReadWrite"
+ "x-cipp-role": "Sharepoint.SiteRecycleBin.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecEnableArchive": {
@@ -22019,7 +32960,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecEnableAutoExpandingArchive": {
@@ -22080,7 +33095,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecExchangeRoleRepair": {
@@ -22188,7 +33277,108 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.AppSettings.ReadWrite"
+ "x-cipp-role": "CIPP.AppSettings.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/exchange/roleDefinitions",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Exchange"
+ ],
+ "higher": [
+ "RoleManagement.Read.All",
+ "RoleManagement.ReadWrite.Exchange"
+ ],
+ "via": [
+ "Invoke-ExecExchangeRoleRepair"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /roleManagement/exchange/roleAssignments",
+ "type": "Application",
+ "least": [
+ "RoleManagement.ReadWrite.Exchange"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecExchangeRoleRepair"
+ ]
+ }
+ ]
}
},
"/api/ExecExcludeLicenses": {
@@ -22610,7 +33800,206 @@
}
],
"x-cipp-role": "CIPP.Extension.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/deviceLocalCredentials/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceLocalCredential.ReadBasic.All"
+ ],
+ "higher": [
+ "DeviceLocalCredential.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLapsPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/deviceLocalCredentials",
+ "type": "Delegated",
+ "least": [
+ "DeviceLocalCredential.ReadBasic.All"
+ ],
+ "higher": [
+ "DeviceLocalCredential.Read.All"
+ ],
+ "via": [
+ "Invoke-HuduExtensionSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys/{id}",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CustomDataSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CustomDataSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecExtensionNinjaOneQueue": {
@@ -22663,7 +34052,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Extension.ReadWrite"
+ "x-cipp-role": "CIPP.Extension.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecExtensionsConfig": {
@@ -22713,7 +34118,192 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Extension.ReadWrite"
+ "x-cipp-role": "CIPP.Extension.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/deviceLocalCredentials/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceLocalCredential.ReadBasic.All"
+ ],
+ "higher": [
+ "DeviceLocalCredential.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLapsPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/deviceLocalCredentials",
+ "type": "Delegated",
+ "least": [
+ "DeviceLocalCredential.ReadBasic.All"
+ ],
+ "higher": [
+ "DeviceLocalCredential.Read.All"
+ ],
+ "via": [
+ "Invoke-HuduExtensionSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys/{id}",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CustomDataSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CustomDataSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecExtensionSync": {
@@ -22795,7 +34385,206 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Extension.ReadWrite"
+ "x-cipp-role": "CIPP.Extension.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/deviceLocalCredentials/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceLocalCredential.ReadBasic.All"
+ ],
+ "higher": [
+ "DeviceLocalCredential.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLapsPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/deviceLocalCredentials",
+ "type": "Delegated",
+ "least": [
+ "DeviceLocalCredential.ReadBasic.All"
+ ],
+ "higher": [
+ "DeviceLocalCredential.Read.All"
+ ],
+ "via": [
+ "Invoke-HuduExtensionSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys/{id}",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CustomDataSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CustomDataSync"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecExtensionTest": {
@@ -23268,7 +35057,110 @@
}
],
"x-cipp-role": "Tenant.Relationship.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecGDAPAccessAssignment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPAccessAssignment",
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPAccessAssignment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPAccessAssignment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecGDAPAccessAssignment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecGDAPAccessAssignment"
+ ]
+ }
+ ]
}
},
"/api/ExecGDAPInvite": {
@@ -23352,7 +35244,61 @@
}
],
"x-cipp-role": "Tenant.Relationship.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleDefinitions",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPInvite"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPInvite"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /tenantRelationships/delegatedAdminRelationships/{id}/requests",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecGDAPInvite"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecGDAPInvite"
+ ]
+ }
+ ]
}
},
"/api/ExecGDAPInviteApproved": {
@@ -23401,7 +35347,49 @@
}
],
"x-cipp-role": "Tenant.Relationship.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGDAPInviteGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGDAPInviteGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPGDAPInviteGroups"
+ ]
+ }
+ ]
}
},
"/api/ExecGDAPRemoveGArole": {
@@ -23513,7 +35501,35 @@
}
],
"x-cipp-role": "Tenant.Relationship.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPRemoveGArole"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /tenantRelationships/delegatedAdminRelationships/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecGDAPRemoveGArole"
+ ]
+ }
+ ]
}
},
"/api/ExecGDAPRepairRoleMappings": {
@@ -23561,7 +35577,133 @@
}
],
"x-cipp-role": "Tenant.Relationship.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/memberOf",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/$count",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPRepairRoleMappings",
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /me/memberOf",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /me",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.ReadBasic.All",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ }
+ ]
}
},
"/api/ExecGDAPRoleTemplate": {
@@ -23698,6 +35840,44 @@
"x-cipp-any-tenant": true,
"x-cipp-reads-via": [
"Add-CIPPGDAPRoleTemplate"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "New-CIPPGDAPRoleMapping"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPGDAPRoleMapping"
+ ]
+ }
]
}
},
@@ -23802,97 +35982,222 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.AppSettings.Read"
- }
- },
- "/api/ExecGenerateReportBuilderReport": {
- "post": {
- "summary": "ExecGenerateReportBuilderReport",
- "operationId": "ExecGenerateReportBuilderReport",
- "tags": [
- "Tools > Report-Builder"
- ],
- "requestBody": {
- "required": true,
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "properties": {
- "Action": {
- "type": "string"
- },
- "Blocks": {
- "type": "string"
- },
- "ReportGUID": {
- "type": "string"
- },
- "TemplateGUID": {
- "type": "string"
- },
- "TemplateName": {
- "type": "string"
- },
- "TenantFilter": {
- "type": "string"
- }
- },
- "required": [
- "ReportGUID",
- "TenantFilter"
- ]
- }
- }
- }
- },
- "parameters": [
- {
- "name": "TemplateName",
- "in": "query",
- "required": false,
- "schema": {
- "type": "string"
- }
- },
+ "x-cipp-role": "CIPP.AppSettings.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/members",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Find-CIPPGDAPTransitiveGroupPath",
+ "Invoke-ExecGDAPTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/transitiveMemberOf",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadBasic.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecGDAPTrace"
+ ]
+ }
+ ]
+ }
+ },
+ "/api/ExecGenerateReportBuilderReport": {
+ "post": {
+ "summary": "ExecGenerateReportBuilderReport",
+ "operationId": "ExecGenerateReportBuilderReport",
+ "tags": [
+ "Tools > Report-Builder"
+ ],
+ "requestBody": {
+ "required": true,
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "properties": {
+ "Action": {
+ "type": "string"
+ },
+ "Blocks": {
+ "type": "string"
+ },
+ "ReportGUID": {
+ "type": "string"
+ },
+ "TemplateGUID": {
+ "type": "string"
+ },
+ "TemplateName": {
+ "type": "string"
+ },
+ "TenantFilter": {
+ "type": "string"
+ }
+ },
+ "required": [
+ "ReportGUID",
+ "TenantFilter"
+ ]
+ }
+ }
+ }
+ },
+ "parameters": [
+ {
+ "name": "TemplateName",
+ "in": "query",
+ "required": false,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "$ref": "#/components/parameters/tenantFilter"
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "Success",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "object",
+ "description": "Not described statically: this endpoint returns the upstream response as-is, so its fields are determined by the upstream API rather than by CIPP. Call the endpoint to see the actual shape, or add a response schema in backend/Config/openapi-overrides."
+ }
+ }
+ }
+ },
+ "400": {
+ "description": "Bad request - missing required field or invalid input"
+ },
+ "401": {
+ "description": "Unauthorized - invalid or missing bearer token"
+ },
+ "403": {
+ "description": "Forbidden - caller lacks the required RBAC role"
+ },
+ "404": {
+ "description": "Not found"
+ },
+ "500": {
+ "description": "Internal server error"
+ }
+ },
+ "security": [
+ {
+ "bearerAuth": []
+ }
+ ],
+ "x-cipp-role": "CIPP.ReportBuilder.ReadWrite",
+ "x-cipp-permissions": [
{
- "$ref": "#/components/parameters/tenantFilter"
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
}
- ],
- "responses": {
- "200": {
- "description": "Success",
- "content": {
- "application/json": {
- "schema": {
- "type": "object",
- "description": "Not described statically: this endpoint returns the upstream response as-is, so its fields are determined by the upstream API rather than by CIPP. Call the endpoint to see the actual shape, or add a response schema in backend/Config/openapi-overrides."
- }
- }
- }
- },
- "400": {
- "description": "Bad request - missing required field or invalid input"
- },
- "401": {
- "description": "Unauthorized - invalid or missing bearer token"
- },
- "403": {
- "description": "Forbidden - caller lacks the required RBAC role"
- },
- "404": {
- "description": "Not found"
- },
- "500": {
- "description": "Internal server error"
- }
- },
- "security": [
- {
- "bearerAuth": []
- }
- ],
- "x-cipp-role": "CIPP.ReportBuilder.ReadWrite"
+ ]
}
},
"/api/ExecGeoIPLookup": {
@@ -24099,7 +36404,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Baselines.Read"
+ "x-cipp-role": "Tenant.Baselines.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ }
+ ]
}
},
"/api/ExecGetBecReportPdf": {
@@ -24227,7 +36550,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ }
+ ]
}
},
"/api/ExecGetExecutiveReportPdf": {
@@ -24307,7 +36648,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Standards.Read"
+ "x-cipp-role": "Tenant.Standards.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ }
+ ]
}
},
"/api/ExecGetLicenseReportPdf": {
@@ -24491,7 +36850,134 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Directory.Read"
+ "x-cipp-role": "Tenant.Directory.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /reports/getM365AppUserDetail(period='D180')",
+ "type": "Delegated",
+ "least": [
+ "Reports.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPLicenseRecommendation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /reports/getOffice365ActiveUserDetail(period='D180')",
+ "type": "Delegated",
+ "least": [
+ "Reports.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPLicenseRecommendation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseRecommendation"
+ ]
+ }
+ ]
}
},
"/api/ExecGetLocalAdminPassword": {
@@ -24558,7 +37044,35 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Device.Read"
+ "x-cipp-role": "Endpoint.Device.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices/{id}/retrieveMacOSManagedDeviceLocalAdminAccountDetail",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.PrivilegedOperations.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPMacOSLapsPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/deviceLocalCredentials/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceLocalCredential.ReadBasic.All"
+ ],
+ "higher": [
+ "DeviceLocalCredential.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLapsPassword"
+ ]
+ }
+ ]
}
},
"/api/ExecGetMailFlowReportPdf": {
@@ -24631,7 +37145,97 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecGetPermissionsReportPdf": {
@@ -24695,7 +37299,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ }
+ ]
}
},
"/api/ExecGetRecoveryKey": {
@@ -24775,7 +37397,61 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Device.Read"
+ "x-cipp-role": "Endpoint.Device.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/hardwarePasswordDetails",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.PrivilegedOperations.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPBiosPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices/{id}/getFileVaultKey",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPFileVaultKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys/{id}",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /informationProtection/bitlocker/recoveryKeys",
+ "type": "Delegated",
+ "least": [
+ "BitlockerKey.ReadBasic.All"
+ ],
+ "higher": [
+ "BitlockerKey.Read.All"
+ ],
+ "via": [
+ "Get-CIPPBitLockerKey"
+ ]
+ }
+ ]
}
},
"/api/ExecGetReportBuilderPdf": {
@@ -24845,7 +37521,25 @@
}
],
"x-cipp-role": "CIPP.ReportBuilder.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ }
+ ]
}
},
"/api/ExecGetShadowAIReportPdf": {
@@ -24915,7 +37609,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.AI.Read"
+ "x-cipp-role": "Tenant.AI.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Delegated",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPShadowAIReport"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ }
+ ]
}
},
"/api/ExecGetSharingReportPdf": {
@@ -24979,7 +37703,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ }
+ ]
}
},
"/api/ExecGitHubAction": {
@@ -25055,7 +37797,23 @@
}
],
"x-cipp-role": "CIPP.Extension.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Select-CIPPIntuneAvailableSetting"
+ ]
+ }
+ ]
}
},
"/api/ExecGraphExplorerPreset": {
@@ -25232,7 +37990,89 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.Read"
+ "x-cipp-role": "CIPP.Core.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/findTenantInformationByTenantId(tenantId='{id}')",
+ "type": "Application",
+ "least": [
+ "CrossTenantInformation.ReadBasic.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-GraphRequestList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ }
+ ]
}
},
"/api/ExecGroupMembers": {
@@ -25306,7 +38146,211 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Group.ReadWrite"
+ "x-cipp-role": "Identity.Group.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPGroupMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/owners/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPGroupOwner"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPGroupType",
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPGroupMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/owners/$ref",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPGroupOwner"
+ ]
+ }
+ ]
}
},
"/api/ExecGroupsDelete": {
@@ -25399,7 +38443,130 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Remove-CIPPGroup"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Remove-CIPPGroup",
+ "Set-CIPPGroupLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/assignLicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGroupLicense"
+ ]
+ }
+ ]
}
},
"/api/ExecGroupsDeliveryManagement": {
@@ -25722,7 +38889,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecHistoricalSearch": {
@@ -25812,7 +39053,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecHVEUser": {
@@ -25904,7 +39219,119 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecHVEUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/identitySecurityDefaultsEnforcementPolicy",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecHVEUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/policies/{id}",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Invoke-ExecHVEUser"
+ ]
+ }
+ ]
}
},
"/api/ExecIncidentsList": {
@@ -26101,7 +39528,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.Incident.Read"
+ "x-cipp-role": "Security.Incident.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /security/incidents",
+ "type": "Application",
+ "least": [
+ "SecurityIncident.Read.All"
+ ],
+ "higher": [
+ "SecurityIncident.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecIncidentsList"
+ ]
+ }
+ ]
}
},
"/api/ExecIRMConfiguration": {
@@ -26172,7 +39615,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecJITAdmin": {
@@ -26296,7 +39813,196 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Role.ReadWrite"
+ "x-cipp-role": "Identity.Role.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /directoryRoles(roleTemplateId='{id}')/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/TemporaryAccessPass",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.AuthenticationMethod"
+ ],
+ "higher": [
+ "Policy.ReadWrite.AuthenticationMethod"
+ ],
+ "via": [
+ "Invoke-ExecJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecJITAdmin",
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserJITAdmin",
+ "Set-CIPPUserJITAdminProperties"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles(roleTemplateId='{id}')/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}@{id}/authentication/temporaryAccessPassMethods",
+ "type": "Delegated",
+ "least": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.Read",
+ "UserAuthenticationMethod.Read.All",
+ "UserAuthenticationMethod.ReadWrite",
+ "UserAuthMethod-TAP.Read.All",
+ "UserAuthMethod-TAP.ReadWrite",
+ "UserAuthMethod-TAP.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ }
+ ]
}
},
"/api/ExecJITAdminRequestDecision": {
@@ -26371,7 +40077,196 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Role.ReadWrite"
+ "x-cipp-role": "Identity.Role.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /directoryRoles(roleTemplateId='{id}')/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/TemporaryAccessPass",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.AuthenticationMethod"
+ ],
+ "higher": [
+ "Policy.ReadWrite.AuthenticationMethod"
+ ],
+ "via": [
+ "Invoke-ExecJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecJITAdmin",
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserJITAdmin",
+ "Set-CIPPUserJITAdminProperties"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles(roleTemplateId='{id}')/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}@{id}/authentication/temporaryAccessPassMethods",
+ "type": "Delegated",
+ "least": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.Read",
+ "UserAuthenticationMethod.Read.All",
+ "UserAuthenticationMethod.ReadWrite",
+ "UserAuthMethod-TAP.Read.All",
+ "UserAuthMethod-TAP.ReadWrite",
+ "UserAuthMethod-TAP.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPUserJITAdmin"
+ ]
+ }
+ ]
}
},
"/api/ExecJITAdminSettings": {
@@ -27059,7 +40954,73 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.ReadWrite"
+ "x-cipp-role": "CIPP.Core.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecListAppId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /me",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.ReadBasic.All",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecListAppId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Organization.Read.All",
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecListAppId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /applications/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecListAppId"
+ ]
+ }
+ ]
}
},
"/api/ExecListBackup": {
@@ -27575,7 +41536,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecMailQuarantineSubmit": {
@@ -27726,7 +41761,93 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.ReadWrite"
+ "x-cipp-role": "Exchange.SpamFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /security/threatSubmission/emailThreats",
+ "type": "Application",
+ "least": [
+ "ThreatSubmission.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecMailQuarantineSubmit"
+ ]
+ }
+ ]
}
},
"/api/ExecMailTest": {
@@ -27800,7 +41921,43 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.Read"
+ "x-cipp-role": "CIPP.Core.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /me/mailFolders/Inbox/messages",
+ "type": "Delegated",
+ "least": [
+ "Mail.ReadBasic"
+ ],
+ "higher": [
+ "Mail.ReadWrite",
+ "Mail.Read"
+ ],
+ "via": [
+ "Invoke-ExecMailTest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /me",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.ReadBasic.All",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecMailTest"
+ ]
+ }
+ ]
}
},
"/api/ExecMaintenanceScripts": {
@@ -27950,7 +42107,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Application.ReadWrite"
+ "x-cipp-role": "Tenant.Application.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /policies/defaultAppManagementPolicy",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ApplicationConfiguration"
+ ],
+ "via": [
+ "Get-CIPPAppPasswordPolicyMaxEnd"
+ ]
+ }
+ ]
}
},
"/api/ExecManageRetentionPolicies": {
@@ -28064,7 +42237,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.RetentionPolicies.ReadWrite"
+ "x-cipp-role": "Exchange.RetentionPolicies.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecManageRetentionTags": {
@@ -28193,7 +42440,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.RetentionPolicies.ReadWrite"
+ "x-cipp-role": "Exchange.RetentionPolicies.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecMcp": {
@@ -28511,7 +42832,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.Alert.Read"
+ "x-cipp-role": "Security.Alert.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /security/alerts_v2",
+ "type": "Delegated",
+ "least": [
+ "SecurityAlert.Read.All"
+ ],
+ "higher": [
+ "SecurityAlert.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecMDOAlertsList"
+ ]
+ }
+ ]
}
},
"/api/ExecMigrateOneDriveShortCuts": {
@@ -28571,7 +42908,51 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive/root/children",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPMigrateOneDriveShortCuts"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive/special/shortcuts",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPMigrateOneDriveShortCuts"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}/drive/items/{id}",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPMigrateOneDriveShortCuts"
+ ]
+ }
+ ]
}
},
"/api/ExecModifyCalPerms": {
@@ -29032,7 +43413,99 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecModifyCalPerms"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecModifyContactPerms": {
@@ -29493,7 +43966,99 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecModifyContactPerms"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecModifyMBPerms": {
@@ -29955,7 +44520,116 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecModifyMBPerms"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecModifyMBPerms"
+ ]
+ }
+ ]
}
},
"/api/ExecNamedLocation": {
@@ -30052,7 +44726,49 @@
}
],
"x-cipp-role": "Tenant.ConditionalAccess.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Set-CIPPNamedLocation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPNamedLocation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /identity/conditionalAccess/namedLocations/{id}",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Set-CIPPNamedLocation"
+ ]
+ }
+ ]
}
},
"/api/ExecNewSafeLinksPolicy": {
@@ -30299,6 +45015,80 @@
"x-cipp-role": "Exchange.SpamFilter.ReadWrite",
"x-cipp-reads-via": [
"ConvertTo-FieldArray"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
]
}
},
@@ -30489,7 +45279,210 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.ReadWrite"
+ "x-cipp-role": "Tenant.Administration.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /serviceprincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecOffboardTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecOffboardTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /domains",
+ "type": "Delegated",
+ "least": [
+ "Domain.Read.All"
+ ],
+ "higher": [
+ "Domain.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ExecOffboardTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Organization.Read.All",
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecOffboardTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecOffboardTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecOffboardTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecOffboardTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /organization/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecOffboardTenant"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /tenantRelationships/delegatedAdminRelationships/{id}/requests",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecOffboardTenant"
+ ]
+ }
+ ]
}
},
"/api/ExecOffboardUser": {
@@ -30637,6 +45630,499 @@
"x-cipp-role": "Identity.User.ReadWrite",
"x-cipp-reads-via": [
"Test-CIPPOffboardingRequest"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/owners/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPGroupOwner"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Remove-CIPPUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /admin/teams/telephoneNumberManagement/numberAssignments",
+ "type": "Delegated",
+ "least": [
+ "TeamsTelephoneNumber.Read.All"
+ ],
+ "higher": [
+ "TeamsTelephoneNumber.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPUserTeamsPhoneDIDs"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPGroupType",
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Remove-CIPPGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/authentication/methods",
+ "type": "Application",
+ "least": [
+ "UserAuthenticationMethod.Read.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPUserMFA"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive/root",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSharePointPerms"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPOneDriveSharing"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/memberOf/microsoft.graph.group",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadBasic.All",
+ "GroupMember.ReadBasic.All"
+ ],
+ "via": [
+ "Remove-CIPPGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/memberOf/microsoft.graph.group",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.ReadBasic.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadBasic.All"
+ ],
+ "via": [
+ "Remove-CIPPLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/ownedObjects/microsoft.graph.group",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "User.Read.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPGroupOwnerships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert",
+ "Remove-CIPPGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Clear-CIPPOnPremisesAttributes",
+ "Invoke-CIPPOffboardingJob",
+ "Remove-CIPPGroupOwnerships",
+ "Remove-CIPPLicense",
+ "Resolve-CIPPDirectoryId",
+ "Set-CIPPResetPassword",
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Clear-CIPPOnPremisesAttributes"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPResetPassword",
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /admin/teams/telephoneNumberManagement/numberAssignments/unassignNumber",
+ "type": "Delegated",
+ "least": [
+ "TeamsTelephoneNumber.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Remove-CIPPUserTeamsPhoneDIDs"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directory/deletedItems/{id}/restore",
+ "type": "Delegated",
+ "least": [
+ "User.DeleteRestore.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Clear-CIPPOnPremisesAttributes"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/owners/$ref",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPGroupOwner"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/assignlicense",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.ReadWrite.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPLicense"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/authentication/methods/28c10230-6103-485e-b985-444c60001490/resetPassword",
+ "type": "Delegated",
+ "least": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPResetPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/invalidateAllRefreshTokens",
+ "type": "Delegated",
+ "least": [
+ "User.RevokeSessions.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "User.ReadWrite"
+ ],
+ "via": [
+ "Revoke-CIPPSessions"
+ ]
+ }
]
}
},
@@ -30824,7 +46310,302 @@
}
],
"x-cipp-role": "Tenant.Administration.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /me",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/appRoleAssignments",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "DelegatedPermissionGrant.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission",
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue",
+ "Set-CIPPGDAPInviteGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGDAPInviteGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals/{id}/appRoleAssignedTo",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPGDAPInviteGroups"
+ ]
+ }
+ ]
}
},
"/api/ExecOneDriveProvision": {
@@ -30897,7 +46678,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecOneDriveShortCut": {
@@ -30951,7 +46748,117 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /drives/{id}/root:/{id}",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "Sites.Read.All",
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPOneDriveShortCut"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /drives/{id}/root",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "Sites.Read.All",
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPOneDriveShortCut"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}:{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPOneDriveShortCut"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/drive",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPOneDriveShortCut"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/drives",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All",
+ "Sites.Read.All",
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPOneDriveShortCut"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}/drive/items/{id}",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPOneDriveShortCut"
+ ]
+ }
+ ]
}
},
"/api/ExecPartnerMode": {
@@ -31433,7 +47340,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecPasswordNeverExpires"
+ ]
+ }
+ ]
}
},
"/api/ExecPermissionRepair": {
@@ -31482,7 +47405,41 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.AppSettings.ReadWrite"
+ "x-cipp-role": "CIPP.AppSettings.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ }
+ ]
}
},
"/api/ExecPerUserMFA": {
@@ -31547,7 +47504,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}/authentication/requirements",
+ "type": "Application",
+ "least": [
+ "Policy.ReadWrite.AuthenticationMethod"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPPerUserMFA"
+ ]
+ }
+ ]
}
},
"/api/ExecPIMRoleAssignment": {
@@ -31670,7 +47643,146 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Role.ReadWrite"
+ "x-cipp-role": "Identity.Role.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /roleManagement/directory/roleAssignments/{id}",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-CIPPPIMActiveAssignmentRemoval"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directory/administrativeUnits/{id}",
+ "type": "Delegated",
+ "least": [
+ "AdministrativeUnit.Read.All"
+ ],
+ "higher": [
+ "AdministrativeUnit.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/roleManagementPolicyAssignments",
+ "type": "Application",
+ "least": [
+ "RoleManagement.Read.All"
+ ],
+ "higher": [
+ "RoleManagementPolicy.ReadWrite.AzureADGroup"
+ ],
+ "via": [
+ "Get-CIPPPIMRolePolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignments",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments",
+ "Invoke-CIPPPIMActiveAssignmentRemoval"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignmentScheduleInstances",
+ "type": "Application",
+ "least": [
+ "RoleAssignmentSchedule.Read.Directory"
+ ],
+ "higher": [
+ "RoleAssignmentSchedule.ReadWrite.Directory",
+ "RoleManagement.Read.All",
+ "RoleManagement.Read.Directory",
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments",
+ "Invoke-CIPPPIMActiveAssignmentRemoval"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleDefinitions",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "RoleManagement.Read.All",
+ "RoleManagement.ReadWrite.Exchange"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleEligibilitySchedules",
+ "type": "Application",
+ "least": [
+ "RoleEligibilitySchedule.Read.Directory"
+ ],
+ "higher": [
+ "RoleEligibilitySchedule.ReadWrite.Directory",
+ "RoleManagement.Read.All",
+ "RoleManagement.Read.Directory",
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments",
+ "Invoke-CIPPPIMAssignmentAction"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ }
+ ]
}
},
"/api/ExecPreviewBrandingReportPdf": {
@@ -31815,7 +47927,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.ReportBuilder.ReadWrite"
+ "x-cipp-role": "CIPP.ReportBuilder.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Application",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippReportTenantName"
+ ]
+ }
+ ]
}
},
"/api/ExecPushSubscription": {
@@ -31890,7 +48020,37 @@
}
],
"x-cipp-role": "CIPP.Core.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecQuarantineManagement": {
@@ -31968,7 +48128,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.ReadWrite"
+ "x-cipp-role": "Exchange.SpamFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecReactivateSite": {
@@ -32040,7 +48274,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}:/{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecReactivateSite"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /sites/{id},{id},{id}/unarchive",
+ "type": "Application",
+ "least": [
+ "Sites.Archive.All"
+ ],
+ "higher": [
+ "Sites.FullControl.All"
+ ],
+ "via": [
+ "Invoke-ExecReactivateSite"
+ ]
+ }
+ ]
}
},
"/api/ExecRefreshMyAccess": {
@@ -32103,7 +48367,28 @@
}
],
"x-cipp-role": "Public",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/transitiveMembers",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Start-UserSyncTimer"
+ ]
+ }
+ ]
}
},
"/api/ExecRegistrationCampaign": {
@@ -32190,7 +48475,36 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.ReadWrite"
+ "x-cipp-role": "Tenant.Administration.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /policies/authenticationMethodsPolicy",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.AuthenticationMethod"
+ ],
+ "higher": [
+ "Policy.ReadWrite.AuthenticationMethod",
+ "Policy.Read.All"
+ ],
+ "via": [
+ "Set-CIPPRegistrationCampaign"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /policies/authenticationMethodsPolicy",
+ "type": "Delegated",
+ "least": [
+ "Policy.ReadWrite.AuthenticationMethod"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPRegistrationCampaign"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveAdminRole": {
@@ -32424,7 +48738,33 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/androidDeviceOwnerEnrollmentProfiles/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecRemoveEnrollmentProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/depOnboardingSettings/{id}/enrollmentProfiles/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecRemoveEnrollmentProfile"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveLibraryPermission": {
@@ -32511,7 +48851,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveMailboxRule": {
@@ -32603,7 +48959,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveOneDriveShortCut": {
@@ -32666,7 +49096,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /users/{id}/drive/items/{id}",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecRemoveOneDriveShortCut"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveRestrictedUser": {
@@ -32726,7 +49172,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveSharingLink": {
@@ -32799,7 +49319,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /drives/{id}/items/{id}/permissions/{id}",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecRemoveSharingLink"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveSiteUser": {
@@ -32894,7 +49430,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveSnooze": {
@@ -33043,7 +49595,51 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecRemoveSPOExternalUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecRemoveSPOExternalUser"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveTeamsVoicePhoneNumberAssignment": {
@@ -33108,7 +49704,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Teams.Voice.ReadWrite"
+ "x-cipp-role": "Teams.Voice.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /admin/teams/telephoneNumberManagement/numberAssignments/unassignNumber",
+ "type": "Delegated",
+ "least": [
+ "TeamsTelephoneNumber.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecRemoveTeamsVoicePhoneNumberAssignment"
+ ]
+ }
+ ]
}
},
"/api/ExecRemoveTenant": {
@@ -33306,7 +49916,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/windowsAutopilotDeviceIdentities/{id}/UpdateDeviceProperties",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecRenameAPDevice"
+ ]
+ }
+ ]
}
},
"/api/ExecReportAttachmentRetentionConfig": {
@@ -33688,7 +50312,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/reprocessLicenseAssignment",
+ "type": "Application",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecReprocessUserLicenses"
+ ]
+ }
+ ]
}
},
"/api/ExecRequirePasswordChange": {
@@ -33759,7 +50401,41 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPRequirePasswordChange"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPRequirePasswordChange"
+ ]
+ }
+ ]
}
},
"/api/ExecResetMFA": {
@@ -33821,7 +50497,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/authentication/methods",
+ "type": "Application",
+ "least": [
+ "UserAuthenticationMethod.Read.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPUserMFA"
+ ]
+ }
+ ]
}
},
"/api/ExecResetPass": {
@@ -33914,7 +50606,53 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPResetPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPResetPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/authentication/methods/28c10230-6103-485e-b985-444c60001490/resetPassword",
+ "type": "Delegated",
+ "least": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPResetPassword"
+ ]
+ }
+ ]
}
},
"/api/ExecRestoreBackup": {
@@ -34068,7 +50806,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Directory.ReadWrite"
+ "x-cipp-role": "Tenant.Directory.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /directory/deletedItems/{id}/restore",
+ "type": "Delegated",
+ "least": [
+ "User.DeleteRestore.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecRestoreDeleted"
+ ]
+ }
+ ]
}
},
"/api/ExecRestoreDeletedSite": {
@@ -34133,7 +50887,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecRestoreRecycleBinItems": {
@@ -34201,7 +50971,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.SiteRecycleBin.ReadWrite"
+ "x-cipp-role": "Sharepoint.SiteRecycleBin.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecRevokeSessions": {
@@ -34283,7 +51069,24 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/invalidateAllRefreshTokens",
+ "type": "Delegated",
+ "least": [
+ "User.RevokeSessions.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "User.ReadWrite"
+ ],
+ "via": [
+ "Revoke-CIPPSessions"
+ ]
+ }
+ ]
}
},
"/api/ExecRunBackup": {
@@ -34339,7 +51142,286 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.AppSettings.ReadWrite"
+ "x-cipp-role": "CIPP.AppSettings.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /admin/teams/telephoneNumberManagement/numberAssignments",
+ "type": "Delegated",
+ "least": [
+ "TeamsTelephoneNumber.Read.All"
+ ],
+ "higher": [
+ "TeamsTelephoneNumber.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPBackupTask"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/managedAppPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceCompliancePolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceConfigurations/{id}/getOmaSettingPlainTextValue(secretReferenceValueId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPOmaSettingDecryptedValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues/{id}/presentationValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}/presentations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask",
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/authenticationContextClassReferences",
+ "type": "Delegated",
+ "least": [
+ "AuthenticationContext.Read.All"
+ ],
+ "higher": [
+ "AuthenticationContext.ReadWrite.All",
+ "Policy.Read.ConditionalAccess",
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask",
+ "New-CIPPCATemplate"
+ ]
+ }
+ ]
}
},
"/api/ExecRunTenantGroupRule": {
@@ -34551,7 +51633,41 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.SuperAdmin.ReadWrite"
+ "x-cipp-role": "CIPP.SuperAdmin.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ }
+ ]
}
},
"/api/ExecSAMCertificate": {
@@ -34795,7 +51911,26 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.AppSettings.ReadWrite"
+ "x-cipp-role": "CIPP.AppSettings.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSAMCertificate"
+ ]
+ }
+ ]
}
},
"/api/ExecSAMRoles": {
@@ -35096,7 +52231,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecScheduleGroupMembershipVacation": {
@@ -35176,7 +52385,202 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Group.ReadWrite"
+ "x-cipp-role": "Identity.Group.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPGroupMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/members",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPVacationGroupMembership"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPGroupType",
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPGroupMember"
+ ]
+ }
+ ]
}
},
"/api/ExecScheduleMailboxVacation": {
@@ -35263,7 +52667,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecScheduleOOOVacation": {
@@ -35354,7 +52832,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSchedulerBillingRun": {
@@ -35936,7 +53488,85 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "New-CIPPMFAConnectorToken"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/authentication/methods",
+ "type": "Delegated",
+ "least": [
+ "UserAuthenticationMethod.Read.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite",
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSendPush"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals/{id}/addPassword",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPMFAConnectorToken"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals/{id}/removePassword",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPMFAConnectorToken"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPMFAConnectorToken"
+ ]
+ }
+ ]
}
},
"/api/ExecServicePrincipals": {
@@ -36195,7 +53825,71 @@
}
],
"x-cipp-role": "Tenant.Application.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecServicePrincipals"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecServicePrincipals"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecServicePrincipals"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecServicePrincipals"
+ ]
+ }
+ ]
}
},
"/api/ExecSetAPDeviceGroupTag": {
@@ -36264,7 +53958,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/windowsAutopilotDeviceIdentities/{id}/UpdateDeviceProperties",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecSetAPDeviceGroupTag"
+ ]
+ }
+ ]
}
},
"/api/ExecSetCalendarProcessing": {
@@ -36373,7 +54081,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetCASMailbox": {
@@ -36436,7 +54218,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetCIPPAutoBackup": {
@@ -36485,7 +54341,286 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Backup.ReadWrite"
+ "x-cipp-role": "CIPP.Backup.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /admin/teams/telephoneNumberManagement/numberAssignments",
+ "type": "Delegated",
+ "least": [
+ "TeamsTelephoneNumber.Read.All"
+ ],
+ "higher": [
+ "TeamsTelephoneNumber.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPBackupTask"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/managedAppPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneTemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceCompliancePolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceConfigurations/{id}/getOmaSettingPlainTextValue(secretReferenceValueId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPOmaSettingDecryptedValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues/{id}/presentationValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}/presentations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneAdminTemplateDefinitionValue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask",
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/authenticationContextClassReferences",
+ "type": "Delegated",
+ "least": [
+ "AuthenticationContext.Read.All"
+ ],
+ "higher": [
+ "AuthenticationContext.ReadWrite.All",
+ "Policy.Read.ConditionalAccess",
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPCATemplate"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPBackupTask",
+ "New-CIPPCATemplate"
+ ]
+ }
+ ]
}
},
"/api/ExecSetCloudManaged": {
@@ -36617,7 +54752,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}/authentication/signInPreferences",
+ "type": "Application",
+ "least": [
+ "UserAuthenticationMethod.ReadWrite"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSetDefaultMFAMethod"
+ ]
+ }
+ ]
}
},
"/api/ExecSetLibraryInheritance": {
@@ -36696,7 +54847,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecSetLibraryPermission": {
@@ -36788,7 +54955,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecSetLitigationHold": {
@@ -36855,7 +55038,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetMailboxCustomAttributes": {
@@ -36919,7 +55176,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetMailboxEmailSize": {
@@ -36986,7 +55317,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetMailboxLocale": {
@@ -37047,7 +55452,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetMailboxQuota": {
@@ -37122,7 +55601,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetMailboxRetentionPolicies": {
@@ -37197,7 +55750,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetMailboxRule": {
@@ -37267,7 +55894,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetMdoAlert": {
@@ -37382,7 +56083,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.Incident.ReadWrite"
+ "x-cipp-role": "Security.Incident.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /security/alerts_v2/{id}",
+ "type": "Application",
+ "least": [
+ "SecurityAlert.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecSetMdoAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecSetOneDriveSharing": {
@@ -37443,7 +56158,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Teams.SharePoint.ReadWrite"
+ "x-cipp-role": "Teams.SharePoint.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPOneDriveSharing"
+ ]
+ }
+ ]
}
},
"/api/ExecSetOoO": {
@@ -37539,7 +56284,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetPackageTag": {
@@ -37714,7 +56533,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetRetentionHold": {
@@ -37778,7 +56671,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSetSecurityAlert": {
@@ -37860,7 +56827,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.Alert.ReadWrite"
+ "x-cipp-role": "Security.Alert.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /security/alerts_v2/{id}",
+ "type": "Delegated",
+ "least": [
+ "SecurityAlert.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecSetSecurityAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecSetSecurityIncident": {
@@ -37945,7 +56926,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.Incident.ReadWrite"
+ "x-cipp-role": "Security.Incident.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /security/incidents/{id}",
+ "type": "Application",
+ "least": [
+ "SecurityIncident.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecSetSecurityIncident"
+ ]
+ }
+ ]
}
},
"/api/ExecSetSharePointMember": {
@@ -38040,7 +57035,227 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/members/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPGroupMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /groups/{id}/owners/{id}/$ref",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSharePointSiteMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPGroupType",
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId",
+ "Set-CIPPSharePointSiteMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Resolve-CIPPDirectoryId",
+ "Set-CIPPSharePointSiteMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Resolve-CIPPDirectoryId"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPGroupMember"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/owners/$ref",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSharePointSiteMember"
+ ]
+ }
+ ]
}
},
"/api/ExecSetSiteProperties": {
@@ -38105,7 +57320,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecSetUserPhoto": {
@@ -38193,7 +57424,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /users/{id}/photo/$value",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite"
+ ],
+ "higher": [
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSetUserPhoto"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PUT /users/{id}/photo/$value",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite"
+ ],
+ "higher": [
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSetUserPhoto"
+ ]
+ }
+ ]
}
},
"/api/ExecShadowAISanction": {
@@ -38331,7 +57592,42 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Reports.ReadWrite"
+ "x-cipp-role": "Sharepoint.Reports.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reports/exportJobs/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementApps.Read.All",
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.Read.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneReportExportJob"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reports/exportJobs",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneReportExportJob"
+ ]
+ }
+ ]
}
},
"/api/ExecSharePointPerms": {
@@ -38409,7 +57705,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive/root",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSharePointPerms"
+ ]
+ }
+ ]
}
},
"/api/ExecSharePointSharingSync": {
@@ -38477,7 +57803,42 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Reports.ReadWrite"
+ "x-cipp-role": "Sharepoint.Reports.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reports/exportJobs/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementApps.Read.All",
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.Read.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneReportExportJob"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reports/exportJobs",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneReportExportJob"
+ ]
+ }
+ ]
}
},
"/api/ExecSharePointStorageSync": {
@@ -38545,7 +57906,42 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Reports.ReadWrite"
+ "x-cipp-role": "Sharepoint.Reports.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reports/exportJobs/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementApps.Read.All",
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.Read.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneReportExportJob"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reports/exportJobs",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneReportExportJob"
+ ]
+ }
+ ]
}
},
"/api/ExecSharePointTemplate": {
@@ -38725,7 +58121,174 @@
}
],
"x-cipp-role": "Sharepoint.Admin.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/drive/root:/{id}",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "Sites.Read.All",
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSharePointFolder"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/drive",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSharePointFolder"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSharepointSite",
+ "New-CIPPTeam"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-CIPPSharePointTemplateDeploy",
+ "Set-CIPPSharePointObjectPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /teams/{id}/channels",
+ "type": "Application",
+ "least": [
+ "ChannelSettings.Read.Group"
+ ],
+ "higher": [
+ "Channel.ReadBasic.All",
+ "ChannelSettings.Read.All",
+ "ChannelSettings.ReadWrite.All",
+ "ChannelSettings.ReadWrite.Group",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPTeamChannel"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/drive/root/children",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPSharePointFolder"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSharepointSite",
+ "Set-CIPPSharePointObjectPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /teams/{id}/channels",
+ "type": "Application",
+ "least": [
+ "Channel.Create.Group"
+ ],
+ "higher": [
+ "Channel.Create",
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All",
+ "Teamwork.Migrate.All"
+ ],
+ "via": [
+ "New-CIPPTeamChannel"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /teams",
+ "type": "Application",
+ "least": [
+ "Team.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All",
+ "Teamwork.Migrate.All"
+ ],
+ "via": [
+ "New-CIPPTeam"
+ ]
+ }
+ ]
}
},
"/api/ExecSiteBrowserActions": {
@@ -38805,7 +58368,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSiteBrowserActions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecSiteBrowserLibraryCopy": {
@@ -38904,7 +58497,65 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/lists/{id}/drive/root/children",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPSharePointLibraryRootChildUris"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/lists/{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Start-CIPPSharePointLibraryCopy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPSharePointLibraryRootChildUris",
+ "Resolve-CIPPSharePointLibraryRootUri",
+ "Start-CIPPSharePointLibraryCopy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecSiteBrowserPermissions": {
@@ -38988,7 +58639,6 @@
"ListId",
"PermissionId",
"PrincipalId",
- "SiteId",
"SiteUrl",
"tenantFilter"
]
@@ -39034,6 +58684,62 @@
"x-cipp-role": "Sharepoint.Site.ReadWrite",
"x-cipp-reads-via": [
"Resolve-BrowserPermissionRoleDefId"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /sites/{id}/permissions/{id}",
+ "type": "Application",
+ "least": [
+ "Sites.FullControl.All"
+ ],
+ "higher": [],
+ "via": [
+ "Remove-CIPPGraphSitePermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPGraphSitePermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive/root",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSharePointPerms"
+ ]
+ }
]
}
},
@@ -39177,7 +58883,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.ReadWrite"
+ "x-cipp-role": "Sharepoint.Site.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ExecSSOSetup": {
@@ -39273,7 +58995,119 @@
}
],
"x-cipp-role": "CIPP.AppSettings.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSSOSetup",
+ "New-CIPPSSOApp",
+ "Update-CIPPSSORedirectUri"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications/{id}",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPSSOAppSecret"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/defaultAppManagementPolicy",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ApplicationConfiguration"
+ ],
+ "via": [
+ "Add-CIPPSSOAppSecret"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /applications/{id}",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSSOSetup",
+ "New-CIPPSSOApp",
+ "Update-CIPPSSORedirectUri"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /applications/{id}/addPassword",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPSSOAppSecret"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /applications",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSSOApp"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPSSOApp"
+ ]
+ }
+ ]
}
},
"/api/ExecStandardConvert": {
@@ -39430,7 +59264,400 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Standards.ReadWrite"
+ "x-cipp-role": "Tenant.Standards.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/managedAppPolicies",
+ "type": "Application",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/managedAppPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileAppConfigurations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicies",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceCompliancePolicies",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceCompliancePolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceConfigurations",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceConfigurations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/hardwareConfigurations",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/hardwareConfigurations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsDriverUpdateProfiles",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsDriverUpdateProfiles",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsFeatureUpdateProfiles",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsFeatureUpdateProfiles",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsQualityUpdatePolicies",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsQualityUpdatePolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsQualityUpdateProfiles",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsQualityUpdateProfiles",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Push-CIPPStandardsList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDBCacheConditionalAccessPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDBCacheConditionalAccessPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/identitySecurityDefaultsEnforcementPolicy",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDBCacheConditionalAccessPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecStandardTemplateSchedule": {
@@ -39578,7 +59805,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecSyncAPDevices": {
@@ -39643,7 +59944,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/windowsAutopilotSettings/sync",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecSyncAPDevices"
+ ]
+ }
+ ]
}
},
"/api/ExecSyncDEP": {
@@ -39698,7 +60013,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/depOnboardingSettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSyncDEP"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/depOnboardingSettings/{id}/syncWithAppleDeviceEnrollmentProgram",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSyncDEP"
+ ]
+ }
+ ]
}
},
"/api/ExecSyncVPP": {
@@ -39752,7 +60097,36 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Application.ReadWrite"
+ "x-cipp-role": "Endpoint.Application.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/vppTokens",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecSyncVPP"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceAppManagement/vppTokens/{id}/syncLicenses",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecSyncVPP"
+ ]
+ }
+ ]
}
},
"/api/ExecTeamsVoicePhoneNumberAssignment": {
@@ -39831,7 +60205,51 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Teams.Voice.ReadWrite"
+ "x-cipp-role": "Teams.Voice.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ExecTeamsVoicePhoneNumberAssignment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /admin/teams/telephoneNumberManagement/numberAssignments/assignNumber",
+ "type": "Delegated",
+ "least": [
+ "TeamsTelephoneNumber.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecTeamsVoicePhoneNumberAssignment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /admin/teams/telephoneNumberManagement/numberAssignments/updateNumber",
+ "type": "Delegated",
+ "least": [
+ "TeamsTelephoneNumber.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecTeamsVoicePhoneNumberAssignment"
+ ]
+ }
+ ]
}
},
"/api/ExecTenantGroup": {
@@ -40011,7 +60429,105 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.TransportRule.ReadWrite"
+ "x-cipp-role": "Exchange.TransportRule.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /admin/exchange/tracing/messageTraces/{id}/getDetailsByRecipient(recipientAddress='{id}')",
+ "type": "Application",
+ "least": [
+ "ExchangeMessageTrace.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Push-ExecTestMessageTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /admin/exchange/tracing/messageTraces",
+ "type": "Application",
+ "least": [
+ "ExchangeMessageTrace.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Push-ExecTestMessageTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ExecTestRefresh": {
@@ -40175,7 +60691,87 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Tests.ReadWrite"
+ "x-cipp-role": "Tenant.Tests.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/reports/exportJobs/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementApps.Read.All",
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.Read.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPIntuneReportExportJob"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/reports/exportJobs",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All",
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "New-CIPPIntuneReportExportJob"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ }
+ ]
}
},
"/api/ExecTimeSettings": {
@@ -40757,7 +61353,39 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Standards.ReadWrite"
+ "x-cipp-role": "Tenant.Standards.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /identity/conditionalAccess/policies/{id}",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Invoke-ExecUpdateDriftDeviation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/operationApprovalRequests",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementRBAC.Read.All",
+ "DeviceManagementRBAC.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPIntuneApprovalRetry"
+ ]
+ }
+ ]
}
},
"/api/ExecUpdateRefreshToken": {
@@ -40855,7 +61483,305 @@
}
],
"x-cipp-role": "CIPP.AppSettings.ReadWrite",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')/memberOf",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Application.ReadWrite.OwnedBy",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/appRoleAssignments",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "DelegatedPermissionGrant.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission",
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles(roleTemplateId='{id}')/members/$ref",
+ "type": "Application",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles(roleTemplateId='{id}')/members/$ref",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryRoles",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPSAMAdminRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals/{id}/appRoleAssignedTo",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ }
+ ]
}
},
"/api/ExecUpdateSecureScore": {
@@ -40925,7 +61851,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.ReadWrite"
+ "x-cipp-role": "Tenant.Administration.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /security/secureScoreControlProfiles/{id}",
+ "type": "Delegated",
+ "least": [
+ "SecurityEvents.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ExecUpdateSecureScore"
+ ]
+ }
+ ]
}
},
"/api/ExecUserBookmarks": {
@@ -41154,7 +62094,23 @@
}
],
"x-cipp-role": "Endpoint.MEM.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Select-CIPPIntuneAvailableSetting"
+ ]
+ }
+ ]
}
},
"/api/ExecWebhookSubscriptions": {
@@ -41433,7 +62389,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListAdminPortalLicenses": {
@@ -41663,7 +62693,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.AI.Read"
+ "x-cipp-role": "Tenant.AI.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /copilot/admin/catalog/packages/{id}",
+ "type": "Delegated",
+ "least": [
+ "CopilotPackages.Read.All"
+ ],
+ "higher": [
+ "CopilotPackages.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAgent365PackageDetail"
+ ]
+ }
+ ]
}
},
"/api/ListAgent365Packages": {
@@ -42145,7 +63191,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.DeviceCompliance.Read"
+ "x-cipp-role": "Tenant.DeviceCompliance.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/managedTenants/managedDeviceCompliances",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAllTenantDeviceCompliance"
+ ]
+ }
+ ]
}
},
"/api/ListAndroidEnrollmentProfiles": {
@@ -42187,7 +63249,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.Read"
+ "x-cipp-role": "Endpoint.Autopilot.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/androidDeviceOwnerEnrollmentProfiles/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAndroidEnrollmentProfiles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/androidDeviceOwnerEnrollmentProfiles",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAndroidEnrollmentProfiles"
+ ]
+ }
+ ]
}
},
"/api/ListAntiPhishingFilters": {
@@ -42316,7 +63408,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListAPDevices": {
@@ -42472,7 +63638,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.Read"
+ "x-cipp-role": "Endpoint.Autopilot.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsAutopilotDeviceIdentities",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAPDevices"
+ ]
+ }
+ ]
}
},
"/api/ListApiEgress": {
@@ -42774,7 +63956,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.Read"
+ "x-cipp-role": "Tenant.Administration.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /identityGovernance/appConsent/appConsentRequests/{id}/userConsentRequests",
+ "type": "Delegated",
+ "least": [
+ "ConsentRequest.Read.All"
+ ],
+ "higher": [
+ "ConsentRequest.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAppConsentRequests"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identityGovernance/appConsent/appConsentRequests",
+ "type": "Delegated",
+ "least": [
+ "ConsentRequest.Read.All"
+ ],
+ "higher": [
+ "ConsentRequest.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAppConsentRequests"
+ ]
+ }
+ ]
}
},
"/api/ListAppleEnrollmentProfiles": {
@@ -42877,7 +64089,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.Read"
+ "x-cipp-role": "Endpoint.Autopilot.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/depOnboardingSettings/{id}/enrollmentProfiles",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAppleEnrollmentProfiles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/depOnboardingSettings",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAppleEnrollmentProfiles"
+ ]
+ }
+ ]
}
},
"/api/ListApplicationQueue": {
@@ -43007,7 +64249,57 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.Read"
+ "x-cipp-role": "Endpoint.MEM.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/managedAppPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAppProtectionPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileAppConfigurations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAppProtectionPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListAppProtectionPolicies"
+ ]
+ }
+ ]
}
},
"/api/ListApps": {
@@ -43082,7 +64374,43 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Application.Read"
+ "x-cipp-role": "Endpoint.Application.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/mobileApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListApps"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListApps"
+ ]
+ }
+ ]
}
},
"/api/ListAppsRepository": {
@@ -43442,7 +64770,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.Read"
+ "x-cipp-role": "Endpoint.MEM.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAssignmentFilters"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/assignmentFilters",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAssignmentFilters"
+ ]
+ }
+ ]
}
},
"/api/ListAssignmentFilterTemplates": {
@@ -43995,7 +65353,39 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Alert.Read"
+ "x-cipp-role": "Tenant.Alert.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /security/auditLog/queries/{id}/records",
+ "type": "Application",
+ "least": [
+ "AuditLogsQuery.Read.All"
+ ],
+ "higher": [
+ "AuditLogsQuery-CRM.Read.All",
+ "AuditLogsQuery-Endpoint.Read.All",
+ "AuditLogsQuery-Exchange.Read.All",
+ "AuditLogsQuery-OneDrive.Read.All",
+ "AuditLogsQuery-SharePoint.Read.All"
+ ],
+ "via": [
+ "Get-CippAuditLogSearchResults"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /security/auditLog/queries/{id}",
+ "type": "Application",
+ "least": [
+ "AuditLogsQuery.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CippAuditLogSearches"
+ ]
+ }
+ ]
}
},
"/api/ListAuditLogTest": {
@@ -44055,7 +65445,405 @@
}
],
"x-cipp-role": "Tenant.Alert.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /devices/{id}",
+ "type": "Delegated",
+ "least": [
+ "Directory.AccessAsUser.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDeviceState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /drives/{id}/items/{id}/permissions/{id}",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPBecSharingLinks"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Remove-CIPPBecTargetedCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /devices",
+ "type": "Delegated",
+ "least": [
+ "Device.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPAuditLogRules"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPAuditLogRules"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPBecTargetedCAPolicy",
+ "Remove-CIPPBecTargetedCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPAuditLogRules"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /shares/{id}/driveItem",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Remove-CIPPBecSharingLinks"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/authentication/methods",
+ "type": "Application",
+ "least": [
+ "UserAuthenticationMethod.Read.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPUserMFA"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPOneDriveSharing"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPBecContainment",
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CippWebhookProcessing",
+ "Set-CIPPResetPassword",
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPartnerUserLookup"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPAuditLogRules"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /devices/{id}",
+ "type": "Delegated",
+ "least": [
+ "Directory.AccessAsUser.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDeviceState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /servicePrincipals/{id}",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "AgentIdentity.ReadWrite.All",
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPBecContainment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPResetPassword",
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPBecTargetedCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/authentication/methods/28c10230-6103-485e-b985-444c60001490/resetPassword",
+ "type": "Delegated",
+ "least": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPResetPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/invalidateAllRefreshTokens",
+ "type": "Delegated",
+ "least": [
+ "User.RevokeSessions.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "User.ReadWrite"
+ ],
+ "via": [
+ "Revoke-CIPPSessions"
+ ]
+ }
+ ]
}
},
"/api/ListAutopilotconfig": {
@@ -44163,7 +65951,57 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.Read"
+ "x-cipp-role": "Endpoint.Autopilot.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceEnrollmentConfigurations",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAutopilotconfig"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsAutopilotDeploymentProfiles",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAutopilotconfig"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListAutopilotconfig"
+ ]
+ }
+ ]
}
},
"/api/ListAvailableTests": {
@@ -44387,7 +66225,26 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Directory.Read"
+ "x-cipp-role": "Tenant.Directory.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Organization.Read.All",
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListAzureADConnectStatus"
+ ]
+ }
+ ]
}
},
"/api/ListBaselineAlignment": {
@@ -44653,7 +66510,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.AuditLog.Read"
+ "x-cipp-role": "Identity.AuditLog.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Delegated",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListBasicAuth"
+ ]
+ }
+ ]
}
},
"/api/ListBECPhishingSpread": {
@@ -44749,7 +66620,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListBECRemediationActions": {
@@ -45088,7 +67033,24 @@
}
],
"x-cipp-role": "CIPP.BreachLookup.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /domains",
+ "type": "Delegated",
+ "least": [
+ "Domain.Read.All"
+ ],
+ "higher": [
+ "Domain.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Get-BreachInfo"
+ ]
+ }
+ ]
}
},
"/api/ListBreachesTenant": {
@@ -45222,7 +67184,26 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.SecuritySimulations.Read"
+ "x-cipp-role": "Tenant.SecuritySimulations.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ }
+ ]
}
},
"/api/ListCalendarPermissions": {
@@ -45313,7 +67294,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListCAPolicyCoverage": {
@@ -45374,7 +67429,137 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.Read"
+ "x-cipp-role": "Tenant.ConditionalAccess.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/members/microsoft.graph.user",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPCAPolicyIdentityCoverage"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/transitiveMembers/microsoft.graph.user",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPCAPolicyIdentityCoverage"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Application",
+ "least": [
+ "Group.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPCAPolicyIdentityCoverage"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPCAPolicyIdentityCoverage"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignments",
+ "type": "Application",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPCAPolicyIdentityCoverage"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleDefinitions",
+ "type": "Application",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPCAPolicyIdentityCoverage"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Expand-CIPPCACoverageGuestBlock",
+ "Get-CIPPCAPolicyIdentityCoverage"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPCAPolicyIdentityCoverage"
+ ]
+ }
+ ]
}
},
"/api/ListCAPolicyImpact": {
@@ -45451,7 +67636,33 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.Read"
+ "x-cipp-role": "Tenant.ConditionalAccess.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Delegated",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPCAPolicyImpact"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies/{id}",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPCAPolicyImpact"
+ ]
+ }
+ ]
}
},
"/api/ListCASituations": {
@@ -45531,7 +67742,41 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.SecuritySimulations.Read"
+ "x-cipp-role": "Tenant.SecuritySimulations.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/evaluate",
+ "type": "Application",
+ "least": [
+ "Policy.Read.ConditionalAccess"
+ ],
+ "higher": [
+ "Policy.Read.All",
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Invoke-CIPPCAWhatIf"
+ ]
+ }
+ ]
}
},
"/api/ListCAtemplates": {
@@ -46289,7 +68534,43 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.Read"
+ "x-cipp-role": "Endpoint.MEM.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceCompliancePolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListCompliancePolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListCompliancePolicies"
+ ]
+ }
+ ]
}
},
"/api/ListConditionalAccessPolicies": {
@@ -46440,7 +68721,116 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.Read"
+ "x-cipp-role": "Tenant.ConditionalAccess.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /applications",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ListConditionalAccessPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListConditionalAccessPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListConditionalAccessPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListConditionalAccessPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleDefinitions",
+ "type": "Application",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "RoleManagement.Read.All",
+ "RoleManagement.ReadWrite.Exchange"
+ ],
+ "via": [
+ "Invoke-ListConditionalAccessPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ListConditionalAccessPolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListConditionalAccessPolicies"
+ ]
+ }
+ ]
}
},
"/api/ListConditionalAccessPolicyChanges": {
@@ -46552,7 +68942,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.Read"
+ "x-cipp-role": "Tenant.ConditionalAccess.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/directoryAudits",
+ "type": "Delegated",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ListConditionalAccessPolicyChanges"
+ ]
+ }
+ ]
}
},
"/api/ListConnectionFilter": {
@@ -46615,7 +69021,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.ConnectionFilter.Read"
+ "x-cipp-role": "Exchange.ConnectionFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListConnectionFilterTemplates": {
@@ -46801,7 +69281,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListContacts": {
@@ -46889,7 +69443,96 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Contact.Read"
+ "x-cipp-role": "Exchange.Contact.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /contacts",
+ "type": "Delegated",
+ "least": [
+ "OrgContact.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListContacts"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListContactTemplates": {
@@ -47204,7 +69847,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.AI.Read"
+ "x-cipp-role": "Tenant.AI.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /copilot/admin/policySettings/{id}",
+ "type": "Delegated",
+ "least": [
+ "CopilotPolicySettings.Read"
+ ],
+ "higher": [
+ "CopilotPolicySettings.ReadWrite"
+ ],
+ "via": [
+ "Invoke-ListCopilotSettings"
+ ]
+ }
+ ]
}
},
"/api/ListCopilotUsage": {
@@ -48443,7 +71102,37 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.Read"
+ "x-cipp-role": "Endpoint.MEM.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDefenderState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDefenderState"
+ ]
+ }
+ ]
}
},
"/api/ListDefenderTVM": {
@@ -48606,7 +71295,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListDetectedAppDevices": {
@@ -48690,7 +71395,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Device.Read"
+ "x-cipp-role": "Identity.Device.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/detectedApps/{id}/managedDevices",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDetectedAppDevices"
+ ]
+ }
+ ]
}
},
"/api/ListDetectedApps": {
@@ -48753,7 +71474,51 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Device.Read"
+ "x-cipp-role": "Identity.Device.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/detectedApps/{id}/managedDevices",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDetectedApps"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/detectedApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDetectedApps"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices/{id}/detectedApps",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDetectedApps"
+ ]
+ }
+ ]
}
},
"/api/ListDeviceDetails": {
@@ -48845,7 +71610,52 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Device.Read"
+ "x-cipp-role": "Identity.Device.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDeviceDetails"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDeviceDetails"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /devices(deviceID='{id}')/memberOf",
+ "type": "Delegated",
+ "least": [
+ "Device.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDeviceDetails"
+ ]
+ }
+ ]
}
},
"/api/ListDevices": {
@@ -49229,7 +72039,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Device.Read"
+ "x-cipp-role": "Endpoint.Device.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListDevices"
+ ]
+ }
+ ]
}
},
"/api/ListDiagnosticsPresets": {
@@ -49368,7 +72194,21 @@
}
],
"x-cipp-role": "CIPP.Core.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListDirectoryObjects"
+ ]
+ }
+ ]
}
},
"/api/ListDlpCompliancePolicy": {
@@ -49443,7 +72283,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.DlpCompliancePolicy.Read"
+ "x-cipp-role": "Security.DlpCompliancePolicy.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListDlpCompliancePolicyTemplates": {
@@ -49820,7 +72734,24 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.Read"
+ "x-cipp-role": "Tenant.Administration.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /domains",
+ "type": "Delegated",
+ "least": [
+ "Domain.Read.All"
+ ],
+ "higher": [
+ "Domain.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ListDomains"
+ ]
+ }
+ ]
}
},
"/api/ListEmptyResults": {
@@ -49990,7 +72921,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Equipment.Read"
+ "x-cipp-role": "Exchange.Equipment.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListExchangeConnectors": {
@@ -50068,7 +73073,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Connector.Read"
+ "x-cipp-role": "Exchange.Connector.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListExcludedLicenses": {
@@ -50341,7 +73420,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.Read"
+ "x-cipp-role": "CIPP.Core.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListExtensionCacheData": {
@@ -50654,7 +73807,21 @@
}
],
"x-cipp-role": "CIPP.Core.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/findTenantInformationByTenantId(tenantId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "CrossTenantInformation.ReadBasic.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListExternalTenantInfo"
+ ]
+ }
+ ]
}
},
"/api/ListFeatureFlags": {
@@ -50810,7 +73977,81 @@
}
],
"x-cipp-role": "CIPP.Core.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListFunctionStats": {
@@ -51003,7 +74244,62 @@
}
],
"x-cipp-role": "Tenant.Relationship.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/members",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGDAPAccessAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListGDAPAccessAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGDAPAccessAssignments"
+ ]
+ }
+ ]
}
},
"/api/ListGDAPContracts": {
@@ -51081,7 +74377,23 @@
}
],
"x-cipp-role": "Tenant.Relationship.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /contracts",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGDAPContracts"
+ ]
+ }
+ ]
}
},
"/api/ListGDAPInvite": {
@@ -51284,7 +74596,37 @@
}
],
"x-cipp-role": "Tenant.Relationship.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGDAPRelationships"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGDAPRelationships"
+ ]
+ }
+ ]
}
},
"/api/ListGDAPRoles": {
@@ -51377,7 +74719,45 @@
}
],
"x-cipp-role": "Tenant.Relationship.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ }
+ ]
}
},
"/api/ListGDAPServicePrincipals": {
@@ -51446,7 +74826,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Relationship.Read"
+ "x-cipp-role": "Tenant.Relationship.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGDAPServicePrincipals"
+ ]
+ }
+ ]
}
},
"/api/ListGeneratedReports": {
@@ -51706,7 +75104,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListGraphBulkRequest": {
@@ -51927,7 +75399,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Reports.Read"
+ "x-cipp-role": "Tenant.Reports.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /reports",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGraphReports"
+ ]
+ }
+ ]
}
},
"/api/ListGraphRequest": {
@@ -52204,7 +75692,89 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.Read"
+ "x-cipp-role": "CIPP.Core.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/findTenantInformationByTenantId(tenantId='{id}')",
+ "type": "Application",
+ "least": [
+ "CrossTenantInformation.ReadBasic.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-GraphRequestList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ }
+ ]
}
},
"/api/ListGraphSchema": {
@@ -52524,7 +76094,169 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Group.Read"
+ "x-cipp-role": "Identity.Group.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/members",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/owners",
+ "type": "Application",
+ "least": [
+ "Group.Read.All"
+ ],
+ "higher": [
+ "Group.ReadWrite.All",
+ "Directory.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Application",
+ "least": [
+ "Group.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Application",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListGroups"
+ ]
+ }
+ ]
}
},
"/api/ListGroupSenderAuthentication": {
@@ -52587,7 +76319,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Groups.Read"
+ "x-cipp-role": "Exchange.Groups.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListGroupTemplates": {
@@ -52931,7 +76737,43 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListGuestUsers"
+ ]
+ }
+ ]
}
},
"/api/ListHaloClients": {
@@ -53078,128 +76920,276 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
- }
- },
- "/api/ListHVEAccounts": {
- "get": {
- "summary": "ListHVEAccounts",
- "operationId": "ListHVEAccounts",
- "tags": [
- "Email-Exchange > Administration"
- ],
- "description": "Lists High Volume Email (HVE) accounts and billing policies for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.",
- "parameters": [
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
+ }
+ },
+ "/api/ListHVEAccounts": {
+ "get": {
+ "summary": "ListHVEAccounts",
+ "operationId": "ListHVEAccounts",
+ "tags": [
+ "Email-Exchange > Administration"
+ ],
+ "description": "Lists High Volume Email (HVE) accounts and billing policies for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.",
+ "parameters": [
+ {
+ "name": "Identity",
+ "in": "query",
+ "required": false,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "name": "ListBillingPolicies",
+ "in": "query",
+ "required": false,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "$ref": "#/components/parameters/tenantFilter"
+ },
+ {
+ "name": "UseReportDB",
+ "in": "query",
+ "description": "Serve from the reporting database cache instead of live Graph. Much faster, especially for AllTenants.",
+ "required": false,
+ "schema": {
+ "type": "boolean"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "Success",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "object",
+ "description": "Derived from the fields the endpoint selects onto each record, and the columns the CIPP UI renders. The response may carry more; these are the ones known to exist.",
+ "properties": {
+ "AdditionalEmailAddresses": {
+ "x-cipp-field-source": "backend,frontend"
+ },
+ "Alias": {
+ "x-cipp-field-source": "backend,frontend"
+ },
+ "Authentication": {
+ "x-cipp-field-source": "backend"
+ },
+ "BillingPolicyId": {
+ "x-cipp-field-source": "backend"
+ },
+ "BillingPolicyName": {
+ "x-cipp-field-source": "backend"
+ },
+ "displayName": {
+ "x-cipp-field-source": "backend,frontend"
+ },
+ "ExternalDirectoryObjectId": {
+ "x-cipp-field-source": "backend"
+ },
+ "HiddenFromAddressListsEnabled": {
+ "x-cipp-field-source": "backend"
+ },
+ "primarySmtpAddress": {
+ "x-cipp-field-source": "backend,frontend"
+ },
+ "recipientType": {
+ "x-cipp-field-source": "backend"
+ },
+ "recipientTypeDetails": {
+ "x-cipp-field-source": "backend"
+ },
+ "ReplyTo": {
+ "x-cipp-field-source": "backend"
+ },
+ "SMTPPort": {
+ "x-cipp-field-source": "backend"
+ },
+ "SMTPServer": {
+ "x-cipp-field-source": "backend"
+ },
+ "Tenant": {
+ "x-cipp-field-source": "frontend"
+ },
+ "WhenCreated": {
+ "x-cipp-field-source": "backend,frontend"
+ }
+ }
+ }
+ }
+ }
+ }
+ },
+ "401": {
+ "description": "Unauthorized - invalid or missing bearer token"
+ },
+ "403": {
+ "description": "Forbidden - caller lacks the required RBAC role"
+ },
+ "500": {
+ "description": "Internal server error"
+ }
+ },
+ "security": [
+ {
+ "bearerAuth": []
+ }
+ ],
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
{
- "name": "Identity",
- "in": "query",
- "required": false,
- "schema": {
- "type": "string"
- }
- },
- {
- "name": "ListBillingPolicies",
- "in": "query",
- "required": false,
- "schema": {
- "type": "string"
- }
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
},
{
- "$ref": "#/components/parameters/tenantFilter"
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
},
{
- "name": "UseReportDB",
- "in": "query",
- "description": "Serve from the reporting database cache instead of live Graph. Much faster, especially for AllTenants.",
- "required": false,
- "schema": {
- "type": "boolean"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "Success",
- "content": {
- "application/json": {
- "schema": {
- "type": "array",
- "items": {
- "type": "object",
- "description": "Derived from the fields the endpoint selects onto each record, and the columns the CIPP UI renders. The response may carry more; these are the ones known to exist.",
- "properties": {
- "AdditionalEmailAddresses": {
- "x-cipp-field-source": "backend,frontend"
- },
- "Alias": {
- "x-cipp-field-source": "backend,frontend"
- },
- "Authentication": {
- "x-cipp-field-source": "backend"
- },
- "BillingPolicyId": {
- "x-cipp-field-source": "backend"
- },
- "BillingPolicyName": {
- "x-cipp-field-source": "backend"
- },
- "displayName": {
- "x-cipp-field-source": "backend,frontend"
- },
- "ExternalDirectoryObjectId": {
- "x-cipp-field-source": "backend"
- },
- "HiddenFromAddressListsEnabled": {
- "x-cipp-field-source": "backend"
- },
- "primarySmtpAddress": {
- "x-cipp-field-source": "backend,frontend"
- },
- "recipientType": {
- "x-cipp-field-source": "backend"
- },
- "recipientTypeDetails": {
- "x-cipp-field-source": "backend"
- },
- "ReplyTo": {
- "x-cipp-field-source": "backend"
- },
- "SMTPPort": {
- "x-cipp-field-source": "backend"
- },
- "SMTPServer": {
- "x-cipp-field-source": "backend"
- },
- "Tenant": {
- "x-cipp-field-source": "frontend"
- },
- "WhenCreated": {
- "x-cipp-field-source": "backend,frontend"
- }
- }
- }
- }
- }
- }
- },
- "401": {
- "description": "Unauthorized - invalid or missing bearer token"
- },
- "403": {
- "description": "Forbidden - caller lacks the required RBAC role"
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
},
- "500": {
- "description": "Internal server error"
- }
- },
- "security": [
{
- "bearerAuth": []
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
}
- ],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ ]
}
},
"/api/ListInactiveAccounts": {
@@ -53477,7 +77467,25 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.Read"
+ "x-cipp-role": "Endpoint.MEM.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/operationApprovalRequests",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementRBAC.Read.All",
+ "DeviceManagementRBAC.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntuneApprovalRequests"
+ ]
+ }
+ ]
}
},
"/api/ListIntuneIntents": {
@@ -53557,7 +77565,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.Read"
+ "x-cipp-role": "Endpoint.MEM.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/Intents",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntuneIntents"
+ ]
+ }
+ ]
}
},
"/api/ListIntunePolicy": {
@@ -53664,7 +77688,129 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.Read"
+ "x-cipp-role": "Endpoint.MEM.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicies/{id}/settings/{id}/settingDefinitions",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicies/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues/{id}/presentationValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyDefinitions/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntunePolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListIntunePolicy"
+ ]
+ }
+ ]
}
},
"/api/ListIntuneReusableSettings": {
@@ -53908,7 +78054,87 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.Read"
+ "x-cipp-role": "Endpoint.MEM.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicies",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntuneScript"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceHealthScripts",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementScripts.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntuneScript"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceManagementScripts",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementScripts.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementScripts.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntuneScript"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceShellScripts",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementScripts.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListIntuneScript"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListIntuneScript"
+ ]
+ }
+ ]
}
},
"/api/ListIntuneTemplates": {
@@ -54177,7 +78403,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListJITAdmin": {
@@ -54216,7 +78516,62 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Role.Read"
+ "x-cipp-role": "Identity.Role.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/memberOf/microsoft.graph.directoryRole",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.ReadBasic.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadBasic.All"
+ ],
+ "via": [
+ "Invoke-ListJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/memberOf",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.ReadBasic.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadBasic.All"
+ ],
+ "via": [
+ "Invoke-ListJITAdmin"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListJITAdmin"
+ ]
+ }
+ ]
}
},
"/api/ListJITAdminRequests": {
@@ -54948,7 +79303,118 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Directory.Read"
+ "x-cipp-role": "Tenant.Directory.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /reports/getM365AppUserDetail(period='D180')",
+ "type": "Delegated",
+ "least": [
+ "Reports.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPLicenseRecommendation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /reports/getOffice365ActiveUserDetail(period='D180')",
+ "type": "Delegated",
+ "least": [
+ "Reports.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPLicenseRecommendation"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseRecommendation"
+ ]
+ }
+ ]
}
},
"/api/ListLicenses": {
@@ -55022,7 +79488,77 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Directory.Read"
+ "x-cipp-role": "Tenant.Directory.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ }
+ ]
}
},
"/api/ListLicensesReport": {
@@ -55120,7 +79656,77 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Directory.Read"
+ "x-cipp-role": "Tenant.Directory.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ }
+ ]
}
},
"/api/ListLogs": {
@@ -55514,7 +80120,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListMailboxes": {
@@ -55696,91 +80376,239 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
- }
- },
- "/api/ListMailboxForwarding": {
- "get": {
- "summary": "ListMailboxForwarding",
- "operationId": "ListMailboxForwarding",
- "tags": [
- "Email-Exchange > Reports"
- ],
- "description": "Lists mailbox forwarding rules and configurations for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.",
- "parameters": [
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
+ }
+ },
+ "/api/ListMailboxForwarding": {
+ "get": {
+ "summary": "ListMailboxForwarding",
+ "operationId": "ListMailboxForwarding",
+ "tags": [
+ "Email-Exchange > Reports"
+ ],
+ "description": "Lists mailbox forwarding rules and configurations for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.",
+ "parameters": [
+ {
+ "$ref": "#/components/parameters/tenantFilter"
+ },
+ {
+ "name": "UseReportDB",
+ "in": "query",
+ "description": "Serve from the reporting database cache instead of live Graph. Much faster, especially for AllTenants.",
+ "required": false,
+ "schema": {
+ "type": "boolean"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "Success",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "object",
+ "description": "Derived from the fields the endpoint selects onto each record. The response may carry more; these are the ones known to exist.",
+ "properties": {
+ "DeliverToMailboxAndForward": {
+ "x-cipp-field-source": "backend"
+ },
+ "DisplayName": {
+ "x-cipp-field-source": "backend"
+ },
+ "ForwardingSmtpAddress": {
+ "x-cipp-field-source": "backend"
+ },
+ "ForwardingType": {
+ "x-cipp-field-source": "backend"
+ },
+ "ForwardTo": {
+ "x-cipp-field-source": "backend"
+ },
+ "InternalForwardingAddress": {
+ "x-cipp-field-source": "backend"
+ },
+ "PrimarySmtpAddress": {
+ "x-cipp-field-source": "backend"
+ },
+ "RecipientTypeDetails": {
+ "x-cipp-field-source": "backend"
+ },
+ "UPN": {
+ "x-cipp-field-source": "backend"
+ }
+ }
+ }
+ }
+ }
+ }
+ },
+ "401": {
+ "description": "Unauthorized - invalid or missing bearer token"
+ },
+ "403": {
+ "description": "Forbidden - caller lacks the required RBAC role"
+ },
+ "500": {
+ "description": "Internal server error"
+ }
+ },
+ "security": [
+ {
+ "bearerAuth": []
+ }
+ ],
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
{
- "$ref": "#/components/parameters/tenantFilter"
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
},
{
- "name": "UseReportDB",
- "in": "query",
- "description": "Serve from the reporting database cache instead of live Graph. Much faster, especially for AllTenants.",
- "required": false,
- "schema": {
- "type": "boolean"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "Success",
- "content": {
- "application/json": {
- "schema": {
- "type": "array",
- "items": {
- "type": "object",
- "description": "Derived from the fields the endpoint selects onto each record. The response may carry more; these are the ones known to exist.",
- "properties": {
- "DeliverToMailboxAndForward": {
- "x-cipp-field-source": "backend"
- },
- "DisplayName": {
- "x-cipp-field-source": "backend"
- },
- "ForwardingSmtpAddress": {
- "x-cipp-field-source": "backend"
- },
- "ForwardingType": {
- "x-cipp-field-source": "backend"
- },
- "ForwardTo": {
- "x-cipp-field-source": "backend"
- },
- "InternalForwardingAddress": {
- "x-cipp-field-source": "backend"
- },
- "PrimarySmtpAddress": {
- "x-cipp-field-source": "backend"
- },
- "RecipientTypeDetails": {
- "x-cipp-field-source": "backend"
- },
- "UPN": {
- "x-cipp-field-source": "backend"
- }
- }
- }
- }
- }
- }
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
},
- "401": {
- "description": "Unauthorized - invalid or missing bearer token"
- },
- "403": {
- "description": "Forbidden - caller lacks the required RBAC role"
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
},
- "500": {
- "description": "Internal server error"
- }
- },
- "security": [
{
- "bearerAuth": []
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
}
- ],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ ]
}
},
"/api/ListMailboxMobileDevices": {
@@ -56049,7 +80877,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListMailboxRules": {
@@ -56238,7 +81140,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListMailQuarantine": {
@@ -56368,7 +81344,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListMailQuarantineMessage": {
@@ -56422,7 +81472,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListMailQuarantineMessageDetails": {
@@ -56543,7 +81667,95 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /security/collaboration/analyzedEmails",
+ "type": "Application",
+ "least": [
+ "SecurityAnalyzedMessage.Read.All"
+ ],
+ "higher": [
+ "SecurityAnalyzedMessage.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListMailQuarantineMessageDetails"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListMailQuarantineMessageHeader": {
@@ -56597,7 +81809,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListMalwareFilters": {
@@ -56690,7 +81976,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListMDEOnboarding": {
@@ -56787,7 +82147,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.Defender.Read"
+ "x-cipp-role": "Security.Defender.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListMDEOnboarding"
+ ]
+ }
+ ]
}
},
"/api/ListMessageCenterMessages": {
@@ -56911,7 +82287,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.Read"
+ "x-cipp-role": "Tenant.Administration.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /admin/serviceAnnouncement/messages",
+ "type": "Delegated",
+ "least": [
+ "ServiceMessage.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListMessageCenterMessages"
+ ]
+ }
+ ]
}
},
"/api/ListMessageTrace": {
@@ -57033,7 +82423,135 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /admin/exchange/tracing/messageTraces/{id}/getDetailsByRecipient(recipientAddress='{id}')",
+ "type": "Application",
+ "least": [
+ "ExchangeMessageTrace.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListMessageTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /admin/exchange/tracing/messageTraces",
+ "type": "Application",
+ "least": [
+ "ExchangeMessageTrace.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListMessageTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='8bd644d1-64a1-4d4b-ae52-2e0cbf64e373')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListMessageTrace"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListMessageTrace"
+ ]
+ }
+ ]
}
},
"/api/ListMFAUsers": {
@@ -57171,7 +82689,130 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}/members",
+ "type": "Delegated",
+ "least": [
+ "GroupMember.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPMFAState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups/{id}",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group-XTenantIdentitySync.Read.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPMFAState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPMFAState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/identitySecurityDefaultsEnforcementPolicy",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPMFAState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /reports/authenticationMethods/userRegistrationDetails",
+ "type": "Application",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPMFAState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignments",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPMFAState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleDefinitions",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPMFAState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPMFAState"
+ ]
+ }
+ ]
}
},
"/api/ListNamedLocations": {
@@ -57248,7 +82889,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.Read"
+ "x-cipp-role": "Tenant.ConditionalAccess.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/namedLocations",
+ "type": "Delegated",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListNamedLocations"
+ ]
+ }
+ ]
}
},
"/api/ListNewUserDefaults": {
@@ -57579,7 +83234,40 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Application.Read"
+ "x-cipp-role": "Tenant.Application.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "DelegatedPermissionGrant.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListOAuthApps"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListOAuthApps"
+ ]
+ }
+ ]
}
},
"/api/ListObjectHistory": {
@@ -57692,7 +83380,95 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.AuditLog.Read"
+ "x-cipp-role": "Identity.AuditLog.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/directoryAudits",
+ "type": "Delegated",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-ListObjectHistory"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListOffboardingProgress": {
@@ -57856,7 +83632,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListOrg": {
@@ -58021,7 +83871,26 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.Read"
+ "x-cipp-role": "CIPP.Core.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Organization.Read.All",
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListOrg"
+ ]
+ }
+ ]
}
},
"/api/ListPartnerRelationships": {
@@ -58072,7 +83941,89 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Relationship.Read"
+ "x-cipp-role": "Tenant.Relationship.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/subscriptions",
+ "type": "Application",
+ "least": [
+ "Organization.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Application",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/findTenantInformationByTenantId(tenantId='{id}')",
+ "type": "Application",
+ "least": [
+ "CrossTenantInformation.ReadBasic.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-GraphRequestList"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPLicenseOverview"
+ ]
+ }
+ ]
}
},
"/api/ListPartnerTenantInfo": {
@@ -58113,104 +84064,160 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.Read",
- "x-cipp-any-tenant": true
- }
- },
- "/api/ListPendingWebhooks": {
- "get": {
- "summary": "ListPendingWebhooks",
- "operationId": "ListPendingWebhooks",
- "tags": [
- "Tenant > Administration > Alerts"
- ],
- "description": "Lists pending incoming webhook events that have not yet been processed by CIPP.",
- "responses": {
- "200": {
- "description": "Success",
- "content": {
- "application/json": {
- "schema": {
- "$ref": "#/components/schemas/StandardResults"
- }
- }
- }
- },
- "401": {
- "description": "Unauthorized - invalid or missing bearer token"
- },
- "403": {
- "description": "Forbidden - caller lacks the required RBAC role"
- }
- },
- "security": [
- {
- "bearerAuth": []
- }
- ],
- "x-cipp-role": "CIPP.Alert.Read"
- }
- },
- "/api/ListPerUserMFA": {
- "get": {
- "summary": "ListPerUserMFA",
- "operationId": "ListPerUserMFA",
- "tags": [
- "Identity > Administration > Users"
- ],
- "description": "Lists per-user MFA state (enabled, enforced, disabled) for users in a tenant via the legacy MFA management API.",
- "parameters": [
- {
- "name": "allUsers",
- "in": "query",
- "required": false,
- "schema": {
- "type": "string"
- }
- },
- {
- "$ref": "#/components/parameters/tenantFilter"
- },
- {
- "name": "userId",
- "in": "query",
- "required": false,
- "schema": {
- "type": "string"
- }
- }
- ],
- "responses": {
- "200": {
- "description": "Success",
- "content": {
- "application/json": {
- "schema": {
- "type": "array",
- "items": {
- "type": "object",
- "description": "Not described statically: this endpoint returns the upstream response as-is, so its fields are determined by the upstream API rather than by CIPP. Call the endpoint to see the actual shape, or add a response schema in backend/Config/openapi-overrides."
- }
- }
- }
- }
- },
- "401": {
- "description": "Unauthorized - invalid or missing bearer token"
- },
- "403": {
- "description": "Forbidden - caller lacks the required RBAC role"
- },
- "500": {
- "description": "Internal server error"
- }
- },
- "security": [
- {
- "bearerAuth": []
+ "x-cipp-role": "CIPP.Core.Read",
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Organization.Read.All",
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippPartnerTenantInfo"
+ ]
+ }
+ ]
+ }
+ },
+ "/api/ListPendingWebhooks": {
+ "get": {
+ "summary": "ListPendingWebhooks",
+ "operationId": "ListPendingWebhooks",
+ "tags": [
+ "Tenant > Administration > Alerts"
+ ],
+ "description": "Lists pending incoming webhook events that have not yet been processed by CIPP.",
+ "responses": {
+ "200": {
+ "description": "Success",
+ "content": {
+ "application/json": {
+ "schema": {
+ "$ref": "#/components/schemas/StandardResults"
+ }
+ }
+ }
+ },
+ "401": {
+ "description": "Unauthorized - invalid or missing bearer token"
+ },
+ "403": {
+ "description": "Forbidden - caller lacks the required RBAC role"
+ }
+ },
+ "security": [
+ {
+ "bearerAuth": []
+ }
+ ],
+ "x-cipp-role": "CIPP.Alert.Read"
+ }
+ },
+ "/api/ListPerUserMFA": {
+ "get": {
+ "summary": "ListPerUserMFA",
+ "operationId": "ListPerUserMFA",
+ "tags": [
+ "Identity > Administration > Users"
+ ],
+ "description": "Lists per-user MFA state (enabled, enforced, disabled) for users in a tenant via the legacy MFA management API.",
+ "parameters": [
+ {
+ "name": "allUsers",
+ "in": "query",
+ "required": false,
+ "schema": {
+ "type": "string"
+ }
+ },
+ {
+ "$ref": "#/components/parameters/tenantFilter"
+ },
+ {
+ "name": "userId",
+ "in": "query",
+ "required": false,
+ "schema": {
+ "type": "string"
+ }
+ }
+ ],
+ "responses": {
+ "200": {
+ "description": "Success",
+ "content": {
+ "application/json": {
+ "schema": {
+ "type": "array",
+ "items": {
+ "type": "object",
+ "description": "Not described statically: this endpoint returns the upstream response as-is, so its fields are determined by the upstream API rather than by CIPP. Call the endpoint to see the actual shape, or add a response schema in backend/Config/openapi-overrides."
+ }
+ }
+ }
+ }
+ },
+ "401": {
+ "description": "Unauthorized - invalid or missing bearer token"
+ },
+ "403": {
+ "description": "Forbidden - caller lacks the required RBAC role"
+ },
+ "500": {
+ "description": "Internal server error"
+ }
+ },
+ "security": [
+ {
+ "bearerAuth": []
+ }
+ ],
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPerUserMFA"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPerUserMFA"
+ ]
}
- ],
- "x-cipp-role": "Identity.User.Read"
+ ]
}
},
"/api/ListPIMRoles": {
@@ -58353,7 +84360,147 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Role.Read"
+ "x-cipp-role": "Identity.Role.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/administrativeUnits/{id}",
+ "type": "Delegated",
+ "least": [
+ "AdministrativeUnit.Read.All"
+ ],
+ "higher": [
+ "AdministrativeUnit.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directoryRoles",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "RoleManagement.ReadWrite.Directory",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListPIMRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/roleManagementPolicyAssignments",
+ "type": "Application",
+ "least": [
+ "RoleManagement.Read.All"
+ ],
+ "higher": [
+ "RoleManagementPolicy.ReadWrite.AzureADGroup"
+ ],
+ "via": [
+ "Get-CIPPPIMRolePolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignments",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignmentScheduleInstances",
+ "type": "Application",
+ "least": [
+ "RoleAssignmentSchedule.Read.Directory"
+ ],
+ "higher": [
+ "RoleAssignmentSchedule.ReadWrite.Directory",
+ "RoleManagement.Read.All",
+ "RoleManagement.Read.Directory",
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleDefinitions",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "RoleManagement.Read.All",
+ "RoleManagement.ReadWrite.Exchange"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleEligibilitySchedules",
+ "type": "Application",
+ "least": [
+ "RoleEligibilitySchedule.Read.Directory"
+ ],
+ "higher": [
+ "RoleEligibilitySchedule.ReadWrite.Directory",
+ "RoleManagement.Read.All",
+ "RoleManagement.Read.Directory",
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ }
+ ]
}
},
"/api/ListPIMRoleSettingsTemplates": {
@@ -58683,7 +84830,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListReportBuilderTemplates": {
@@ -58895,7 +85116,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListRetentionCompliancePolicy": {
@@ -58973,7 +85268,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.RetentionCompliancePolicy.Read"
+ "x-cipp-role": "Security.RetentionCompliancePolicy.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListRetentionCompliancePolicyTemplates": {
@@ -59167,7 +85536,131 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Role.Read"
+ "x-cipp-role": "Identity.Role.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/administrativeUnits/{id}",
+ "type": "Delegated",
+ "least": [
+ "AdministrativeUnit.Read.All"
+ ],
+ "higher": [
+ "AdministrativeUnit.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/roleManagementPolicyAssignments",
+ "type": "Application",
+ "least": [
+ "RoleManagement.Read.All"
+ ],
+ "higher": [
+ "RoleManagementPolicy.ReadWrite.AzureADGroup"
+ ],
+ "via": [
+ "Get-CIPPPIMRolePolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignments",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignmentScheduleInstances",
+ "type": "Application",
+ "least": [
+ "RoleAssignmentSchedule.Read.Directory"
+ ],
+ "higher": [
+ "RoleAssignmentSchedule.ReadWrite.Directory",
+ "RoleManagement.Read.All",
+ "RoleManagement.Read.Directory",
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleDefinitions",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "RoleManagement.Read.All",
+ "RoleManagement.ReadWrite.Exchange"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleEligibilitySchedules",
+ "type": "Application",
+ "least": [
+ "RoleEligibilitySchedule.Read.Directory"
+ ],
+ "higher": [
+ "RoleEligibilitySchedule.ReadWrite.Directory",
+ "RoleManagement.Read.All",
+ "RoleManagement.Read.Directory",
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ }
+ ]
}
},
"/api/ListRoles": {
@@ -59242,7 +85735,65 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.Role.Read"
+ "x-cipp-role": "Identity.Role.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directoryRoles",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "RoleManagement.ReadWrite.Directory",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignments",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleDefinitions",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListRoles"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListRoles"
+ ]
+ }
+ ]
}
},
"/api/ListRoomLists": {
@@ -59356,7 +85907,93 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Room.Read"
+ "x-cipp-role": "Exchange.Room.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListRoomLists"
+ ]
+ }
+ ]
}
},
"/api/ListRooms": {
@@ -59550,7 +86187,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Room.Read"
+ "x-cipp-role": "Exchange.Room.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListSafeAttachmentsFilters": {
@@ -59628,7 +86339,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListSafeLinksPolicy": {
@@ -59751,7 +86536,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SafeLinksPolicy.Read"
+ "x-cipp-role": "Security.SafeLinksPolicy.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListSafeLinksPolicyDetails": {
@@ -59809,7 +86668,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListSafeLinksPolicyTemplateDetails": {
@@ -60375,7 +87308,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitiveInfoType.Read"
+ "x-cipp-role": "Security.SensitiveInfoType.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListSensitiveInfoTypeRulePackage": {
@@ -60432,7 +87439,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitiveInfoType.Read"
+ "x-cipp-role": "Security.SensitiveInfoType.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListSensitiveInfoTypeTemplates": {
@@ -60619,7 +87700,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitivityLabel.Read"
+ "x-cipp-role": "Security.SensitivityLabel.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListSensitivityLabelTemplates": {
@@ -60811,7 +87966,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.Read"
+ "x-cipp-role": "Tenant.Administration.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /admin/serviceAnnouncement/issues",
+ "type": "Delegated",
+ "least": [
+ "ServiceHealth.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListServiceHealth"
+ ]
+ }
+ ]
}
},
"/api/ListServiceHealthIssues": {
@@ -60940,7 +88109,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.Read"
+ "x-cipp-role": "Tenant.Administration.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /admin/serviceAnnouncement/issues",
+ "type": "Delegated",
+ "least": [
+ "ServiceHealth.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListServiceHealthIssues"
+ ]
+ }
+ ]
}
},
"/api/ListServiceHealthOverviews": {
@@ -61012,7 +88195,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.Read"
+ "x-cipp-role": "Tenant.Administration.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /admin/serviceAnnouncement/healthOverviews",
+ "type": "Delegated",
+ "least": [
+ "ServiceHealth.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListServiceHealthOverviews"
+ ]
+ }
+ ]
}
},
"/api/ListShadowAI": {
@@ -61055,7 +88252,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.AI.Read"
+ "x-cipp-role": "Tenant.AI.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Delegated",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPShadowAIReport"
+ ]
+ }
+ ]
}
},
"/api/ListSharedMailboxAccountEnabled": {
@@ -61147,7 +88358,26 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSharedMailboxAccountEnabled"
+ ]
+ }
+ ]
}
},
"/api/ListSharedMailboxStatistics": {
@@ -61193,7 +88423,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListSharepointAdminUrl": {
@@ -61253,7 +88557,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.Read"
+ "x-cipp-role": "CIPP.Core.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSharePointExternalUsers": {
@@ -61295,7 +88615,53 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/getAllSites",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSharePointExternalUsers"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSharePointExternalUsers"
+ ]
+ }
+ ]
}
},
"/api/ListSharePointPermissions": {
@@ -61412,7 +88778,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Admin.Read"
+ "x-cipp-role": "Sharepoint.Admin.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSharepointSettings": {
@@ -61577,7 +88959,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Admin.Read"
+ "x-cipp-role": "Sharepoint.Admin.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /admin/sharepoint/settings",
+ "type": "Application",
+ "least": [
+ "SharePointTenantSettings.Read.All"
+ ],
+ "higher": [
+ "SharePointTenantSettings.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSharepointSettings"
+ ]
+ }
+ ]
}
},
"/api/ListSharePointSharing": {
@@ -62125,7 +89523,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.AuditLog.Read"
+ "x-cipp-role": "Identity.AuditLog.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Delegated",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListSignIns"
+ ]
+ }
+ ]
}
},
"/api/ListSiteActivity": {
@@ -62263,7 +89675,79 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}:{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteBrowser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/lists",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteBrowser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteBrowser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/getAllSites",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteBrowser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSiteBrowserLibraryCopy": {
@@ -62313,7 +89797,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSiteBrowserPermissions": {
@@ -62385,7 +89885,49 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/permissions",
+ "type": "Application",
+ "least": [
+ "Sites.FullControl.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListSiteBrowserPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteBrowserPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSiteLibraries": {
@@ -62446,7 +89988,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/lists",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteLibraries"
+ ]
+ }
+ ]
}
},
"/api/ListSiteMembers": {
@@ -62512,7 +90070,65 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/lists/{id}/items",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteMembers"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/lists",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteMembers"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteMembers"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSitePermissions": {
@@ -62573,7 +90189,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSiteProperties": {
@@ -62626,7 +90258,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSiteRecycleBin": {
@@ -62679,7 +90327,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.SiteRecycleBin.Read"
+ "x-cipp-role": "Sharepoint.SiteRecycleBin.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSiteRecycleBinSummary": {
@@ -62740,7 +90404,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.SiteRecycleBin.Read"
+ "x-cipp-role": "Sharepoint.SiteRecycleBin.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSiteRoleDefinitions": {
@@ -62801,7 +90481,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSites": {
@@ -62930,7 +90626,66 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}:{id}",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPSharePointSiteUsageRows"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/{id}/lists",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPSharePointSiteUsageRows"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/getAllSites",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPSharePointSiteUsageRows",
+ "Invoke-ListSites"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSiteStorageComposition": {
@@ -62983,7 +90738,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListSiteUserAccess": {
@@ -63055,7 +90826,58 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/transitiveMemberOf",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadBasic.All",
+ "GroupMember.Read.All",
+ "GroupMember.ReadBasic.All"
+ ],
+ "via": [
+ "Invoke-ListSiteUserAccess"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListSiteUserAccess"
+ ]
+ }
+ ]
}
},
"/api/ListSnoozedAlerts": {
@@ -63250,7 +91072,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListSpamFilterTemplates": {
@@ -63409,7 +91305,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Sharepoint.Site.Read"
+ "x-cipp-role": "Sharepoint.Site.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ }
+ ]
}
},
"/api/ListStandards": {
@@ -63939,7 +91851,110 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Teams.Group.Read"
+ "x-cipp-role": "Teams.Group.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListTeams"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /teams/{id}/Channels",
+ "type": "Application",
+ "least": [
+ "ChannelSettings.Read.Group"
+ ],
+ "higher": [
+ "Channel.ReadBasic.All",
+ "ChannelSettings.Read.All",
+ "ChannelSettings.ReadWrite.All",
+ "ChannelSettings.ReadWrite.Group",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListTeams"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /teams/{id}/installedApps",
+ "type": "Application",
+ "least": [
+ "TeamsAppInstallation.Read.Group"
+ ],
+ "higher": [
+ "TeamsAppInstallation.ReadWriteSelfForTeam.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "TeamsAppInstallation.ManageSelectedForTeam.All",
+ "TeamsAppInstallation.Read.All",
+ "TeamsAppInstallation.ReadForTeam.All",
+ "TeamsAppInstallation.ReadWriteAndConsentForTeam.All",
+ "TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All",
+ "TeamsAppInstallation.ReadWriteForTeam.All"
+ ],
+ "via": [
+ "Invoke-ListTeams"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /teams/{id}/Members",
+ "type": "Application",
+ "least": [
+ "TeamMember.Read.Group"
+ ],
+ "higher": [
+ "TeamMember.ReadWrite.All",
+ "TeamMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListTeams"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /teams/{id}",
+ "type": "Application",
+ "least": [
+ "TeamSettings.Read.Group"
+ ],
+ "higher": [
+ "TeamSettings.ReadWrite.Group",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "Team.ReadBasic.All",
+ "TeamSettings.Read.All",
+ "TeamSettings.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListTeams"
+ ]
+ }
+ ]
}
},
"/api/ListTeamsActivity": {
@@ -64600,7 +92615,26 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Teams.Voice.Read"
+ "x-cipp-role": "Teams.Voice.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListTeamsVoice"
+ ]
+ }
+ ]
}
},
"/api/ListTenantAlignment": {
@@ -65075,7 +93109,26 @@
"bearerAuth": []
}
],
- "x-cipp-role": "CIPP.Core.Read"
+ "x-cipp-role": "CIPP.Core.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /organization",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "Organization.Read.All",
+ "Directory.Read.All",
+ "Organization.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListTenantDetails"
+ ]
+ }
+ ]
}
},
"/api/ListTenantDrift": {
@@ -65124,6 +93177,179 @@
"x-cipp-role": "Tenant.Standards.Read",
"x-cipp-reads-via": [
"Get-CIPPDrift"
+ ],
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /deviceAppManagement/managedAppPolicies",
+ "type": "Application",
+ "least": [
+ "DeviceManagementApps.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/configurationPolicies",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All",
+ "DeviceManagementEndpointSecurity.Read.All",
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceCompliancePolicies",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/deviceConfigurations",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/groupPolicyConfigurations",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/hardwareConfigurations",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsDriverUpdateProfiles",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsFeatureUpdateProfiles",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsQualityUpdatePolicies",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsQualityUpdateProfiles",
+ "type": "Application",
+ "least": [
+ "DeviceManagementConfiguration.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPDrift"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ }
]
}
},
@@ -65889,7 +94115,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.TransportRule.Read"
+ "x-cipp-role": "Exchange.TransportRule.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListTransportRulesTemplates": {
@@ -66046,7 +94346,164 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /directory/administrativeUnits/{id}",
+ "type": "Delegated",
+ "least": [
+ "AdministrativeUnit.Read.All"
+ ],
+ "higher": [
+ "AdministrativeUnit.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /directoryRoles/roleTemplateId=62e90394-69f5-4237-9190-012177145e10/members/$count",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "RoleManagement.ReadWrite.Directory",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserCounts"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /policies/roleManagementPolicyAssignments",
+ "type": "Application",
+ "least": [
+ "RoleManagement.Read.All"
+ ],
+ "higher": [
+ "RoleManagementPolicy.ReadWrite.AzureADGroup"
+ ],
+ "via": [
+ "Get-CIPPPIMRolePolicies"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignments",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "EntitlementManagement.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleAssignmentScheduleInstances",
+ "type": "Application",
+ "least": [
+ "RoleAssignmentSchedule.Read.Directory"
+ ],
+ "higher": [
+ "RoleAssignmentSchedule.ReadWrite.Directory",
+ "RoleManagement.Read.All",
+ "RoleManagement.Read.Directory",
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleDefinitions",
+ "type": "Delegated",
+ "least": [
+ "RoleManagement.Read.Directory"
+ ],
+ "higher": [
+ "RoleManagement.Read.All",
+ "RoleManagement.ReadWrite.Exchange"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /roleManagement/directory/roleEligibilitySchedules",
+ "type": "Application",
+ "least": [
+ "RoleEligibilitySchedule.Read.Directory"
+ ],
+ "higher": [
+ "RoleEligibilitySchedule.ReadWrite.Directory",
+ "RoleManagement.Read.All",
+ "RoleManagement.Read.Directory",
+ "RoleManagement.ReadWrite.Directory"
+ ],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /subscribedSkus",
+ "type": "Delegated",
+ "least": [
+ "LicenseAssignment.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Organization.Read.All",
+ "Organization.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CIPPTenantCapabilities"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/$count",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserCounts"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /directoryObjects/getByIds",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Get-CIPPPIMRoleAssignments"
+ ]
+ }
+ ]
}
},
"/api/ListUserDevices": {
@@ -66152,7 +94609,40 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/managedDevices",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserDevices"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/ownedDevices",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "User.Read.All",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserDevices"
+ ]
+ }
+ ]
}
},
"/api/ListUserGroups": {
@@ -66238,7 +94728,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/memberOf/$/microsoft.graph.group",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListUserGroups"
+ ]
+ }
+ ]
}
},
"/api/ListUserMailboxDetails": {
@@ -66397,7 +94901,41 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /contacts",
+ "type": "Delegated",
+ "least": [
+ "OrgContact.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserMailboxDetails"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserMailboxDetails"
+ ]
+ }
+ ]
}
},
"/api/ListUserMailboxRules": {
@@ -66459,7 +94997,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListUserOneDriveShortcuts": {
@@ -66882,7 +95494,53 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive/root/children",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserOneDriveShortcuts"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive/special/shortcuts/children",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserOneDriveShortcuts"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserOneDriveShortcuts"
+ ]
+ }
+ ]
}
},
"/api/ListUserPhoto": {
@@ -66943,7 +95601,27 @@
}
],
"x-cipp-role": "Identity.User.Read",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/photo/$value",
+ "type": "Delegated",
+ "least": [
+ "User.Read"
+ ],
+ "higher": [
+ "ProfilePhoto.ReadWrite.All",
+ "User.ReadBasic.All",
+ "User.Read.All",
+ "User.ReadWrite",
+ "User.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserPhoto"
+ ]
+ }
+ ]
}
},
"/api/ListUserReportedMessage": {
@@ -67345,7 +96023,108 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/messages/{id}/$value",
+ "type": "Delegated",
+ "least": [
+ "Mail.Read"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListUserReportedMessage"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/messages",
+ "type": "Delegated",
+ "least": [
+ "Mail.ReadBasic"
+ ],
+ "higher": [
+ "Mail.ReadWrite",
+ "Mail.Read"
+ ],
+ "via": [
+ "Invoke-ListUserReportedMessage"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListUserReportedMessages": {
@@ -67511,7 +96290,95 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.Read"
+ "x-cipp-role": "Exchange.SpamFilter.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /security/threatSubmission/emailThreats",
+ "type": "Application",
+ "least": [
+ "ThreatSubmission.Read.All"
+ ],
+ "higher": [
+ "ThreatSubmission.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUserReportedMessages"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListUsers": {
@@ -67992,7 +96859,99 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUsers"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListUsersAndGroups": {
@@ -68034,7 +96993,46 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Directory.Read"
+ "x-cipp-role": "Tenant.Directory.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Delegated",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Invoke-ListUsersAndGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-ListUsersAndGroups"
+ ]
+ }
+ ]
}
},
"/api/ListUserSettings": {
@@ -68465,7 +97463,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.Read"
+ "x-cipp-role": "Identity.User.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /auditLogs/signIns",
+ "type": "Delegated",
+ "least": [
+ "AuditLog.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-ListUserSigninLogs"
+ ]
+ }
+ ]
}
},
"/api/ListUserTrustedBlockedSenders": {
@@ -68527,7 +97539,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.Read"
+ "x-cipp-role": "Exchange.Mailbox.Read",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/ListWebhookAlert": {
@@ -68842,7 +97928,53 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-PatchUser"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PUT /users/{id}/manager/$ref",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "AgentIdUser.ReadWrite.All",
+ "AgentIdUser.ReadWrite.IdentityParentedBy",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPManager"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PUT /users/{id}/sponsors/$ref",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPSponsor"
+ ]
+ }
+ ]
}
},
"/api/PublicMcpRegister": {
@@ -69124,7 +98256,42 @@
}
],
"x-cipp-role": "Public",
- "x-cipp-any-tenant": true
+ "x-cipp-any-tenant": true,
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /applications(appId='{id}')",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-PublicMcpRegister"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /applications",
+ "type": "Application",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.OwnedBy",
+ "Application.ReadWrite.All",
+ "Directory.Read.All"
+ ],
+ "via": [
+ "Invoke-PublicMcpRegister"
+ ]
+ }
+ ]
}
},
"/api/PublicPhishingCheck": {
@@ -69328,7 +98495,643 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Public"
+ "x-cipp-role": "Public",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /devices/{id}",
+ "type": "Delegated",
+ "least": [
+ "Directory.AccessAsUser.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDeviceState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /drives/{id}/items/{id}/permissions/{id}",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPBecSharingLinks"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Remove-CIPPBecTargetedCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/managedDevices",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementManagedDevices.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementManagedDevices.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-NinjaOneDeviceWebhook"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /devices/{id}",
+ "type": "Delegated",
+ "least": [
+ "Device.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-NinjaOneDeviceWebhook"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /groups",
+ "type": "Application",
+ "least": [
+ "Group.ReadBasic.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ManageProtection.All",
+ "Group.Read.All",
+ "Group.ReadWrite.All",
+ "GroupMember.Read.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [],
+ "via": [
+ "New-CIPPBecTargetedCAPolicy",
+ "Remove-CIPPBecTargetedCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /me",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals(appId='{id}')",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/appRoleAssignments",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}/oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "Directory.Read.All"
+ ],
+ "higher": [
+ "DelegatedPermissionGrant.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals/{id}",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Application.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission",
+ "Get-CippSamPermissions"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /shares/{id}/driveItem",
+ "type": "Application",
+ "least": [
+ "Files.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Remove-CIPPBecSharingLinks"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /sites/root",
+ "type": "Application",
+ "least": [
+ "Sites.Read.All"
+ ],
+ "higher": [
+ "Sites.ReadWrite.All"
+ ],
+ "via": [
+ "Get-SharePointAdminLink"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue",
+ "Set-CIPPGDAPInviteGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /tenantRelationships/delegatedAdminRelationships",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.Read.All"
+ ],
+ "higher": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPGDAPInviteGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/authentication/methods",
+ "type": "Application",
+ "least": [
+ "UserAuthenticationMethod.Read.All"
+ ],
+ "higher": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPUserMFA"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}/drive",
+ "type": "Application",
+ "least": [
+ "Files.Read.All"
+ ],
+ "higher": [
+ "Files.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPOneDriveSharing"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Application",
+ "least": [
+ "User.Read.All"
+ ],
+ "higher": [
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPBecContainment",
+ "New-CippExtAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CippWebhookProcessing",
+ "Set-CIPPResetPassword",
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /devices/{id}",
+ "type": "Delegated",
+ "least": [
+ "Directory.AccessAsUser.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPDeviceState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /oauth2PermissionGrants/{id}",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /servicePrincipals/{id}",
+ "type": "Application",
+ "least": [
+ "Application.ReadWrite.OwnedBy"
+ ],
+ "higher": [
+ "AgentIdentity.ReadWrite.All",
+ "Application.ReadWrite.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-CIPPBecContainment"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Set-CIPPResetPassword",
+ "Set-CIPPSignInState"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups/{id}/members/$ref",
+ "type": "Application",
+ "least": [
+ "GroupMember.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Push-ExecOnboardTenantQueue"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /groups",
+ "type": "Application",
+ "least": [
+ "Group.Create"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "Group-PreferredDataLocation.ReadWrite.All",
+ "Group.ReadWrite.All"
+ ],
+ "via": [
+ "Test-CIPPGDAPGroupMappings"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /identity/conditionalAccess/policies",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "New-CIPPBecTargetedCAPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /me/sendMail",
+ "type": "Delegated",
+ "least": [
+ "Mail.Send"
+ ],
+ "higher": [],
+ "via": [
+ "Send-CIPPAlert"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /oauth2PermissionGrants",
+ "type": "Delegated",
+ "least": [
+ "DelegatedPermissionGrant.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals/{id}/appRoleAssignedTo",
+ "type": "Delegated",
+ "least": [
+ "Application.Read.All"
+ ],
+ "higher": [
+ "Directory.Read.All",
+ "Application.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /servicePrincipals",
+ "type": "Delegated",
+ "least": [
+ "Application.ReadWrite.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "Add-CIPPApplicationPermission",
+ "Add-CIPPDelegatedPermission"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments",
+ "type": "Delegated",
+ "least": [
+ "DelegatedAdminRelationship.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPGDAPInviteGroups"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/authentication/methods/28c10230-6103-485e-b985-444c60001490/resetPassword",
+ "type": "Delegated",
+ "least": [
+ "UserAuthenticationMethod.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPResetPassword"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /users/{id}/invalidateAllRefreshTokens",
+ "type": "Delegated",
+ "least": [
+ "User.RevokeSessions.All"
+ ],
+ "higher": [
+ "Directory.ReadWrite.All",
+ "User.ReadWrite"
+ ],
+ "via": [
+ "Revoke-CIPPSessions"
+ ]
+ }
+ ]
}
},
"/api/RemoveAPDevice": {
@@ -69405,7 +99208,33 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/windowsAutopilotDeviceIdentities/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-RemoveAPDevice"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "POST /deviceManagement/windowsAutopilotSettings/sync",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-RemoveAPDevice"
+ ]
+ }
+ ]
}
},
"/api/RemoveApp": {
@@ -69476,7 +99305,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Application.ReadWrite"
+ "x-cipp-role": "Endpoint.Application.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceAppManagement/mobileApps/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementApps.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Invoke-RemoveApp"
+ ]
+ }
+ ]
}
},
"/api/RemoveAppTemplate": {
@@ -69665,7 +99508,51 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.Autopilot.ReadWrite"
+ "x-cipp-role": "Endpoint.Autopilot.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPAutopilotProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Remove-CIPPAutopilotProfile"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementServiceConfig.Read.All"
+ ],
+ "higher": [
+ "DeviceManagementServiceConfig.ReadWrite.All",
+ "DeviceManagementConfiguration.Read.All",
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "via": [
+ "Remove-CIPPAutopilotProfile"
+ ]
+ }
+ ]
}
},
"/api/RemoveBaseline": {
@@ -69857,7 +99744,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite"
+ "x-cipp-role": "Tenant.ConditionalAccess.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /identity/conditionalAccess/policies/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.All"
+ ],
+ "higher": [
+ "Policy.ReadWrite.ConditionalAccess"
+ ],
+ "via": [
+ "Invoke-RemoveCAPolicy"
+ ]
+ }
+ ]
}
},
"/api/RemoveCATemplate": {
@@ -70112,7 +100015,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Contact.ReadWrite"
+ "x-cipp-role": "Exchange.Contact.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveContactTemplates": {
@@ -70398,7 +100375,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.DlpCompliancePolicy.ReadWrite"
+ "x-cipp-role": "Security.DlpCompliancePolicy.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveDlpCompliancePolicyTemplate": {
@@ -70546,7 +100597,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Connector.ReadWrite"
+ "x-cipp-role": "Exchange.Connector.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveExConnectorTemplate": {
@@ -70749,7 +100874,23 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Endpoint.MEM.ReadWrite"
+ "x-cipp-role": "Endpoint.MEM.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /deviceManagement/reusablePolicySettings/{id}",
+ "type": "Delegated",
+ "least": [
+ "DeviceManagementConfiguration.ReadWrite.All"
+ ],
+ "higher": [
+ "DeviceManagementEndpointSecurity.ReadWrite.All"
+ ],
+ "via": [
+ "Invoke-RemoveIntuneReusableSetting"
+ ]
+ }
+ ]
}
},
"/api/RemoveIntuneReusableSettingTemplate": {
@@ -71309,7 +101450,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Spamfilter.ReadWrite"
+ "x-cipp-role": "Exchange.Spamfilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveQueuedAlert": {
@@ -71522,7 +101737,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.RetentionCompliancePolicy.ReadWrite"
+ "x-cipp-role": "Security.RetentionCompliancePolicy.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveRetentionCompliancePolicyTemplate": {
@@ -71802,7 +102091,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitiveInfoType.ReadWrite"
+ "x-cipp-role": "Security.SensitiveInfoType.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveSensitiveInfoTypeTemplate": {
@@ -71942,7 +102305,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Security.SensitivityLabel.ReadWrite"
+ "x-cipp-role": "Security.SensitivityLabel.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveSensitivityLabelTemplate": {
@@ -72079,7 +102516,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Spamfilter.ReadWrite"
+ "x-cipp-role": "Exchange.Spamfilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveSpamfilterTemplate": {
@@ -72324,7 +102835,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.SpamFilter.ReadWrite"
+ "x-cipp-role": "Exchange.SpamFilter.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveTenantAllowBlockListTemplate": {
@@ -72555,7 +103140,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.TransportRule.ReadWrite"
+ "x-cipp-role": "Exchange.TransportRule.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveTransportRuleTemplate": {
@@ -72687,7 +103346,81 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Exchange.Mailbox.ReadWrite"
+ "x-cipp-role": "Exchange.Mailbox.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadBasic.All"
+ ],
+ "higher": [
+ "User.ReadWrite",
+ "User.Read.All",
+ "User.ReadWrite.All",
+ "Directory.Read.All",
+ "Directory.ReadWrite.All"
+ ],
+ "via": [
+ "New-ExoRequest"
+ ]
+ }
+ ]
}
},
"/api/RemoveUser": {
@@ -72769,7 +103502,21 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Identity.User.ReadWrite"
+ "x-cipp-role": "Identity.User.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "DELETE /users/{id}",
+ "type": "Delegated",
+ "least": [
+ "User.ReadWrite.All"
+ ],
+ "higher": [],
+ "via": [
+ "Remove-CIPPUser"
+ ]
+ }
+ ]
}
},
"/api/RemoveUserDefaultTemplate": {
@@ -73064,7 +103811,1280 @@
"bearerAuth": []
}
],
- "x-cipp-role": "Tenant.Administration.ReadWrite"
+ "x-cipp-role": "Tenant.Administration.ReadWrite",
+ "x-cipp-permissions": [
+ {
+ "api": "Graph",
+ "operation": "GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.Read.AuthenticationMethod"
+ ],
+ "higher": [
+ "Policy.Read.All",
+ "Policy.ReadWrite.AuthenticationMethod"
+ ],
+ "via": [
+ "Set-CIPPAuthenticationPolicy"
+ ]
+ },
+ {
+ "api": "Graph",
+ "operation": "PATCH /policies/authenticationmethodspolicy/authenticationMethodConfigurations/{id}",
+ "type": "Application",
+ "least": [
+ "Policy.ReadWrite.AuthenticationMethod"
+ ],
+ "higher": [],
+ "via": [
+ "Set-CIPPAuthenticationPolicy"
+ ]
+ }
+ ]
+ }
+ }
+ },
+ "x-cipp-permission-index": {
+ "Graph": {
+ "Application": {
+ "Application.Read.All": [
+ "AddCAPolicy",
+ "ExecAccessChecks",
+ "ExecAddMultiTenantApp",
+ "ExecAddTenant",
+ "ExecApiClient",
+ "ExecBECBulkCheck",
+ "ExecBECCheck",
+ "ExecCAExclusion",
+ "ExecCPVPermissions",
+ "ExecCreateAppTemplate",
+ "ExecCustomData",
+ "ExecSAMCertificate",
+ "ExecSSOSetup",
+ "ExecSendPush",
+ "ExecUpdateRefreshToken",
+ "ListConditionalAccessPolicies",
+ "PublicMcpRegister"
+ ],
+ "Application.ReadWrite.All": [
+ "ExecCustomData"
+ ],
+ "Application.ReadWrite.OwnedBy": [
+ "ExecApiClient",
+ "ExecBECRemediate",
+ "ExecCreateAppTemplate",
+ "ExecCustomData",
+ "ExecSSOSetup",
+ "ExecSendPush",
+ "ListAuditLogTest",
+ "PublicWebhooks"
+ ],
+ "AuditLog.Read.All": [
+ "ExecBECBulkCheck",
+ "ExecBECCheck",
+ "ExecBECIPReview",
+ "ListMFAUsers"
+ ],
+ "AuditLogsQuery.Read.All": [
+ "ExecAuditLogSearch",
+ "ListAuditLogSearches"
+ ],
+ "AuthenticationContext.Read.All": [
+ "AddCAPolicy",
+ "ExecCAExclusion"
+ ],
+ "AuthenticationContext.ReadWrite.All": [
+ "AddCAPolicy",
+ "ExecCAExclusion"
+ ],
+ "Channel.Create.Group": [
+ "ExecSharePointTemplate"
+ ],
+ "ChannelSettings.Read.Group": [
+ "ExecSharePointTemplate",
+ "ListTeams"
+ ],
+ "CrossTenantInformation.ReadBasic.All": [
+ "ExecGraphRequestProfile",
+ "ListGraphRequest",
+ "ListPartnerRelationships"
+ ],
+ "DeviceManagementApps.Read.All": [
+ "ExecStandardsRun",
+ "ListTenantDrift"
+ ],
+ "DeviceManagementConfiguration.Read.All": [
+ "ExecStandardsRun",
+ "ListGraphReports",
+ "ListTenantDrift"
+ ],
+ "DeviceManagementManagedDevices.Read.All": [
+ "ExecBECBulkCheck",
+ "ExecBECCheck"
+ ],
+ "DeviceManagementServiceConfig.Read.All": [
+ "ExecBECEvidenceExport",
+ "ExecGenerateReportBuilderReport",
+ "ExecGetBaselineWhatIfReportPdf",
+ "ExecGetBecReportPdf",
+ "ExecGetExecutiveReportPdf",
+ "ExecGetLicenseReportPdf",
+ "ExecGetMailFlowReportPdf",
+ "ExecGetPermissionsReportPdf",
+ "ExecGetReportBuilderPdf",
+ "ExecGetShadowAIReportPdf",
+ "ExecGetSharingReportPdf",
+ "ExecPreviewReportBuilderPdf"
+ ],
+ "DeviceManagementServiceConfig.ReadWrite.All": [
+ "AddDefenderDeployment"
+ ],
+ "Directory.Read.All": [
+ "ExecApiClient",
+ "ExecBECBulkCheck",
+ "ExecBECCheck",
+ "ExecCreateAppTemplate",
+ "ListCAPolicyCoverage",
+ "ListGroups"
+ ],
+ "Directory.ReadWrite.All": [
+ "ExecApiClient"
+ ],
+ "Domain.ReadWrite.All": [
+ "AddDomain",
+ "ExecDomainAction"
+ ],
+ "ExchangeMessageTrace.Read.All": [
+ "ExecTestMessage",
+ "ListMessageTrace"
+ ],
+ "Files.Read.All": [
+ "ExecBECRemediate",
+ "ExecMigrateOneDriveShortCuts",
+ "ExecOffboardUser",
+ "ExecOneDriveShortCut",
+ "ExecSetOneDriveSharing",
+ "ExecSharePointPerms",
+ "ExecSharePointTemplate",
+ "ExecSiteBrowserPermissions",
+ "ListAuditLogTest",
+ "ListUserOneDriveShortcuts",
+ "PublicWebhooks"
+ ],
+ "Files.ReadWrite.All": [
+ "ExecBECRemediate",
+ "ExecBulkRemoveSharingLinks",
+ "ExecMigrateOneDriveShortCuts",
+ "ExecOneDriveShortCut",
+ "ExecRemoveOneDriveShortCut",
+ "ExecRemoveSharingLink",
+ "ExecSharePointTemplate",
+ "ExecSiteBrowserLibraryCopy",
+ "ListAuditLogTest",
+ "PublicWebhooks"
+ ],
+ "Group.Create": [
+ "AddSite",
+ "AddSiteBulk",
+ "ExecAccessChecks",
+ "ExecAddGDAPRole",
+ "ExecGDAPAccessAssignment",
+ "ExecGDAPRepairRoleMappings",
+ "ExecGDAPRoleTemplate",
+ "ExecOnboardTenant",
+ "ExecSharePointTemplate",
+ "ListGDAPRoles",
+ "PublicWebhooks"
+ ],
+ "Group.ManageProtection.All": [
+ "EditGroup"
+ ],
+ "Group.Read.All": [
+ "ListCAPolicyCoverage",
+ "ListGroups"
+ ],
+ "Group.ReadBasic.All": [
+ "AddCAPolicy",
+ "ExecAccessChecks",
+ "ExecAddGDAPRole",
+ "ExecCAExclusion",
+ "ExecCombinedSetup",
+ "ExecCustomData",
+ "ExecExtensionMapping",
+ "ExecExtensionSync",
+ "ExecExtensionsConfig",
+ "ExecGDAPAccessAssignment",
+ "ExecGDAPRepairRoleMappings",
+ "ExecGDAPRoleTemplate",
+ "ExecGDAPTrace",
+ "ExecGetLicenseReportPdf",
+ "ExecGraphRequestProfile",
+ "ExecOffboardUser",
+ "ExecOnboardTenant",
+ "ExecSharePointTemplate",
+ "ListConditionalAccessPolicies",
+ "ListGDAPAccessAssignments",
+ "ListGDAPRoles",
+ "ListGraphRequest",
+ "ListLicenseRecommendations",
+ "ListLicenses",
+ "ListLicensesReport",
+ "ListPartnerRelationships",
+ "PublicWebhooks"
+ ],
+ "Group.ReadWrite.All": [
+ "AddGroupTeam",
+ "EditGroup"
+ ],
+ "GroupMember.ReadBasic.All": [
+ "ExecCIPPUsers",
+ "ExecCustomRole",
+ "ExecGDAPTrace",
+ "ExecRefreshMyAccess",
+ "ListCAPolicyCoverage",
+ "ListGDAPAccessAssignments",
+ "ListGroups"
+ ],
+ "GroupMember.ReadWrite.All": [
+ "EditGroup",
+ "ExecOffboardUser",
+ "ExecOnboardTenant",
+ "PublicWebhooks"
+ ],
+ "LicenseAssignment.Read.All": [
+ "ExecCustomData",
+ "ExecExtensionMapping",
+ "ExecExtensionSync",
+ "ExecExtensionsConfig",
+ "ExecGetLicenseReportPdf",
+ "ExecGraphRequestProfile",
+ "ListGraphRequest",
+ "ListLicenseRecommendations",
+ "ListLicenses",
+ "ListLicensesReport",
+ "ListPartnerRelationships"
+ ],
+ "Organization.Read.All": [
+ "ExecCustomData",
+ "ExecExtensionMapping",
+ "ExecExtensionSync",
+ "ExecExtensionsConfig",
+ "ExecGetLicenseReportPdf",
+ "ExecGraphRequestProfile",
+ "ListGraphRequest",
+ "ListLicenseRecommendations",
+ "ListLicenses",
+ "ListLicensesReport",
+ "ListPartnerRelationships"
+ ],
+ "Policy.Read.All": [
+ "AddCAPolicy",
+ "EditCAPolicy",
+ "ExecApiClient",
+ "ExecApplication",
+ "ExecBECBulkCheck",
+ "ExecBECCheck",
+ "ExecBECIPReview",
+ "ExecBECRemediate",
+ "ExecCAExclusion",
+ "ExecCAServiceExclusion",
+ "ExecCombinedSetup",
+ "ExecEditCAPolicyFull",
+ "ExecManageAppCredentials",
+ "ExecRunBackup",
+ "ExecSSOSetup",
+ "ExecSetCIPPAutoBackup",
+ "ExecStandardsRun",
+ "ListAuditLogTest",
+ "ListCAPolicyCoverage",
+ "ListConditionalAccessPolicies",
+ "ListMFAUsers",
+ "ListTenantDrift",
+ "PublicWebhooks",
+ "RemoveCAPolicy"
+ ],
+ "Policy.Read.AuthenticationMethod": [
+ "SetAuthMethod"
+ ],
+ "Policy.Read.ConditionalAccess": [
+ "ExecCaCheck",
+ "ListCASituations"
+ ],
+ "Policy.ReadWrite.AuthenticationMethod": [
+ "AddUser",
+ "ExecPerUserMFA",
+ "SetAuthMethod"
+ ],
+ "RoleAssignmentSchedule.Read.Directory": [
+ "ExecPIMRoleAssignment",
+ "ListPIMRoles",
+ "ListRoleAssignments",
+ "ListUserCounts"
+ ],
+ "RoleEligibilitySchedule.Read.Directory": [
+ "ExecPIMRoleAssignment",
+ "ListPIMRoles",
+ "ListRoleAssignments",
+ "ListUserCounts"
+ ],
+ "RoleManagement.Read.All": [
+ "AddPIMRoleSettingsTemplate",
+ "ExecPIMRoleAssignment",
+ "ListPIMRoles",
+ "ListRoleAssignments",
+ "ListUserCounts"
+ ],
+ "RoleManagement.Read.Directory": [
+ "ListCAPolicyCoverage",
+ "ListConditionalAccessPolicies"
+ ],
+ "RoleManagement.ReadWrite.Directory": [
+ "ExecAddTenant",
+ "ExecCPVPermissions",
+ "ExecUpdateRefreshToken"
+ ],
+ "RoleManagement.ReadWrite.Exchange": [
+ "ExecExchangeRoleRepair"
+ ],
+ "SecurityAlert.ReadWrite.All": [
+ "ExecSetMdoAlert"
+ ],
+ "SecurityAnalyzedMessage.Read.All": [
+ "ExecBECBulkCheck",
+ "ExecBECCheck",
+ "ListMailQuarantineMessageDetails"
+ ],
+ "SecurityIncident.Read.All": [
+ "ExecIncidentsList"
+ ],
+ "SecurityIncident.ReadWrite.All": [
+ "ExecSetSecurityIncident"
+ ],
+ "SharePointTenantSettings.Read.All": [
+ "ListSharepointSettings"
+ ],
+ "Sites.Archive.All": [
+ "ExecReactivateSite"
+ ],
+ "Sites.FullControl.All": [
+ "ExecSiteBrowserPermissions",
+ "ListSiteBrowserPermissions"
+ ],
+ "Sites.Read.All": [
+ "AddSite",
+ "AddSiteBulk",
+ "AddUser",
+ "DeleteSharepointSite",
+ "ExecBECRemediate",
+ "ExecEmptySiteRecycleBin",
+ "ExecExtensionMapping",
+ "ExecExtensionNinjaOneQueue",
+ "ExecExtensionSync",
+ "ExecOffboardUser",
+ "ExecOneDriveProvision",
+ "ExecOneDriveShortCut",
+ "ExecReactivateSite",
+ "ExecRemoveLibraryPermission",
+ "ExecRemoveSPOExternalUser",
+ "ExecRemoveSiteUser",
+ "ExecRestoreDeletedSite",
+ "ExecRestoreRecycleBinItems",
+ "ExecSPOVersionCleanup",
+ "ExecSetLibraryInheritance",
+ "ExecSetLibraryPermission",
+ "ExecSetOneDriveSharing",
+ "ExecSetSharePointMember",
+ "ExecSetSiteProperties",
+ "ExecSharePointPerms",
+ "ExecSharePointTemplate",
+ "ExecSiteBrowserActions",
+ "ExecSiteBrowserLibraryCopy",
+ "ExecSiteBrowserPermissions",
+ "ListAuditLogTest",
+ "ListDeletedSites",
+ "ListSPOVersionCleanup",
+ "ListSharePointExternalUsers",
+ "ListSharepointAdminUrl",
+ "ListSharepointQuota",
+ "ListSiteBrowser",
+ "ListSiteBrowserLibraryCopy",
+ "ListSiteBrowserPermissions",
+ "ListSiteLibraries",
+ "ListSiteMembers",
+ "ListSitePermissions",
+ "ListSiteProperties",
+ "ListSiteRecycleBin",
+ "ListSiteRecycleBinSummary",
+ "ListSiteRoleDefinitions",
+ "ListSiteStorageComposition",
+ "ListSiteUserAccess",
+ "ListSites",
+ "PublicWebhooks"
+ ],
+ "Team.Create": [
+ "AddTeam",
+ "ExecSharePointTemplate"
+ ],
+ "TeamMember.Read.Group": [
+ "ListTeams"
+ ],
+ "TeamsAppInstallation.Read.Group": [
+ "ListTeams"
+ ],
+ "TeamSettings.Read.Group": [
+ "ListTeams"
+ ],
+ "ThreatSubmission.Read.All": [
+ "ListUserReportedMessages"
+ ],
+ "ThreatSubmission.ReadWrite.All": [
+ "ExecMailQuarantineSubmit"
+ ],
+ "User.Invite.All": [
+ "AddGuest"
+ ],
+ "User.Read.All": [
+ "AddCAPolicy",
+ "ExecAddAlert",
+ "ExecBECBulkCheck",
+ "ExecBECCheck",
+ "ExecBECIPReview",
+ "ExecBECRemediate",
+ "ExecBaselineRun",
+ "ExecCAExclusion",
+ "ExecCombinedSetup",
+ "ExecCustomData",
+ "ExecCustomTestRun",
+ "ExecExtensionMapping",
+ "ExecExtensionSync",
+ "ExecExtensionsConfig",
+ "ExecGDAPTrace",
+ "ExecGetLicenseReportPdf",
+ "ExecGraphRequestProfile",
+ "ExecJITAdmin",
+ "ExecJITAdminRequestDecision",
+ "ExecOffboardUser",
+ "ExecOnboardTenant",
+ "ExecPushSubscription",
+ "ExecRemoveSPOExternalUser",
+ "ExecStandardsRun",
+ "ExecTestRun",
+ "ListAuditLogTest",
+ "ListCAPolicyCoverage",
+ "ListConditionalAccessPolicies",
+ "ListGraphRequest",
+ "ListLicenseRecommendations",
+ "ListLicenses",
+ "ListLicensesReport",
+ "ListPartnerRelationships",
+ "ListSharePointExternalUsers",
+ "ListSiteUserAccess",
+ "ListUserOneDriveShortcuts",
+ "PublicWebhooks"
+ ],
+ "User.ReadWrite.All": [
+ "ExecClrImmId",
+ "ExecClrOnPremAttributes",
+ "ExecOffboardUser",
+ "ExecRemoveSPOExternalUser",
+ "ExecReprocessUserLicenses"
+ ],
+ "UserAuthenticationMethod.Read.All": [
+ "ExecBECBulkCheck",
+ "ExecBECCheck",
+ "ExecBECRemediate",
+ "ExecOffboardUser",
+ "ExecResetMFA",
+ "ListAuditLogTest",
+ "PublicWebhooks"
+ ],
+ "UserAuthenticationMethod.ReadWrite": [
+ "ExecSetDefaultMFAMethod"
+ ]
+ },
+ "Delegated": {
+ "AdministrativeUnit.Read.All": [
+ "ExecPIMRoleAssignment",
+ "ListPIMRoles",
+ "ListRoleAssignments",
+ "ListUserCounts"
+ ],
+ "Application.Read.All": [
+ "ExecAccessChecks",
+ "ExecAddMultiTenantApp",
+ "ExecAddTenant",
+ "ExecCPVPermissions",
+ "ExecCPVRefresh",
+ "ExecListAppId",
+ "ExecOffboardTenant",
+ "ExecOnboardTenant",
+ "ExecPermissionRepair",
+ "ExecSAMAppPermissions",
+ "ExecServicePrincipals",
+ "ExecUpdateRefreshToken",
+ "ListAuditLogTest",
+ "ListGDAPServicePrincipals",
+ "ListMessageTrace",
+ "ListOAuthApps",
+ "PublicWebhooks"
+ ],
+ "Application.ReadWrite.All": [
+ "ExecAddMultiTenantApp",
+ "ExecAddSPN",
+ "ExecAddTenant",
+ "ExecCPVPermissions",
+ "ExecListAppId",
+ "ExecOffboardTenant",
+ "ExecOnboardTenant",
+ "ExecServicePrincipals",
+ "ExecUpdateRefreshToken",
+ "ListMessageTrace",
+ "PublicWebhooks"
+ ],
+ "AppRegistration.Create": [
+ "ExecAddMultiTenantApp"
+ ],
+ "AuditLog.Read.All": [
+ "ExecAccessChecks",
+ "ExecGetShadowAIReportPdf",
+ "ListBasicAuth",
+ "ListCAPolicyImpact",
+ "ListConditionalAccessPolicyChanges",
+ "ListObjectHistory",
+ "ListShadowAI",
+ "ListSignIns",
+ "ListUserSigninLogs"
+ ],
+ "AuthenticationContext.Read.All": [
+ "AddCATemplate",
+ "ExecCombinedSetup",
+ "ExecRunBackup",
+ "ExecSetCIPPAutoBackup"
+ ],
+ "BitlockerKey.ReadBasic.All": [
+ "ExecCustomData",
+ "ExecExtensionMapping",
+ "ExecExtensionSync",
+ "ExecExtensionsConfig",
+ "ExecGetRecoveryKey"
+ ],
+ "ConsentRequest.Read.All": [
+ "ListAppConsentRequests"
+ ],
+ "CopilotPackages.Read.All": [
+ "ListAgent365PackageDetail"
+ ],
+ "CopilotPolicySettings.Read": [
+ "ListCopilotSettings"
+ ],
+ "CopilotPolicySettings.ReadWrite": [
+ "ExecCopilotSettings"
+ ],
+ "CrossTenantInformation.ReadBasic.All": [
+ "ListExternalTenantInfo"
+ ],
+ "DelegatedAdminRelationship.Read.All": [
+ "ExecAccessChecks",
+ "ExecAutoExtendGDAP",
+ "ExecGDAPAccessAssignment",
+ "ExecGDAPInvite",
+ "ExecGDAPInviteApproved",
+ "ExecGDAPRemoveGArole",
+ "ExecGDAPRepairRoleMappings",
+ "ExecGDAPTrace",
+ "ExecOffboardTenant",
+ "ExecOnboardTenant",
+ "ListGDAPAccessAssignments",
+ "ListGDAPRelationships",
+ "PublicWebhooks"
+ ],
+ "DelegatedAdminRelationship.ReadWrite.All": [
+ "ExecAutoExtendGDAP",
+ "ExecDeleteGDAPRelationship",
+ "ExecGDAPAccessAssignment",
+ "ExecGDAPInvite",
+ "ExecGDAPInviteApproved",
+ "ExecGDAPRemoveGArole",
+ "ExecOffboardTenant",
+ "ExecOnboardTenant",
+ "PublicWebhooks"
+ ],
+ "DelegatedPermissionGrant.ReadWrite.All": [
+ "ExecAddMultiTenantApp",
+ "ExecAddTenant",
+ "ExecCPVPermissions",
+ "ExecOnboardTenant",
+ "ExecUpdateRefreshToken",
+ "PublicWebhooks"
+ ],
+ "Device.Read.All": [
+ "EditGroup",
+ "ListAuditLogTest",
+ "ListDeviceDetails",
+ "PublicWebhooks"
+ ],
+ "DeviceLocalCredential.ReadBasic.All": [
+ "ExecCustomData",
+ "ExecExtensionMapping",
+ "ExecExtensionSync",
+ "ExecExtensionsConfig",
+ "ExecGetLocalAdminPassword"
+ ],
+ "DeviceManagementApps.Read.All": [
+ "AddEdgeApp",
+ "AddIntunePolicyClone",
+ "AddIntuneTemplate",
+ "AddOfficeApp",
+ "AddPolicy",
+ "ExecAssignApp",
+ "ExecCombinedSetup",
+ "ExecCompareIntunePolicy",
+ "ExecDeployAppTemplate",
+ "ExecRunBackup",
+ "ExecSetCIPPAutoBackup",
+ "ExecStandardsRun",
+ "ListAppProtectionPolicies",
+ "ListApps"
+ ],
+ "DeviceManagementApps.ReadWrite.All": [
+ "AddEdgeApp",
+ "AddOfficeApp",
+ "ExecAssignApp",
+ "ExecDeployAppTemplate",
+ "RemoveApp"
+ ],
+ "DeviceManagementConfiguration.Read.All": [
+ "AddDefenderDeployment",
+ "AddDefenderTemplate",
+ "AddEdgeApp",
+ "AddIntunePolicyClone",
+ "AddIntuneReusableSetting",
+ "AddIntuneTemplate",
+ "AddOfficeApp",
+ "AddPolicy",
+ "ExecAssignApp",
+ "ExecAssignPolicy",
+ "ExecBaselineRun",
+ "ExecCIPPDBCache",
+ "ExecCombinedSetup",
+ "ExecCommunityRepo",
+ "ExecCompareIntunePolicy",
+ "ExecDeployAppTemplate",
+ "ExecEditTemplate",
+ "ExecGetRecoveryKey",
+ "ExecGitHubAction",
+ "ExecRunBackup",
+ "ExecSetCIPPAutoBackup",
+ "ExecSharePointPermissionsSync",
+ "ExecSharePointSharingSync",
+ "ExecSharePointStorageSync",
+ "ExecStandardsRun",
+ "ExecTestRun",
+ "ExecUpdateDriftDeviation",
+ "ExecValidateIntuneTemplate",
+ "ListAndroidEnrollmentProfiles",
+ "ListAssignmentFilters",
+ "ListCompliancePolicies",
+ "ListIntuneApprovalRequests",
+ "ListIntuneIntents",
+ "ListIntunePolicy",
+ "ListIntuneScript"
+ ],
+ "DeviceManagementConfiguration.ReadWrite.All": [
+ "AddAssignmentFilter",
+ "AddDefenderDeployment",
+ "AddDefenderTemplate",
+ "AddIntunePolicyClone",
+ "AddIntuneReusableSetting",
+ "AddPolicy",
+ "EditAssignmentFilter",
+ "EditPolicy",
+ "ExecAssignmentFilter",
+ "ExecBaselineRun",
+ "ExecCIPPDBCache",
+ "ExecCompareIntunePolicy",
+ "ExecRemoveEnrollmentProfile",
+ "ExecSharePointPermissionsSync",
+ "ExecSharePointSharingSync",
+ "ExecSharePointStorageSync",
+ "ExecTestRun",
+ "RemoveIntuneReusableSetting"
+ ],
+ "DeviceManagementManagedDevices.PrivilegedOperations.All": [
+ "ExecGetLocalAdminPassword",
+ "ExecGetRecoveryKey"
+ ],
+ "DeviceManagementManagedDevices.Read.All": [
+ "ExecDeviceAction",
+ "ListAllTenantDeviceCompliance",
+ "ListDefenderState",
+ "ListDetectedAppDevices",
+ "ListDetectedApps",
+ "ListDeviceDetails",
+ "ListDevices",
+ "ListUserDevices",
+ "PublicWebhooks"
+ ],
+ "DeviceManagementManagedDevices.ReadWrite.All": [
+ "ExecDeviceAction"
+ ],
+ "DeviceManagementScripts.Read.All": [
+ "ListIntuneScript"
+ ],
+ "DeviceManagementServiceConfig.Read.All": [
+ "AddAutopilotConfig",
+ "AddDefenderDeployment",
+ "AddEnrollment",
+ "AddIntunePolicyClone",
+ "AddPolicy",
+ "AddTenant",
+ "ExecAddTenant",
+ "ExecAssignAutopilotProfile",
+ "ExecListAppId",
+ "ExecOffboardTenant",
+ "ExecSyncDEP",
+ "ExecSyncVPP",
+ "ListAPDevices",
+ "ListAppleEnrollmentProfiles",
+ "ListAutopilotconfig",
+ "ListAzureADConnectStatus",
+ "ListMDEOnboarding",
+ "ListOrg",
+ "ListPartnerTenantInfo",
+ "ListTenantDetails",
+ "RemoveAutopilotConfig"
+ ],
+ "DeviceManagementServiceConfig.ReadWrite.All": [
+ "AddAutopilotConfig",
+ "AddCorporateDeviceIdentifier",
+ "AddEnrollment",
+ "ExecAssignAPDevice",
+ "ExecAssignAutopilotProfile",
+ "ExecOffboardTenant",
+ "ExecRemoveEnrollmentProfile",
+ "ExecRenameAPDevice",
+ "ExecSetAPDeviceGroupTag",
+ "ExecSyncAPDevices",
+ "ExecSyncDEP",
+ "ExecSyncVPP",
+ "RemoveAPDevice",
+ "RemoveAutopilotConfig"
+ ],
+ "Directory.AccessAsUser.All": [
+ "ExecBECRemediate",
+ "ExecDeviceDelete",
+ "ListAuditLogTest",
+ "PublicWebhooks"
+ ],
+ "Directory.Read.All": [
+ "AddUser",
+ "EditGroup",
+ "ExecAddMultiTenantApp",
+ "ExecAddTenant",
+ "ExecCAExclusion",
+ "ExecCPVPermissions",
+ "ExecGroupMembers",
+ "ExecOffboardUser",
+ "ExecOnboardTenant",
+ "ExecPIMRoleAssignment",
+ "ExecScheduleGroupMembershipVacation",
+ "ExecSetSharePointMember",
+ "ExecUpdateRefreshToken",
+ "ListDirectoryObjects",
+ "ListGDAPContracts",
+ "ListOAuthApps",
+ "ListPIMRoles",
+ "ListRoleAssignments",
+ "ListRoles",
+ "ListRoomLists",
+ "ListUserCounts",
+ "PublicWebhooks"
+ ],
+ "Domain.Read.All": [
+ "AddSensitivityLabelTemplate",
+ "ExecAddTenant",
+ "ExecBreachSearch",
+ "ExecOffboardTenant",
+ "ListBreachesAccount",
+ "ListDomains"
+ ],
+ "Group.ManageProtection.All": [
+ "EditGroup"
+ ],
+ "Group.ReadBasic.All": [
+ "AddCAPolicy",
+ "AddCATemplate",
+ "AddEdgeApp",
+ "AddGroup",
+ "AddIntunePolicyClone",
+ "AddOfficeApp",
+ "AddPolicy",
+ "AddUser",
+ "EditGroup",
+ "EditUser",
+ "ExecAccessChecks",
+ "ExecAssignApp",
+ "ExecAssignPolicy",
+ "ExecCAExclusion",
+ "ExecCombinedSetup",
+ "ExecCompareIntunePolicy",
+ "ExecCustomRole",
+ "ExecDeployAppTemplate",
+ "ExecGDAPRepairRoleMappings",
+ "ExecGroupMembers",
+ "ExecGroupsDelete",
+ "ExecOffboardUser",
+ "ExecRunBackup",
+ "ExecScheduleGroupMembershipVacation",
+ "ExecSetCIPPAutoBackup",
+ "ExecSetSharePointMember",
+ "ListAppProtectionPolicies",
+ "ListApps",
+ "ListAuditLogTest",
+ "ListAutopilotconfig",
+ "ListCompliancePolicies",
+ "ListGroups",
+ "ListIntunePolicy",
+ "ListIntuneScript",
+ "ListMFAUsers",
+ "ListTeams",
+ "ListUsersAndGroups"
+ ],
+ "Group.ReadWrite.All": [
+ "AddCAPolicy",
+ "AddGroup",
+ "AddUser",
+ "ExecCAExclusion",
+ "ExecGroupMembers",
+ "ExecGroupsDelete",
+ "ExecOffboardUser",
+ "ExecSetSharePointMember"
+ ],
+ "GroupMember.ReadBasic.All": [
+ "ExecAccessChecks",
+ "ExecGDAPRepairRoleMappings",
+ "ExecScheduleGroupMembershipVacation",
+ "ListMFAUsers"
+ ],
+ "GroupMember.ReadWrite.All": [
+ "AddUser",
+ "EditUser",
+ "ExecCAExclusion",
+ "ExecGroupMembers",
+ "ExecJITAdmin",
+ "ExecJITAdminRequestDecision",
+ "ExecOffboardUser",
+ "ExecScheduleGroupMembershipVacation",
+ "ExecSetSharePointMember"
+ ],
+ "IdentityRiskEvent.Read.All": [
+ "ExecBECBulkCheck",
+ "ExecBECCheck"
+ ],
+ "IdentityRiskyUser.Read.All": [
+ "ExecBECBulkCheck",
+ "ExecBECCheck"
+ ],
+ "IdentityRiskyUser.ReadWrite.All": [
+ "ExecDismissRiskyUser"
+ ],
+ "LicenseAssignment.Read.All": [
+ "ExecAccessChecks",
+ "ExecBECBulkCheck",
+ "ExecBECCheck",
+ "ExecBaselineRun",
+ "ExecCSPLicense",
+ "ExecDomainAnalyser",
+ "ExecPIMRoleAssignment",
+ "ExecStandardsRun",
+ "ExecTestRun",
+ "ListCAGapAnalysis",
+ "ListCASituations",
+ "ListGuestUsers",
+ "ListPIMRoles",
+ "ListRoleAssignments",
+ "ListTenantDrift",
+ "ListUserCounts"
+ ],
+ "LicenseAssignment.ReadWrite.All": [
+ "AddCAPolicy",
+ "AddGroup",
+ "AddUser",
+ "AddUserBulk",
+ "EditGroup",
+ "EditUser",
+ "ExecBulkLicense",
+ "ExecCAExclusion",
+ "ExecGroupsDelete",
+ "ExecOffboardUser"
+ ],
+ "Mail.Read": [
+ "ListUserReportedMessage"
+ ],
+ "Mail.ReadBasic": [
+ "ExecMailTest",
+ "ListUserReportedMessage"
+ ],
+ "Mail.Send": [
+ "ExecAddAlert",
+ "ExecBaselineRun",
+ "ExecCustomData",
+ "ExecCustomTestRun",
+ "ExecExtensionMapping",
+ "ExecExtensionSync",
+ "ExecExtensionsConfig",
+ "ExecJITAdmin",
+ "ExecJITAdminRequestDecision",
+ "ExecOffboardUser",
+ "ExecPushSubscription",
+ "ExecStandardsRun",
+ "ExecTestRun",
+ "ListAuditLogTest",
+ "PublicWebhooks"
+ ],
+ "OrgContact.Read.All": [
+ "ListContacts",
+ "ListUserMailboxDetails"
+ ],
+ "Policy.Read.All": [
+ "AddCATemplate",
+ "AddNamedLocation",
+ "ExecCAExclusion",
+ "ExecCombinedSetup",
+ "ExecHVEUser",
+ "ExecNamedLocation",
+ "ExecRunBackup",
+ "ExecSetCIPPAutoBackup",
+ "ExecStandardsRun",
+ "ExecUpdateDriftDeviation",
+ "ListCAPolicyImpact",
+ "ListMFAUsers",
+ "ListNamedLocations"
+ ],
+ "Policy.Read.AuthenticationMethod": [
+ "ExecJITAdmin",
+ "ExecJITAdminRequestDecision",
+ "ExecRegistrationCampaign"
+ ],
+ "Policy.ReadWrite.AuthenticationMethod": [
+ "ExecRegistrationCampaign"
+ ],
+ "Reports.Read.All": [
+ "ExecGetLicenseReportPdf",
+ "ListLicenseRecommendations"
+ ],
+ "RoleManagement.Read.Directory": [
+ "ExecAccessChecks",
+ "ExecGDAPInvite",
+ "ExecPIMRoleAssignment",
+ "ListMFAUsers",
+ "ListPIMRoles",
+ "ListRoleAssignments",
+ "ListRoles",
+ "ListUserCounts"
+ ],
+ "RoleManagement.Read.Exchange": [
+ "ExecAccessChecks",
+ "ExecExchangeRoleRepair"
+ ],
+ "RoleManagement.ReadWrite.Directory": [
+ "ExecAddTenant",
+ "ExecCPVPermissions",
+ "ExecJITAdmin",
+ "ExecJITAdminRequestDecision",
+ "ExecPIMRoleAssignment",
+ "ExecUpdateRefreshToken"
+ ],
+ "SecurityAlert.Read.All": [
+ "ExecAlertsList",
+ "ExecMDOAlertsList"
+ ],
+ "SecurityAlert.ReadWrite.All": [
+ "ExecSetSecurityAlert"
+ ],
+ "SecurityEvents.ReadWrite.All": [
+ "ExecUpdateSecureScore"
+ ],
+ "ServiceHealth.Read.All": [
+ "ListServiceHealth",
+ "ListServiceHealthIssues",
+ "ListServiceHealthOverviews"
+ ],
+ "ServiceMessage.Read.All": [
+ "ListMessageCenterMessages"
+ ],
+ "TeamsTelephoneNumber.Read.All": [
+ "ExecOffboardUser",
+ "ExecRunBackup",
+ "ExecSetCIPPAutoBackup"
+ ],
+ "TeamsTelephoneNumber.ReadWrite.All": [
+ "ExecOffboardUser",
+ "ExecRemoveTeamsVoicePhoneNumberAssignment",
+ "ExecTeamsVoicePhoneNumberAssignment"
+ ],
+ "User.DeleteRestore.All": [
+ "ExecClrImmId",
+ "ExecClrOnPremAttributes",
+ "ExecOffboardUser",
+ "ExecRestoreDeleted"
+ ],
+ "User.Read": [
+ "AddUser",
+ "EditUser",
+ "ExecAccessChecks",
+ "ExecGDAPRepairRoleMappings",
+ "ExecListAppId",
+ "ExecMailTest",
+ "ExecOffboardUser",
+ "ListJITAdmin",
+ "ListUserDevices",
+ "ListUserGroups",
+ "ListUserPhoto"
+ ],
+ "User.ReadBasic.All": [
+ "AddCAPolicy",
+ "AddCATemplate",
+ "AddConnectionFilter",
+ "AddContact",
+ "AddDlpCompliancePolicy",
+ "AddEditTransportRule",
+ "AddEquipmentMailbox",
+ "AddExConnector",
+ "AddGroup",
+ "AddQuarantinePolicy",
+ "AddRetentionCompliancePolicy",
+ "AddRetentionCompliancePolicyTemplate",
+ "AddRoomList",
+ "AddRoomMailbox",
+ "AddSafeLinksPolicyFromTemplate",
+ "AddSensitiveInfoType",
+ "AddSensitiveInfoTypeTemplate",
+ "AddSensitivityLabel",
+ "AddSharedMailbox",
+ "AddSpamFilter",
+ "AddTenantAllowBlockList",
+ "AddTransportRule",
+ "AddUser",
+ "DeployContactTemplates",
+ "EditAntiPhishingFilter",
+ "EditContact",
+ "EditDlpCompliancePolicy",
+ "EditEquipmentMailbox",
+ "EditExConnector",
+ "EditGroup",
+ "EditMalwareFilter",
+ "EditQuarantinePolicy",
+ "EditRetentionCompliancePolicy",
+ "EditRoomList",
+ "EditRoomMailbox",
+ "EditSafeAttachmentsFilter",
+ "EditSafeLinksPolicy",
+ "EditSensitiveInfoType",
+ "EditSensitivityLabel",
+ "EditSpamFilter",
+ "EditTransportRule",
+ "EditUser",
+ "EditUserAliases",
+ "ExecAccessChecks",
+ "ExecAddTenant",
+ "ExecBECBulkCheck",
+ "ExecBECCheck",
+ "ExecBECIPReview",
+ "ExecBECRemediate",
+ "ExecBulkLicense",
+ "ExecCAExclusion",
+ "ExecCPVPermissions",
+ "ExecClrImmId",
+ "ExecClrOnPremAttributes",
+ "ExecCombinedSetup",
+ "ExecConvertMailbox",
+ "ExecCopyForSent",
+ "ExecCustomData",
+ "ExecDeleteSafeLinksPolicy",
+ "ExecDisableUser",
+ "ExecEditCalendarPermissions",
+ "ExecEditMailboxPermissions",
+ "ExecEmailForward",
+ "ExecEnableArchive",
+ "ExecEnableAutoExpandingArchive",
+ "ExecExchangeRoleRepair",
+ "ExecExtensionMapping",
+ "ExecExtensionSync",
+ "ExecExtensionsConfig",
+ "ExecGDAPTrace",
+ "ExecGetLicenseReportPdf",
+ "ExecGetMailFlowReportPdf",
+ "ExecGroupMembers",
+ "ExecGroupsDelete",
+ "ExecHVEUser",
+ "ExecHideFromGAL",
+ "ExecHistoricalSearch",
+ "ExecIRMConfiguration",
+ "ExecJITAdmin",
+ "ExecJITAdminRequestDecision",
+ "ExecMailQuarantineSubmit",
+ "ExecMailboxRestore",
+ "ExecManageRetentionPolicies",
+ "ExecManageRetentionTags",
+ "ExecModifyCalPerms",
+ "ExecModifyContactPerms",
+ "ExecModifyMBPerms",
+ "ExecNewSafeLinksPolicy",
+ "ExecOffboardTenant",
+ "ExecOffboardUser",
+ "ExecOnboardTenant",
+ "ExecQuarantineManagement",
+ "ExecRemoveMailboxRule",
+ "ExecRemoveRestrictedUser",
+ "ExecRequirePasswordChange",
+ "ExecResetPass",
+ "ExecRunBackup",
+ "ExecScheduleForwardingVacation",
+ "ExecScheduleGroupMembershipVacation",
+ "ExecScheduleMailboxVacation",
+ "ExecScheduleOOOVacation",
+ "ExecSetCASMailbox",
+ "ExecSetCIPPAutoBackup",
+ "ExecSetCalendarProcessing",
+ "ExecSetLitigationHold",
+ "ExecSetMailboxCustomAttributes",
+ "ExecSetMailboxEmailSize",
+ "ExecSetMailboxLocale",
+ "ExecSetMailboxQuota",
+ "ExecSetMailboxRetentionPolicies",
+ "ExecSetMailboxRule",
+ "ExecSetOoO",
+ "ExecSetRecipientLimits",
+ "ExecSetRetentionHold",
+ "ExecSetSharePointMember",
+ "ExecStartManagedFolderAssistant",
+ "ExecTeamsVoicePhoneNumberAssignment",
+ "ExecTestMessage",
+ "ExecUpdateRefreshToken",
+ "ListActiveSyncDevices",
+ "ListAntiPhishingFilters",
+ "ListAuditLogTest",
+ "ListBECPhishingSpread",
+ "ListCalendarPermissions",
+ "ListConnectionFilter",
+ "ListContactPermissions",
+ "ListContacts",
+ "ListDlpCompliancePolicy",
+ "ListEquipment",
+ "ListExchangeConnectors",
+ "ListExoRequest",
+ "ListFunctionParameters",
+ "ListGlobalAddressList",
+ "ListGroupSenderAuthentication",
+ "ListGroups",
+ "ListGuestUsers",
+ "ListHVEAccounts",
+ "ListHistoricalSearches",
+ "ListIRMConfiguration",
+ "ListJITAdmin",
+ "ListLicenseRecommendations",
+ "ListMFAUsers",
+ "ListMailFlowReports",
+ "ListMailQuarantine",
+ "ListMailQuarantineMessage",
+ "ListMailQuarantineMessageDetails",
+ "ListMailQuarantineMessageHeader",
+ "ListMailboxCAS",
+ "ListMailboxForwarding",
+ "ListMailboxRestores",
+ "ListMailboxes",
+ "ListMalwareFilters",
+ "ListMessageTrace",
+ "ListObjectHistory",
+ "ListOoO",
+ "ListPerUserMFA",
+ "ListQuarantinePolicy",
+ "ListRestrictedUsers",
+ "ListRetentionCompliancePolicy",
+ "ListRoomLists",
+ "ListRooms",
+ "ListSafeAttachmentsFilters",
+ "ListSafeLinksPolicy",
+ "ListSafeLinksPolicyDetails",
+ "ListSensitiveInfoType",
+ "ListSensitiveInfoTypeRulePackage",
+ "ListSensitivityLabel",
+ "ListSharedMailboxAccountEnabled",
+ "ListSharedMailboxStatistics",
+ "ListSpamfilter",
+ "ListTeamsVoice",
+ "ListTransportRules",
+ "ListUserCounts",
+ "ListUserMailboxDetails",
+ "ListUserMailboxRules",
+ "ListUserReportedMessage",
+ "ListUserReportedMessages",
+ "ListUserTrustedBlockedSenders",
+ "ListUsers",
+ "ListUsersAndGroups",
+ "PublicWebhooks",
+ "RemoveContact",
+ "RemoveDlpCompliancePolicy",
+ "RemoveExConnector",
+ "RemoveQuarantinePolicy",
+ "RemoveRetentionCompliancePolicy",
+ "RemoveSensitiveInfoType",
+ "RemoveSensitivityLabel",
+ "RemoveSpamfilter",
+ "RemoveTenantAllowBlockList",
+ "RemoveTransportRule",
+ "RemoveTrustedBlockedSender"
+ ],
+ "User.ReadWrite": [
+ "ExecSetUserPhoto"
+ ],
+ "User.ReadWrite.All": [
+ "AddEquipmentMailbox",
+ "AddRoomMailbox",
+ "AddSharedMailbox",
+ "AddUser",
+ "AddUserBulk",
+ "EditUser",
+ "ExecBECRemediate",
+ "ExecBulkLicense",
+ "ExecCustomData",
+ "ExecDisableUser",
+ "ExecExtensionMapping",
+ "ExecExtensionSync",
+ "ExecExtensionsConfig",
+ "ExecJITAdmin",
+ "ExecJITAdminRequestDecision",
+ "ExecOffboardTenant",
+ "ExecOffboardUser",
+ "ExecPasswordNeverExpires",
+ "ExecRequirePasswordChange",
+ "ExecResetPass",
+ "ListAuditLogTest",
+ "PatchUser",
+ "PublicWebhooks",
+ "RemoveUser"
+ ],
+ "User.RevokeSessions.All": [
+ "ExecBECRemediate",
+ "ExecOffboardUser",
+ "ExecRevokeSessions",
+ "ListAuditLogTest",
+ "PublicWebhooks"
+ ],
+ "UserAuthenticationMethod.Read.All": [
+ "ExecSendPush"
+ ],
+ "UserAuthenticationMethod.ReadWrite.All": [
+ "ExecBECRemediate",
+ "ExecCreateTAP",
+ "ExecJITAdmin",
+ "ExecJITAdminRequestDecision",
+ "ExecOffboardUser",
+ "ExecResetPass",
+ "ListAuditLogTest",
+ "PublicWebhooks"
+ ]
}
}
}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/BEC/Push-BECRun.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/BEC/Push-BECRun.ps1
index 399a25dfcc..10f4d9b98c 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/BEC/Push-BECRun.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/BEC/Push-BECRun.ps1
@@ -12,6 +12,13 @@ function Push-BECRun {
incomplete check, and the phases after it still run. The last phase scores the run and writes
it to the BecReports table (metadata) and the BecResults table (payload), keyed by the case id.
Metadata only - no message bodies, attachments or file contents.
+ .NOTES
+ Permission: Graph | POST /directoryObjects/getByIds | Application | Directory.Read.All
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/authentication/methods | Application | UserAuthenticationMethod.Read.All | UserAuthenticationMethod.ReadWrite.All
+ Permission: Graph | GET /users/{id}/managedDevices | Application | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Long Paths/Push-DBCacheOneDriveLongPaths.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Long Paths/Push-DBCacheOneDriveLongPaths.ps1
index 0c5ab5b01b..b449dcc2a0 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Long Paths/Push-DBCacheOneDriveLongPaths.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Long Paths/Push-DBCacheOneDriveLongPaths.ps1
@@ -15,6 +15,9 @@ function Push-DBCacheOneDriveLongPaths {
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /drives/{id}/root/delta | Application | Files.Read.All | Files.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/drive | Application | Files.Read.All | Files.ReadWrite.All
#>
[CmdletBinding()]
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPGraphIdentityLabel.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPGraphIdentityLabel.ps1
new file mode 100644
index 0000000000..3fda501be1
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPGraphIdentityLabel.ps1
@@ -0,0 +1,8 @@
+function Get-CIPPGraphIdentityLabel {
+ param($Identity)
+ $Identity.user.email ?? $Identity.user.userPrincipalName ??
+ $Identity.siteUser.email ?? $Identity.user.displayName ??
+ $Identity.siteUser.displayName ?? $Identity.group.email ??
+ $Identity.group.displayName ?? $Identity.siteGroup.displayName ??
+ $Identity.application.displayName
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPOneDriveHasNonStandardAccess.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPOneDriveHasNonStandardAccess.ps1
new file mode 100644
index 0000000000..1496f86347
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPOneDriveHasNonStandardAccess.ps1
@@ -0,0 +1,32 @@
+function Get-CIPPOneDriveHasNonStandardAccess {
+ param($Grants, $OwnerObjectId, $OwnerPrincipalName, $LibraryHasUniquePermissions, $CollectionStatus)
+ if ($CollectionStatus -eq 'Skipped') { return $null }
+ if ($LibraryHasUniquePermissions) { return $true }
+
+ foreach ($Grant in $Grants) {
+ if ($Grant.permissionSource -eq 'SiteAdmin' -and -not (Test-CIPPOneDriveOwnerPrincipal -Grant $Grant -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
+ return $true
+ }
+ if ($Grant.permissionSource -eq 'SiteRoleGroup' -and $Grant.group -in @('Members', 'Visitors')) {
+ return $true
+ }
+ if ($Grant.permissionSource -eq 'SiteRoleGroup' -and $Grant.group -eq 'Owners' -and
+ -not (Test-CIPPOneDriveOwnerPrincipal -Grant $Grant -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
+ return $true
+ }
+ if ($Grant.principalType -in @('Security Group', 'M365 Group', 'SharePoint Group')) {
+ return $true
+ }
+ if ($Grant.isGuest) { return $true }
+ if ($Grant.permissionSource -eq 'DriveRootLink') { return $true }
+ if ($Grant.permissionSource -eq 'DriveRootGrant' -and
+ -not (Test-CIPPOneDriveOwnerPrincipal -Grant $Grant -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
+ return $true
+ }
+ if ($Grant.permissionSource -in @('WebRoleAssignment', 'LibraryRoleAssignment') -and
+ -not (Test-CIPPOneDriveOwnerPrincipal -Grant $Grant -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
+ return $true
+ }
+ }
+ return $false
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPOneDriveSiteRow.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPOneDriveSiteRow.ps1
new file mode 100644
index 0000000000..3f500c3fa7
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPOneDriveSiteRow.ps1
@@ -0,0 +1,217 @@
+function Get-CIPPOneDriveSiteRow {
+ <#
+ .NOTES
+ Permission: Graph | GET /sites/{id}/drive | Application | Files.Read.All | Files.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/drive/root/permissions | Application | Sites.FullControl.All
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
+ param($SiteSeed, $TenantFilter)
+
+ $SiteId = $SiteSeed.id
+ $SiteUrl = $SiteSeed.webUrl
+ $SiteDisplayName = $SiteSeed.displayName
+ $CollectedAt = (Get-Date).ToUniversalTime().ToString('o')
+
+ $Drive = $null
+ try {
+ $Drive = New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/sites/$SiteId/drive?`$select=id,owner,webUrl,sharepointIds" -tenantid $TenantFilter -asapp $true
+ } catch {
+ return (New-CIPPOneDriveSkippedSiteRow -SiteSeed $SiteSeed -CollectionError "Drive resolution failed: $($_.Exception.Message)")
+ }
+
+ if (-not $Drive -or -not $Drive.id) {
+ return (New-CIPPOneDriveSkippedSiteRow -SiteSeed $SiteSeed -CollectionError 'Drive resolution returned no drive')
+ }
+
+ $OwnerObjectId = $Drive.owner.user.id
+ $OwnerDisplayName = $Drive.owner.user.displayName
+ $OwnerPrincipalName = $Drive.owner.user.userPrincipalName ?? $Drive.owner.user.email
+ if (-not $OwnerPrincipalName -and $OwnerObjectId) {
+ try {
+ $OwnerUser = New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/users/$($OwnerObjectId)?`$select=userPrincipalName" -tenantid $TenantFilter -asapp $true
+ $OwnerPrincipalName = $OwnerUser.userPrincipalName
+ } catch {
+ $OwnerPrincipalName = $null
+ }
+ }
+
+ $DriveId = $Drive.id
+ $DriveWebUrl = $Drive.webUrl
+ $LibraryId = $Drive.sharepointIds.listId
+ $LibraryHasUniquePermissions = $false
+ $LibraryTitle = $null
+
+ $SpoGrants = [System.Collections.Generic.List[object]]::new()
+ $AssociatedGroupIds = [System.Collections.Generic.HashSet[string]]::new()
+ $AssociatedGroupTitles = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)
+
+ try {
+ $RestContext = Resolve-CIPPSharePointRestContext -TenantFilter $TenantFilter -SiteUrl $SiteUrl
+ $Scope = $RestContext.Scope
+ $JsonAccept = $RestContext.Headers
+ $BaseUri = $RestContext.BaseUri
+
+ $AssociatedEndpoints = [ordered]@{
+ 'Owners' = 'associatedownergroup'
+ 'Members' = 'associatedmembergroup'
+ 'Visitors' = 'associatedvisitorgroup'
+ }
+ foreach ($RoleName in $AssociatedEndpoints.Keys) {
+ $GroupEntity = New-GraphGetRequest -uri "$BaseUri/web/$($AssociatedEndpoints[$RoleName])?`$select=Id,Title" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true
+ if ($GroupEntity.Id) {
+ [void]$AssociatedGroupIds.Add([string]$GroupEntity.Id)
+ if ($GroupEntity.Title) { [void]$AssociatedGroupTitles.Add([string]$GroupEntity.Title) }
+ }
+ }
+
+ $SiteAdmins = @(New-GraphGetRequest -uri "$BaseUri/web/siteusers?`$filter=IsSiteAdmin eq true&`$select=Id,Title,Email,LoginName,PrincipalType,IsShareByEmailGuestUser,IsEmailAuthenticationGuestUser" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true)
+ foreach ($Admin in $SiteAdmins) {
+ $SpoGrants.Add((New-CIPPSpoUserGrant -User $Admin -PermissionSource 'SiteAdmin' -Group 'Site Admins' -IsSiteAdmin $true))
+ }
+
+ foreach ($RoleName in $AssociatedEndpoints.Keys) {
+ $Users = @(New-GraphGetRequest -uri "$BaseUri/web/$($AssociatedEndpoints[$RoleName])/users?`$select=Id,Title,Email,LoginName,PrincipalType,IsShareByEmailGuestUser,IsEmailAuthenticationGuestUser" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true)
+ foreach ($User in $Users) {
+ $SpoGrants.Add((New-CIPPSpoUserGrant -User $User -PermissionSource 'SiteRoleGroup' -Group $RoleName))
+ }
+ }
+
+ $WebAssignments = @(New-GraphGetRequest -uri "$BaseUri/web/roleassignments?`$expand=Member,RoleDefinitionBindings" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true)
+ foreach ($Assignment in $WebAssignments) {
+ if ($Assignment.Member.Id -and $AssociatedGroupIds.Contains([string]$Assignment.Member.Id)) { continue }
+ foreach ($Binding in @($Assignment.RoleDefinitionBindings)) {
+ $SpoGrants.Add((New-CIPPSpoRoleAssignmentGrant -Member $Assignment.Member -RoleBinding $Binding -PermissionSource 'WebRoleAssignment'))
+ }
+ }
+
+ if ($LibraryId) {
+ $ListInfo = New-GraphGetRequest -uri "$BaseUri/web/lists(guid'$LibraryId')?`$select=HasUniqueRoleAssignments,Title" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true
+ $LibraryHasUniquePermissions = [bool]$ListInfo.HasUniqueRoleAssignments
+ $LibraryTitle = $ListInfo.Title
+ if ($LibraryHasUniquePermissions) {
+ $LibraryAssignments = @(New-GraphGetRequest -uri "$BaseUri/web/lists(guid'$LibraryId')/roleassignments?`$expand=Member,RoleDefinitionBindings" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true)
+ foreach ($Assignment in $LibraryAssignments) {
+ if ($Assignment.Member.Id -and $AssociatedGroupIds.Contains([string]$Assignment.Member.Id)) { continue }
+ foreach ($Binding in @($Assignment.RoleDefinitionBindings)) {
+ $SpoGrants.Add((New-CIPPSpoRoleAssignmentGrant -Member $Assignment.Member -RoleBinding $Binding -PermissionSource 'LibraryRoleAssignment' -LibraryTitle $LibraryTitle))
+ }
+ }
+ }
+ }
+
+ } catch {
+ $SpoError = $_.Exception.Message
+ Write-LogMessage -API 'CIPPDBCache' -tenant $TenantFilter -message "OneDrive root permissions: SPO collection failed for '$SiteUrl': $SpoError" -sev Warning
+ return (New-CIPPOneDriveSkippedSiteRow -SiteSeed $SiteSeed -CollectionError "SPO collection failed: $SpoError")
+ }
+
+ $GraphGrants = [System.Collections.Generic.List[object]]::new()
+ $InheritedSkipCount = 0
+ try {
+ $Permissions = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/sites/$SiteId/drive/root/permissions" -tenantid $TenantFilter -asapp $true)
+ foreach ($Permission in $Permissions) {
+ if ($Permission.inheritedFrom) {
+ $InheritedSkipCount++
+ continue
+ }
+
+ if ($Permission.link) {
+ $Recipients = @($Permission.grantedToIdentitiesV2 ?? $Permission.grantedToIdentities ?? @())
+ $SharedWith = @($Recipients | ForEach-Object { Get-CIPPGraphIdentityLabel -Identity $_ } | Where-Object { $_ } | Sort-Object -Unique)
+ $LinkProps = @{
+ linkScope = $Permission.link.scope ?? 'users'
+ linkType = $Permission.link.type ?? 'view'
+ linkUrl = $Permission.link.webUrl
+ hasPassword = [bool]($Permission.hasPassword ?? $false)
+ expirationDateTime = $Permission.expirationDateTime
+ }
+ if ($Recipients.Count -eq 0) {
+ $GraphGrants.Add([PSCustomObject]@{
+ permissionSource = 'DriveRootLink'
+ group = $null
+ principalId = [string]$Permission.id
+ principalObjectId = $null
+ principalUpn = $null
+ principalDisplayName = $null
+ principalLoginName = $null
+ principalEmail = $null
+ principalType = 'Link'
+ permissionLevel = $null
+ roleDefinitionId = $null
+ roles = @($Permission.roles)
+ isSiteAdmin = $false
+ isGuest = $false
+ permissionId = [string]$Permission.id
+ linkScope = $LinkProps.linkScope
+ linkType = $LinkProps.linkType
+ linkUrl = $LinkProps.linkUrl
+ hasPassword = $LinkProps.hasPassword
+ expirationDateTime = $LinkProps.expirationDateTime
+ sharedWith = @()
+ libraryTitle = $null
+ })
+ } else {
+ foreach ($Recipient in $Recipients) {
+ $GraphGrants.Add((New-CIPPGraphIdentityGrant -Identity $Recipient -PermissionSource 'DriveRootLink' -PermissionId $Permission.id -Roles @($Permission.roles) -SharedWith $SharedWith -LinkProps $LinkProps))
+ }
+ }
+ continue
+ }
+
+ $Recipients = @($Permission.grantedToIdentitiesV2 ?? @())
+ if ($Recipients.Count -eq 0 -and $Permission.grantedToV2) {
+ $Recipients = @($Permission.grantedToV2)
+ }
+ if ($Recipients.Count -eq 0) { continue }
+
+ $SharedWith = @($Recipients | ForEach-Object { Get-CIPPGraphIdentityLabel -Identity $_ } | Where-Object { $_ } | Sort-Object -Unique)
+ foreach ($Recipient in $Recipients) {
+ if ($Recipient.siteGroup -and $Recipient.siteGroup.displayName -and
+ $AssociatedGroupTitles.Contains([string]$Recipient.siteGroup.displayName)) {
+ Write-LogMessage -API 'CIPPDBCache' -tenant $TenantFilter -message "OneDrive root permissions: siteGroup dedup matched '$($Recipient.siteGroup.displayName)' on '$SiteUrl'" -sev Debug
+ continue
+ }
+ $Candidate = New-CIPPGraphIdentityGrant -Identity $Recipient -PermissionSource 'DriveRootGrant' -PermissionId $Permission.id -Roles @($Permission.roles) -SharedWith $SharedWith
+ if ($Permission.roles -contains 'owner' -and
+ (Test-CIPPOneDriveOwnerPrincipal -Grant $Candidate -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
+ continue
+ }
+ $GraphGrants.Add($Candidate)
+ }
+ }
+ if ($InheritedSkipCount -gt 0) {
+ Write-LogMessage -API 'CIPPDBCache' -tenant $TenantFilter -message "OneDrive root permissions: skipped $InheritedSkipCount inherited root permissions on '$SiteUrl'" -sev Debug
+ }
+ } catch {
+ return (New-CIPPOneDriveSkippedSiteRow -SiteSeed $SiteSeed -CollectionError "Graph root permissions failed: $($_.Exception.Message)")
+ }
+
+ $AllGrants = @($SpoGrants) + @($GraphGrants)
+
+ $HasNonStandardAccess = Get-CIPPOneDriveHasNonStandardAccess -Grants $AllGrants -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName -LibraryHasUniquePermissions $LibraryHasUniquePermissions -CollectionStatus 'Full'
+ $PermissionsJson = if ($AllGrants.Count -gt 0) {
+ ConvertTo-Json -InputObject @($AllGrants) -Compress -Depth 10
+ } else {
+ '[]'
+ }
+
+ [PSCustomObject]@{
+ id = $SiteId
+ siteId = $SiteId
+ siteUrl = $SiteUrl
+ siteDisplayName = $SiteDisplayName
+ ownerPrincipalName = $OwnerPrincipalName
+ ownerObjectId = $OwnerObjectId
+ ownerDisplayName = $OwnerDisplayName
+ driveId = $DriveId
+ driveWebUrl = $DriveWebUrl
+ libraryId = $LibraryId
+ libraryHasUniquePermissions = $LibraryHasUniquePermissions
+ collectionStatus = 'Full'
+ collectionError = $null
+ hasNonStandardAccess = $HasNonStandardAccess
+ permissionsJson = $PermissionsJson
+ grantCount = $AllGrants.Count
+ collectedAt = $CollectedAt
+ }
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPSpoPrincipalType.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPSpoPrincipalType.ps1
new file mode 100644
index 0000000000..a14fe482de
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPSpoPrincipalType.ps1
@@ -0,0 +1,10 @@
+function Get-CIPPSpoPrincipalType {
+ param($Entity)
+ if ($Entity.LoginName -match '(?i)federateddirectoryclaimprovider') { return 'M365 Group' }
+ switch ($Entity.PrincipalType) {
+ 1 { 'User' }
+ 4 { 'Security Group' }
+ 8 { 'SharePoint Group' }
+ default { 'Other' }
+ }
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPSpoUserUpn.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPSpoUserUpn.ps1
new file mode 100644
index 0000000000..2052fb4c81
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Get-CIPPSpoUserUpn.ps1
@@ -0,0 +1,7 @@
+function Get-CIPPSpoUserUpn {
+ param($User)
+ if ($User.PrincipalType -eq 1 -and $User.LoginName) {
+ return ($User.LoginName -split '\|')[-1]
+ }
+ $null
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPGraphIdentityGrant.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPGraphIdentityGrant.ps1
new file mode 100644
index 0000000000..0b64fcf20e
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPGraphIdentityGrant.ps1
@@ -0,0 +1,83 @@
+function New-CIPPGraphIdentityGrant {
+ param(
+ $Identity,
+ [string]$PermissionSource,
+ [string]$PermissionId,
+ [array]$Roles,
+ [array]$SharedWith,
+ $LinkProps = $null
+ )
+ $principalType = 'Other'
+ $principalObjectId = $null
+ $principalUpn = $null
+ $principalDisplayName = $null
+ $principalLoginName = $null
+ $principalEmail = $null
+ $principalId = $null
+
+ if ($Identity.user) {
+ $principalType = 'User'
+ $principalObjectId = $Identity.user.id
+ $principalUpn = $Identity.user.userPrincipalName ?? $Identity.user.email
+ $principalDisplayName = $Identity.user.displayName
+ $principalEmail = $Identity.user.email ?? $Identity.user.userPrincipalName
+ $principalId = [string]($Identity.user.id ?? $principalUpn)
+ } elseif ($Identity.siteUser) {
+ $principalType = 'User'
+ $principalLoginName = $Identity.siteUser.loginName
+ $principalDisplayName = $Identity.siteUser.displayName
+ $principalEmail = $Identity.siteUser.email
+ $principalUpn = if ($principalLoginName) { ($principalLoginName -split '\|')[-1] } else { $null }
+ $principalId = [string]($principalLoginName ?? $principalEmail ?? $principalDisplayName)
+ } elseif ($Identity.group) {
+ $principalType = 'Security Group'
+ $principalObjectId = $Identity.group.id
+ $principalDisplayName = $Identity.group.displayName
+ $principalEmail = $Identity.group.email
+ $principalId = [string]$Identity.group.id
+ } elseif ($Identity.siteGroup) {
+ $principalType = 'SharePoint Group'
+ $principalDisplayName = $Identity.siteGroup.displayName
+ $principalId = [string]($Identity.siteGroup.id ?? $Identity.siteGroup.displayName)
+ } elseif ($Identity.application) {
+ $principalType = 'Application'
+ $principalDisplayName = $Identity.application.displayName
+ $principalId = [string]$Identity.application.id
+ }
+
+ $grant = [PSCustomObject]@{
+ permissionSource = $PermissionSource
+ group = $null
+ principalId = $principalId
+ principalObjectId = $principalObjectId
+ principalUpn = $principalUpn
+ principalDisplayName = $principalDisplayName
+ principalLoginName = $principalLoginName
+ principalEmail = $principalEmail
+ principalType = $principalType
+ permissionLevel = $null
+ roleDefinitionId = $null
+ roles = @($Roles)
+ isSiteAdmin = $false
+ isGuest = (Test-CIPPGraphGuestIdentity -Identity $Identity)
+ permissionId = $PermissionId
+ linkScope = $null
+ linkType = $null
+ linkUrl = $null
+ hasPassword = $null
+ expirationDateTime = $null
+ sharedWith = @($SharedWith)
+ libraryTitle = $null
+ }
+
+ if ($LinkProps) {
+ $grant.linkScope = $LinkProps.linkScope
+ $grant.linkType = $LinkProps.linkType
+ $grant.linkUrl = $LinkProps.linkUrl
+ $grant.hasPassword = $LinkProps.hasPassword
+ $grant.expirationDateTime = $LinkProps.expirationDateTime
+ $grant.principalType = 'Link'
+ }
+
+ $grant
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPOneDriveSkippedSiteRow.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPOneDriveSkippedSiteRow.ps1
new file mode 100644
index 0000000000..f2c7efd14f
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPOneDriveSkippedSiteRow.ps1
@@ -0,0 +1,22 @@
+function New-CIPPOneDriveSkippedSiteRow {
+ param($SiteSeed, $CollectionError)
+ [PSCustomObject]@{
+ id = $SiteSeed.id
+ siteId = $SiteSeed.id
+ siteUrl = $SiteSeed.webUrl
+ siteDisplayName = $SiteSeed.displayName
+ ownerPrincipalName = $null
+ ownerObjectId = $null
+ ownerDisplayName = $null
+ driveId = $null
+ driveWebUrl = $null
+ libraryId = $null
+ libraryHasUniquePermissions = $false
+ collectionStatus = 'Skipped'
+ collectionError = $CollectionError
+ hasNonStandardAccess = $null
+ permissionsJson = '[]'
+ grantCount = 0
+ collectedAt = (Get-Date).ToUniversalTime().ToString('o')
+ }
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPSpoRoleAssignmentGrant.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPSpoRoleAssignmentGrant.ps1
new file mode 100644
index 0000000000..2017c7731c
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPSpoRoleAssignmentGrant.ps1
@@ -0,0 +1,30 @@
+function New-CIPPSpoRoleAssignmentGrant {
+ param($Member, $RoleBinding, [string]$PermissionSource, [string]$LibraryTitle = $null)
+ $principalUpn = if ($Member.PrincipalType -eq 1 -and $Member.LoginName) {
+ ($Member.LoginName -split '\|')[-1]
+ } else { $null }
+ [PSCustomObject]@{
+ permissionSource = $PermissionSource
+ group = $RoleBinding.Name
+ principalId = [string]$Member.Id
+ principalObjectId = $null
+ principalUpn = $principalUpn
+ principalDisplayName = $Member.Title
+ principalLoginName = $Member.LoginName
+ principalEmail = $Member.Email
+ principalType = Get-CIPPSpoPrincipalType -Entity $Member
+ permissionLevel = $RoleBinding.Name
+ roleDefinitionId = $RoleBinding.Id
+ roles = @()
+ isSiteAdmin = $false
+ isGuest = (Test-CIPPSpoGuestUser -User $Member)
+ permissionId = $null
+ linkScope = $null
+ linkType = $null
+ linkUrl = $null
+ hasPassword = $null
+ expirationDateTime = $null
+ sharedWith = @()
+ libraryTitle = $LibraryTitle
+ }
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPSpoUserGrant.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPSpoUserGrant.ps1
new file mode 100644
index 0000000000..929686601c
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/New-CIPPSpoUserGrant.ps1
@@ -0,0 +1,34 @@
+function New-CIPPSpoUserGrant {
+ param(
+ $User,
+ [string]$PermissionSource,
+ [string]$Group,
+ $RoleBinding = $null,
+ [bool]$IsSiteAdmin = $false,
+ [string]$LibraryTitle = $null
+ )
+ [PSCustomObject]@{
+ permissionSource = $PermissionSource
+ group = $Group
+ principalId = [string]$User.Id
+ principalObjectId = $null
+ principalUpn = Get-CIPPSpoUserUpn -User $User
+ principalDisplayName = $User.Title
+ principalLoginName = $User.LoginName
+ principalEmail = $User.Email
+ principalType = Get-CIPPSpoPrincipalType -Entity $User
+ permissionLevel = if ($RoleBinding) { $RoleBinding.Name } else { $null }
+ roleDefinitionId = if ($RoleBinding) { $RoleBinding.Id } else { $null }
+ roles = @()
+ isSiteAdmin = $IsSiteAdmin
+ isGuest = (Test-CIPPSpoGuestUser -User $User)
+ permissionId = $null
+ linkScope = $null
+ linkType = $null
+ linkUrl = $null
+ hasPassword = $null
+ expirationDateTime = $null
+ sharedWith = @()
+ libraryTitle = $LibraryTitle
+ }
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Push-DBCacheOneDriveRootPermissionsBatch.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Push-DBCacheOneDriveRootPermissionsBatch.ps1
index fedf89eacd..1d43ec83bc 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Push-DBCacheOneDriveRootPermissionsBatch.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Push-DBCacheOneDriveRootPermissionsBatch.ps1
@@ -21,14 +21,14 @@ function Push-DBCacheOneDriveRootPermissionsBatch {
never truthy checks. $null on batch Skipped rows; after merge-on-Skip at store, merged sites
retain prior hasNonStandardAccess from the cached Full row.
- Test-IsOwnerPrincipal compares grants to the provisioned owner (drive.owner.user.id):
+ Test-CIPPOneDriveOwnerPrincipal compares grants to the provisioned owner (drive.owner.user.id):
principalObjectId match, principalUpn -ieq, or LoginName claim suffix -ieq owner UPN.
Dedup inside permissionsJson:
- WebRoleAssignment: skip Member.Id matching associated Owner/Member/Visitor group Ids
- LibraryRoleAssignment: only when HasUniqueRoleAssignments is true
- DriveRootGrant: skip siteGroup.displayName matching associated group Title (case-insensitive);
- skip implicit owner grant (roles contains 'owner' + Test-IsOwnerPrincipal)
+ skip implicit owner grant (roles contains 'owner' + Test-CIPPOneDriveOwnerPrincipal)
- Intentional cross-path duplicates remain (e.g. same user on SiteAdmin and SiteRoleGroup)
Graph root permissions: skip inheritedFrom; paginate via New-GraphGetRequest; DriveRootGrant
@@ -59,479 +59,6 @@ function Push-DBCacheOneDriveRootPermissionsBatch {
$BatchNumber = $Item.BatchNumber
$SiteSeeds = @($Item.Sites)
- # Returns $true when a SharePoint user entity is a guest/external identity.
- function Test-SPGuestUser {
- param($User)
- [bool]$User.IsShareByEmailGuestUser -or [bool]$User.IsEmailAuthenticationGuestUser -or
- ($User.LoginName -match '(?i)#ext#|urn%3aspo%3aguest')
- }
-
- # Compares a grant principal to the provisioned OneDrive owner (drive.owner).
- function Test-IsOwnerPrincipal {
- param($Grant, $OwnerObjectId, $OwnerPrincipalName)
- if ($OwnerObjectId -and $Grant.principalObjectId -and
- $Grant.principalObjectId -eq $OwnerObjectId) { return $true }
- if ($OwnerPrincipalName -and $Grant.principalUpn -and
- $Grant.principalUpn -ieq $OwnerPrincipalName) { return $true }
- if ($OwnerPrincipalName -and $Grant.principalLoginName -and
- ($Grant.principalLoginName -split '\|')[-1] -ieq $OwnerPrincipalName) { return $true }
- return $false
- }
-
- function Get-CIPPSpoPrincipalType {
- param($Entity)
- if ($Entity.LoginName -match '(?i)federateddirectoryclaimprovider') { return 'M365 Group' }
- switch ($Entity.PrincipalType) {
- 1 { 'User' }
- 4 { 'Security Group' }
- 8 { 'SharePoint Group' }
- default { 'Other' }
- }
- }
-
- function Get-CIPPSpoUserUpn {
- param($User)
- if ($User.PrincipalType -eq 1 -and $User.LoginName) {
- return ($User.LoginName -split '\|')[-1]
- }
- $null
- }
-
- function New-CIPPSpoUserGrant {
- param(
- $User,
- [string]$PermissionSource,
- [string]$Group,
- $RoleBinding = $null,
- [bool]$IsSiteAdmin = $false,
- [string]$LibraryTitle = $null
- )
- [PSCustomObject]@{
- permissionSource = $PermissionSource
- group = $Group
- principalId = [string]$User.Id
- principalObjectId = $null
- principalUpn = Get-CIPPSpoUserUpn -User $User
- principalDisplayName = $User.Title
- principalLoginName = $User.LoginName
- principalEmail = $User.Email
- principalType = Get-CIPPSpoPrincipalType -Entity $User
- permissionLevel = if ($RoleBinding) { $RoleBinding.Name } else { $null }
- roleDefinitionId = if ($RoleBinding) { $RoleBinding.Id } else { $null }
- roles = @()
- isSiteAdmin = $IsSiteAdmin
- isGuest = (Test-SPGuestUser -User $User)
- permissionId = $null
- linkScope = $null
- linkType = $null
- linkUrl = $null
- hasPassword = $null
- expirationDateTime = $null
- sharedWith = @()
- libraryTitle = $LibraryTitle
- }
- }
-
- function New-CIPPSpoRoleAssignmentGrant {
- param($Member, $RoleBinding, [string]$PermissionSource, [string]$LibraryTitle = $null)
- $principalUpn = if ($Member.PrincipalType -eq 1 -and $Member.LoginName) {
- ($Member.LoginName -split '\|')[-1]
- } else { $null }
- [PSCustomObject]@{
- permissionSource = $PermissionSource
- group = $RoleBinding.Name
- principalId = [string]$Member.Id
- principalObjectId = $null
- principalUpn = $principalUpn
- principalDisplayName = $Member.Title
- principalLoginName = $Member.LoginName
- principalEmail = $Member.Email
- principalType = Get-CIPPSpoPrincipalType -Entity $Member
- permissionLevel = $RoleBinding.Name
- roleDefinitionId = $RoleBinding.Id
- roles = @()
- isSiteAdmin = $false
- isGuest = (Test-SPGuestUser -User $Member)
- permissionId = $null
- linkScope = $null
- linkType = $null
- linkUrl = $null
- hasPassword = $null
- expirationDateTime = $null
- sharedWith = @()
- libraryTitle = $LibraryTitle
- }
- }
-
- function Get-CIPPGraphIdentityLabel {
- param($Identity)
- $Identity.user.email ?? $Identity.user.userPrincipalName ??
- $Identity.siteUser.email ?? $Identity.user.displayName ??
- $Identity.siteUser.displayName ?? $Identity.group.email ??
- $Identity.group.displayName ?? $Identity.siteGroup.displayName ??
- $Identity.application.displayName
- }
-
- function Test-CIPPGraphGuestIdentity {
- param($Identity)
- $LoginName = [string]($Identity.siteUser.loginName ?? $Identity.user.loginName ?? '')
- if ($LoginName -match '(?i)#ext#|urn%3aspo%3aguest|urn:spo:guest') { return $true }
- $Email = [string]($Identity.user.email ?? $Identity.user.userPrincipalName ?? $Identity.siteUser.email ?? '')
- $Email -match '(?i)#EXT#'
- }
-
- function New-CIPPGraphIdentityGrant {
- param(
- $Identity,
- [string]$PermissionSource,
- [string]$PermissionId,
- [array]$Roles,
- [array]$SharedWith,
- $LinkProps = $null
- )
- $principalType = 'Other'
- $principalObjectId = $null
- $principalUpn = $null
- $principalDisplayName = $null
- $principalLoginName = $null
- $principalEmail = $null
- $principalId = $null
-
- if ($Identity.user) {
- $principalType = 'User'
- $principalObjectId = $Identity.user.id
- $principalUpn = $Identity.user.userPrincipalName ?? $Identity.user.email
- $principalDisplayName = $Identity.user.displayName
- $principalEmail = $Identity.user.email ?? $Identity.user.userPrincipalName
- $principalId = [string]($Identity.user.id ?? $principalUpn)
- } elseif ($Identity.siteUser) {
- $principalType = 'User'
- $principalLoginName = $Identity.siteUser.loginName
- $principalDisplayName = $Identity.siteUser.displayName
- $principalEmail = $Identity.siteUser.email
- $principalUpn = if ($principalLoginName) { ($principalLoginName -split '\|')[-1] } else { $null }
- $principalId = [string]($principalLoginName ?? $principalEmail ?? $principalDisplayName)
- } elseif ($Identity.group) {
- $principalType = 'Security Group'
- $principalObjectId = $Identity.group.id
- $principalDisplayName = $Identity.group.displayName
- $principalEmail = $Identity.group.email
- $principalId = [string]$Identity.group.id
- } elseif ($Identity.siteGroup) {
- $principalType = 'SharePoint Group'
- $principalDisplayName = $Identity.siteGroup.displayName
- $principalId = [string]($Identity.siteGroup.id ?? $Identity.siteGroup.displayName)
- } elseif ($Identity.application) {
- $principalType = 'Application'
- $principalDisplayName = $Identity.application.displayName
- $principalId = [string]$Identity.application.id
- }
-
- $grant = [PSCustomObject]@{
- permissionSource = $PermissionSource
- group = $null
- principalId = $principalId
- principalObjectId = $principalObjectId
- principalUpn = $principalUpn
- principalDisplayName = $principalDisplayName
- principalLoginName = $principalLoginName
- principalEmail = $principalEmail
- principalType = $principalType
- permissionLevel = $null
- roleDefinitionId = $null
- roles = @($Roles)
- isSiteAdmin = $false
- isGuest = (Test-CIPPGraphGuestIdentity -Identity $Identity)
- permissionId = $PermissionId
- linkScope = $null
- linkType = $null
- linkUrl = $null
- hasPassword = $null
- expirationDateTime = $null
- sharedWith = @($SharedWith)
- libraryTitle = $null
- }
-
- if ($LinkProps) {
- $grant.linkScope = $LinkProps.linkScope
- $grant.linkType = $LinkProps.linkType
- $grant.linkUrl = $LinkProps.linkUrl
- $grant.hasPassword = $LinkProps.hasPassword
- $grant.expirationDateTime = $LinkProps.expirationDateTime
- $grant.principalType = 'Link'
- }
-
- $grant
- }
-
- function Get-CIPPHasNonStandardAccess {
- param($Grants, $OwnerObjectId, $OwnerPrincipalName, $LibraryHasUniquePermissions, $CollectionStatus)
- if ($CollectionStatus -eq 'Skipped') { return $null }
- if ($LibraryHasUniquePermissions) { return $true }
-
- foreach ($Grant in $Grants) {
- if ($Grant.permissionSource -eq 'SiteAdmin' -and -not (Test-IsOwnerPrincipal -Grant $Grant -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
- return $true
- }
- if ($Grant.permissionSource -eq 'SiteRoleGroup' -and $Grant.group -in @('Members', 'Visitors')) {
- return $true
- }
- if ($Grant.permissionSource -eq 'SiteRoleGroup' -and $Grant.group -eq 'Owners' -and
- -not (Test-IsOwnerPrincipal -Grant $Grant -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
- return $true
- }
- if ($Grant.principalType -in @('Security Group', 'M365 Group', 'SharePoint Group')) {
- return $true
- }
- if ($Grant.isGuest) { return $true }
- if ($Grant.permissionSource -eq 'DriveRootLink') { return $true }
- if ($Grant.permissionSource -eq 'DriveRootGrant' -and
- -not (Test-IsOwnerPrincipal -Grant $Grant -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
- return $true
- }
- if ($Grant.permissionSource -in @('WebRoleAssignment', 'LibraryRoleAssignment') -and
- -not (Test-IsOwnerPrincipal -Grant $Grant -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
- return $true
- }
- }
- return $false
- }
-
- function New-CIPPSkippedSiteRow {
- param($SiteSeed, $CollectionError)
- [PSCustomObject]@{
- id = $SiteSeed.id
- siteId = $SiteSeed.id
- siteUrl = $SiteSeed.webUrl
- siteDisplayName = $SiteSeed.displayName
- ownerPrincipalName = $null
- ownerObjectId = $null
- ownerDisplayName = $null
- driveId = $null
- driveWebUrl = $null
- libraryId = $null
- libraryHasUniquePermissions = $false
- collectionStatus = 'Skipped'
- collectionError = $CollectionError
- hasNonStandardAccess = $null
- permissionsJson = '[]'
- grantCount = 0
- collectedAt = (Get-Date).ToUniversalTime().ToString('o')
- }
- }
-
- function Get-CIPPOneDriveSiteRow {
- param($SiteSeed, $TenantFilter)
-
- $SiteId = $SiteSeed.id
- $SiteUrl = $SiteSeed.webUrl
- $SiteDisplayName = $SiteSeed.displayName
- $CollectedAt = (Get-Date).ToUniversalTime().ToString('o')
-
- $Drive = $null
- try {
- $Drive = New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/sites/$SiteId/drive?`$select=id,owner,webUrl,sharepointIds" -tenantid $TenantFilter -asapp $true
- } catch {
- return (New-CIPPSkippedSiteRow -SiteSeed $SiteSeed -CollectionError "Drive resolution failed: $($_.Exception.Message)")
- }
-
- if (-not $Drive -or -not $Drive.id) {
- return (New-CIPPSkippedSiteRow -SiteSeed $SiteSeed -CollectionError 'Drive resolution returned no drive')
- }
-
- $OwnerObjectId = $Drive.owner.user.id
- $OwnerDisplayName = $Drive.owner.user.displayName
- $OwnerPrincipalName = $Drive.owner.user.userPrincipalName ?? $Drive.owner.user.email
- if (-not $OwnerPrincipalName -and $OwnerObjectId) {
- try {
- $OwnerUser = New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/users/$($OwnerObjectId)?`$select=userPrincipalName" -tenantid $TenantFilter -asapp $true
- $OwnerPrincipalName = $OwnerUser.userPrincipalName
- } catch {
- $OwnerPrincipalName = $null
- }
- }
-
- $DriveId = $Drive.id
- $DriveWebUrl = $Drive.webUrl
- $LibraryId = $Drive.sharepointIds.listId
- $LibraryHasUniquePermissions = $false
- $LibraryTitle = $null
-
- $SpoGrants = [System.Collections.Generic.List[object]]::new()
- $AssociatedGroupIds = [System.Collections.Generic.HashSet[string]]::new()
- $AssociatedGroupTitles = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)
-
- try {
- $RestContext = Resolve-CIPPSharePointRestContext -TenantFilter $TenantFilter -SiteUrl $SiteUrl
- $Scope = $RestContext.Scope
- $JsonAccept = $RestContext.Headers
- $BaseUri = $RestContext.BaseUri
-
- $AssociatedEndpoints = [ordered]@{
- 'Owners' = 'associatedownergroup'
- 'Members' = 'associatedmembergroup'
- 'Visitors' = 'associatedvisitorgroup'
- }
- foreach ($RoleName in $AssociatedEndpoints.Keys) {
- $GroupEntity = New-GraphGetRequest -uri "$BaseUri/web/$($AssociatedEndpoints[$RoleName])?`$select=Id,Title" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true
- if ($GroupEntity.Id) {
- [void]$AssociatedGroupIds.Add([string]$GroupEntity.Id)
- if ($GroupEntity.Title) { [void]$AssociatedGroupTitles.Add([string]$GroupEntity.Title) }
- }
- }
-
- $SiteAdmins = @(New-GraphGetRequest -uri "$BaseUri/web/siteusers?`$filter=IsSiteAdmin eq true&`$select=Id,Title,Email,LoginName,PrincipalType,IsShareByEmailGuestUser,IsEmailAuthenticationGuestUser" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true)
- foreach ($Admin in $SiteAdmins) {
- $SpoGrants.Add((New-CIPPSpoUserGrant -User $Admin -PermissionSource 'SiteAdmin' -Group 'Site Admins' -IsSiteAdmin $true))
- }
-
- foreach ($RoleName in $AssociatedEndpoints.Keys) {
- $Users = @(New-GraphGetRequest -uri "$BaseUri/web/$($AssociatedEndpoints[$RoleName])/users?`$select=Id,Title,Email,LoginName,PrincipalType,IsShareByEmailGuestUser,IsEmailAuthenticationGuestUser" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true)
- foreach ($User in $Users) {
- $SpoGrants.Add((New-CIPPSpoUserGrant -User $User -PermissionSource 'SiteRoleGroup' -Group $RoleName))
- }
- }
-
- $WebAssignments = @(New-GraphGetRequest -uri "$BaseUri/web/roleassignments?`$expand=Member,RoleDefinitionBindings" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true)
- foreach ($Assignment in $WebAssignments) {
- if ($Assignment.Member.Id -and $AssociatedGroupIds.Contains([string]$Assignment.Member.Id)) { continue }
- foreach ($Binding in @($Assignment.RoleDefinitionBindings)) {
- $SpoGrants.Add((New-CIPPSpoRoleAssignmentGrant -Member $Assignment.Member -RoleBinding $Binding -PermissionSource 'WebRoleAssignment'))
- }
- }
-
- if ($LibraryId) {
- $ListInfo = New-GraphGetRequest -uri "$BaseUri/web/lists(guid'$LibraryId')?`$select=HasUniqueRoleAssignments,Title" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true
- $LibraryHasUniquePermissions = [bool]$ListInfo.HasUniqueRoleAssignments
- $LibraryTitle = $ListInfo.Title
- if ($LibraryHasUniquePermissions) {
- $LibraryAssignments = @(New-GraphGetRequest -uri "$BaseUri/web/lists(guid'$LibraryId')/roleassignments?`$expand=Member,RoleDefinitionBindings" -tenantid $TenantFilter -scope $Scope -extraHeaders $JsonAccept -UseCertificate -AsApp $true)
- foreach ($Assignment in $LibraryAssignments) {
- if ($Assignment.Member.Id -and $AssociatedGroupIds.Contains([string]$Assignment.Member.Id)) { continue }
- foreach ($Binding in @($Assignment.RoleDefinitionBindings)) {
- $SpoGrants.Add((New-CIPPSpoRoleAssignmentGrant -Member $Assignment.Member -RoleBinding $Binding -PermissionSource 'LibraryRoleAssignment' -LibraryTitle $LibraryTitle))
- }
- }
- }
- }
-
- } catch {
- $SpoError = $_.Exception.Message
- Write-LogMessage -API 'CIPPDBCache' -tenant $TenantFilter -message "OneDrive root permissions: SPO collection failed for '$SiteUrl': $SpoError" -sev Warning
- return (New-CIPPSkippedSiteRow -SiteSeed $SiteSeed -CollectionError "SPO collection failed: $SpoError")
- }
-
- $GraphGrants = [System.Collections.Generic.List[object]]::new()
- $InheritedSkipCount = 0
- try {
- $Permissions = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/sites/$SiteId/drive/root/permissions" -tenantid $TenantFilter -asapp $true)
- foreach ($Permission in $Permissions) {
- if ($Permission.inheritedFrom) {
- $InheritedSkipCount++
- continue
- }
-
- if ($Permission.link) {
- $Recipients = @($Permission.grantedToIdentitiesV2 ?? $Permission.grantedToIdentities ?? @())
- $SharedWith = @($Recipients | ForEach-Object { Get-CIPPGraphIdentityLabel -Identity $_ } | Where-Object { $_ } | Sort-Object -Unique)
- $LinkProps = @{
- linkScope = $Permission.link.scope ?? 'users'
- linkType = $Permission.link.type ?? 'view'
- linkUrl = $Permission.link.webUrl
- hasPassword = [bool]($Permission.hasPassword ?? $false)
- expirationDateTime = $Permission.expirationDateTime
- }
- if ($Recipients.Count -eq 0) {
- $GraphGrants.Add([PSCustomObject]@{
- permissionSource = 'DriveRootLink'
- group = $null
- principalId = [string]$Permission.id
- principalObjectId = $null
- principalUpn = $null
- principalDisplayName = $null
- principalLoginName = $null
- principalEmail = $null
- principalType = 'Link'
- permissionLevel = $null
- roleDefinitionId = $null
- roles = @($Permission.roles)
- isSiteAdmin = $false
- isGuest = $false
- permissionId = [string]$Permission.id
- linkScope = $LinkProps.linkScope
- linkType = $LinkProps.linkType
- linkUrl = $LinkProps.linkUrl
- hasPassword = $LinkProps.hasPassword
- expirationDateTime = $LinkProps.expirationDateTime
- sharedWith = @()
- libraryTitle = $null
- })
- } else {
- foreach ($Recipient in $Recipients) {
- $GraphGrants.Add((New-CIPPGraphIdentityGrant -Identity $Recipient -PermissionSource 'DriveRootLink' -PermissionId $Permission.id -Roles @($Permission.roles) -SharedWith $SharedWith -LinkProps $LinkProps))
- }
- }
- continue
- }
-
- $Recipients = @($Permission.grantedToIdentitiesV2 ?? @())
- if ($Recipients.Count -eq 0 -and $Permission.grantedToV2) {
- $Recipients = @($Permission.grantedToV2)
- }
- if ($Recipients.Count -eq 0) { continue }
-
- $SharedWith = @($Recipients | ForEach-Object { Get-CIPPGraphIdentityLabel -Identity $_ } | Where-Object { $_ } | Sort-Object -Unique)
- foreach ($Recipient in $Recipients) {
- if ($Recipient.siteGroup -and $Recipient.siteGroup.displayName -and
- $AssociatedGroupTitles.Contains([string]$Recipient.siteGroup.displayName)) {
- Write-LogMessage -API 'CIPPDBCache' -tenant $TenantFilter -message "OneDrive root permissions: siteGroup dedup matched '$($Recipient.siteGroup.displayName)' on '$SiteUrl'" -sev Debug
- continue
- }
- $Candidate = New-CIPPGraphIdentityGrant -Identity $Recipient -PermissionSource 'DriveRootGrant' -PermissionId $Permission.id -Roles @($Permission.roles) -SharedWith $SharedWith
- if ($Permission.roles -contains 'owner' -and
- (Test-IsOwnerPrincipal -Grant $Candidate -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName)) {
- continue
- }
- $GraphGrants.Add($Candidate)
- }
- }
- if ($InheritedSkipCount -gt 0) {
- Write-LogMessage -API 'CIPPDBCache' -tenant $TenantFilter -message "OneDrive root permissions: skipped $InheritedSkipCount inherited root permissions on '$SiteUrl'" -sev Debug
- }
- } catch {
- return (New-CIPPSkippedSiteRow -SiteSeed $SiteSeed -CollectionError "Graph root permissions failed: $($_.Exception.Message)")
- }
-
- $AllGrants = @($SpoGrants) + @($GraphGrants)
-
- $HasNonStandardAccess = Get-CIPPHasNonStandardAccess -Grants $AllGrants -OwnerObjectId $OwnerObjectId -OwnerPrincipalName $OwnerPrincipalName -LibraryHasUniquePermissions $LibraryHasUniquePermissions -CollectionStatus 'Full'
- $PermissionsJson = if ($AllGrants.Count -gt 0) {
- ConvertTo-Json -InputObject @($AllGrants) -Compress -Depth 10
- } else {
- '[]'
- }
-
- [PSCustomObject]@{
- id = $SiteId
- siteId = $SiteId
- siteUrl = $SiteUrl
- siteDisplayName = $SiteDisplayName
- ownerPrincipalName = $OwnerPrincipalName
- ownerObjectId = $OwnerObjectId
- ownerDisplayName = $OwnerDisplayName
- driveId = $DriveId
- driveWebUrl = $DriveWebUrl
- libraryId = $LibraryId
- libraryHasUniquePermissions = $LibraryHasUniquePermissions
- collectionStatus = 'Full'
- collectionError = $null
- hasNonStandardAccess = $HasNonStandardAccess
- permissionsJson = $PermissionsJson
- grantCount = $AllGrants.Count
- collectedAt = $CollectedAt
- }
- }
-
$SiteRows = [System.Collections.Generic.List[object]]::new()
try {
@@ -542,7 +69,7 @@ function Push-DBCacheOneDriveRootPermissionsBatch {
$SiteRows.Add((Get-CIPPOneDriveSiteRow -SiteSeed $SiteSeed -TenantFilter $TenantFilter))
} catch {
Write-LogMessage -API 'CIPPDBCache' -tenant $TenantFilter -message "OneDrive root permissions: unexpected site error for '$($SiteSeed.webUrl)': $($_.Exception.Message)" -sev Warning -LogData (Get-CippException -Exception $_)
- $SiteRows.Add((New-CIPPSkippedSiteRow -SiteSeed $SiteSeed -CollectionError $_.Exception.Message))
+ $SiteRows.Add((New-CIPPOneDriveSkippedSiteRow -SiteSeed $SiteSeed -CollectionError $_.Exception.Message))
}
}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPGraphGuestIdentity.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPGraphGuestIdentity.ps1
new file mode 100644
index 0000000000..1816926bc9
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPGraphGuestIdentity.ps1
@@ -0,0 +1,7 @@
+function Test-CIPPGraphGuestIdentity {
+ param($Identity)
+ $LoginName = [string]($Identity.siteUser.loginName ?? $Identity.user.loginName ?? '')
+ if ($LoginName -match '(?i)#ext#|urn%3aspo%3aguest|urn:spo:guest') { return $true }
+ $Email = [string]($Identity.user.email ?? $Identity.user.userPrincipalName ?? $Identity.siteUser.email ?? '')
+ $Email -match '(?i)#EXT#'
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPOneDriveOwnerPrincipal.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPOneDriveOwnerPrincipal.ps1
new file mode 100644
index 0000000000..38c30dbfeb
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPOneDriveOwnerPrincipal.ps1
@@ -0,0 +1,11 @@
+# Compares a grant principal to the provisioned OneDrive owner (drive.owner).
+function Test-CIPPOneDriveOwnerPrincipal {
+ param($Grant, $OwnerObjectId, $OwnerPrincipalName)
+ if ($OwnerObjectId -and $Grant.principalObjectId -and
+ $Grant.principalObjectId -eq $OwnerObjectId) { return $true }
+ if ($OwnerPrincipalName -and $Grant.principalUpn -and
+ $Grant.principalUpn -ieq $OwnerPrincipalName) { return $true }
+ if ($OwnerPrincipalName -and $Grant.principalLoginName -and
+ ($Grant.principalLoginName -split '\|')[-1] -ieq $OwnerPrincipalName) { return $true }
+ return $false
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPSpoGuestUser.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPSpoGuestUser.ps1
new file mode 100644
index 0000000000..a4e3f023db
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/OneDrive Root Permissions/Test-CIPPSpoGuestUser.ps1
@@ -0,0 +1,6 @@
+# Returns $true when a SharePoint user entity is a guest/external identity.
+function Test-CIPPSpoGuestUser {
+ param($User)
+ [bool]$User.IsShareByEmailGuestUser -or [bool]$User.IsEmailAuthenticationGuestUser -or
+ ($User.LoginName -match '(?i)#ext#|urn%3aspo%3aguest')
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAddMultiTenantApp.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAddMultiTenantApp.ps1
index 09b7c2c48e..ed3d47b548 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAddMultiTenantApp.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAddMultiTenantApp.ps1
@@ -2,6 +2,8 @@ function Push-ExecAddMultiTenantApp {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAlertsListAllTenants.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAlertsListAllTenants.ps1
index ef453904ed..6270860dd3 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAlertsListAllTenants.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAlertsListAllTenants.ps1
@@ -2,6 +2,8 @@ function Push-ExecAlertsListAllTenants {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /security/alerts_v2 | Delegated | SecurityAlert.Read.All | SecurityAlert.ReadWrite.All
#>
[CmdletBinding()]
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAppApprovalTemplate.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAppApprovalTemplate.ps1
index 50c8573c05..bf4c01d154 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAppApprovalTemplate.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecAppApprovalTemplate.ps1
@@ -2,6 +2,15 @@ function Push-ExecAppApprovalTemplate {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | POST /applications | Delegated | AppRegistration.Create | Application.ReadWrite.All
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /applications(appId='{id}') | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications(appId='{id}') | Delegated | Application.ReadWrite.All
+ Permission: Graph | POST /applicationTemplates/{id}/instantiate | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /servicePrincipals/{id} | Delegated | Application.ReadWrite.All | AgentIdentity.ReadWrite.All, Directory.ReadWrite.All
#>
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecIncidentsListAllTenants.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecIncidentsListAllTenants.ps1
index ac5bbb4899..de192e0a2c 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecIncidentsListAllTenants.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecIncidentsListAllTenants.ps1
@@ -2,6 +2,8 @@ function Push-ExecIncidentsListAllTenants {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /security/incidents | Application | SecurityIncident.Read.All | SecurityIncident.ReadWrite.All
#>
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecJITAdminListAllTenants.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecJITAdminListAllTenants.ps1
index 79ffdb7bd5..d0724f8f9e 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecJITAdminListAllTenants.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecJITAdminListAllTenants.ps1
@@ -2,6 +2,9 @@ function Push-ExecJITAdminListAllTenants {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/memberOf/microsoft.graph.directoryRole | Delegated | User.Read | Directory.Read.All, Directory.ReadWrite.All, Group.ReadBasic.All, GroupMember.Read.All, GroupMember.ReadBasic.All
#>
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecMdoAlertsListAllTenants.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecMdoAlertsListAllTenants.ps1
index 7485073537..b8a4526ec6 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecMdoAlertsListAllTenants.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecMdoAlertsListAllTenants.ps1
@@ -2,6 +2,8 @@ function Push-ExecMdoAlertsListAllTenants {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /security/alerts_v2 | Delegated | SecurityAlert.Read.All | SecurityAlert.ReadWrite.All
#>
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecOnboardTenantQueue.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecOnboardTenantQueue.ps1
index 6c88e3f695..7d6df7782b 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecOnboardTenantQueue.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecOnboardTenantQueue.ps1
@@ -2,6 +2,12 @@ function Push-ExecOnboardTenantQueue {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | POST /groups/{id}/members/$ref | Application | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | GET /me | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id} | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecTestMessageTrace.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecTestMessageTrace.ps1
index d6e09de92a..46d7f5992e 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecTestMessageTrace.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ExecTestMessageTrace.ps1
@@ -7,6 +7,9 @@ function Push-ExecTestMessageTrace {
evaluating the rules, and the dropped message's trace carries one event per rule that acted.
Waits for that trace to appear, reads its detail, lines it up against every mail flow rule in
the tenant, and records the verdict on the async deployment job so the page gets it live.
+ .NOTES
+ Permission: Graph | GET /admin/exchange/tracing/messageTraces | Application | ExchangeMessageTrace.Read.All
+ Permission: Graph | GET /admin/exchange/tracing/messageTraces/{id}/getDetailsByRecipient(recipientAddress='{id}') | Application | ExchangeMessageTrace.Read.All
#>
param($Item)
$Item = $Item | ConvertTo-Json -Depth 10 | ConvertFrom-Json
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ListBasicAuthAllTenants.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ListBasicAuthAllTenants.ps1
index faeb21039f..7e2bedf405 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ListBasicAuthAllTenants.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ListBasicAuthAllTenants.ps1
@@ -2,6 +2,8 @@ function Push-ListBasicAuthAllTenants {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Delegated | AuditLog.Read.All
#>
[CmdletBinding()]
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ListConditionalAccessPoliciesAllTenants.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ListConditionalAccessPoliciesAllTenants.ps1
index daf01e43ec..994da9fa89 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ListConditionalAccessPoliciesAllTenants.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Push-ListConditionalAccessPoliciesAllTenants.ps1
@@ -2,6 +2,14 @@
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /applications | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Application | Policy.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Application | RoleManagement.Read.Directory | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Add-CIPPSharingRows.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Add-CIPPSharingRows.ps1
new file mode 100644
index 0000000000..a224a5c0ac
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Add-CIPPSharingRows.ps1
@@ -0,0 +1,31 @@
+# Fetch permissions for a buffer of shared delta items and append their rows to $RowsOut.
+# Failed batch responses are counted into $DropCounter: a full scan that lost reads must not
+# prune the unread items' still-valid rows afterwards.
+function Add-CIPPSharingRows {
+ <#
+ .NOTES
+ Permission: Graph | GET /drives/{id}/items/{id}/permissions | Application | Files.Read.All | Files.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
+ #>
+ param($Buffer, $Drive, $Site, $InternalDomains, $TenantFilter, $PassId, $RowsOut, [ref]$DropCounter)
+ if (@($Buffer).Count -eq 0) { return }
+ $ItemByRequestId = @{}
+ $RequestId = 0
+ $PermissionRequests = foreach ($SharedItem in $Buffer) {
+ $ItemByRequestId["$RequestId"] = $SharedItem
+ @{
+ id = "$RequestId"
+ method = 'GET'
+ url = "drives/$($Drive.id)/items/$($SharedItem.id)/permissions"
+ }
+ $RequestId++
+ }
+ $PermissionResponses = New-GraphBulkRequest -tenantid $TenantFilter -Requests @($PermissionRequests) -asapp $true
+ foreach ($Response in $PermissionResponses) {
+ if ($Response.status -and $Response.status -ne 200) {
+ if ($DropCounter) { $DropCounter.Value++ }
+ continue
+ }
+ $DriveItem = $ItemByRequestId["$($Response.id)"]
+ ConvertTo-CIPPSharingRow -Permissions @($Response.body.value) -DriveItem $DriveItem -Drive $Drive -Site $Site -InternalDomains $InternalDomains -TenantFilter $TenantFilter -PassId $PassId -RowsOut $RowsOut
+ }
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/ConvertTo-CIPPSharingRow.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/ConvertTo-CIPPSharingRow.ps1
new file mode 100644
index 0000000000..fe4a691993
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/ConvertTo-CIPPSharingRow.ps1
@@ -0,0 +1,72 @@
+# Converts one item's permission array into report rows. Shared by every scan mode; the only
+# difference between modes is where the permissions came from.
+function ConvertTo-CIPPSharingRow {
+ param($Permissions, $DriveItem, $Drive, $Site, $InternalDomains, $TenantFilter, $PassId, $RowsOut)
+ foreach ($Permission in @($Permissions)) {
+ # Only permissions set on the item itself; inherited ones are reported on their parent.
+ if ($Permission.inheritedFrom) { continue }
+
+ if ($Permission.link) {
+ $Recipients = @($Permission.grantedToIdentitiesV2 ?? $Permission.grantedToIdentities)
+ $LinkScope = $Permission.link.scope ?? 'users'
+ $Classification = switch ($LinkScope) {
+ 'anonymous' { 'Anonymous' }
+ 'organization' { 'Internal' }
+ 'existingAccess' { 'Internal' }
+ default {
+ $HasExternal = $false
+ foreach ($Recipient in $Recipients) {
+ if (Test-CIPPExternalIdentity -Identity $Recipient -InternalDomains $InternalDomains) { $HasExternal = $true; break }
+ }
+ if ($HasExternal) { 'External' } else { 'Internal' }
+ }
+ }
+ $LinkType = $Permission.link.type ?? 'link'
+ $LinkUrl = $Permission.link.webUrl
+ } else {
+ # Direct grant (no sharing link): only report grants to external users.
+ $Recipients = @($Permission.grantedToV2 ?? $Permission.grantedTo)
+ if ($Permission.roles -contains 'owner') { continue }
+ $HasExternal = $false
+ foreach ($Recipient in $Recipients) {
+ if (Test-CIPPExternalIdentity -Identity $Recipient -InternalDomains $InternalDomains) { $HasExternal = $true; break }
+ }
+ if (-not $HasExternal) { continue }
+ $Classification = 'External'
+ $LinkScope = 'direct'
+ $LinkType = 'directGrant'
+ $LinkUrl = $null
+ }
+
+ $SharedWith = @($Recipients | ForEach-Object { Get-CIPPIdentityLabel -Identity $_ } | Where-Object { $_ } | Sort-Object -Unique)
+
+ $Id = "$($Drive.id)_$($DriveItem.id)_$($Permission.id)"
+ $RowsOut.Add(@{
+ PartitionKey = $TenantFilter
+ RowKey = ([string]$Id -replace '[/\\#?]', '_' -replace '[\u0000-\u001F\u007F-\u009F]', '')
+ ScanId = $PassId
+ id = $Id
+ siteId = [string]$Site.SiteId
+ siteName = [string]$Site.SiteName
+ siteUrl = [string]$Site.SiteUrl
+ workload = if ($Site.IsPersonalSite) { 'OneDrive' } else { 'SharePoint' }
+ driveId = [string]$Drive.id
+ driveName = [string]$Drive.name
+ itemId = [string]$DriveItem.id
+ fileName = [string]$DriveItem.name
+ itemUrl = [string]$DriveItem.webUrl
+ itemType = if ($DriveItem.folder) { 'Folder' } else { 'File' }
+ size = [int64]($DriveItem.size ?? 0)
+ lastModifiedDateTime = if ($DriveItem.lastModifiedDateTime -is [datetime]) { $DriveItem.lastModifiedDateTime.ToUniversalTime().ToString('o') } else { [string]$DriveItem.lastModifiedDateTime }
+ permissionId = [string]$Permission.id
+ linkType = [string]$LinkType
+ linkScope = [string]$LinkScope
+ classification = [string]$Classification
+ roles = [string](ConvertTo-Json -InputObject @($Permission.roles) -Compress)
+ sharedWith = [string](ConvertTo-Json -InputObject @($SharedWith) -Compress)
+ linkUrl = [string]$LinkUrl
+ hasPassword = [bool]($Permission.hasPassword ?? $false)
+ expirationDateTime = if ($Permission.expirationDateTime -is [datetime]) { $Permission.expirationDateTime.ToUniversalTime().ToString('o') } else { [string]$Permission.expirationDateTime }
+ })
+ }
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Get-CIPPIdentityLabel.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Get-CIPPIdentityLabel.ps1
new file mode 100644
index 0000000000..6412055f81
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Get-CIPPIdentityLabel.ps1
@@ -0,0 +1,5 @@
+# Friendly display value for an identity, preferring email over display name.
+function Get-CIPPIdentityLabel {
+ param($Identity)
+ $Identity.user.email ?? $Identity.user.userPrincipalName ?? $Identity.siteUser.email ?? $Identity.user.displayName ?? $Identity.siteUser.displayName ?? $Identity.group.email ?? $Identity.group.displayName ?? $Identity.siteGroup.displayName
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Push-DBCacheSharePointSiteSharingLinks.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Push-DBCacheSharePointSiteSharingLinks.ps1
index 7a0c3caa56..6e0d180fbb 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Push-DBCacheSharePointSiteSharingLinks.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Push-DBCacheSharePointSiteSharingLinks.ps1
@@ -69,6 +69,10 @@ function Push-DBCacheSharePointSiteSharingLinks {
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /drives/{id}/root | Application | Files.Read.All | Files.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
+ Permission: Graph | GET /drives/{id}/root/delta | Application | Files.Read.All | Files.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/drives | Application | Files.Read.All | Files.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Item)
@@ -84,126 +88,6 @@ function Push-DBCacheSharePointSiteSharingLinks {
$InternalDomains = [System.Collections.Generic.HashSet[string]]::new([System.StringComparer]::OrdinalIgnoreCase)
foreach ($Domain in @($Item.InternalDomains)) { if ($Domain) { [void]$InternalDomains.Add([string]$Domain) } }
- # Returns $true when an identity (link recipient or direct grant) is external to the tenant.
- function Test-CIPPExternalIdentity {
- param($Identity, $InternalDomains)
- $LoginName = [string]($Identity.siteUser.loginName ?? $Identity.user.loginName ?? '')
- if ($LoginName -match '#ext#' -or $LoginName -match 'urn%3aspo%3aguest' -or $LoginName -match 'urn:spo:guest') { return $true }
- $Email = [string]($Identity.user.email ?? $Identity.user.userPrincipalName ?? $Identity.siteUser.email ?? '')
- if ($Email -match '#EXT#') { return $true }
- if ($Email -and $Email.Contains('@') -and $InternalDomains.Count -gt 0) {
- return -not $InternalDomains.Contains($Email.Split('@')[-1])
- }
- return $false
- }
-
- # Friendly display value for an identity, preferring email over display name.
- function Get-CIPPIdentityLabel {
- param($Identity)
- $Identity.user.email ?? $Identity.user.userPrincipalName ?? $Identity.siteUser.email ?? $Identity.user.displayName ?? $Identity.siteUser.displayName ?? $Identity.group.email ?? $Identity.group.displayName ?? $Identity.siteGroup.displayName
- }
-
- # Converts one item's permission array into report rows. Shared by every scan mode; the only
- # difference between modes is where the permissions came from.
- function ConvertTo-CIPPSharingRow {
- param($Permissions, $DriveItem, $Drive, $Site, $InternalDomains, $RowsOut)
- foreach ($Permission in @($Permissions)) {
- # Only permissions set on the item itself; inherited ones are reported on their parent.
- if ($Permission.inheritedFrom) { continue }
-
- if ($Permission.link) {
- $Recipients = @($Permission.grantedToIdentitiesV2 ?? $Permission.grantedToIdentities)
- $LinkScope = $Permission.link.scope ?? 'users'
- $Classification = switch ($LinkScope) {
- 'anonymous' { 'Anonymous' }
- 'organization' { 'Internal' }
- 'existingAccess' { 'Internal' }
- default {
- $HasExternal = $false
- foreach ($Recipient in $Recipients) {
- if (Test-CIPPExternalIdentity -Identity $Recipient -InternalDomains $InternalDomains) { $HasExternal = $true; break }
- }
- if ($HasExternal) { 'External' } else { 'Internal' }
- }
- }
- $LinkType = $Permission.link.type ?? 'link'
- $LinkUrl = $Permission.link.webUrl
- } else {
- # Direct grant (no sharing link): only report grants to external users.
- $Recipients = @($Permission.grantedToV2 ?? $Permission.grantedTo)
- if ($Permission.roles -contains 'owner') { continue }
- $HasExternal = $false
- foreach ($Recipient in $Recipients) {
- if (Test-CIPPExternalIdentity -Identity $Recipient -InternalDomains $InternalDomains) { $HasExternal = $true; break }
- }
- if (-not $HasExternal) { continue }
- $Classification = 'External'
- $LinkScope = 'direct'
- $LinkType = 'directGrant'
- $LinkUrl = $null
- }
-
- $SharedWith = @($Recipients | ForEach-Object { Get-CIPPIdentityLabel -Identity $_ } | Where-Object { $_ } | Sort-Object -Unique)
-
- $Id = "$($Drive.id)_$($DriveItem.id)_$($Permission.id)"
- $RowsOut.Add(@{
- PartitionKey = $TenantFilter
- RowKey = ([string]$Id -replace '[/\\#?]', '_' -replace '[\u0000-\u001F\u007F-\u009F]', '')
- ScanId = $PassId
- id = $Id
- siteId = [string]$Site.SiteId
- siteName = [string]$Site.SiteName
- siteUrl = [string]$Site.SiteUrl
- workload = if ($Site.IsPersonalSite) { 'OneDrive' } else { 'SharePoint' }
- driveId = [string]$Drive.id
- driveName = [string]$Drive.name
- itemId = [string]$DriveItem.id
- fileName = [string]$DriveItem.name
- itemUrl = [string]$DriveItem.webUrl
- itemType = if ($DriveItem.folder) { 'Folder' } else { 'File' }
- size = [int64]($DriveItem.size ?? 0)
- lastModifiedDateTime = if ($DriveItem.lastModifiedDateTime -is [datetime]) { $DriveItem.lastModifiedDateTime.ToUniversalTime().ToString('o') } else { [string]$DriveItem.lastModifiedDateTime }
- permissionId = [string]$Permission.id
- linkType = [string]$LinkType
- linkScope = [string]$LinkScope
- classification = [string]$Classification
- roles = [string](ConvertTo-Json -InputObject @($Permission.roles) -Compress)
- sharedWith = [string](ConvertTo-Json -InputObject @($SharedWith) -Compress)
- linkUrl = [string]$LinkUrl
- hasPassword = [bool]($Permission.hasPassword ?? $false)
- expirationDateTime = if ($Permission.expirationDateTime -is [datetime]) { $Permission.expirationDateTime.ToUniversalTime().ToString('o') } else { [string]$Permission.expirationDateTime }
- })
- }
- }
-
- # Fetch permissions for a buffer of shared delta items and append their rows to $RowsOut.
- # Failed batch responses are counted into $DropCounter: a full scan that lost reads must not
- # prune the unread items' still-valid rows afterwards.
- function Add-CIPPSharingRows {
- param($Buffer, $Drive, $Site, $InternalDomains, $TenantFilter, $RowsOut, [ref]$DropCounter)
- if (@($Buffer).Count -eq 0) { return }
- $ItemByRequestId = @{}
- $RequestId = 0
- $PermissionRequests = foreach ($SharedItem in $Buffer) {
- $ItemByRequestId["$RequestId"] = $SharedItem
- @{
- id = "$RequestId"
- method = 'GET'
- url = "drives/$($Drive.id)/items/$($SharedItem.id)/permissions"
- }
- $RequestId++
- }
- $PermissionResponses = New-GraphBulkRequest -tenantid $TenantFilter -Requests @($PermissionRequests) -asapp $true
- foreach ($Response in $PermissionResponses) {
- if ($Response.status -and $Response.status -ne 200) {
- if ($DropCounter) { $DropCounter.Value++ }
- continue
- }
- $DriveItem = $ItemByRequestId["$($Response.id)"]
- ConvertTo-CIPPSharingRow -Permissions @($Response.body.value) -DriveItem $DriveItem -Drive $Drive -Site $Site -InternalDomains $InternalDomains -RowsOut $RowsOut
- }
- }
-
# --- scan-state plumbing --------------------------------------------------------------------
# These read the surrounding activity's variables directly; they exist to keep the call sites
# readable, not to be reused.
@@ -569,7 +453,7 @@ function Push-DBCacheSharePointSiteSharingLinks {
# Rows for this page: permission lookups happen per page so the checkpoint below
# never advances past work that has not been persisted.
$PageRows = [System.Collections.Generic.List[object]]::new()
- Add-CIPPSharingRows -Buffer $Buffer -Drive $Drive -Site $SiteContext -InternalDomains $InternalDomains -TenantFilter $TenantFilter -RowsOut $PageRows -DropCounter ([ref]$DroppedReads)
+ Add-CIPPSharingRows -Buffer $Buffer -Drive $Drive -Site $SiteContext -InternalDomains $InternalDomains -TenantFilter $TenantFilter -PassId $PassId -RowsOut $PageRows -DropCounter ([ref]$DroppedReads)
if ($TombstoneRows.Count -gt 0) {
$null = Remove-CIPPAzDataTableEntity @LinksTable -Entity $TombstoneRows.ToArray() -Force
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Test-CIPPExternalIdentity.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Test-CIPPExternalIdentity.ps1
new file mode 100644
index 0000000000..9a0caf5eb6
--- /dev/null
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Test-CIPPExternalIdentity.ps1
@@ -0,0 +1,12 @@
+# Returns $true when an identity (link recipient or direct grant) is external to the tenant.
+function Test-CIPPExternalIdentity {
+ param($Identity, $InternalDomains)
+ $LoginName = [string]($Identity.siteUser.loginName ?? $Identity.user.loginName ?? '')
+ if ($LoginName -match '#ext#' -or $LoginName -match 'urn%3aspo%3aguest' -or $LoginName -match 'urn:spo:guest') { return $true }
+ $Email = [string]($Identity.user.email ?? $Identity.user.userPrincipalName ?? $Identity.siteUser.email ?? '')
+ if ($Email -match '#EXT#') { return $true }
+ if ($Email -and $Email.Contains('@') -and $InternalDomains.Count -gt 0) {
+ return -not $InternalDomains.Contains($Email.Split('@')[-1])
+ }
+ return $false
+}
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Storage Cleanup/Push-DBCacheStorageCleanupScanBatch.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Storage Cleanup/Push-DBCacheStorageCleanupScanBatch.ps1
index 2063a79d7f..878d043f7d 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Storage Cleanup/Push-DBCacheStorageCleanupScanBatch.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Storage Cleanup/Push-DBCacheStorageCleanupScanBatch.ps1
@@ -23,6 +23,8 @@ function Push-DBCacheStorageCleanupScanBatch {
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /sites/{id}/lists | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Item)
diff --git a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Standards/Push-CIPPStandardsList.ps1 b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Standards/Push-CIPPStandardsList.ps1
index 99eeb4918b..4a99d3a979 100644
--- a/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Standards/Push-CIPPStandardsList.ps1
+++ b/backend/Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/Standards/Push-CIPPStandardsList.ps1
@@ -2,6 +2,18 @@ function Push-CIPPStandardsList {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/managedAppPolicies | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceAppManagement/mobileAppConfigurations | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceCompliancePolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceConfigurations | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyConfigurations | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/hardwareConfigurations | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsDriverUpdateProfiles | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsFeatureUpdateProfiles | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsQualityUpdatePolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsQualityUpdateProfiles | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
param($Item)
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAdminPassword.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAdminPassword.ps1
index 4a04ff384d..98a6736378 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAdminPassword.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAdminPassword.ps1
@@ -3,6 +3,9 @@ function Get-CIPPAlertAdminPassword {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertApnCertExpiry.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertApnCertExpiry.ps1
index bb4fc57f70..5672f03926 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertApnCertExpiry.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertApnCertExpiry.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertApnCertExpiry {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /deviceManagement/applePushNotificationCertificate | Delegated | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
Param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAppSecretExpiry.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAppSecretExpiry.ps1
index 7c565cde49..3c96f1e813 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAppSecretExpiry.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAppSecretExpiry.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertAppSecretExpiry {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /applications | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.ReadWrite.All, Directory.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAppleTerms.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAppleTerms.ps1
index 773603abaa..22ba9e31ce 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAppleTerms.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertAppleTerms.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertAppleTerms {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /deviceManagement/depOnboardingSettings | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderAlerts.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderAlerts.ps1
index 72e7e2cc5a..3df14c31f5 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderAlerts.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderAlerts.ps1
@@ -3,6 +3,8 @@ function Get-CIPPAlertDefenderAlerts {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /security/alerts_v2 | Delegated | SecurityAlert.Read.All | SecurityAlert.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderIncidents.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderIncidents.ps1
index ef601fdc33..fd3e13ae3c 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderIncidents.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderIncidents.ps1
@@ -3,6 +3,8 @@ function Get-CIPPAlertDefenderIncidents {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /security/incidents | Delegated | SecurityIncident.Read.All | SecurityIncident.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderMalware.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderMalware.ps1
index 7c246e9009..e0c4edc508 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderMalware.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderMalware.ps1
@@ -3,6 +3,8 @@ function Get-CIPPAlertDefenderMalware {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /tenantRelationships/managedTenants/windowsDeviceMalwareStates | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderStatus.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderStatus.ps1
index 69bd64b4ca..9ace311620 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderStatus.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDefenderStatus.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertDefenderStatus {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /tenantRelationships/managedTenants/windowsProtectionStates | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeletedUserOneDriveAccess.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeletedUserOneDriveAccess.ps1
index e2fd0ea403..4f3003c170 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeletedUserOneDriveAccess.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeletedUserOneDriveAccess.ps1
@@ -25,6 +25,8 @@ function Get-CIPPAlertDeletedUserOneDriveAccess {
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDepTokenExpiry.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDepTokenExpiry.ps1
index 01ce26f829..a719a58595 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDepTokenExpiry.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDepTokenExpiry.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertDepTokenExpiry {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /deviceManagement/depOnboardingSettings | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeviceCompliance.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeviceCompliance.ps1
index d96a97a7d6..a4d43473ed 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeviceCompliance.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeviceCompliance.ps1
@@ -3,6 +3,8 @@ function Get-CIPPAlertDeviceCompliance {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeviceComplianceGracePeriod.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeviceComplianceGracePeriod.ps1
index f337a3ed23..d52093bae6 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeviceComplianceGracePeriod.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertDeviceComplianceGracePeriod.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertDeviceComplianceGracePeriod {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertEntraConnectSyncStatus.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertEntraConnectSyncStatus.ps1
index 253ccf63a3..7e2acec660 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertEntraConnectSyncStatus.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertEntraConnectSyncStatus.ps1
@@ -3,6 +3,8 @@ function Get-CIPPAlertEntraConnectSyncStatus {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertEntraLicenseUtilization.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertEntraLicenseUtilization.ps1
index f516b8eacf..d7fbfc3659 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertEntraLicenseUtilization.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertEntraLicenseUtilization.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertEntraLicenseUtilization {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /reports/azureADPremiumLicenseInsight | Delegated | Reports.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGlobalAdminAllowList.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGlobalAdminAllowList.ps1
index 1e658ab133..92e2f4863c 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGlobalAdminAllowList.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGlobalAdminAllowList.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertGlobalAdminAllowList {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /directoryRoles/roleTemplateId=62e90394-69f5-4237-9190-012177145e10/members | Application | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGlobalAdminNoAltEmail.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGlobalAdminNoAltEmail.ps1
index 1bd295f71c..2ac01a7660 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGlobalAdminNoAltEmail.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGlobalAdminNoAltEmail.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertGlobalAdminNoAltEmail {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /directoryRoles/roleTemplateId=62e90394-69f5-4237-9190-012177145e10/members | Application | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGroupMembershipChange.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGroupMembershipChange.ps1
index c880e995bf..633ece0f3f 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGroupMembershipChange.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertGroupMembershipChange.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertGroupMembershipChange {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /auditLogs/directoryAudits | Delegated | AuditLog.Read.All | Directory.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertHuntressRogueApps.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertHuntressRogueApps.ps1
index a1e1928b81..d7584c8012 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertHuntressRogueApps.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertHuntressRogueApps.ps1
@@ -8,6 +8,8 @@ function Get-CIPPAlertHuntressRogueApps {
Entrypoint
.LINK
https://huntresslabs.github.io/rogueapps/
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertIntuneApprovalRequests.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertIntuneApprovalRequests.ps1
index d4ebc6d7f6..d04fbcdf8f 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertIntuneApprovalRequests.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertIntuneApprovalRequests.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertIntuneApprovalRequests {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /deviceManagement/operationApprovalRequests | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementRBAC.Read.All, DeviceManagementRBAC.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLicenseAssignmentErrors.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLicenseAssignmentErrors.ps1
index 676b6fa6e0..393c36d806 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLicenseAssignmentErrors.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLicenseAssignmentErrors.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertLicenseAssignmentErrors {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLicensedUsersWithRoles.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLicensedUsersWithRoles.ps1
index 3f9b8167c8..eaea2dcd4e 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLicensedUsersWithRoles.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLicensedUsersWithRoles.ps1
@@ -2,6 +2,9 @@ function Get-CIPPAlertLicensedUsersWithRoles {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /directoryRoles | Delegated | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLongLivedAppCredentials.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLongLivedAppCredentials.ps1
index 15ded72b23..2bb15fee6b 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLongLivedAppCredentials.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertLongLivedAppCredentials.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertLongLivedAppCredentials {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /applications | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
#>
[CmdletBinding()]
Param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertMFAAdmins.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertMFAAdmins.ps1
index 3bda1a35cf..6e1f80c08a 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertMFAAdmins.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertMFAAdmins.ps1
@@ -2,6 +2,10 @@ function Get-CIPPAlertMFAAdmins {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/policies | Delegated | Policy.Read.All
+ Permission: Graph | GET /reports/authenticationMethods/userRegistrationDetails | Application | AuditLog.Read.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertMFAAlertUsers.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertMFAAlertUsers.ps1
index ca87c004b9..62f90b7024 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertMFAAlertUsers.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertMFAAlertUsers.ps1
@@ -2,6 +2,9 @@ function Get-CIPPAlertMFAAlertUsers {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /reports/authenticationMethods/userRegistrationDetails | Application | AuditLog.Read.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewAppApproval.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewAppApproval.ps1
index 4771de8399..4bd4378981 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewAppApproval.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewAppApproval.ps1
@@ -3,6 +3,9 @@ function Get-CIPPAlertNewAppApproval {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /identityGovernance/appConsent/appConsentRequests | Delegated | ConsentRequest.Read.All | ConsentRequest.ReadWrite.All
+ Permission: Graph | GET /identityGovernance/appConsent/appConsentRequests/{id}/userConsentRequests | Delegated | ConsentRequest.Read.All | ConsentRequest.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewMFADevice.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewMFADevice.ps1
index 73197f9ed6..7f881c3232 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewMFADevice.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewMFADevice.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertNewMFADevice {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /auditLogs/directoryAudits | Delegated | AuditLog.Read.All | Directory.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewRiskyUsers.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewRiskyUsers.ps1
index b2c4caeeb9..0ccab7786c 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewRiskyUsers.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewRiskyUsers.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertNewRiskyUsers {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /identityProtection/riskyUsers | Delegated | IdentityRiskyUser.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewRole.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewRole.ps1
index 0c496c0527..1d10cbf6ad 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewRole.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNewRole.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertNewRole {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /directoryRoles | Delegated | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNoCAConfig.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNoCAConfig.ps1
index b6c231b6fd..fcda634fc6 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNoCAConfig.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertNoCAConfig.ps1
@@ -2,6 +2,9 @@ function Get-CIPPAlertNoCAConfig {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/policies | Delegated | Policy.Read.All
+ Permission: Graph | GET /subscribedSkus | Delegated | LicenseAssignment.Read.All | Directory.Read.All, Directory.ReadWrite.All, Organization.Read.All, Organization.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertOnedriveQuota.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertOnedriveQuota.ps1
index 85fcdb06ac..6da30df6df 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertOnedriveQuota.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertOnedriveQuota.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertOneDriveQuota {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /reports/getOneDriveUsageAccountDetail(period='D7') | Application | Reports.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertQuotaUsed.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertQuotaUsed.ps1
index 125a711366..ca1145001c 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertQuotaUsed.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertQuotaUsed.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertQuotaUsed {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /reports/getMailboxUsageDetail(period='D7') | Delegated | Reports.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertReportOnlyCA.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertReportOnlyCA.ps1
index 3cf1cd3731..f4949d7053 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertReportOnlyCA.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertReportOnlyCA.ps1
@@ -2,6 +2,9 @@ function Get-CIPPAlertReportOnlyCA {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/policies | Delegated | Policy.Read.All
+ Permission: Graph | GET /subscribedSkus | Delegated | LicenseAssignment.Read.All | Directory.Read.All, Directory.ReadWrite.All, Organization.Read.All, Organization.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertRoleEscalableGroups.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertRoleEscalableGroups.ps1
index 85292cb9c2..e321b1c9c7 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertRoleEscalableGroups.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertRoleEscalableGroups.ps1
@@ -11,6 +11,11 @@ function Get-CIPPAlertRoleEscalableGroups {
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id}/transitiveMembers/microsoft.graph.group | Delegated | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Delegated | RoleManagement.Read.Directory | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecDefaultsDisabled.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecDefaultsDisabled.ps1
index 9eda2c6c02..8cb6fb60e5 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecDefaultsDisabled.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecDefaultsDisabled.ps1
@@ -2,6 +2,9 @@ function Get-CIPPAlertSecDefaultsDisabled {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/policies | Delegated | Policy.Read.All
+ Permission: Graph | GET /policies/identitySecurityDefaultsEnforcementPolicy | Delegated | Policy.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecDefaultsUpsell.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecDefaultsUpsell.ps1
index a595767d99..c89c195617 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecDefaultsUpsell.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecDefaultsUpsell.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertSecDefaultsUpsell {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /policies/identitySecurityDefaultsEnforcementPolicy | Delegated | Policy.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecureScore.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecureScore.ps1
index 2a77108b19..e9a952ff5d 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecureScore.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSecureScore.ps1
@@ -3,6 +3,8 @@ function Get-CippAlertSecureScore {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /security/secureScores | Delegated | SecurityEvents.Read.All | SecurityEvents.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSmtpAuthSuccess.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSmtpAuthSuccess.ps1
index 2294ef8e98..8e3ed8544e 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSmtpAuthSuccess.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertSmtpAuthSuccess.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertSmtpAuthSuccess {
<#
.FUNCTIONALITY
Entrypoint – Check sign-in logs for SMTP AUTH with success status
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Delegated | AuditLog.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertTenantAccess.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertTenantAccess.ps1
index a393737c01..682b65bc38 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertTenantAccess.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertTenantAccess.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertTenantAccess {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertUserReportedPhishing.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertUserReportedPhishing.ps1
index 9978ede813..53453d6ebc 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertUserReportedPhishing.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertUserReportedPhishing.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertUserReportedPhishing {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /security/threatSubmission/emailThreats | Application | ThreatSubmission.Read.All | ThreatSubmission.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertVppTokenExpiry.ps1 b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertVppTokenExpiry.ps1
index f09f11600e..fce09c56aa 100644
--- a/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertVppTokenExpiry.ps1
+++ b/backend/Modules/CIPPAlerts/Public/Alerts/Get-CIPPAlertVppTokenExpiry.ps1
@@ -2,6 +2,8 @@ function Get-CIPPAlertVppTokenExpiry {
<#
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/vppTokens | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementApps.ReadWrite.All, DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineActivityBasedTimeout.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineActivityBasedTimeout.ps1
index 88b90ad193..e007b18435 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineActivityBasedTimeout.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineActivityBasedTimeout.ps1
@@ -13,6 +13,10 @@ function Invoke-CIPPBaselineActivityBasedTimeout {
with the existing org default. The spec arrives fully rendered.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /policies/activityBasedTimeoutPolicies | Application | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | POST /policies/activityBasedTimeoutPolicies | Application | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | PATCH /policies/activityBasedTimeoutPolicies/{id} | Application | Policy.ReadWrite.ApplicationConfiguration
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppDeploy.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppDeploy.ps1
index b3b3f80b24..3f1065824c 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppDeploy.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppDeploy.ps1
@@ -11,6 +11,12 @@ function Invoke-CIPPBaselineAppDeploy {
permissions. Per-app failures log and continue, as the classic continued.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /applications | Delegated | AppRegistration.Create | Application.ReadWrite.All
+ Permission: Graph | GET /applications(appId='{id}') | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications(appId='{id}') | Delegated | Application.ReadWrite.All
+ Permission: Graph | POST /applicationTemplates/{id}/instantiate | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppManagementPolicy.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppManagementPolicy.ps1
index 9c256beefb..e9bb54bd85 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppManagementPolicy.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppManagementPolicy.ps1
@@ -8,6 +8,8 @@ function Invoke-CIPPBaselineAppManagementPolicy {
App-only, v1.0, matching the classic's write.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /policies/defaultAppManagementPolicy | Application | Policy.ReadWrite.ApplicationConfiguration
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppleEnrollmentTypeProfile.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppleEnrollmentTypeProfile.ps1
index e60733b5d5..aecbb919ff 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppleEnrollmentTypeProfile.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAppleEnrollmentTypeProfile.ps1
@@ -12,6 +12,14 @@ function Invoke-CIPPBaselineAppleEnrollmentTypeProfile {
a snapshot another remediation may already have changed.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/appleUserInitiatedEnrollmentProfiles | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/appleUserInitiatedEnrollmentProfiles | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/appleUserInitiatedEnrollmentProfiles/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/appleUserInitiatedEnrollmentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/appleUserInitiatedEnrollmentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/appleUserInitiatedEnrollmentProfiles/{id}/assignments/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAssignmentFilterTemplate.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAssignmentFilterTemplate.ps1
index 8504a71da3..464f01ec51 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAssignmentFilterTemplate.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAssignmentFilterTemplate.ps1
@@ -9,6 +9,8 @@ function Invoke-CIPPBaselineAssignmentFilterTemplate {
update; displayName is the identity and is never rewritten.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /deviceManagement/assignmentFilters/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAutopilotProfile.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAutopilotProfile.ps1
index 5f4c2af68c..ba486d462b 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAutopilotProfile.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineAutopilotProfile.ps1
@@ -10,6 +10,8 @@ function Invoke-CIPPBaselineAutopilotProfile {
existed and when a custom group name matches nothing.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCollaborationDomainRestriction.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCollaborationDomainRestriction.ps1
index dea0db79f1..56c54aed20 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCollaborationDomainRestriction.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCollaborationDomainRestriction.ps1
@@ -10,6 +10,9 @@ function Invoke-CIPPBaselineCollaborationDomainRestriction {
as the classic wrote it.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /policies/b2bManagementPolicies | Delegated | Policy.ReadWrite.B2BManagementPolicy
+ Permission: Graph | PATCH /policies/b2bManagementPolicies/{id} | Delegated | Policy.ReadWrite.B2BManagementPolicy
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineConsentPolicySettings.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineConsentPolicySettings.ps1
index eeb84eb445..884b7db100 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineConsentPolicySettings.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineConsentPolicySettings.ps1
@@ -11,6 +11,11 @@ function Invoke-CIPPBaselineConsentPolicySettings {
identity's GDAP roles rarely carry the right this object demands.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /directorySettingTemplates/dffd5d46-495d-40a9-8e21-954ff55e198a | Delegated | GroupSettings.Read.All | Directory.Read.All, Directory.ReadWrite.All, GroupSettings.ReadWrite.All
+ Permission: Graph | GET /settings | Delegated | GroupSettings.Read.All | GroupSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | POST /settings | Application | GroupSettings.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /settings/{id} | Application | GroupSettings.ReadWrite.All | Directory.ReadWrite.All, Policy.ReadWrite.Authorization
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCopilotLimitedMode.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCopilotLimitedMode.ps1
index b992b46727..64ee10c3d4 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCopilotLimitedMode.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCopilotLimitedMode.ps1
@@ -8,6 +8,8 @@ function Invoke-CIPPBaselineCopilotLimitedMode {
the delegated token. Disabling clears the group id, matching the classic.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /copilot/admin/settings/limitedMode | Delegated | CopilotSettings-LimitedMode.ReadWrite
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCreateSharedMailbox.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCreateSharedMailbox.ps1
index 56010dc6e0..a2783a4501 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCreateSharedMailbox.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCreateSharedMailbox.ps1
@@ -19,6 +19,8 @@ function Invoke-CIPPBaselineCreateSharedMailbox {
enabled.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCustomBannedPasswordList.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCustomBannedPasswordList.ps1
index ec10ef34a5..585781dea0 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCustomBannedPasswordList.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineCustomBannedPasswordList.ps1
@@ -11,6 +11,10 @@ function Invoke-CIPPBaselineCustomBannedPasswordList {
never touched.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /settings | Delegated | GroupSettings.Read.All | GroupSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | POST /settings | Delegated | GroupSettings.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /settings/{id} | Delegated | GroupSettings.ReadWrite.All | Directory.ReadWrite.All, Policy.ReadWrite.Authorization
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderASRPolicy.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderASRPolicy.ps1
index 07c6caf1d7..ff1408a93a 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderASRPolicy.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderASRPolicy.ps1
@@ -7,6 +7,8 @@ function Invoke-CIPPBaselineDefenderASRPolicy {
Set-CIPPDefenderASRPolicy helper which owns the rules group and the assignment.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderAVPolicy.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderAVPolicy.ps1
index 8b2565390f..18b2aafc9f 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderAVPolicy.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderAVPolicy.ps1
@@ -8,6 +8,8 @@ function Invoke-CIPPBaselineDefenderAVPolicy {
patched. The helper owns the settingInstance tree and the assignment.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderCompliancePolicy.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderCompliancePolicy.ps1
index 1205a65de1..12e5f1e525 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderCompliancePolicy.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderCompliancePolicy.ps1
@@ -9,6 +9,9 @@ function Invoke-CIPPBaselineDefenderCompliancePolicy {
classic wrote it.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /deviceManagement/mobileThreatDefenseConnectors | Application | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92 | Application | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderEDRPolicy.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderEDRPolicy.ps1
index 2a422e4408..d230df9579 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderEDRPolicy.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderEDRPolicy.ps1
@@ -7,6 +7,8 @@ function Invoke-CIPPBaselineDefenderEDRPolicy {
Set-CIPPDefenderEDRPolicy helper which owns the settings tree and the assignment.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderExclusionPolicy.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderExclusionPolicy.ps1
index dd1e41c19f..25476d1e8f 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderExclusionPolicy.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDefenderExclusionPolicy.ps1
@@ -8,6 +8,8 @@ function Invoke-CIPPBaselineDefenderExclusionPolicy {
Set-CIPPDefenderExclusionPolicy helper with only the configured collections.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeleteCAPolicy.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeleteCAPolicy.ps1
index ce3d6dd222..13ada2e034 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeleteCAPolicy.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeleteCAPolicy.ps1
@@ -10,6 +10,8 @@ function Invoke-CIPPBaselineDeleteCAPolicy {
row pending instead of reporting a deletion that did not happen.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | DELETE /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeployCheckChromeExtension.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeployCheckChromeExtension.ps1
index 9ffb2fb42f..39a625d184 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeployCheckChromeExtension.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeployCheckChromeExtension.ps1
@@ -11,6 +11,11 @@ function Invoke-CIPPBaselineDeployCheckChromeExtension {
remediation run, exactly as the classic's remediate block did.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | DELETE /deviceAppManagement/mobileApps/{id} | Delegated | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceConfigurations | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/deviceConfigurations/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeviceEnrollmentConfiguration.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeviceEnrollmentConfiguration.ps1
index 2cc6c39c86..8e62e2b623 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeviceEnrollmentConfiguration.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeviceEnrollmentConfiguration.ps1
@@ -16,6 +16,8 @@ function Invoke-CIPPBaselineDeviceEnrollmentConfiguration {
per write with asApp, but none currently needs to.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /deviceManagement/deviceEnrollmentConfigurations/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDevicePrepProfile.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDevicePrepProfile.ps1
index 11780cc547..1482f751a5 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDevicePrepProfile.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDevicePrepProfile.ps1
@@ -14,6 +14,14 @@ function Invoke-CIPPBaselineDevicePrepProfile {
Provisioning Client as owner gets it added through owners/$ref, never by recreating.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies/{id}/assign | Delegated | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | POST /groups | Delegated | Group.ReadWrite.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All
+ Permission: Graph | POST /groups//owners/$ref | Delegated | Directory.Read.All | Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeviceRegistrationPolicy.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeviceRegistrationPolicy.ps1
index b53aff955e..4caa538c5b 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeviceRegistrationPolicy.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDeviceRegistrationPolicy.ps1
@@ -29,6 +29,9 @@ function Invoke-CIPPBaselineDeviceRegistrationPolicy {
supported with application permissions.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /policies/deviceRegistrationPolicy | Delegated | Policy.Read.DeviceConfiguration | Policy.Read.All, Policy.ReadWrite.DeviceConfiguration
+ Permission: Graph | PUT /policies/deviceRegistrationPolicy | Delegated | Policy.ReadWrite.DeviceConfiguration
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDisableM365GroupUsers.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDisableM365GroupUsers.ps1
index c291e902e9..e5c7c26726 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDisableM365GroupUsers.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDisableM365GroupUsers.ps1
@@ -11,6 +11,11 @@ function Invoke-CIPPBaselineDisableM365GroupUsers {
configured and resolved - GroupCreationAllowedGroupId.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /directorySettingTemplates/62375ab9-6b52-47ed-826b-58e47e0e304b | Delegated | GroupSettings.Read.All | Directory.Read.All, Directory.ReadWrite.All, GroupSettings.ReadWrite.All
+ Permission: Graph | GET /settings | Delegated | GroupSettings.Read.All | GroupSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | POST /settings | Application | GroupSettings.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /settings/{id} | Application | GroupSettings.ReadWrite.All | Directory.ReadWrite.All, Policy.ReadWrite.Authorization
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDisableSelfServiceLicenses.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDisableSelfServiceLicenses.ps1
index 3156ee588f..4a71b91d22 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDisableSelfServiceLicenses.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineDisableSelfServiceLicenses.ps1
@@ -10,6 +10,8 @@ function Invoke-CIPPBaselineDisableSelfServiceLicenses {
failures log and continue; a round where everything failed throws.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /policies/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEmailAsAlternateLoginId.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEmailAsAlternateLoginId.ps1
index b8771dfa31..035e38c783 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEmailAsAlternateLoginId.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEmailAsAlternateLoginId.ps1
@@ -9,6 +9,9 @@ function Invoke-CIPPBaselineEmailAsAlternateLoginId {
round-trip as a unit.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /policies/homeRealmDiscoveryPolicies | Delegated | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | PATCH /policies/homeRealmDiscoveryPolicies/{id} | Delegated | Policy.ReadWrite.ApplicationConfiguration
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEnableAppConsentRequests.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEnableAppConsentRequests.ps1
index 761e4d73e9..91b90a5245 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEnableAppConsentRequests.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEnableAppConsentRequests.ps1
@@ -24,6 +24,11 @@ function Invoke-CIPPBaselineEnableAppConsentRequests {
No role configured defaults to Global Administrator, matching the hook's grade.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /policies/adminConsentRequestPolicy | Delegated | Policy.Read.All | Policy.ReadWrite.ConsentRequest, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PUT /policies/adminConsentRequestPolicy | Delegated | Policy.ReadWrite.ConsentRequest | Directory.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEnableFIDO2.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEnableFIDO2.ps1
index 8200db458f..57e0f045ea 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEnableFIDO2.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineEnableFIDO2.ps1
@@ -14,6 +14,9 @@ function Invoke-CIPPBaselineEnableFIDO2 {
aligned, not forced. Only state is graded.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/Fido2 | Application | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
+ Permission: Graph | PATCH /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/Fido2 | Application | Policy.ReadWrite.AuthenticationMethod
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExcludedfileExt.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExcludedfileExt.ps1
index d9876a19c6..1dea2bb2eb 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExcludedfileExt.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExcludedfileExt.ps1
@@ -7,6 +7,8 @@ function Invoke-CIPPBaselineExcludedfileExt {
admin center's own semantics and the classic's write.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExternalComplianceTrusted.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExternalComplianceTrusted.ps1
index 905acb3ded..1c263a7d75 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExternalComplianceTrusted.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExternalComplianceTrusted.ps1
@@ -9,6 +9,9 @@ function Invoke-CIPPBaselineExternalComplianceTrusted {
isCompliantDeviceAccepted body would silently reset the MFA and hybrid-join trust flags.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /policies/crossTenantAccessPolicy/default | Delegated | Policy.Read.All | Policy.ReadWrite.CrossTenantAccess
+ Permission: Graph | PATCH /policies/crossTenantAccessPolicy/default | Delegated | Policy.ReadWrite.CrossTenantAccess
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExternalMFATrusted.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExternalMFATrusted.ps1
index 3d6884265a..059405ecb7 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExternalMFATrusted.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineExternalMFATrusted.ps1
@@ -10,6 +10,9 @@ function Invoke-CIPPBaselineExternalMFATrusted {
The classic did the same read-merge-write for the same reason.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /policies/crossTenantAccessPolicy/default | Delegated | Policy.Read.All | Policy.ReadWrite.CrossTenantAccess
+ Permission: Graph | PATCH /policies/crossTenantAccessPolicy/default | Delegated | Policy.ReadWrite.CrossTenantAccess
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineFIDO2PasskeyProfiles.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineFIDO2PasskeyProfiles.ps1
index 47e0e50b7d..9392a641b4 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineFIDO2PasskeyProfiles.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineFIDO2PasskeyProfiles.ps1
@@ -9,6 +9,8 @@ function Invoke-CIPPBaselineFIDO2PasskeyProfiles {
wrote it.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /policies/authenticationmethodspolicy/authenticationMethodConfigurations/Fido2 | Application | Policy.ReadWrite.AuthenticationMethod
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineGlobalSecureAccessCompliantNetwork.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineGlobalSecureAccessCompliantNetwork.ps1
index cfdadce89d..916d894e29 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineGlobalSecureAccessCompliantNetwork.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineGlobalSecureAccessCompliantNetwork.ps1
@@ -7,6 +7,25 @@ function Invoke-CIPPBaselineGlobalSecureAccessCompliantNetwork {
fingerprint and are only redeployed when it changes.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | DELETE /deviceAppManagement/mobileApps/{id} | Delegated | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceConfigurations | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceShellScripts | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementScripts.ReadWrite.All
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Application | Policy.Read.All
+ Permission: Graph | POST /identity/conditionalAccess/namedLocations | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /identity/conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | GET /networkAccess/forwardingProfiles | Application | NetworkAccess.Read.All | NetworkAccess.ReadWrite.All
+ Permission: Graph | PATCH /networkAccess/forwardingProfiles/{id} | Application | NetworkAccess.ReadWrite.All
+ Permission: Graph | PATCH /networkAccess/forwardingProfiles/{id}/policies/{id} | Application | NetworkAccess.ReadWrite.All
+ Permission: Graph | GET /networkAccess/settings/conditionalAccess | Application | NetworkAccess.Read.All | NetworkAccess.ReadWrite.All
+ Permission: Graph | PATCH /networkAccess/settings/conditionalAccess | Application | NetworkAccess.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /servicePrincipals/{id} | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /servicePrincipals/{id} | Application | Application.ReadWrite.OwnedBy | AgentIdentity.ReadWrite.All, Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Remediate, $TenantFilter, $Current)
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineGroupTemplate.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineGroupTemplate.ps1
index eb395c6fa6..ad756064ba 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineGroupTemplate.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineGroupTemplate.ps1
@@ -18,6 +18,8 @@ function Invoke-CIPPBaselineGroupTemplate {
Exchange deploying pure Graph groups.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /groups/{id} | Delegated | Group.ManageProtection.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineIntuneDeviceRetirementDays.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineIntuneDeviceRetirementDays.ps1
index 56b2b4abc0..d9bce63c10 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineIntuneDeviceRetirementDays.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineIntuneDeviceRetirementDays.ps1
@@ -8,6 +8,9 @@ function Invoke-CIPPBaselineIntuneDeviceRetirementDays {
exact branch, including its fixed 'Default Policy' rule body.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /deviceManagement/managedDeviceCleanupRules | Delegated | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/managedDeviceCleanupRules/{id} | Delegated | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineM365GroupGuestSettings.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineM365GroupGuestSettings.ps1
index 5df2a5fd62..5cc21bf5ed 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineM365GroupGuestSettings.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineM365GroupGuestSettings.ps1
@@ -13,6 +13,11 @@ function Invoke-CIPPBaselineM365GroupGuestSettings {
demands the Groups Administrator right the delegated identity rarely holds.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /directorySettingTemplates/62375ab9-6b52-47ed-826b-58e47e0e304b | Delegated | GroupSettings.Read.All | Directory.Read.All, Directory.ReadWrite.All, GroupSettings.ReadWrite.All
+ Permission: Graph | GET /settings | Delegated | GroupSettings.Read.All | GroupSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | POST /settings | Application | GroupSettings.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /settings/{id} | Application | GroupSettings.ReadWrite.All | Directory.ReadWrite.All, Policy.ReadWrite.Authorization
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMDMScope.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMDMScope.ps1
index e9e147fe37..0d4b99c6dd 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMDMScope.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMDMScope.ps1
@@ -10,6 +10,10 @@ function Invoke-CIPPBaselineMDMScope {
write.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | PATCH /policies/mobileDeviceManagementPolicies/0000000a-0000-0000-c000-000000000000 | Delegated | Policy.ReadWrite.MobilityManagement
+ Permission: Graph | POST /policies/mobileDeviceManagementPolicies/0000000a-0000-0000-c000-000000000000/includedGroups/$ref | Delegated | Policy.ReadWrite.MobilityManagement
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMFAPushApps.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMFAPushApps.ps1
index ef688d0f5a..3c91aafd16 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMFAPushApps.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMFAPushApps.ps1
@@ -9,6 +9,8 @@ function Invoke-CIPPBaselineMFAPushApps {
configured state.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /servicePrincipals(appId='{id}') | Delegated | Application.ReadWrite.All | AgentIdentity.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMailContacts.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMailContacts.ps1
index 537148b0a4..5a4a4bf1b8 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMailContacts.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMailContacts.ps1
@@ -8,6 +8,8 @@ function Invoke-CIPPBaselineMailContacts {
general contact lands on the privacy profile.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /organization/{id} | Application | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMigrateOneDriveShortcuts.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMigrateOneDriveShortcuts.ps1
index 9198c79483..774f1825e5 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMigrateOneDriveShortcuts.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineMigrateOneDriveShortcuts.ps1
@@ -11,6 +11,8 @@ function Invoke-CIPPBaselineMigrateOneDriveShortcuts {
resolve, it throws.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /users/{id}/drive/special/shortcuts | Application | Files.Read.All | Files.ReadWrite.All
#>
[CmdletBinding()]
param($Remediate, $TenantFilter, $Current)
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineOauthConsent.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineOauthConsent.ps1
index 83939389b9..56b004d659 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineOauthConsent.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineOauthConsent.ps1
@@ -13,6 +13,11 @@ function Invoke-CIPPBaselineOauthConsent {
used -AsApp here.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
+ Permission: Graph | GET /policies/permissionGrantPolicies | Delegated | Policy.Read.PermissionGrant | Policy.ReadWrite.PermissionGrant
+ Permission: Graph | POST /policies/permissionGrantPolicies | Delegated | Policy.ReadWrite.PermissionGrant
+ Permission: Graph | POST /policies/permissionGrantPolicies/cipp-consent-policy/includes | Delegated | Policy.ReadWrite.PermissionGrant
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselinePhishProtection.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselinePhishProtection.ps1
index 10954f3561..7c4b1e680f 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselinePhishProtection.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselinePhishProtection.ps1
@@ -10,6 +10,10 @@ function Invoke-CIPPBaselinePhishProtection {
operator's existing custom CSS.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /organization/{id}/branding/localizations | Application | OrganizationalBranding.Read.All | Organization.Read.All, Organization.ReadWrite.All, OrganizationalBranding.ReadWrite.All
+ Permission: Graph | POST /organization/{id}/branding/localizations | Application | OrganizationalBranding.ReadWrite.All | Organization.ReadWrite.All
+ Permission: Graph | PUT /organization/{id}/branding/localizations/0/customCSS | Application | OrganizationalBranding.ReadWrite.All | Organization.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineProfilePhotos.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineProfilePhotos.ps1
index 6757da6de6..84b856c451 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineProfilePhotos.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineProfilePhotos.ps1
@@ -9,6 +9,9 @@ function Invoke-CIPPBaselineProfilePhotos {
when disabling. Both must move or users keep a side door.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | DELETE /admin/people/photoUpdateSettings | Application | PeopleSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/people/photoUpdateSettings | Application | PeopleSettings.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineRestrictThirdPartyStorageServices.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineRestrictThirdPartyStorageServices.ps1
index 786afa72e0..99848336c3 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineRestrictThirdPartyStorageServices.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineRestrictThirdPartyStorageServices.ps1
@@ -10,6 +10,8 @@ function Invoke-CIPPBaselineRestrictThirdPartyStorageServices {
where it never existed.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /servicePrincipals(appId='c1f33bc0-bdb4-4248-ba9b-096807ddb43e') | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineReusableSettingsTemplate.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineReusableSettingsTemplate.ps1
index e15b8f18f2..8a81280a82 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineReusableSettingsTemplate.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineReusableSettingsTemplate.ps1
@@ -8,6 +8,8 @@ function Invoke-CIPPBaselineReusableSettingsTemplate {
setting is a settingInstance tree that only round-trips whole.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /deviceManagement/reusablePolicySettings | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSPOVersionControl.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSPOVersionControl.ps1
index 4ce3d88d28..cba90ea182 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSPOVersionControl.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSPOVersionControl.ps1
@@ -11,6 +11,8 @@ function Invoke-CIPPBaselineSPOVersionControl {
per-site fan-out that continues past individual site failures, as the classic did.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSecureScoreRemediation.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSecureScoreRemediation.ps1
index 6df860ab33..62aa740b01 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSecureScoreRemediation.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSecureScoreRemediation.ps1
@@ -9,6 +9,8 @@ function Invoke-CIPPBaselineSecureScoreRemediation {
for the same reason. Per-control failures log and continue.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /security/secureScoreControlProfiles/{id} | Delegated | SecurityEvents.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSmartLockout.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSmartLockout.ps1
index d5d36db8f4..bc025113a4 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSmartLockout.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselineSmartLockout.ps1
@@ -12,6 +12,10 @@ function Invoke-CIPPBaselineSmartLockout {
on, EnableBannedPasswordCheck is written True (EIDSCA PR03) on both paths.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /settings | Delegated | GroupSettings.Read.All | GroupSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | POST /settings | Delegated | GroupSettings.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /settings/{id} | Delegated | GroupSettings.ReadWrite.All | Directory.ReadWrite.All, Policy.ReadWrite.Authorization
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselinesharingDomainRestriction.ps1 b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselinesharingDomainRestriction.ps1
index 726685aea1..b156528162 100644
--- a/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselinesharingDomainRestriction.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Executors/Invoke-CIPPBaselinesharingDomainRestriction.ps1
@@ -8,6 +8,8 @@ function Invoke-CIPPBaselinesharingDomainRestriction {
the classic's write.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/Helpers/Get-CIPPBaselineDevicePrepGroup.ps1 b/backend/Modules/CIPPBaselines/Public/Helpers/Get-CIPPBaselineDevicePrepGroup.ps1
index caa9c70c85..f4d6ddee6f 100644
--- a/backend/Modules/CIPPBaselines/Public/Helpers/Get-CIPPBaselineDevicePrepGroup.ps1
+++ b/backend/Modules/CIPPBaselines/Public/Helpers/Get-CIPPBaselineDevicePrepGroup.ps1
@@ -8,6 +8,8 @@ function Get-CIPPBaselineDevicePrepGroup {
guaranteed order. Returns $null when nothing matches.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineAutopilotProfileState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineAutopilotProfileState.ps1
index 2a7238c04f..08ac3a97ad 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineAutopilotProfileState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineAutopilotProfileState.ps1
@@ -14,6 +14,8 @@ function Get-CIPPBaselineAutopilotProfileState {
value, so drift is never recorded that remediation cannot clear.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDefenderCompliancePolicyState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDefenderCompliancePolicyState.ps1
index e1e4d84f7c..cec741d68e 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDefenderCompliancePolicyState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDefenderCompliancePolicyState.ps1
@@ -11,6 +11,8 @@ function Get-CIPPBaselineDefenderCompliancePolicyState {
always grades true.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92 | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDevicePrepProfileState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDevicePrepProfileState.ps1
index a27163d361..cb12f9fabf 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDevicePrepProfileState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDevicePrepProfileState.ps1
@@ -20,6 +20,8 @@ function Get-CIPPBaselineDevicePrepProfileState {
recreating the profile.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups//owners | Delegated | Application.Read.All | Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableExchangeOnlinePowerShellState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableExchangeOnlinePowerShellState.ps1
index cffec7d060..940c3eadad 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableExchangeOnlinePowerShellState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableExchangeOnlinePowerShellState.ps1
@@ -14,6 +14,9 @@ function Get-CIPPBaselineDisableExchangeOnlinePowerShellState {
an empty admin list would sweep every administrator in the tenant.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups/{id}/transitiveMembers/microsoft.graph.user | Delegated | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableGuestsState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableGuestsState.ps1
index 6c89e8783f..335217b5a8 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableGuestsState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableGuestsState.ps1
@@ -21,6 +21,9 @@ function Get-CIPPBaselineDisableGuestsState {
Missing/blank/0 deleteGraceDays leaves guestsToDelete empty so existing templates stay disable-only.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /auditLogs/directoryAudits | Delegated | AuditLog.Read.All | Directory.Read.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableInactiveUsersState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableInactiveUsersState.ps1
index d3e8ea5258..9e11ec49e2 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableInactiveUsersState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineDisableInactiveUsersState.ps1
@@ -18,6 +18,8 @@ function Get-CIPPBaselineDisableInactiveUsersState {
disablement.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /auditLogs/directoryAudits | Delegated | AuditLog.Read.All | Directory.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineOauthConsentState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineOauthConsentState.ps1
index 8c0e441bf9..ad9186d345 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineOauthConsentState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineOauthConsentState.ps1
@@ -21,6 +21,8 @@ function Get-CIPPBaselineOauthConsentState {
detection already covers.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /policies/permissionGrantPolicies/cipp-consent-policy/includes | Delegated | Policy.Read.PermissionGrant | Directory.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselinePhishProtectionState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselinePhishProtectionState.ps1
index 8ba46ddc3e..ac0d2630b1 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselinePhishProtectionState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselinePhishProtectionState.ps1
@@ -10,6 +10,8 @@ function Get-CIPPBaselinePhishProtectionState {
the classic read. A tenant without premium branding reads as no CSS.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /organization/{id}/branding/localizations/0/customCSS | Delegated | OrganizationalBranding.Read.All | Organization.Read.All, Organization.ReadWrite.All, OrganizationalBranding.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselinePlannerBlockTaskDeleteState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselinePlannerBlockTaskDeleteState.ps1
index bac5f520c6..cf23d66530 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselinePlannerBlockTaskDeleteState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselinePlannerBlockTaskDeleteState.ps1
@@ -11,6 +11,8 @@ function Get-CIPPBaselinePlannerBlockTaskDeleteState {
partial scope. A user with no policy yet counts as an offender.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups/{id}/transitiveMembers/microsoft.graph.user | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineUsageLocationState.ps1 b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineUsageLocationState.ps1
index e5cf445b16..6683cb16a6 100644
--- a/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineUsageLocationState.ps1
+++ b/backend/Modules/CIPPBaselines/Public/PrepareHooks/Get-CIPPBaselineUsageLocationState.ps1
@@ -21,6 +21,8 @@ function Get-CIPPBaselineUsageLocationState {
value at all', for tenants where locations were set by hand per user.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups/{id}/transitiveMembers/microsoft.graph.user | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPAlias.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPAlias.ps1
index 6a0fc8615e..ff81ce6b5c 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPAlias.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPAlias.ps1
@@ -1,4 +1,8 @@
function Add-CIPPAlias {
+ <#
+ .NOTES
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$User,
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPApplicationPermission.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPApplicationPermission.ps1
index 2ca4442749..9df2e3589f 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPApplicationPermission.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPApplicationPermission.ps1
@@ -1,4 +1,12 @@
function Add-CIPPApplicationPermission {
+ <#
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}') | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals/{id}/appRoleAssignedTo | Delegated | Application.Read.All | Directory.Read.All, Application.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id}/appRoleAssignments | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param(
$RequiredResourceAccess,
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPCACoverageReason.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPCACoverageReason.ps1
new file mode 100644
index 0000000000..d2b0a01de7
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPCACoverageReason.ps1
@@ -0,0 +1,14 @@
+function Add-CIPPCACoverageReason {
+ param (
+ [hashtable]$Map,
+ [string]$UserId,
+ [hashtable]$Reason
+ )
+ if ([string]::IsNullOrWhiteSpace($UserId) -or $null -eq $Reason) { return }
+ if (-not $Map.ContainsKey($UserId)) {
+ $Map[$UserId] = [System.Collections.Generic.List[object]]::new()
+ }
+ $Existing = $Map[$UserId] | Where-Object { $_.value -eq $Reason.value }
+ if ($Existing) { return }
+ $Map[$UserId].Add([pscustomobject]$Reason) | Out-Null
+}
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPDelegatedPermission.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPDelegatedPermission.ps1
index 62bc86eeb6..e6c430256f 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPDelegatedPermission.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPDelegatedPermission.ps1
@@ -1,4 +1,14 @@
function Add-CIPPDelegatedPermission {
+ <#
+ .NOTES
+ Permission: Graph | POST /oauth2PermissionGrants | Delegated | DelegatedPermissionGrant.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | DELETE /oauth2PermissionGrants/{id} | Delegated | DelegatedPermissionGrant.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /oauth2PermissionGrants/{id} | Delegated | DelegatedPermissionGrant.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}') | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id}/oauth2PermissionGrants | Delegated | Directory.Read.All | DelegatedPermissionGrant.ReadWrite.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param(
$RequiredResourceAccess,
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPGroupMember.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPGroupMember.ps1
index 2e32a97118..1f5eac18eb 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPGroupMember.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPGroupMember.ps1
@@ -25,6 +25,8 @@ function Add-CIPPGroupMember {
.PARAMETER APIName
The name of the API operation being performed. Defaults to 'Add Group Member'.
+ .NOTES
+ Permission: Graph | POST /groups/{id}/members/$ref | Delegated | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPGroupOwner.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPGroupOwner.ps1
index 02cf330f9e..b9cd8a73bc 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPGroupOwner.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPGroupOwner.ps1
@@ -22,6 +22,8 @@ function Add-CIPPGroupOwner {
.PARAMETER APIName
The API operation name for logging. Default: 'Add Group Owner'.
+ .NOTES
+ Permission: Graph | POST /groups/{id}/owners/$ref | Delegated | Group.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPMacOSShellScript.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPMacOSShellScript.ps1
index 0723ea8c4c..e3b7edc663 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPMacOSShellScript.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPMacOSShellScript.ps1
@@ -5,6 +5,10 @@ function Add-CIPPMacOSShellScript {
script's id and assignments.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/deviceShellScripts | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementScripts.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/deviceShellScripts | Delegated | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/deviceShellScripts/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPPackagedApplication.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPPackagedApplication.ps1
index 0730a11e16..c6d811a33c 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPPackagedApplication.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPPackagedApplication.ps1
@@ -40,6 +40,8 @@ function Add-CIPPPackagedApplication {
$AppBody = @{ '@odata.type' = '#microsoft.graph.win32LobApp'; displayName = 'My App' }
$EncryptionInfo = @{ EncryptionKey = '...'; MacKey = '...'; ... }
Add-CIPPPackagedApplication -AppBody $AppBody -TenantFilter 'contoso.com' -AppType 'Choco' -FilePath 'app.intunewin' -FileName 'app.intunewin' -UnencryptedSize 1024000 -EncryptionInfo $EncryptionInfo
+ .NOTES
+ Permission: Graph | POST /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPW32ScriptApplication.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPW32ScriptApplication.ps1
index 62b40dc56f..067e64b352 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPW32ScriptApplication.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPW32ScriptApplication.ps1
@@ -34,6 +34,9 @@ function Add-CIPPW32ScriptApplication {
detectionFile = 'app.exe'
}
Add-CIPPW32ScriptApplication -TenantFilter 'contoso.com' -Properties $Properties
+ .NOTES
+ Permission: Graph | POST /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | PATCH /deviceAppManagement/mobileApps/{id} | Delegated | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPWin32LobAppContent.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPWin32LobAppContent.ps1
index 8fa3b5cd3d..c041e9793f 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPWin32LobAppContent.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPWin32LobAppContent.ps1
@@ -53,6 +53,8 @@ function Add-CIPPWin32LobAppContent {
FileDigestAlgorithm = 'SHA256'
}
Add-CIPPWin32LobAppContent -AppId '12345' -FilePath 'C:\app.intunewin' -FileName 'app.intunewin' -UnencryptedSize 1024000 -EncryptionInfo $EncryptionInfo -TenantFilter 'contoso.com'
+ .NOTES
+ Permission: Graph | PATCH /deviceAppManagement/mobileApps/{id} | Delegated | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Add-CIPPWinGetApp.ps1 b/backend/Modules/CIPPCore/Public/Add-CIPPWinGetApp.ps1
index df30b2db09..c9fb459abf 100644
--- a/backend/Modules/CIPPCore/Public/Add-CIPPWinGetApp.ps1
+++ b/backend/Modules/CIPPCore/Public/Add-CIPPWinGetApp.ps1
@@ -5,6 +5,8 @@ function Add-CIPPWinGetApp {
.DESCRIPTION
Creates a new WinGet app using the provided app body.
+ .NOTES
+ Permission: Graph | POST /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/AuditLogs/Get-CippAuditLogSearchResults.ps1 b/backend/Modules/CIPPCore/Public/AuditLogs/Get-CippAuditLogSearchResults.ps1
index 585f07a90f..eadf0491f4 100644
--- a/backend/Modules/CIPPCore/Public/AuditLogs/Get-CippAuditLogSearchResults.ps1
+++ b/backend/Modules/CIPPCore/Public/AuditLogs/Get-CippAuditLogSearchResults.ps1
@@ -8,6 +8,8 @@ function Get-CippAuditLogSearchResults {
The tenant to filter on.
.PARAMETER QueryId
The ID of the query to get the results for.
+ .NOTES
+ Permission: Graph | GET /security/auditLog/queries/{id}/records | Application | AuditLogsQuery.Read.All | AuditLogsQuery-CRM.Read.All, AuditLogsQuery-Endpoint.Read.All, AuditLogsQuery-Exchange.Read.All, AuditLogsQuery-OneDrive.Read.All, AuditLogsQuery-SharePoint.Read.All
#>
param (
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPCore/Public/AuditLogs/Get-CippAuditLogSearches.ps1 b/backend/Modules/CIPPCore/Public/AuditLogs/Get-CippAuditLogSearches.ps1
index 8b89a7ef10..876183df6d 100644
--- a/backend/Modules/CIPPCore/Public/AuditLogs/Get-CippAuditLogSearches.ps1
+++ b/backend/Modules/CIPPCore/Public/AuditLogs/Get-CippAuditLogSearches.ps1
@@ -6,6 +6,8 @@ function Get-CippAuditLogSearches {
Query the Graph API for available audit log searches.
.PARAMETER TenantFilter
The tenant to filter on.
+ .NOTES
+ Permission: Graph | GET /security/auditLog/queries/{id} | Application | AuditLogsQuery.Read.All
#>
param (
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPCore/Public/AuditLogs/New-CippAuditLogSearch.ps1 b/backend/Modules/CIPPCore/Public/AuditLogs/New-CippAuditLogSearch.ps1
index 94e2cd35cf..07df3c880c 100644
--- a/backend/Modules/CIPPCore/Public/AuditLogs/New-CippAuditLogSearch.ps1
+++ b/backend/Modules/CIPPCore/Public/AuditLogs/New-CippAuditLogSearch.ps1
@@ -28,6 +28,8 @@ function New-CippAuditLogSearch {
The administrative units to filter on.
.PARAMETER ProcessLogs
Store the search in the CIPP AuditLogSearches table for alert processing.
+ .NOTES
+ Permission: Graph | POST /security/auditLog/queries | Application | AuditLogsQuery.Read.All | AuditLogsQuery-CRM.Read.All, AuditLogsQuery-Endpoint.Read.All, AuditLogsQuery-Exchange.Read.All, AuditLogsQuery-OneDrive.Read.All, AuditLogsQuery-SharePoint.Read.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/AuditLogs/New-CippAuditLogSearchV2.ps1 b/backend/Modules/CIPPCore/Public/AuditLogs/New-CippAuditLogSearchV2.ps1
index e65bca17f3..f640482744 100644
--- a/backend/Modules/CIPPCore/Public/AuditLogs/New-CippAuditLogSearchV2.ps1
+++ b/backend/Modules/CIPPCore/Public/AuditLogs/New-CippAuditLogSearchV2.ps1
@@ -17,6 +17,8 @@ function New-CippAuditLogSearchV2 {
order. Outcome is 'Created', 'AuditingDisabled', 'AccessDenied' or 'Transient'.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /security/auditLog/queries | Delegated | AuditLogsQuery.Read.All | AuditLogsQuery-CRM.Read.All, AuditLogsQuery-Endpoint.Read.All, AuditLogsQuery-Exchange.Read.All, AuditLogsQuery-OneDrive.Read.All, AuditLogsQuery-SharePoint.Read.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Add-CIPPSSOAppSecret.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Add-CIPPSSOAppSecret.ps1
index ffb9018b0e..29a56ef9dc 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Add-CIPPSSOAppSecret.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Add-CIPPSSOAppSecret.ps1
@@ -21,6 +21,10 @@ function Add-CIPPSSOAppSecret {
Display name to set on the password credential. Defaults to 'CIPP-SSO-Secret'.
.PARAMETER MaxRetries
Number of secret-creation attempts before giving up. Defaults to 6.
+ .NOTES
+ Permission: Graph | GET /applications/{id} | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /applications/{id}/addPassword | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /policies/defaultAppManagementPolicy | Application | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
#>
[System.Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingConvertToSecureStringWithPlainText', '')]
[CmdletBinding()]
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Grant-CippAppGraphConsent.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Grant-CippAppGraphConsent.ps1
index 191ef95ab4..bfb13ae6e2 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Grant-CippAppGraphConsent.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Grant-CippAppGraphConsent.ps1
@@ -28,6 +28,12 @@ function Grant-CippAppGraphConsent {
client (SSO app) on the MCP resource app's user_impersonation scope.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /oauth2PermissionGrants | Application | Directory.ReadWrite.All
+ Permission: Graph | PATCH /oauth2PermissionGrants/{id} | Application | Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='00000003-0000-0000-c000-000000000000') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id}/oauth2PermissionGrants | Application | Directory.Read.All | DelegatedPermissionGrant.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Initialize-CIPPAuth.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Initialize-CIPPAuth.ps1
index 50452c7705..fcd2216ab5 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Initialize-CIPPAuth.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Initialize-CIPPAuth.ps1
@@ -9,6 +9,8 @@ function Initialize-CIPPAuth {
and configures EasyAuth if SSO credentials are provisioned but
EasyAuth is not yet enabled. On a fresh deployment with nothing
configured, requests Craft's setup wizard mode.
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param()
diff --git a/backend/Modules/CIPPCore/Public/Authentication/New-CIPPAPIConfig.ps1 b/backend/Modules/CIPPCore/Public/Authentication/New-CIPPAPIConfig.ps1
index ea25ec2491..b92411aa70 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/New-CIPPAPIConfig.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/New-CIPPAPIConfig.ps1
@@ -1,4 +1,14 @@
function New-CIPPAPIConfig {
+ <#
+ .NOTES
+ Permission: Graph | POST /applications | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
+ Permission: Graph | GET /applications(appid='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
+ Permission: Graph | POST /applications/{id}/addPassword | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /policies/defaultAppManagementPolicy | Application | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | POST /serviceprincipals | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding(SupportsShouldProcess)]
param (
diff --git a/backend/Modules/CIPPCore/Public/Authentication/New-CIPPMcpResourceApp.ps1 b/backend/Modules/CIPPCore/Public/Authentication/New-CIPPMcpResourceApp.ps1
index 7daf48920d..e3817fdec3 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/New-CIPPMcpResourceApp.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/New-CIPPMcpResourceApp.ps1
@@ -22,6 +22,13 @@ function New-CIPPMcpResourceApp {
appId/objectId/scopeId to the table and returns @{ AppId; ObjectId; ScopeId }.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /applications | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | POST /applications | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess)]
param($Headers)
diff --git a/backend/Modules/CIPPCore/Public/Authentication/New-CIPPSSOApp.ps1 b/backend/Modules/CIPPCore/Public/Authentication/New-CIPPSSOApp.ps1
index 04baa58f14..fa660a6d50 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/New-CIPPSSOApp.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/New-CIPPSSOApp.ps1
@@ -9,6 +9,11 @@ function New-CIPPSSOApp {
creates a new one. Does NOT create a client secret — call Add-CIPPSSOAppSecret
for that as a separate step so the AppId can be persisted before the (sometimes
flaky) secret creation runs.
+ .NOTES
+ Permission: Graph | POST /applications | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Repair-CippApiIdentifierUri.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Repair-CippApiIdentifierUri.ps1
index 76bafd0b67..810f9c6831 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Repair-CippApiIdentifierUri.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Repair-CippApiIdentifierUri.ps1
@@ -17,6 +17,10 @@ function Repair-CippApiIdentifierUri {
- PreviousUri: the previous identifier URI (if any)
- CurrentUri: the current/fixed identifier URI
- Message: description of what happened
+ .NOTES
+ Permission: Graph | GET /applications | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /applications/{id} | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Set-CIPPMCPClientApp.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Set-CIPPMCPClientApp.ps1
index 21196b9745..d340bc67ae 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Set-CIPPMCPClientApp.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Set-CIPPMCPClientApp.ps1
@@ -20,6 +20,9 @@ function Set-CIPPMCPClientApp {
Application (client) ID of the MCPAllowed API client to configure as an MCP OAuth client.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Set-CippMcpResourcePreAuth.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Set-CippMcpResourcePreAuth.ps1
index a2c0d8d35d..3ce42d3a16 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Set-CippMcpResourcePreAuth.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Set-CippMcpResourcePreAuth.ps1
@@ -25,6 +25,9 @@ function Set-CippMcpResourcePreAuth {
The id of the resource's user_impersonation oauth2PermissionScope.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /applications/{id} | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Test-CIPPAccessUserRole.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Test-CIPPAccessUserRole.ps1
index 831fe3d26c..b3b9ebaa86 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Test-CIPPAccessUserRole.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Test-CIPPAccessUserRole.ps1
@@ -14,6 +14,8 @@ function Test-CIPPAccessUserRole {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /users/{id}/transitiveMemberOf | Application | User.Read.All | Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadBasic.All, GroupMember.Read.All, GroupMember.ReadBasic.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSAMRedirectUri.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSAMRedirectUri.ps1
index d6ed545baf..be9ba24414 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSAMRedirectUri.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSAMRedirectUri.ps1
@@ -7,6 +7,9 @@ function Update-CIPPSAMRedirectUri {
Checks the SAM app's web.redirectUris and adds any
missing URIs for the current CIPP instance. Requires
$env:ApplicationID, $env:TenantID, and WEBSITE_HOSTNAME to be set.
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
#>
[CmdletBinding()]
param()
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSSOPreconsent.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSSOPreconsent.ps1
index 7977a85e65..2ebe4629ce 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSSOPreconsent.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSSOPreconsent.ps1
@@ -19,6 +19,12 @@ function Update-CIPPSSOPreconsent {
Only covers the home tenant. A multi-tenant SSO app still prompts users from other
tenants, because the grant can only be written where CIPP holds credentials.
+ .NOTES
+ Permission: Graph | POST /oauth2PermissionGrants | Application | Directory.ReadWrite.All
+ Permission: Graph | PATCH /oauth2PermissionGrants/{id} | Application | Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='00000003-0000-0000-c000-000000000000') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id}/oauth2PermissionGrants | Application | Directory.Read.All | DelegatedPermissionGrant.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param()
diff --git a/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSSORedirectUri.ps1 b/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSSORedirectUri.ps1
index 2539329009..5a4c014a65 100644
--- a/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSSORedirectUri.ps1
+++ b/backend/Modules/CIPPCore/Public/Authentication/Update-CIPPSSORedirectUri.ps1
@@ -22,6 +22,9 @@ function Update-CIPPSSORedirectUri {
.PARAMETER PassThru
Emit a result object describing what happened. Off by default so warmup callers
(Initialize-CIPPAuth) don't pick up stray pipeline output.
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecBlastRadius.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecBlastRadius.ps1
index 58575169b0..31f0365325 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecBlastRadius.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecBlastRadius.ps1
@@ -34,6 +34,8 @@ function Get-CIPPBecBlastRadius {
Anchor mailbox for the EXO request.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecColleagueSample.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecColleagueSample.ps1
index 8c364b536a..5024758912 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecColleagueSample.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecColleagueSample.ps1
@@ -18,6 +18,8 @@ function Get-CIPPBecColleagueSample {
How many colleagues to pick.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Application | AuditLog.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecCorrelatedUserPeers.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecCorrelatedUserPeers.ps1
index 57fb32d789..ea9752648a 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecCorrelatedUserPeers.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecCorrelatedUserPeers.ps1
@@ -25,6 +25,8 @@ function Get-CIPPBecCorrelatedUserPeers {
The start of the investigation window (UTC).
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Application | AuditLog.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecDirectoryAudits.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecDirectoryAudits.ps1
index 2dbf832c0b..27583cd30e 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecDirectoryAudits.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecDirectoryAudits.ps1
@@ -19,6 +19,8 @@ function Get-CIPPBecDirectoryAudits {
The BEC heuristics object (directoryAudit.flaggedActivities).
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /auditLogs/directoryAudits | Application | AuditLog.Read.All | Directory.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecIPGuidance.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecIPGuidance.ps1
index 032efa75f0..7a23ca5cac 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecIPGuidance.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecIPGuidance.ps1
@@ -19,6 +19,8 @@ function Get-CIPPBecIPGuidance {
Anchor mailbox for the Exchange requests.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Application | Policy.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecIPPeers.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecIPPeers.ps1
index c190201542..7b818dbb45 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecIPPeers.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecIPPeers.ps1
@@ -33,6 +33,8 @@ function Get-CIPPBecIPPeers {
The investigated user's UPN: excluded from the audit log history (it names users by UPN) and its anchor mailbox.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Application | AuditLog.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecReceivedMailFindings.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecReceivedMailFindings.ps1
index fe77694f57..7848740ca1 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecReceivedMailFindings.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecReceivedMailFindings.ps1
@@ -28,6 +28,8 @@ function Get-CIPPBecReceivedMailFindings {
Also query Defender analysedEmails metadata.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /security/collaboration/analyzedEmails | Application | SecurityAnalyzedMessage.Read.All | SecurityAnalyzedMessage.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecRegisteredDevices.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecRegisteredDevices.ps1
index 478474077a..c8348e9027 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecRegisteredDevices.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecRegisteredDevices.ps1
@@ -15,6 +15,8 @@ function Get-CIPPBecRegisteredDevices {
Window start (UTC).
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /users/{id}/registeredDevices/microsoft.graph.device | Application | User.Read.All | Directory.Read.All, Directory.ReadWrite.All, User.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecRiskState.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecRiskState.ps1
index 01b3297e1a..f9cd55ea7a 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecRiskState.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecRiskState.ps1
@@ -14,6 +14,9 @@ function Get-CIPPBecRiskState {
Window start (UTC) for detections.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /identityProtection/riskDetections | Delegated | IdentityRiskEvent.Read.All
+ Permission: Graph | GET /identityProtection/riskyUsers/{id} | Delegated | IdentityRiskyUser.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecUserGrants.ps1 b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecUserGrants.ps1
index 42e5fac156..c869d1fb21 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecUserGrants.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Get-CIPPBecUserGrants.ps1
@@ -21,6 +21,10 @@ function Get-CIPPBecUserGrants {
Start of the analysis window. Without it every high-risk grant is flagged.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /users/{id}/appRoleAssignments | Application | Directory.Read.All | AppRoleAssignment.ReadWrite.All
+ Permission: Graph | GET /users/{id}/oauth2PermissionGrants | Application | Directory.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Invoke-CIPPBecContainment.ps1 b/backend/Modules/CIPPCore/Public/BEC/Invoke-CIPPBecContainment.ps1
index df7156122c..3e7657d842 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Invoke-CIPPBecContainment.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Invoke-CIPPBecContainment.ps1
@@ -49,6 +49,9 @@ function Invoke-CIPPBecContainment {
Logging API name.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /servicePrincipals/{id} | Application | Application.ReadWrite.OwnedBy | AgentIdentity.ReadWrite.All, Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/New-CIPPBecRunRequest.ps1 b/backend/Modules/CIPPCore/Public/BEC/New-CIPPBecRunRequest.ps1
index a1b02295a2..f704a6c1a1 100644
--- a/backend/Modules/CIPPCore/Public/BEC/New-CIPPBecRunRequest.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/New-CIPPBecRunRequest.ps1
@@ -26,6 +26,8 @@ function New-CIPPBecRunRequest {
technician's, never the user's or the attacker's.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/New-CIPPBecTargetedCAPolicy.ps1 b/backend/Modules/CIPPCore/Public/BEC/New-CIPPBecTargetedCAPolicy.ps1
index d228286e48..9ce3b047f0 100644
--- a/backend/Modules/CIPPCore/Public/BEC/New-CIPPBecTargetedCAPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/New-CIPPBecTargetedCAPolicy.ps1
@@ -28,6 +28,9 @@ function New-CIPPBecTargetedCAPolicy {
Logging API name.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | POST /identity/conditionalAccess/policies | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Remove-CIPPBecSharingLinks.ps1 b/backend/Modules/CIPPCore/Public/BEC/Remove-CIPPBecSharingLinks.ps1
index 7d8b7aa0c1..2c486f73cc 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Remove-CIPPBecSharingLinks.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Remove-CIPPBecSharingLinks.ps1
@@ -26,6 +26,9 @@ function Remove-CIPPBecSharingLinks {
Logging API name.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | DELETE /drives/{id}/items/{id}/permissions/{id} | Application | Files.ReadWrite.All | Sites.ReadWrite.All
+ Permission: Graph | GET /shares/{id}/driveItem | Application | Files.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Remove-CIPPBecTargetedCAPolicy.ps1 b/backend/Modules/CIPPCore/Public/BEC/Remove-CIPPBecTargetedCAPolicy.ps1
index a984c8cf61..6caf427809 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Remove-CIPPBecTargetedCAPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Remove-CIPPBecTargetedCAPolicy.ps1
@@ -18,6 +18,9 @@ function Remove-CIPPBecTargetedCAPolicy {
Logging API name.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | DELETE /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/BEC/Search-CIPPBecSignIn.ps1 b/backend/Modules/CIPPCore/Public/BEC/Search-CIPPBecSignIn.ps1
index 6ace5c1dc1..0edcabbf95 100644
--- a/backend/Modules/CIPPCore/Public/BEC/Search-CIPPBecSignIn.ps1
+++ b/backend/Modules/CIPPCore/Public/BEC/Search-CIPPBecSignIn.ps1
@@ -22,6 +22,8 @@ function Search-CIPPBecSignIn {
Read with the application token (the default) or the delegated one.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Application | AuditLog.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Clear-CIPPOnPremisesAttributes.ps1 b/backend/Modules/CIPPCore/Public/Clear-CIPPOnPremisesAttributes.ps1
index ef6ed2769e..7df8cfc1bd 100644
--- a/backend/Modules/CIPPCore/Public/Clear-CIPPOnPremisesAttributes.ps1
+++ b/backend/Modules/CIPPCore/Public/Clear-CIPPOnPremisesAttributes.ps1
@@ -7,6 +7,10 @@ function Clear-CIPPOnPremisesAttributes {
updated (Graph rejects synced ones). The values being cleared are written to the log entry as the
rollback record Microsoft recommends keeping.
https://learn.microsoft.com/entra/identity/hybrid/connect/tshoot-clear-on-premises-attributes
+ .NOTES
+ Permission: Graph | POST /directory/deletedItems/{id}/restore | Delegated | User.DeleteRestore.All | User.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Application | User.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPCore/Public/Compare-CIPPIntuneAssignments.ps1 b/backend/Modules/CIPPCore/Public/Compare-CIPPIntuneAssignments.ps1
index 544d222698..f5db3715f8 100644
--- a/backend/Modules/CIPPCore/Public/Compare-CIPPIntuneAssignments.ps1
+++ b/backend/Modules/CIPPCore/Public/Compare-CIPPIntuneAssignments.ps1
@@ -55,6 +55,9 @@ function Compare-CIPPIntuneAssignments {
Reasons - one readable line per difference
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/assignmentFilters | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
param(
[object[]]$ExistingAssignments,
diff --git a/backend/Modules/CIPPCore/Public/CustomData/Invoke-CustomDataSync.ps1 b/backend/Modules/CIPPCore/Public/CustomData/Invoke-CustomDataSync.ps1
index f49792e6b0..a75a0538fd 100644
--- a/backend/Modules/CIPPCore/Public/CustomData/Invoke-CustomDataSync.ps1
+++ b/backend/Modules/CIPPCore/Public/CustomData/Invoke-CustomDataSync.ps1
@@ -1,4 +1,9 @@
function Invoke-CustomDataSync {
+ <#
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ #>
param(
$TenantFilter
)
diff --git a/backend/Modules/CIPPCore/Public/Enable-CIPPMDEConnector.ps1 b/backend/Modules/CIPPCore/Public/Enable-CIPPMDEConnector.ps1
index 298da51d77..6eb393c786 100644
--- a/backend/Modules/CIPPCore/Public/Enable-CIPPMDEConnector.ps1
+++ b/backend/Modules/CIPPCore/Public/Enable-CIPPMDEConnector.ps1
@@ -11,6 +11,9 @@ function Enable-CIPPMDEConnector {
The tenant domain or ID to provision the connector for.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92 | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Entrypoints/Timer Functions/Start-UpdateTokensTimer.ps1 b/backend/Modules/CIPPCore/Public/Entrypoints/Timer Functions/Start-UpdateTokensTimer.ps1
index 4d0ddc5b22..9fd783bc41 100644
--- a/backend/Modules/CIPPCore/Public/Entrypoints/Timer Functions/Start-UpdateTokensTimer.ps1
+++ b/backend/Modules/CIPPCore/Public/Entrypoints/Timer Functions/Start-UpdateTokensTimer.ps1
@@ -2,6 +2,11 @@ function Start-UpdateTokensTimer {
<#
.SYNOPSIS
Start the Update Tokens Timer
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
+ Permission: Graph | POST /applications/{id}/addPassword | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | POST /applications/{id}/removePassword | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
#>
[System.Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingConvertToSecureStringWithPlainText', '')]
[CmdletBinding(SupportsShouldProcess = $true)]
diff --git a/backend/Modules/CIPPCore/Public/Entrypoints/Timer Functions/Start-UserSyncTimer.ps1 b/backend/Modules/CIPPCore/Public/Entrypoints/Timer Functions/Start-UserSyncTimer.ps1
index dabf3a7ee0..51f0dff7db 100644
--- a/backend/Modules/CIPPCore/Public/Entrypoints/Timer Functions/Start-UserSyncTimer.ps1
+++ b/backend/Modules/CIPPCore/Public/Entrypoints/Timer Functions/Start-UserSyncTimer.ps1
@@ -8,6 +8,8 @@ function Start-UserSyncTimer {
Manual role assignments are preserved in a separate column and merged at compute time.
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /groups/{id}/transitiveMembers | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
diff --git a/backend/Modules/CIPPCore/Public/Expand-CIPPCACoverageGuestBlock.ps1 b/backend/Modules/CIPPCore/Public/Expand-CIPPCACoverageGuestBlock.ps1
new file mode 100644
index 0000000000..7070ecd67e
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/Expand-CIPPCACoverageGuestBlock.ps1
@@ -0,0 +1,79 @@
+function Expand-CIPPCACoverageGuestBlock {
+ <#
+ .NOTES
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
+ param (
+ $GuestConfig,
+ [hashtable]$Map,
+ [string]$Type,
+ [string]$Field,
+ [string]$TenantFilter,
+ [System.Collections.Generic.List[object]]$Unresolved
+ )
+ if ($null -eq $GuestConfig) { return }
+ $TypesRaw = $GuestConfig.guestOrExternalUserTypes
+ if ([string]::IsNullOrWhiteSpace($TypesRaw) -or $TypesRaw -eq 'none') { return }
+
+ $SelectedTypes = @(
+ $TypesRaw -split ',' |
+ ForEach-Object { $_.Trim() } |
+ Where-Object { $_ -and $_ -ne 'none' -and $_ -ne 'unknownFutureValue' } |
+ Select-Object -Unique
+ )
+ if ($SelectedTypes.Count -eq 0) { return }
+
+ # These CA categories are not reliably enumerable from directory user objects.
+ $NonEnumerableTypes = @(
+ 'b2bDirectConnectUser'
+ 'otherExternalUser'
+ 'serviceProvider'
+ )
+ foreach ($GuestType in $SelectedTypes) {
+ if ($NonEnumerableTypes -contains $GuestType) {
+ $Unresolved.Add([pscustomobject]@{
+ field = $Field
+ id = $GuestType
+ error = 'This guest or external user type cannot be expanded from directory users'
+ }) | Out-Null
+ }
+ }
+
+ $EnumerableTypes = @(
+ $SelectedTypes | Where-Object {
+ $_ -in @('b2bCollaborationGuest', 'b2bCollaborationMember', 'internalGuest')
+ }
+ )
+ if ($EnumerableTypes.Count -eq 0) { return }
+
+ $Candidates = [System.Collections.Generic.List[object]]::new()
+ try {
+ if ($EnumerableTypes -contains 'b2bCollaborationGuest' -or $EnumerableTypes -contains 'internalGuest') {
+ $GuestUsers = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/users?`$filter=userType eq 'Guest'&`$select=id,displayName,userPrincipalName,userType,identities&`$top=999" -tenantid $TenantFilter -AsApp $true)
+ foreach ($Guest in $GuestUsers) { $Candidates.Add($Guest) | Out-Null }
+ }
+ if ($EnumerableTypes -contains 'b2bCollaborationMember') {
+ # B2B collaboration members keep the #EXT# UPN pattern with userType Member.
+ $MemberExtUsers = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/users?`$count=true&`$filter=userType eq 'Member' and contains(userPrincipalName,'#EXT#')&`$select=id,displayName,userPrincipalName,userType,identities&`$top=999" -tenantid $TenantFilter -AsApp $true -ComplexFilter)
+ foreach ($Member in $MemberExtUsers) { $Candidates.Add($Member) | Out-Null }
+ }
+ } catch {
+ $Unresolved.Add([pscustomobject]@{ field = $Field; id = $TypesRaw; error = $_.Exception.Message }) | Out-Null
+ return
+ }
+
+ $Seen = [System.Collections.Generic.HashSet[string]]::new()
+ $Label = "Guest types: $TypesRaw"
+ foreach ($Candidate in $Candidates) {
+ if (-not $Candidate.id) { continue }
+ if (-not $Seen.Add([string]$Candidate.id)) { continue }
+
+ $Category = Get-CIPPCACoverageGuestCategory -User $Candidate
+ if (-not $Category -or ($EnumerableTypes -notcontains $Category)) { continue }
+ if (-not (Test-CIPPCACoverageExternalTenantMatch -User $Candidate -ExternalTenants $GuestConfig.externalTenants)) {
+ continue
+ }
+
+ Add-CIPPCACoverageReason -Map $Map -UserId $Candidate.id -Reason (New-CIPPCACoverageReason -Type $Type -Token $TypesRaw -Label $Label)
+ }
+}
diff --git a/backend/Modules/CIPPCore/Public/Find-CIPPGDAPTransitiveGroupPath.ps1 b/backend/Modules/CIPPCore/Public/Find-CIPPGDAPTransitiveGroupPath.ps1
new file mode 100644
index 0000000000..190e1a697e
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/Find-CIPPGDAPTransitiveGroupPath.ps1
@@ -0,0 +1,82 @@
+function Find-CIPPGDAPTransitiveGroupPath {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups/{id}/members | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ #>
+ param(
+ [string]$UserId,
+ [string]$TargetGroupId,
+ [string]$TargetGroupName,
+ [hashtable]$VisitedGroups = @{},
+ [int]$MaxDepth = 10
+ )
+
+ # Prevent infinite loops and excessive depth
+ if ($VisitedGroups.ContainsKey($TargetGroupId) -or $MaxDepth -le 0) {
+ return $null
+ }
+ $VisitedGroups[$TargetGroupId] = $true
+
+ try {
+ # Check if user is directly in target group
+ $DirectMembers = New-GraphGetRequest -Uri "https://graph.microsoft.com/beta/groups/$TargetGroupId/members?`$select=id,displayName,userPrincipalName" -tenantid $env:TenantID -NoAuthCheck $true -AsApp $true -ErrorAction SilentlyContinue
+ if ($DirectMembers.value | Where-Object { $_.id -eq $UserId }) {
+ # User is directly in target group
+ return @(
+ @{
+ sequence = 0
+ groupId = $TargetGroupId
+ groupName = $TargetGroupName
+ membershipType = 'direct'
+ }
+ )
+ }
+
+ # User is not directly in target group, check nested groups
+ $GroupMembers = New-GraphGetRequest -Uri "https://graph.microsoft.com/beta/groups/$TargetGroupId/members?`$select=id,displayName,@odata.type" -tenantid $env:TenantID -NoAuthCheck $true -AsApp $true -ErrorAction SilentlyContinue
+
+ if ($GroupMembers.value) {
+ foreach ($Member in $GroupMembers.value) {
+ # Only check groups, not users
+ if ($Member.'@odata.type' -eq '#microsoft.graph.group') {
+ $IntermediateGroupId = $Member.id
+ $IntermediateGroupName = $Member.displayName
+
+ # Recursively check if user is in this intermediate group
+ $SubPath = Find-CIPPGDAPTransitiveGroupPath -UserId $UserId -TargetGroupId $IntermediateGroupId -TargetGroupName $IntermediateGroupName -VisitedGroups $VisitedGroups -MaxDepth ($MaxDepth - 1)
+
+ if ($SubPath) {
+ # Found a path! Build the complete chain
+ $Sequence = 0
+ $Path = @(
+ # Add intermediate groups from sub-path
+ foreach ($PathItem in $SubPath) {
+ @{
+ sequence = $Sequence++
+ groupId = $PathItem.groupId
+ groupName = $PathItem.groupName
+ membershipType = $PathItem.membershipType # Preserve membership type from sub-path
+ }
+ }
+
+ # Add target group at the end (intermediate group is nested in target)
+ @{
+ sequence = $Sequence
+ groupId = $TargetGroupId
+ groupName = $TargetGroupName
+ membershipType = 'nested'
+ }
+ )
+
+ return $Path
+ }
+ }
+ }
+ }
+ } catch {
+ # If we can't check (permissions, API error), return null
+ # Silently fail - errors are expected when checking group memberships
+ }
+
+ return $null
+}
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPBiosPassword.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPBiosPassword.ps1
index 5f9d62cdea..ea20e1206d 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPBiosPassword.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPBiosPassword.ps1
@@ -29,6 +29,8 @@
Or a string message if no password is found.
+.NOTES
+ Permission: Graph | GET /deviceManagement/hardwarePasswordDetails | Delegated | DeviceManagementManagedDevices.PrivilegedOperations.All
#>
function Get-CIPPBiosPassword {
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPBitlockerKey.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPBitlockerKey.ps1
index edd4d86bf0..3e4e2379f9 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPBitlockerKey.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPBitlockerKey.ps1
@@ -26,6 +26,9 @@
- state: Status of the operation ('success')
Or a string message if no keys are found.
+.NOTES
+ Permission: Graph | GET /informationProtection/bitlocker/recoveryKeys | Delegated | BitlockerKey.ReadBasic.All | BitlockerKey.Read.All
+ Permission: Graph | GET /informationProtection/bitlocker/recoveryKeys/{id} | Delegated | BitlockerKey.ReadBasic.All | BitlockerKey.Read.All
#>
function Get-CIPPBitLockerKey {
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPCACoverageGuestCategory.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPCACoverageGuestCategory.ps1
new file mode 100644
index 0000000000..2734177d94
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPCACoverageGuestCategory.ps1
@@ -0,0 +1,10 @@
+function Get-CIPPCACoverageGuestCategory {
+ param ($User)
+ $Upn = [string]$User.userPrincipalName
+ $IsExt = $Upn -like '*#EXT#*'
+ $UserType = [string]$User.userType
+ if ($UserType -eq 'Guest' -and $IsExt) { return 'b2bCollaborationGuest' }
+ if ($UserType -eq 'Member' -and $IsExt) { return 'b2bCollaborationMember' }
+ if ($UserType -eq 'Guest' -and -not $IsExt) { return 'internalGuest' }
+ return $null
+}
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPCACoverageGuestHomeTenantId.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPCACoverageGuestHomeTenantId.ps1
new file mode 100644
index 0000000000..6e6828c64e
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPCACoverageGuestHomeTenantId.ps1
@@ -0,0 +1,8 @@
+function Get-CIPPCACoverageGuestHomeTenantId {
+ param ($User)
+ foreach ($Identity in @($User.identities)) {
+ $Issuer = [string]$Identity.issuer
+ if ($Issuer -match '^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$') { return $Issuer }
+ }
+ return $null
+}
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPCAPolicyIdentityCoverage.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPCAPolicyIdentityCoverage.ps1
index 9127068616..619ec59597 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPCAPolicyIdentityCoverage.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPCAPolicyIdentityCoverage.ps1
@@ -8,6 +8,15 @@ function Get-CIPPCAPolicyIdentityCoverage {
for status; include+exclude rows stay in the result with both reason arrays.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /directoryObjects/getByIds | Application | Directory.Read.All
+ Permission: Graph | GET /groups/{id} | Application | Group.Read.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group-XTenantIdentitySync.Read.All, Group.ManageProtection.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id}/members/microsoft.graph.user | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /groups/{id}/transitiveMembers/microsoft.graph.user | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Application | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Application | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
@@ -26,54 +35,6 @@ function Get-CIPPCAPolicyIdentityCoverage {
$GroupNameLookup = @{}
$RoleNameLookup = @{}
- function Add-CoverageReason {
- param (
- [hashtable]$Map,
- [string]$UserId,
- [hashtable]$Reason
- )
- if ([string]::IsNullOrWhiteSpace($UserId) -or $null -eq $Reason) { return }
- if (-not $Map.ContainsKey($UserId)) {
- $Map[$UserId] = [System.Collections.Generic.List[object]]::new()
- }
- $Existing = $Map[$UserId] | Where-Object { $_.value -eq $Reason.value }
- if ($Existing) { return }
- $Map[$UserId].Add([pscustomobject]$Reason) | Out-Null
- }
-
- function New-CoverageReason {
- param (
- [string]$Type,
- [string]$Id,
- [string]$Token,
- [string]$Label,
- [bool]$Transitive = $false,
- [string]$ViaGroupId,
- [string]$ViaGroupLabel
- )
- $ValueKey = if ($Id -and $ViaGroupId) {
- "$Type`:$Id`:group:$ViaGroupId"
- } elseif ($Id) {
- "$Type`:$Id"
- } elseif ($Token) {
- "$Type`:$Token"
- } else {
- $Type
- }
- $Reason = @{
- type = $Type
- value = $ValueKey
- label = $Label
- }
- if ($Id) { $Reason.id = $Id }
- if ($Transitive) { $Reason.transitive = $true }
- if ($ViaGroupId) {
- $Reason.viaGroupId = $ViaGroupId
- if ($ViaGroupLabel) { $Reason.viaGroupLabel = $ViaGroupLabel }
- }
- return $Reason
- }
-
function Test-IsGuid {
param ([string]$Value)
return $Value -match $GuidPattern
@@ -102,7 +63,7 @@ function Get-CIPPCAPolicyIdentityCoverage {
try {
$GuestUsers = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/users?`$filter=userType eq 'Guest'&`$select=id,displayName,userPrincipalName,userType&`$top=999" -tenantid $TenantFilter -AsApp $true)
foreach ($Guest in $GuestUsers) {
- Add-CoverageReason -Map $IncludeMap -UserId $Guest.id -Reason (New-CoverageReason -Type 'includeUsers' -Token 'GuestsOrExternalUsers' -Label 'Guests or external users')
+ Add-CIPPCACoverageReason -Map $IncludeMap -UserId $Guest.id -Reason (New-CIPPCACoverageReason -Type 'includeUsers' -Token 'GuestsOrExternalUsers' -Label 'Guests or external users')
}
} catch {
$Unresolved.Add([pscustomobject]@{ field = 'includeUsers'; id = 'GuestsOrExternalUsers'; error = $_.Exception.Message }) | Out-Null
@@ -110,7 +71,7 @@ function Get-CIPPCAPolicyIdentityCoverage {
continue
}
if (Test-IsGuid $UserRef) {
- Add-CoverageReason -Map $IncludeMap -UserId $UserRef -Reason (New-CoverageReason -Type 'includeUsers' -Id $UserRef -Label 'User inclusion')
+ Add-CIPPCACoverageReason -Map $IncludeMap -UserId $UserRef -Reason (New-CIPPCACoverageReason -Type 'includeUsers' -Id $UserRef -Label 'User inclusion')
}
}
@@ -120,7 +81,7 @@ function Get-CIPPCAPolicyIdentityCoverage {
try {
$GuestUsers = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/users?`$filter=userType eq 'Guest'&`$select=id,displayName,userPrincipalName,userType&`$top=999" -tenantid $TenantFilter -AsApp $true)
foreach ($Guest in $GuestUsers) {
- Add-CoverageReason -Map $ExcludeMap -UserId $Guest.id -Reason (New-CoverageReason -Type 'excludeUsers' -Token 'GuestsOrExternalUsers' -Label 'Guests or external users')
+ Add-CIPPCACoverageReason -Map $ExcludeMap -UserId $Guest.id -Reason (New-CIPPCACoverageReason -Type 'excludeUsers' -Token 'GuestsOrExternalUsers' -Label 'Guests or external users')
}
} catch {
$Unresolved.Add([pscustomobject]@{ field = 'excludeUsers'; id = 'GuestsOrExternalUsers'; error = $_.Exception.Message }) | Out-Null
@@ -128,7 +89,7 @@ function Get-CIPPCAPolicyIdentityCoverage {
continue
}
if (Test-IsGuid $UserRef) {
- Add-CoverageReason -Map $ExcludeMap -UserId $UserRef -Reason (New-CoverageReason -Type 'excludeUsers' -Id $UserRef -Label 'User exclusion')
+ Add-CIPPCACoverageReason -Map $ExcludeMap -UserId $UserRef -Reason (New-CIPPCACoverageReason -Type 'excludeUsers' -Id $UserRef -Label 'User exclusion')
}
}
@@ -251,10 +212,10 @@ function Get-CIPPCAPolicyIdentityCoverage {
$IsNested = -not $DirectMembers.Contains($MemberId)
$ReasonLabel = if ($IsNested) { "Group: $GroupLabel (nested)" } else { "Group: $GroupLabel" }
if ($IsInclude) {
- Add-CoverageReason -Map $IncludeMap -UserId $MemberId -Reason (New-CoverageReason -Type 'includeGroups' -Id $GroupId -Label $ReasonLabel -Transitive $IsNested)
+ Add-CIPPCACoverageReason -Map $IncludeMap -UserId $MemberId -Reason (New-CIPPCACoverageReason -Type 'includeGroups' -Id $GroupId -Label $ReasonLabel -Transitive $IsNested)
}
if ($IsExclude) {
- Add-CoverageReason -Map $ExcludeMap -UserId $MemberId -Reason (New-CoverageReason -Type 'excludeGroups' -Id $GroupId -Label $ReasonLabel -Transitive $IsNested)
+ Add-CIPPCACoverageReason -Map $ExcludeMap -UserId $MemberId -Reason (New-CIPPCACoverageReason -Type 'excludeGroups' -Id $GroupId -Label $ReasonLabel -Transitive $IsNested)
}
}
}
@@ -365,10 +326,10 @@ function Get-CIPPCAPolicyIdentityCoverage {
$ReasonLabel = "Role: $($Job.RoleLabel) via group $($Job.GroupLabel)"
foreach ($MemberId in $Members) {
if ($Job.IsInclude) {
- Add-CoverageReason -Map $IncludeMap -UserId $MemberId -Reason (New-CoverageReason -Type 'includeRoles' -Id $Job.TemplateId -Label $ReasonLabel -ViaGroupId $Job.GroupId -ViaGroupLabel $Job.GroupLabel)
+ Add-CIPPCACoverageReason -Map $IncludeMap -UserId $MemberId -Reason (New-CIPPCACoverageReason -Type 'includeRoles' -Id $Job.TemplateId -Label $ReasonLabel -ViaGroupId $Job.GroupId -ViaGroupLabel $Job.GroupLabel)
}
if ($Job.IsExclude) {
- Add-CoverageReason -Map $ExcludeMap -UserId $MemberId -Reason (New-CoverageReason -Type 'excludeRoles' -Id $Job.TemplateId -Label $ReasonLabel -ViaGroupId $Job.GroupId -ViaGroupLabel $Job.GroupLabel)
+ Add-CIPPCACoverageReason -Map $ExcludeMap -UserId $MemberId -Reason (New-CIPPCACoverageReason -Type 'excludeRoles' -Id $Job.TemplateId -Label $ReasonLabel -ViaGroupId $Job.GroupId -ViaGroupLabel $Job.GroupLabel)
}
}
}
@@ -391,136 +352,24 @@ function Get-CIPPCAPolicyIdentityCoverage {
}
if ($IncludeRoles -contains $TemplateId) {
- Add-CoverageReason -Map $IncludeMap -UserId $PrincipalId -Reason (New-CoverageReason -Type 'includeRoles' -Id $TemplateId -Label "Role: $RoleLabel")
+ Add-CIPPCACoverageReason -Map $IncludeMap -UserId $PrincipalId -Reason (New-CIPPCACoverageReason -Type 'includeRoles' -Id $TemplateId -Label "Role: $RoleLabel")
}
if ($ExcludeRoles -contains $TemplateId) {
- Add-CoverageReason -Map $ExcludeMap -UserId $PrincipalId -Reason (New-CoverageReason -Type 'excludeRoles' -Id $TemplateId -Label "Role: $RoleLabel")
+ Add-CIPPCACoverageReason -Map $ExcludeMap -UserId $PrincipalId -Reason (New-CIPPCACoverageReason -Type 'excludeRoles' -Id $TemplateId -Label "Role: $RoleLabel")
}
}
}
}
# --- Guests / external user blocks ---
- function Get-CoverageGuestHomeTenantId {
- param ($User)
- foreach ($Identity in @($User.identities)) {
- $Issuer = [string]$Identity.issuer
- if ($Issuer -match $GuidPattern) { return $Issuer }
- }
- return $null
- }
-
- function Get-CoverageGuestCategory {
- param ($User)
- $Upn = [string]$User.userPrincipalName
- $IsExt = $Upn -like '*#EXT#*'
- $UserType = [string]$User.userType
- if ($UserType -eq 'Guest' -and $IsExt) { return 'b2bCollaborationGuest' }
- if ($UserType -eq 'Member' -and $IsExt) { return 'b2bCollaborationMember' }
- if ($UserType -eq 'Guest' -and -not $IsExt) { return 'internalGuest' }
- return $null
- }
-
- function Test-CoverageExternalTenantMatch {
- param (
- $User,
- $ExternalTenants
- )
- if ($null -eq $ExternalTenants) { return $true }
- $Kind = [string]$ExternalTenants.membershipKind
- if ([string]::IsNullOrWhiteSpace($Kind) -or $Kind -eq 'all') { return $true }
- if ($Kind -ne 'enumerated') { return $true }
-
- $Allowed = @($ExternalTenants.members | Where-Object { -not [string]::IsNullOrWhiteSpace($_) })
- if ($Allowed.Count -eq 0) { return $false }
-
- $HomeTenantId = Get-CoverageGuestHomeTenantId -User $User
- if (-not $HomeTenantId) { return $false }
- return ($Allowed -contains $HomeTenantId)
- }
-
- function Expand-GuestBlock {
- param (
- $GuestConfig,
- [hashtable]$Map,
- [string]$Type,
- [string]$Field
- )
- if ($null -eq $GuestConfig) { return }
- $TypesRaw = $GuestConfig.guestOrExternalUserTypes
- if ([string]::IsNullOrWhiteSpace($TypesRaw) -or $TypesRaw -eq 'none') { return }
-
- $SelectedTypes = @(
- $TypesRaw -split ',' |
- ForEach-Object { $_.Trim() } |
- Where-Object { $_ -and $_ -ne 'none' -and $_ -ne 'unknownFutureValue' } |
- Select-Object -Unique
- )
- if ($SelectedTypes.Count -eq 0) { return }
-
- # These CA categories are not reliably enumerable from directory user objects.
- $NonEnumerableTypes = @(
- 'b2bDirectConnectUser'
- 'otherExternalUser'
- 'serviceProvider'
- )
- foreach ($GuestType in $SelectedTypes) {
- if ($NonEnumerableTypes -contains $GuestType) {
- $Unresolved.Add([pscustomobject]@{
- field = $Field
- id = $GuestType
- error = 'This guest or external user type cannot be expanded from directory users'
- }) | Out-Null
- }
- }
-
- $EnumerableTypes = @(
- $SelectedTypes | Where-Object {
- $_ -in @('b2bCollaborationGuest', 'b2bCollaborationMember', 'internalGuest')
- }
- )
- if ($EnumerableTypes.Count -eq 0) { return }
-
- $Candidates = [System.Collections.Generic.List[object]]::new()
- try {
- if ($EnumerableTypes -contains 'b2bCollaborationGuest' -or $EnumerableTypes -contains 'internalGuest') {
- $GuestUsers = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/users?`$filter=userType eq 'Guest'&`$select=id,displayName,userPrincipalName,userType,identities&`$top=999" -tenantid $TenantFilter -AsApp $true)
- foreach ($Guest in $GuestUsers) { $Candidates.Add($Guest) | Out-Null }
- }
- if ($EnumerableTypes -contains 'b2bCollaborationMember') {
- # B2B collaboration members keep the #EXT# UPN pattern with userType Member.
- $MemberExtUsers = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/users?`$count=true&`$filter=userType eq 'Member' and contains(userPrincipalName,'#EXT#')&`$select=id,displayName,userPrincipalName,userType,identities&`$top=999" -tenantid $TenantFilter -AsApp $true -ComplexFilter)
- foreach ($Member in $MemberExtUsers) { $Candidates.Add($Member) | Out-Null }
- }
- } catch {
- $Unresolved.Add([pscustomobject]@{ field = $Field; id = $TypesRaw; error = $_.Exception.Message }) | Out-Null
- return
- }
-
- $Seen = [System.Collections.Generic.HashSet[string]]::new()
- $Label = "Guest types: $TypesRaw"
- foreach ($Candidate in $Candidates) {
- if (-not $Candidate.id) { continue }
- if (-not $Seen.Add([string]$Candidate.id)) { continue }
-
- $Category = Get-CoverageGuestCategory -User $Candidate
- if (-not $Category -or ($EnumerableTypes -notcontains $Category)) { continue }
- if (-not (Test-CoverageExternalTenantMatch -User $Candidate -ExternalTenants $GuestConfig.externalTenants)) {
- continue
- }
-
- Add-CoverageReason -Map $Map -UserId $Candidate.id -Reason (New-CoverageReason -Type $Type -Token $TypesRaw -Label $Label)
- }
- }
-
- Expand-GuestBlock -GuestConfig $Users.includeGuestsOrExternalUsers -Map $IncludeMap -Type 'includeGuestsOrExternalUsers' -Field 'includeGuestsOrExternalUsers'
- Expand-GuestBlock -GuestConfig $Users.excludeGuestsOrExternalUsers -Map $ExcludeMap -Type 'excludeGuestsOrExternalUsers' -Field 'excludeGuestsOrExternalUsers'
+ Expand-CIPPCACoverageGuestBlock -GuestConfig $Users.includeGuestsOrExternalUsers -Map $IncludeMap -Type 'includeGuestsOrExternalUsers' -Field 'includeGuestsOrExternalUsers' -TenantFilter $TenantFilter -Unresolved $Unresolved
+ Expand-CIPPCACoverageGuestBlock -GuestConfig $Users.excludeGuestsOrExternalUsers -Map $ExcludeMap -Type 'excludeGuestsOrExternalUsers' -Field 'excludeGuestsOrExternalUsers' -TenantFilter $TenantFilter -Unresolved $Unresolved
# --- All token: annotate touched users only ---
- $AllReason = New-CoverageReason -Type 'includeUsers' -Token 'All' -Label 'All users'
+ $AllReason = New-CIPPCACoverageReason -Type 'includeUsers' -Token 'All' -Label 'All users'
if ($IncludesAllUsers) {
foreach ($UserId in @($IncludeMap.Keys + $ExcludeMap.Keys | Select-Object -Unique)) {
- Add-CoverageReason -Map $IncludeMap -UserId $UserId -Reason $AllReason
+ Add-CIPPCACoverageReason -Map $IncludeMap -UserId $UserId -Reason $AllReason
}
}
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPCAPolicyImpact.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPCAPolicyImpact.ps1
index 5a74dcf31b..c3ec4b6c47 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPCAPolicyImpact.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPCAPolicyImpact.ps1
@@ -10,6 +10,9 @@ function Get-CIPPCAPolicyImpact {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Delegated | AuditLog.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/policies/{id} | Delegated | Policy.Read.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPDrift.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPDrift.ps1
index 0bf9ae6653..4b2c58f741 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPDrift.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPDrift.ps1
@@ -16,6 +16,18 @@ function Get-CIPPDrift {
Get-CIPPDrift -TenantFilter "contoso.onmicrosoft.com"
.EXAMPLE
Get-CIPPDrift -TenantFilter "contoso.onmicrosoft.com" -TemplateId "12345-67890-abcdef"
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/managedAppPolicies | Application | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceCompliancePolicies | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceConfigurations | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyConfigurations | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/hardwareConfigurations | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsDriverUpdateProfiles | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsFeatureUpdateProfiles | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsQualityUpdatePolicies | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsQualityUpdateProfiles | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /identity/conditionalAccess/policies | Application | Policy.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPEnrollmentTimeDeviceMembershipTarget.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPEnrollmentTimeDeviceMembershipTarget.ps1
index fdfaa99e6d..af6c125e76 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPEnrollmentTimeDeviceMembershipTarget.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPEnrollmentTimeDeviceMembershipTarget.ps1
@@ -24,6 +24,8 @@ function Get-CIPPEnrollmentTimeDeviceMembershipTarget {
'Retrieved' or 'None'.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /deviceManagement/configurationPolicies/{id}/retrieveEnrollmentTimeDeviceMembershipTarget | Delegated | DeviceManagementConfiguration.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPEwsPermissionApps.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPEwsPermissionApps.ps1
index 2d45dbc689..73c8311ff1 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPEwsPermissionApps.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPEwsPermissionApps.ps1
@@ -10,6 +10,11 @@ function Get-CIPPEwsPermissionApps {
come from the cache with a live lookup for any holder it lacks.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /oauth2PermissionGrants | Delegated | Directory.Read.All | DelegatedPermissionGrant.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id} | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id}/appRoleAssignedTo | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPFileVaultKey.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPFileVaultKey.ps1
index bc1933d3bc..557c769b91 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPFileVaultKey.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPFileVaultKey.ps1
@@ -27,6 +27,8 @@
Or a string message if no key is found.
+.NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices/{id}/getFileVaultKey | Delegated | DeviceManagementConfiguration.Read.All
#>
function Get-CIPPFileVaultKey {
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPGroupType.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPGroupType.ps1
index 509a705851..4f88bea81f 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPGroupType.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPGroupType.ps1
@@ -28,6 +28,8 @@ function Get-CIPPGroupType {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups/{id} | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group-XTenantIdentitySync.Read.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPIntuneAdminTemplateDefinitionValue.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPIntuneAdminTemplateDefinitionValue.ps1
index 29c168fe9f..e95a8f106d 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPIntuneAdminTemplateDefinitionValue.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPIntuneAdminTemplateDefinitionValue.ps1
@@ -25,6 +25,11 @@ function Get-CIPPIntuneAdminTemplateDefinitionValue {
so they are not read twice.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues/{id}/presentationValues | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyDefinitions/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyDefinitions/{id}/presentations | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPIntunePolicy.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPIntunePolicy.ps1
index 90447b2a37..f3577fd6aa 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPIntunePolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPIntunePolicy.ps1
@@ -1,4 +1,9 @@
function Get-CIPPIntunePolicy {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/androidManagedAppProtections | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceAppManagement/iosManagedAppProtections | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ #>
param (
[Parameter(Mandatory = $true)]
$TemplateType,
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPIntuneReportExportJob.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPIntuneReportExportJob.ps1
index bfa77db79e..e5e39e3051 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPIntuneReportExportJob.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPIntuneReportExportJob.ps1
@@ -4,6 +4,8 @@ function Get-CIPPIntuneReportExportJob {
Returns a tenant's completed Intune report export, or nothing if it is not ready. Never waits.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/reports/exportJobs/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPLAPSPassword.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPLAPSPassword.ps1
index 9e720e6706..4b14ec462e 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPLAPSPassword.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPLAPSPassword.ps1
@@ -1,5 +1,9 @@
function Get-CIPPLapsPassword {
+ <#
+ .NOTES
+ Permission: Graph | GET /directory/deviceLocalCredentials/{id} | Delegated | DeviceLocalCredential.ReadBasic.All | DeviceLocalCredential.Read.All
+ #>
[CmdletBinding()]
param (
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPLicenseOverview.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPLicenseOverview.ps1
index be14d63e74..dbc2dc5f53 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPLicenseOverview.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPLicenseOverview.ps1
@@ -1,5 +1,12 @@
function Get-CIPPLicenseOverview {
+ <#
+ .NOTES
+ Permission: Graph | GET /directory/subscriptions | Application | Organization.Read.All | Directory.Read.All, Organization.ReadWrite.All
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /subscribedSkus | Application | LicenseAssignment.Read.All | Directory.Read.All, Directory.ReadWrite.All, Organization.Read.All, Organization.ReadWrite.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPLicenseRecommendation.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPLicenseRecommendation.ps1
index 907a6addaf..8e169e3d76 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPLicenseRecommendation.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPLicenseRecommendation.ps1
@@ -87,6 +87,10 @@ function Get-CIPPLicenseRecommendation {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /reports/getM365AppUserDetail(period='D180') | Delegated | Reports.Read.All
+ Permission: Graph | GET /reports/getOffice365ActiveUserDetail(period='D180') | Delegated | Reports.Read.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPMFAState.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPMFAState.ps1
index 937a894436..fb6defd85e 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPMFAState.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPMFAState.ps1
@@ -1,4 +1,15 @@
function Get-CIPPMFAState {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups/{id} | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group-XTenantIdentitySync.Read.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id}/members | Delegated | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /identity/conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | GET /policies/identitySecurityDefaultsEnforcementPolicy | Delegated | Policy.Read.All
+ Permission: Graph | GET /reports/authenticationMethods/userRegistrationDetails | Application | AuditLog.Read.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPMacOSLapsPassword.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPMacOSLapsPassword.ps1
index 19864eb777..07b7b3c78f 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPMacOSLapsPassword.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPMacOSLapsPassword.ps1
@@ -8,6 +8,8 @@ function Get-CIPPMacOSLapsPassword {
admin account have one. Graph does not return the account name; it is set in the ADE profile.
.PARAMETER Device
The Intune managedDevice ID, not the Entra device ID used by Windows LAPS.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices/{id}/retrieveMacOSManagedDeviceLocalAdminAccountDetail | Delegated | DeviceManagementManagedDevices.PrivilegedOperations.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPPerUserMFA.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPPerUserMFA.ps1
index 28ecc040f4..a575d483c4 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPPerUserMFA.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPPerUserMFA.ps1
@@ -1,4 +1,9 @@
function Get-CIPPPerUserMFA {
+ <#
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param(
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPReusableSettingsFromPolicy.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPReusableSettingsFromPolicy.ps1
index 05acd5f91b..eaa795bac2 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPReusableSettingsFromPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPReusableSettingsFromPolicy.ps1
@@ -1,4 +1,8 @@
function Get-CIPPReusableSettingsFromPolicy {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/reusablePolicySettings/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ #>
param(
[string]$PolicyJson,
[string]$Tenant,
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPSchemaExtensions.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPSchemaExtensions.ps1
index 5a77f5b246..062308da85 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPSchemaExtensions.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPSchemaExtensions.ps1
@@ -1,4 +1,11 @@
function Get-CIPPSchemaExtensions {
+ <#
+ .NOTES
+ Permission: Graph | GET /schemaExtensions | Application | Application.Read.All
+ Permission: Graph | POST /schemaExtensions | Application | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /schemaExtensions/{id} | Application | Application.Read.All
+ Permission: Graph | PATCH /schemaExtensions/{id} | Application | Application.ReadWrite.All | Directory.ReadWrite.All
+ #>
[CmdletBinding()]
Param(
[switch]$Update,
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPShadowAIReport.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPShadowAIReport.ps1
index c121c58351..632803cf6a 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPShadowAIReport.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPShadowAIReport.ps1
@@ -11,6 +11,8 @@ function Get-CIPPShadowAIReport {
sources, the AI software found on managed devices and the AI applications in Entra. No live
Graph enumeration is performed (refresh via ExecCIPPDBCache); the only live call is a bounded,
best-effort 7-day sign-in lookup for the matched AI applications.
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Delegated | AuditLog.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPSharePointLibraryRootChildUris.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPSharePointLibraryRootChildUris.ps1
index e337dcc2d3..0e2218df2f 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPSharePointLibraryRootChildUris.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPSharePointLibraryRootChildUris.ps1
@@ -2,6 +2,9 @@ function Get-CIPPSharePointLibraryRootChildUris {
<#
.SYNOPSIS
Enumerates eligible immediate children of a document library root for CreateCopyJobs.
+ .NOTES
+ Permission: Graph | GET /sites/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/lists/{id}/drive/root/children | Application | Files.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPSharePointSiteUsageRows.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPSharePointSiteUsageRows.ps1
index 8116a0fd80..5bd8c9d127 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPSharePointSiteUsageRows.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPSharePointSiteUsageRows.ps1
@@ -17,6 +17,10 @@ function Get-CIPPSharePointSiteUsageRows {
.PARAMETER LogApi
API name passed to Write-LogMessage for warnings and errors.
+ .NOTES
+ Permission: Graph | GET /sites/{id}:{id} | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/lists | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Get-CIPPTenantCapabilities.ps1 b/backend/Modules/CIPPCore/Public/Get-CIPPTenantCapabilities.ps1
index c7c9e4f628..eb71aa3e97 100644
--- a/backend/Modules/CIPPCore/Public/Get-CIPPTenantCapabilities.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CIPPTenantCapabilities.ps1
@@ -1,5 +1,9 @@
function Get-CIPPTenantCapabilities {
+ <#
+ .NOTES
+ Permission: Graph | GET /subscribedSkus | Delegated | LicenseAssignment.Read.All | Directory.Read.All, Directory.ReadWrite.All, Organization.Read.All, Organization.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Get-CippPartnerTenantInfo.ps1 b/backend/Modules/CIPPCore/Public/Get-CippPartnerTenantInfo.ps1
index 345961dcc0..11d44f5e75 100644
--- a/backend/Modules/CIPPCore/Public/Get-CippPartnerTenantInfo.ps1
+++ b/backend/Modules/CIPPCore/Public/Get-CippPartnerTenantInfo.ps1
@@ -12,6 +12,8 @@ function Get-CippPartnerTenantInfo {
not about a tenant the user is asking to act on.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param()
diff --git a/backend/Modules/CIPPCore/Public/GraphHelper/Get-CIPPAppPasswordPolicyMaxEnd.ps1 b/backend/Modules/CIPPCore/Public/GraphHelper/Get-CIPPAppPasswordPolicyMaxEnd.ps1
new file mode 100644
index 0000000000..069f32bb5d
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/GraphHelper/Get-CIPPAppPasswordPolicyMaxEnd.ps1
@@ -0,0 +1,19 @@
+# Max credential end date allowed by the tenant default app management policy's passwordLifetime
+# restriction, or $null when not enforced/readable. Custom per-app policies aren't read here.
+function Get-CIPPAppPasswordPolicyMaxEnd {
+ <#
+ .NOTES
+ Permission: Graph | GET /policies/defaultAppManagementPolicy | Application | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
+ #>
+ param([datetime]$From, $TenantFilter, $APIName, $Headers)
+ try {
+ $Policy = New-GraphGetRequest -uri 'https://graph.microsoft.com/v1.0/policies/defaultAppManagementPolicy' -tenantid $TenantFilter -AsApp $true
+ $Lifetime = $Policy.applicationRestrictions.passwordCredentials | Where-Object { $_.restrictionType -eq 'passwordLifetime' }
+ if ($Lifetime -and -not ($Lifetime.state -eq 'disabled' -or $null -eq $Lifetime.state) -and $Lifetime.maxLifetime) {
+ return $From.Add([System.Xml.XmlConvert]::ToTimeSpan($Lifetime.maxLifetime))
+ }
+ } catch {
+ Write-LogMessage -API $APIName -tenant $TenantFilter -headers $Headers -message "Could not read app management policy for expiry clamping: $($_.Exception.Message)" -sev Debug
+ }
+ return $null
+}
diff --git a/backend/Modules/CIPPCore/Public/GraphHelper/Get-CIPPOmaSettingDecryptedValue.ps1 b/backend/Modules/CIPPCore/Public/GraphHelper/Get-CIPPOmaSettingDecryptedValue.ps1
index e7e8e786a4..a7e4eddd2d 100644
--- a/backend/Modules/CIPPCore/Public/GraphHelper/Get-CIPPOmaSettingDecryptedValue.ps1
+++ b/backend/Modules/CIPPCore/Public/GraphHelper/Get-CIPPOmaSettingDecryptedValue.ps1
@@ -24,6 +24,8 @@ function Get-CIPPOmaSettingDecryptedValue {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/deviceConfigurations/{id}/getOmaSettingPlainTextValue(secretReferenceValueId='{id}') | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/GraphHelper/Get-CippSamPermissions.ps1 b/backend/Modules/CIPPCore/Public/GraphHelper/Get-CippSamPermissions.ps1
index 8391eaa00b..fb9f8cc410 100644
--- a/backend/Modules/CIPPCore/Public/GraphHelper/Get-CippSamPermissions.ps1
+++ b/backend/Modules/CIPPCore/Public/GraphHelper/Get-CippSamPermissions.ps1
@@ -24,6 +24,9 @@ function Get-CippSamPermissions {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id} | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding(DefaultParameterSetName = 'Default')]
param(
diff --git a/backend/Modules/CIPPCore/Public/GraphHelper/Get-SharePointAdminLink.ps1 b/backend/Modules/CIPPCore/Public/GraphHelper/Get-SharePointAdminLink.ps1
index 3d9b4e4e77..cd04f6224d 100644
--- a/backend/Modules/CIPPCore/Public/GraphHelper/Get-SharePointAdminLink.ps1
+++ b/backend/Modules/CIPPCore/Public/GraphHelper/Get-SharePointAdminLink.ps1
@@ -2,6 +2,8 @@ function Get-SharePointAdminLink {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /sites/root | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param ($Public, $TenantFilter)
diff --git a/backend/Modules/CIPPCore/Public/GraphHelper/Get-Tenants.ps1 b/backend/Modules/CIPPCore/Public/GraphHelper/Get-Tenants.ps1
index 290e55acfa..7d5a7f79de 100644
--- a/backend/Modules/CIPPCore/Public/GraphHelper/Get-Tenants.ps1
+++ b/backend/Modules/CIPPCore/Public/GraphHelper/Get-Tenants.ps1
@@ -3,6 +3,10 @@ function Get-Tenants {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/findTenantInformationByTenantId(tenantId='{id}') | Delegated | CrossTenantInformation.ReadBasic.All
#>
[CmdletBinding(DefaultParameterSetName = 'Standard')]
param (
diff --git a/backend/Modules/CIPPCore/Public/GraphHelper/Invoke-CIPPIntuneApprovalRetry.ps1 b/backend/Modules/CIPPCore/Public/GraphHelper/Invoke-CIPPIntuneApprovalRetry.ps1
index e1985ce262..b1512e6989 100644
--- a/backend/Modules/CIPPCore/Public/GraphHelper/Invoke-CIPPIntuneApprovalRetry.ps1
+++ b/backend/Modules/CIPPCore/Public/GraphHelper/Invoke-CIPPIntuneApprovalRetry.ps1
@@ -30,6 +30,8 @@ function Invoke-CIPPIntuneApprovalRetry {
not been processed within 3 days, so there is nothing left to complete after that.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/operationApprovalRequests | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementRBAC.Read.All, DeviceManagementRBAC.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/GraphHelper/New-CIPPMFAConnectorToken.ps1 b/backend/Modules/CIPPCore/Public/GraphHelper/New-CIPPMFAConnectorToken.ps1
index 6216b8bc4b..2a3fbca3c6 100644
--- a/backend/Modules/CIPPCore/Public/GraphHelper/New-CIPPMFAConnectorToken.ps1
+++ b/backend/Modules/CIPPCore/Public/GraphHelper/New-CIPPMFAConnectorToken.ps1
@@ -13,6 +13,11 @@ function New-CIPPMFAConnectorToken {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | POST /servicePrincipals | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals/{id}/addPassword | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals/{id}/removePassword | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
[Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingConvertToSecureStringWithPlainText', '', Justification = 'The connector secret must be written to Key Vault as a SecureString and is encrypted at rest.')]
diff --git a/backend/Modules/CIPPCore/Public/GraphHelper/New-ExoRequest.ps1 b/backend/Modules/CIPPCore/Public/GraphHelper/New-ExoRequest.ps1
index 7f98f93550..2fb8db0caf 100644
--- a/backend/Modules/CIPPCore/Public/GraphHelper/New-ExoRequest.ps1
+++ b/backend/Modules/CIPPCore/Public/GraphHelper/New-ExoRequest.ps1
@@ -2,6 +2,11 @@ function New-ExoRequest {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /users/APP:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/APP:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/UPN:SystemMailbox{8cc370d3-822a-4ab8-a926-bb94bd0641a9}@{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/UPN:SystemMailbox{bb558c35-97f1-4cb9-8ff7-d53741dc928c}@{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding(DefaultParameterSetName = 'ExoRequest')]
param(
diff --git a/backend/Modules/CIPPCore/Public/GraphHelper/Update-AppManagementPolicy.ps1 b/backend/Modules/CIPPCore/Public/GraphHelper/Update-AppManagementPolicy.ps1
index 4bdce232c7..5ef8569bcb 100644
--- a/backend/Modules/CIPPCore/Public/GraphHelper/Update-AppManagementPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/GraphHelper/Update-AppManagementPolicy.ps1
@@ -11,6 +11,12 @@ function Update-AppManagementPolicy {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /policies/appManagementPolicies | Application | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | POST /policies/appManagementPolicies | Application | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | PATCH /policies/appManagementPolicies/{id} | Application | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | GET /policies/appManagementPolicies/{id}/appliesTo | Application | Application.Read.All
+ Permission: Graph | GET /policies/defaultAppManagementPolicy | Application | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/GraphRequests/Get-GraphRequestList.ps1 b/backend/Modules/CIPPCore/Public/GraphRequests/Get-GraphRequestList.ps1
index 53a5f29332..d4f629454c 100644
--- a/backend/Modules/CIPPCore/Public/GraphRequests/Get-GraphRequestList.ps1
+++ b/backend/Modules/CIPPCore/Public/GraphRequests/Get-GraphRequestList.ps1
@@ -57,6 +57,8 @@ function Get-GraphRequestList {
.PARAMETER UseBatchExpand
Perform a batch lookup using the $expand query parameter to avoid 20 item max
+ .NOTES
+ Permission: Graph | GET /tenantRelationships/findTenantInformationByTenantId(tenantId='{id}') | Application | CrossTenantInformation.ReadBasic.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Invoke-CIPPCATemplateBatch.ps1 b/backend/Modules/CIPPCore/Public/Invoke-CIPPCATemplateBatch.ps1
index 43a144947b..a5808a0a45 100644
--- a/backend/Modules/CIPPCore/Public/Invoke-CIPPCATemplateBatch.ps1
+++ b/backend/Modules/CIPPCore/Public/Invoke-CIPPCATemplateBatch.ps1
@@ -19,6 +19,10 @@ function Invoke-CIPPCATemplateBatch {
BatchTemplates) is dequeued. This is NOT a user-selectable standard.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Invoke-CIPPMigrateOneDriveShortCuts.ps1 b/backend/Modules/CIPPCore/Public/Invoke-CIPPMigrateOneDriveShortCuts.ps1
index 12bd32153a..174b68b886 100644
--- a/backend/Modules/CIPPCore/Public/Invoke-CIPPMigrateOneDriveShortCuts.ps1
+++ b/backend/Modules/CIPPCore/Public/Invoke-CIPPMigrateOneDriveShortCuts.ps1
@@ -8,6 +8,10 @@ function Invoke-CIPPMigrateOneDriveShortCuts {
each remoteItem shortcut that is not already under Shortcuts into special/shortcuts.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /users/{id}/drive/items/{id} | Application | Files.ReadWrite.All | Sites.ReadWrite.All
+ Permission: Graph | GET /users/{id}/drive/root/children | Application | Files.Read.All | Files.ReadWrite.All
+ Permission: Graph | GET /users/{id}/drive/special/shortcuts | Application | Files.Read.All | Files.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPCore/Public/Invoke-CIPPOffboardingJob.ps1 b/backend/Modules/CIPPCore/Public/Invoke-CIPPOffboardingJob.ps1
index 1316407fd6..f17e57a999 100644
--- a/backend/Modules/CIPPCore/Public/Invoke-CIPPOffboardingJob.ps1
+++ b/backend/Modules/CIPPCore/Public/Invoke-CIPPOffboardingJob.ps1
@@ -1,4 +1,8 @@
function Invoke-CIPPOffboardingJob {
+ <#
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
[string]$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Invoke-CIPPSharePointTemplateDeploy.ps1 b/backend/Modules/CIPPCore/Public/Invoke-CIPPSharePointTemplateDeploy.ps1
index 0d95bb657f..787ec7f55a 100644
--- a/backend/Modules/CIPPCore/Public/Invoke-CIPPSharePointTemplateDeploy.ps1
+++ b/backend/Modules/CIPPCore/Public/Invoke-CIPPSharePointTemplateDeploy.ps1
@@ -25,6 +25,8 @@ function Invoke-CIPPSharePointTemplateDeploy {
.PARAMETER DeploymentId
Optional async deployment job id (from New-CIPPAsyncDeployment). When provided, per-site
progress is written to the CacheAsyncDeployments row so the frontend can poll it live.
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPApplicationCopy.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPApplicationCopy.ps1
index 9083170fac..aeb7574a46 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPApplicationCopy.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPApplicationCopy.ps1
@@ -1,4 +1,11 @@
function New-CIPPApplicationCopy {
+ <#
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}')/appRoleAssignments | Application | Application.Read.All | Application.ReadWrite.All, Application.ReadWrite.OwnedBy, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}')/oauth2PermissionGrants | Application | Directory.Read.All | DelegatedPermissionGrant.ReadWrite.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param(
$App,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPAssignmentFilter.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPAssignmentFilter.ps1
index 51c8b51f51..1d6dcafd87 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPAssignmentFilter.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPAssignmentFilter.ps1
@@ -24,6 +24,7 @@ function New-CIPPAssignmentFilter {
.NOTES
Supports all platform types: Windows10AndLater, iOS, Android, macOS, etc.
+ Permission: Graph | POST /deviceManagement/assignmentFilters | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPBackupTask.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPBackupTask.ps1
index 619043307b..b5028fbfc1 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPBackupTask.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPBackupTask.ps1
@@ -1,4 +1,13 @@
function New-CIPPBackupTask {
+ <#
+ .NOTES
+ Permission: Graph | GET /admin/teams/telephoneNumberManagement/numberAssignments | Delegated | TeamsTelephoneNumber.Read.All | TeamsTelephoneNumber.ReadWrite.All
+ Permission: Graph | GET /conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | GET /deviceAppManagement/managedAppPolicies | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceCompliancePolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$Task,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPCACoverageReason.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPCACoverageReason.ps1
new file mode 100644
index 0000000000..fd1f1263f1
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/New-CIPPCACoverageReason.ps1
@@ -0,0 +1,32 @@
+function New-CIPPCACoverageReason {
+ param (
+ [string]$Type,
+ [string]$Id,
+ [string]$Token,
+ [string]$Label,
+ [bool]$Transitive = $false,
+ [string]$ViaGroupId,
+ [string]$ViaGroupLabel
+ )
+ $ValueKey = if ($Id -and $ViaGroupId) {
+ "$Type`:$Id`:group:$ViaGroupId"
+ } elseif ($Id) {
+ "$Type`:$Id"
+ } elseif ($Token) {
+ "$Type`:$Token"
+ } else {
+ $Type
+ }
+ $Reason = @{
+ type = $Type
+ value = $ValueKey
+ label = $Label
+ }
+ if ($Id) { $Reason.id = $Id }
+ if ($Transitive) { $Reason.transitive = $true }
+ if ($ViaGroupId) {
+ $Reason.viaGroupId = $ViaGroupId
+ if ($ViaGroupLabel) { $Reason.viaGroupLabel = $ViaGroupLabel }
+ }
+ return $Reason
+}
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPCAPolicy.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPCAPolicy.ps1
index 29ae35d18d..7b17e7733a 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPCAPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPCAPolicy.ps1
@@ -1,4 +1,21 @@
function New-CIPPCAPolicy {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/authenticationContextClassReferences | Application | AuthenticationContext.Read.All | AuthenticationContext.ReadWrite.All, Policy.Read.ConditionalAccess, Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | POST /identity/conditionalAccess/authenticationContextClassReferences | Application | AuthenticationContext.ReadWrite.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Application | Policy.Read.All
+ Permission: Graph | POST /identity/conditionalAccess/namedLocations | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations/{id} | Application | Policy.Read.All
+ Permission: Graph | PATCH /identity/conditionalAccess/namedLocations/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /identity/conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | POST /identity/conditionalAccess/policies | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | PATCH /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /policies/identitySecurityDefaultsEnforcementPolicy | Application | Policy.Read.All
+ Permission: Graph | PATCH /policies/identitySecurityDefaultsEnforcementPolicy | Application | Policy.Read.All
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$RawJSON,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPCATemplate.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPCATemplate.ps1
index d7d2ebf83d..4ef5e849f1 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPCATemplate.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPCATemplate.ps1
@@ -1,4 +1,11 @@
function New-CIPPCATemplate {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/authenticationContextClassReferences | Delegated | AuthenticationContext.Read.All | AuthenticationContext.ReadWrite.All, Policy.Read.ConditionalAccess, Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Delegated | Policy.Read.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPDeviceAction.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPDeviceAction.ps1
index e54f728212..4189931c5d 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPDeviceAction.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPDeviceAction.ps1
@@ -1,4 +1,8 @@
function New-CIPPDeviceAction {
+ <#
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/managedDevices/{id} | Delegated | DeviceManagementManagedDevices.ReadWrite.All
+ #>
[CmdletBinding()]
param(
$Action,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPGDAPRoleMapping.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPGDAPRoleMapping.ps1
index d8548e830f..ab1bcc1251 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPGDAPRoleMapping.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPGDAPRoleMapping.ps1
@@ -10,6 +10,9 @@ function New-CIPPGDAPRoleMapping {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | POST /groups | Application | Group.Create | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPGroup.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPGroup.ps1
index d0129d5d2e..1ba3b20231 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPGroup.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPGroup.ps1
@@ -24,6 +24,7 @@ function New-CIPPGroup {
.NOTES
Supports all group types: Generic, Security, AzureRole, Dynamic, M365, Distribution, DynamicDistribution
+ Permission: Graph | POST /groups | Delegated | Group.ReadWrite.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess)]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPIntuneAppDeployment.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPIntuneAppDeployment.ps1
index d59086d6fd..6de02a0761 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPIntuneAppDeployment.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPIntuneAppDeployment.ps1
@@ -7,6 +7,9 @@ function New-CIPPIntuneAppDeployment {
and standards. Handles app existence check, type routing, and assignment.
Accepts either a pre-built AppConfig (with IntuneBody, from queue) or raw template
config (appType + raw fields) and builds the deployment config internally.
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | POST /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPIntuneReportExportJob.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPIntuneReportExportJob.ps1
index f642c6950a..3cc6489e41 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPIntuneReportExportJob.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPIntuneReportExportJob.ps1
@@ -14,6 +14,8 @@ function New-CIPPIntuneReportExportJob {
.PARAMETER ReportName
The Intune report to export.
+ .NOTES
+ Permission: Graph | POST /deviceManagement/reports/exportJobs | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementApps.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPIntuneTemplate.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPIntuneTemplate.ps1
index 6bed820053..c0ce3cb646 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPIntuneTemplate.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPIntuneTemplate.ps1
@@ -1,4 +1,8 @@
function New-CIPPIntuneTemplate {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps/{id} | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ #>
param(
$urlname,
$id,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPOneDriveShortCut.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPOneDriveShortCut.ps1
index 578a4babc3..78b51aa22f 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPOneDriveShortCut.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPOneDriveShortCut.ps1
@@ -1,5 +1,14 @@
function New-CIPPOneDriveShortCut {
+ <#
+ .NOTES
+ Permission: Graph | GET /drives/{id}/root | Application | Files.Read.All | Files.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
+ Permission: Graph | GET /drives/{id}/root:/{id} | Application | Files.Read.All | Files.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}:{id} | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/drive | Application | Files.Read.All | Files.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/drives | Application | Files.Read.All | Files.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
+ Permission: Graph | PATCH /users/{id}/drive/items/{id} | Application | Files.ReadWrite.All | Sites.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$Username,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPRestoreTask.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPRestoreTask.ps1
index a0e1edec7b..81056b0c07 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPRestoreTask.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPRestoreTask.ps1
@@ -1,4 +1,17 @@
function New-CIPPRestoreTask {
+ <#
+ .NOTES
+ Permission: Graph | GET /admin/teams/telephoneNumberManagement/numberAssignments | Delegated | TeamsTelephoneNumber.Read.All | TeamsTelephoneNumber.ReadWrite.All
+ Permission: Graph | POST /admin/teams/telephoneNumberManagement/numberAssignments/assignNumber | Delegated | TeamsTelephoneNumber.ReadWrite.All
+ Permission: Graph | POST /admin/teams/telephoneNumberManagement/numberAssignments/unassignNumber | Delegated | TeamsTelephoneNumber.ReadWrite.All
+ Permission: Graph | POST /admin/teams/telephoneNumberManagement/numberAssignments/updateNumber | Delegated | TeamsTelephoneNumber.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | POST /groups | Delegated | Group.ReadWrite.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All
+ Permission: Graph | PATCH /groups/{id} | Delegated | Group.ManageProtection.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /users | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$Task,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPSharePointFolder.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPSharePointFolder.ps1
index 14168f10da..a22c2fb85e 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPSharePointFolder.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPSharePointFolder.ps1
@@ -16,6 +16,10 @@ function New-CIPPSharePointFolder {
.PARAMETER TenantFilter
The tenant the Team belongs to
+ .NOTES
+ Permission: Graph | GET /groups/{id}/drive | Application | Files.Read.All | Files.ReadWrite.All
+ Permission: Graph | GET /groups/{id}/drive/root:/{id} | Application | Files.Read.All | Files.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All
+ Permission: Graph | POST /groups/{id}/drive/root/children | Application | Files.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPSharepointSite.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPSharepointSite.ps1
index 0c2537ebb8..bff42fa0cd 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPSharepointSite.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPSharepointSite.ps1
@@ -42,6 +42,9 @@ function New-CIPPSharepointSite {
.PARAMETER TenantFilter
The tenant associated with the site
+ .NOTES
+ Permission: Graph | POST /groups | Application | Group.Create | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | GET /groups/{id}/sites/root | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPTAP.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPTAP.ps1
index 494e2e8a6a..5953db3e36 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPTAP.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPTAP.ps1
@@ -1,4 +1,8 @@
function New-CIPPTAP {
+ <#
+ .NOTES
+ Permission: Graph | POST /users/{id}/authentication/temporaryAccessPassMethods | Delegated | UserAuthenticationMethod.ReadWrite.All | UserAuthenticationMethod.Read, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite, UserAuthMethod-TAP.Read.All, UserAuthMethod-TAP.ReadWrite, UserAuthMethod-TAP.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$UserID,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPTeam.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPTeam.ps1
index cb540b9b20..c3013b399c 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPTeam.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPTeam.ps1
@@ -22,6 +22,9 @@ function New-CIPPTeam {
.PARAMETER TenantFilter
The tenant to create the team in
+ .NOTES
+ Permission: Graph | GET /groups/{id}/sites/root | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | POST /teams | Application | Team.Create | Directory.ReadWrite.All, Group.ReadWrite.All, Teamwork.Migrate.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPTeamChannel.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPTeamChannel.ps1
index e149281a00..55cee8bad6 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPTeamChannel.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPTeamChannel.ps1
@@ -27,6 +27,9 @@ function New-CIPPTeamChannel {
.PARAMETER TenantFilter
The tenant the Team belongs to
+ .NOTES
+ Permission: Graph | GET /teams/{id}/channels | Application | ChannelSettings.Read.Group | Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, ChannelSettings.ReadWrite.Group, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | POST /teams/{id}/channels | Application | Channel.Create.Group | Channel.Create, Directory.ReadWrite.All, Group.ReadWrite.All, Teamwork.Migrate.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPTemplateRun.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPTemplateRun.ps1
index fc6de8113a..4f22213453 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPTemplateRun.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPTemplateRun.ps1
@@ -1,4 +1,12 @@
function New-CIPPTemplateRun {
+ <#
+ .NOTES
+ Permission: Graph | GET /conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | GET /deviceAppManagement/managedAppPolicies | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceCompliancePolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$TemplateSettings,
diff --git a/backend/Modules/CIPPCore/Public/New-CIPPTravelPolicy.ps1 b/backend/Modules/CIPPCore/Public/New-CIPPTravelPolicy.ps1
index 21d3b4c0a5..aa2beaffaf 100644
--- a/backend/Modules/CIPPCore/Public/New-CIPPTravelPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CIPPTravelPolicy.ps1
@@ -29,6 +29,8 @@ function New-CIPPTravelPolicy {
.PARAMETER APIName
The name of the API operation being performed. Defaults to 'New-CIPPTravelPolicy'.
+ .NOTES
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/New-CippUser.ps1 b/backend/Modules/CIPPCore/Public/New-CippUser.ps1
index 37b8ff9d70..7235603395 100644
--- a/backend/Modules/CIPPCore/Public/New-CippUser.ps1
+++ b/backend/Modules/CIPPCore/Public/New-CippUser.ps1
@@ -1,4 +1,8 @@
function New-CIPPUser {
+ <#
+ .NOTES
+ Permission: Graph | POST /users | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$UserObj,
diff --git a/backend/Modules/CIPPCore/Public/PIM/Get-CIPPPIMRoleAssignments.ps1 b/backend/Modules/CIPPCore/Public/PIM/Get-CIPPPIMRoleAssignments.ps1
index ae7c596f2b..4472853696 100644
--- a/backend/Modules/CIPPCore/Public/PIM/Get-CIPPPIMRoleAssignments.ps1
+++ b/backend/Modules/CIPPCore/Public/PIM/Get-CIPPPIMRoleAssignments.ps1
@@ -46,6 +46,13 @@ function Get-CIPPPIMRoleAssignments {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /directory/administrativeUnits/{id} | Delegated | AdministrativeUnit.Read.All | AdministrativeUnit.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /directoryObjects/getByIds | Delegated | Directory.Read.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignmentScheduleInstances | Application | RoleAssignmentSchedule.Read.Directory | RoleAssignmentSchedule.ReadWrite.Directory, RoleManagement.Read.All, RoleManagement.Read.Directory, RoleManagement.ReadWrite.Directory
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Delegated | RoleManagement.Read.Directory | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
+ Permission: Graph | GET /roleManagement/directory/roleEligibilitySchedules | Application | RoleEligibilitySchedule.Read.Directory | RoleEligibilitySchedule.ReadWrite.Directory, RoleManagement.Read.All, RoleManagement.Read.Directory, RoleManagement.ReadWrite.Directory
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/PIM/Get-CIPPPIMRolePolicies.ps1 b/backend/Modules/CIPPCore/Public/PIM/Get-CIPPPIMRolePolicies.ps1
index 59377c7f47..8f71145662 100644
--- a/backend/Modules/CIPPCore/Public/PIM/Get-CIPPPIMRolePolicies.ps1
+++ b/backend/Modules/CIPPCore/Public/PIM/Get-CIPPPIMRolePolicies.ps1
@@ -22,6 +22,8 @@ function Get-CIPPPIMRolePolicies {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /policies/roleManagementPolicyAssignments | Application | RoleManagement.Read.All | RoleManagementPolicy.ReadWrite.AzureADGroup
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMActiveAssignmentRemoval.ps1 b/backend/Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMActiveAssignmentRemoval.ps1
new file mode 100644
index 0000000000..0e69db6f5c
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMActiveAssignmentRemoval.ps1
@@ -0,0 +1,44 @@
+function Invoke-CIPPPIMActiveAssignmentRemoval {
+ <#
+ .NOTES
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
+ Permission: Graph | DELETE /roleManagement/directory/roleAssignments/{id} | Delegated | RoleManagement.ReadWrite.Directory
+ Permission: Graph | GET /roleManagement/directory/roleAssignmentScheduleInstances | Application | RoleAssignmentSchedule.Read.Directory | RoleAssignmentSchedule.ReadWrite.Directory, RoleManagement.Read.All, RoleManagement.Read.Directory, RoleManagement.ReadWrite.Directory
+ #>
+ param(
+ [string]$TenantFilter,
+ [string]$PrincipalId,
+ [string]$RoleDefinitionId,
+ [string]$DirectoryScopeId,
+ [string]$Justification,
+ [string]$PrincipalLabel,
+ [string]$RoleName
+ )
+
+ # adminRemove covers PIM-created and legacy direct assignments alike; the unified RBAC
+ # delete is only a fallback for the rare record PIM does not recognise.
+ $Request = New-CIPPPIMScheduleRequest -Kind Assignment -Action adminRemove -PrincipalId $PrincipalId -RoleDefinitionId $RoleDefinitionId -DirectoryScopeId $DirectoryScopeId -Justification $Justification
+ try {
+ $null = Send-CIPPPIMScheduleRequest -Request $Request -TenantFilter $TenantFilter
+ } catch {
+ # Entra refuses to retire an active assignment younger than five minutes
+ # ("The Active duration is too short. Minimum Required is 5 minutes").
+ if ($_.Exception.Message -match 'duration is too short') {
+ throw [System.ArgumentException]::new("Entra requires an active assignment to exist for at least 5 minutes before it can be removed; $PrincipalLabel's $RoleName assignment was created too recently. Try again in a few minutes.")
+ }
+ if ($_.Exception.Message -notmatch 'RoleAssignmentDoesNotExist|does not exist|NotFound|not found') { throw }
+ $Existing = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments?`$filter=principalId eq '$PrincipalId' and roleDefinitionId eq '$RoleDefinitionId'" -tenantid $TenantFilter | Where-Object { ($_.directoryScopeId ?? '/') -eq $DirectoryScopeId })
+ if ($Existing.Count -eq 0) { throw }
+ foreach ($Assignment in $Existing) {
+ $null = New-GraphPOSTRequest -type DELETE -uri "https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments/$($Assignment.id)" -tenantid $TenantFilter
+ }
+ }
+ # Graph accepts the removal (status Revoked) and retires the instance a few seconds later;
+ # wait for that so the reported state - and the table refresh behind it - is the real one.
+ for ($Attempt = 0; $Attempt -lt 8; $Attempt++) {
+ $Remaining = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignmentScheduleInstances?`$filter=principalId eq '$PrincipalId' and roleDefinitionId eq '$RoleDefinitionId'" -tenantid $TenantFilter -AsApp $true | Where-Object { ($_.directoryScopeId ?? '/') -eq $DirectoryScopeId })
+ if ($Remaining.Count -eq 0) { return $true }
+ Start-Sleep -Seconds 3
+ }
+ return $false
+}
diff --git a/backend/Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMAssignmentAction.ps1 b/backend/Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMAssignmentAction.ps1
index 2add83ea0b..f181e0bdbc 100644
--- a/backend/Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMAssignmentAction.ps1
+++ b/backend/Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMAssignmentAction.ps1
@@ -40,6 +40,8 @@ function Invoke-CIPPPIMAssignmentAction {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /roleManagement/directory/roleEligibilitySchedules | Application | RoleEligibilitySchedule.Read.Directory | RoleEligibilitySchedule.ReadWrite.Directory, RoleManagement.Read.All, RoleManagement.Read.Directory, RoleManagement.ReadWrite.Directory
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
@@ -170,41 +172,6 @@ function Invoke-CIPPPIMAssignmentAction {
}
}
- function Send-ScheduleRequest {
- param($Request)
- $Json = ConvertTo-Json -InputObject $Request.Body -Depth 10 -Compress
- return New-GraphPOSTRequest -uri $Request.Uri -body $Json -tenantid $TenantFilter -AsApp $true
- }
-
- function Invoke-ActiveAssignmentRemoval {
- # adminRemove covers PIM-created and legacy direct assignments alike; the unified RBAC
- # delete is only a fallback for the rare record PIM does not recognise.
- $Request = New-CIPPPIMScheduleRequest -Kind Assignment -Action adminRemove -PrincipalId $PrincipalId -RoleDefinitionId $RoleDefinitionId -DirectoryScopeId $DirectoryScopeId -Justification $Justification
- try {
- $null = Send-ScheduleRequest -Request $Request
- } catch {
- # Entra refuses to retire an active assignment younger than five minutes
- # ("The Active duration is too short. Minimum Required is 5 minutes").
- if ($_.Exception.Message -match 'duration is too short') {
- throw [System.ArgumentException]::new("Entra requires an active assignment to exist for at least 5 minutes before it can be removed; $PrincipalLabel's $RoleName assignment was created too recently. Try again in a few minutes.")
- }
- if ($_.Exception.Message -notmatch 'RoleAssignmentDoesNotExist|does not exist|NotFound|not found') { throw }
- $Existing = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments?`$filter=principalId eq '$PrincipalId' and roleDefinitionId eq '$RoleDefinitionId'" -tenantid $TenantFilter | Where-Object { ($_.directoryScopeId ?? '/') -eq $DirectoryScopeId })
- if ($Existing.Count -eq 0) { throw }
- foreach ($Assignment in $Existing) {
- $null = New-GraphPOSTRequest -type DELETE -uri "https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignments/$($Assignment.id)" -tenantid $TenantFilter
- }
- }
- # Graph accepts the removal (status Revoked) and retires the instance a few seconds later;
- # wait for that so the reported state - and the table refresh behind it - is the real one.
- for ($Attempt = 0; $Attempt -lt 8; $Attempt++) {
- $Remaining = @(New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/roleManagement/directory/roleAssignmentScheduleInstances?`$filter=principalId eq '$PrincipalId' and roleDefinitionId eq '$RoleDefinitionId'" -tenantid $TenantFilter -AsApp $true | Where-Object { ($_.directoryScopeId ?? '/') -eq $DirectoryScopeId })
- if ($Remaining.Count -eq 0) { return $true }
- Start-Sleep -Seconds 3
- }
- return $false
- }
-
$DurationParams = @{}
if (-not [string]::IsNullOrWhiteSpace($Duration)) { $DurationParams.Duration = $Duration }
if ($PSBoundParameters.ContainsKey('EndDateTime') -and $null -ne $EndDateTime) { $DurationParams.EndDateTime = $EndDateTime }
@@ -223,7 +190,7 @@ function Invoke-CIPPPIMAssignmentAction {
if (-not $EligibleRow) {
$Request = New-CIPPPIMScheduleRequest -Kind Eligibility -Action adminAssign -PrincipalId $PrincipalId -RoleDefinitionId $RoleDefinitionId -DirectoryScopeId $DirectoryScopeId -Justification $Justification -MaxDuration $EligibilityCap @DurationParams
try {
- $null = Send-ScheduleRequest -Request $Request
+ $null = Send-CIPPPIMScheduleRequest -Request $Request -TenantFilter $TenantFilter
} catch {
if ($_.Exception.Message -notmatch 'RoleAssignmentExists|already exists') { throw }
}
@@ -242,7 +209,7 @@ function Invoke-CIPPPIMAssignmentAction {
throw "The eligibility for $PrincipalLabel on $RoleName could not be confirmed; the active assignment was left in place."
}
- $RemovalSeen = Invoke-ActiveAssignmentRemoval
+ $RemovalSeen = Invoke-CIPPPIMActiveAssignmentRemoval -TenantFilter $TenantFilter -PrincipalId $PrincipalId -RoleDefinitionId $RoleDefinitionId -DirectoryScopeId $DirectoryScopeId -Justification $Justification -PrincipalLabel $PrincipalLabel -RoleName $RoleName
$After = "Eligible$(if ($ResultEnd) { " until $(& $FormatEnd $ResultEnd)" })"
$ResultText = "Converted $PrincipalLabel on $RoleName from $Before to $After.$(if (-not $RemovalSeen) { ' The removal of the active assignment was accepted by Entra and is still propagating; refresh in a minute.' })"
}
@@ -250,7 +217,7 @@ function Invoke-CIPPPIMAssignmentAction {
if ($DurationParams.Count -eq 0) { throw [System.ArgumentException]::new('GrantActive needs a Duration or EndDateTime.') }
if ($ActiveRow -and $ActiveRow.AssignmentType -eq 'Permanent') { throw [System.ArgumentException]::new("$PrincipalLabel already holds $RoleName permanently; convert it to eligible instead.") }
$Request = New-CIPPPIMScheduleRequest -Kind Assignment -Action adminAssign -PrincipalId $PrincipalId -RoleDefinitionId $RoleDefinitionId -DirectoryScopeId $DirectoryScopeId -Justification $Justification -MaxDuration $AssignmentCap @DurationParams
- $null = Send-ScheduleRequest -Request $Request
+ $null = Send-CIPPPIMScheduleRequest -Request $Request -TenantFilter $TenantFilter
$ResultEnd = $Request.EndDateTime
$After = "Active until $(& $FormatEnd $ResultEnd)"
$ResultText = "Granted $PrincipalLabel a time-bound active $RoleName assignment until $(& $FormatEnd $ResultEnd)."
@@ -263,7 +230,7 @@ function Invoke-CIPPPIMAssignmentAction {
$Cap = if ($Kind -eq 'Eligibility') { $EligibilityCap } else { $AssignmentCap }
$GraphAction = if ($Action -eq 'Extend') { 'adminExtend' } else { 'adminRenew' }
$Request = New-CIPPPIMScheduleRequest -Kind $Kind -Action $GraphAction -PrincipalId $PrincipalId -RoleDefinitionId $RoleDefinitionId -DirectoryScopeId $DirectoryScopeId -Justification $Justification -MaxDuration $Cap @DurationParams
- $null = Send-ScheduleRequest -Request $Request
+ $null = Send-CIPPPIMScheduleRequest -Request $Request -TenantFilter $TenantFilter
$ResultEnd = $Request.EndDateTime
$After = "$($TargetRow.AssignmentType) until $(& $FormatEnd $ResultEnd)"
$ResultText = "$($Action)ed $PrincipalLabel's $($TargetRow.AssignmentType.ToLower()) $RoleName assignment until $(& $FormatEnd $ResultEnd)."
@@ -273,10 +240,10 @@ function Invoke-CIPPPIMAssignmentAction {
$RemovalSeen = $true
if ($TargetRow.AssignmentType -eq 'Eligible') {
$Request = New-CIPPPIMScheduleRequest -Kind Eligibility -Action adminRemove -PrincipalId $PrincipalId -RoleDefinitionId $RoleDefinitionId -DirectoryScopeId $DirectoryScopeId -Justification $Justification
- $null = Send-ScheduleRequest -Request $Request
+ $null = Send-CIPPPIMScheduleRequest -Request $Request -TenantFilter $TenantFilter
} else {
Test-LastGlobalAdmin
- $RemovalSeen = Invoke-ActiveAssignmentRemoval
+ $RemovalSeen = Invoke-CIPPPIMActiveAssignmentRemoval -TenantFilter $TenantFilter -PrincipalId $PrincipalId -RoleDefinitionId $RoleDefinitionId -DirectoryScopeId $DirectoryScopeId -Justification $Justification -PrincipalLabel $PrincipalLabel -RoleName $RoleName
}
$After = 'None'
$ResultText = "Removed $PrincipalLabel's $($TargetRow.AssignmentType.ToLower()) $RoleName assignment.$(if (-not $RemovalSeen) { ' Entra accepted the removal and is still propagating it; refresh in a minute.' })"
diff --git a/backend/Modules/CIPPCore/Public/PIM/Send-CIPPPIMScheduleRequest.ps1 b/backend/Modules/CIPPCore/Public/PIM/Send-CIPPPIMScheduleRequest.ps1
new file mode 100644
index 0000000000..a6c8684979
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/PIM/Send-CIPPPIMScheduleRequest.ps1
@@ -0,0 +1,5 @@
+function Send-CIPPPIMScheduleRequest {
+ param($Request, $TenantFilter)
+ $Json = ConvertTo-Json -InputObject $Request.Body -Depth 10 -Compress
+ return New-GraphPOSTRequest -uri $Request.Uri -body $Json -tenantid $TenantFilter -AsApp $true
+}
diff --git a/backend/Modules/CIPPCore/Public/PIM/Set-CIPPPIMRoleSettings.ps1 b/backend/Modules/CIPPCore/Public/PIM/Set-CIPPPIMRoleSettings.ps1
index 214fa45159..0b655bcc46 100644
--- a/backend/Modules/CIPPCore/Public/PIM/Set-CIPPPIMRoleSettings.ps1
+++ b/backend/Modules/CIPPCore/Public/PIM/Set-CIPPPIMRoleSettings.ps1
@@ -14,6 +14,8 @@ function Set-CIPPPIMRoleSettings {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | PATCH /policies/roleManagementPolicies/{id}/rules/{id} | Application | RoleManagementPolicy.ReadWrite.AzureADGroup
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPAutopilotProfile.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPAutopilotProfile.ps1
index f1a06bbf1e..949a82f99a 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPAutopilotProfile.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPAutopilotProfile.ps1
@@ -1,4 +1,10 @@
function Remove-CIPPAutopilotProfile {
+ <#
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
+ #>
param(
$ProfileId,
$DisplayName,
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPGraphSitePermission.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPGraphSitePermission.ps1
new file mode 100644
index 0000000000..cd58794a4a
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPGraphSitePermission.ps1
@@ -0,0 +1,25 @@
+function Remove-CIPPGraphSitePermission {
+ <#
+ .NOTES
+ Permission: Graph | GET /sites/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | DELETE /sites/{id}/permissions/{id} | Application | Sites.FullControl.All
+ #>
+ param($TenantFilter, $SiteUrl, $SiteId, $PermissionId, $PrincipalName)
+
+ $ResolvedSiteId = $SiteId
+ if ([string]::IsNullOrWhiteSpace($ResolvedSiteId)) {
+ $ParsedUrl = [System.Uri]$SiteUrl
+ $SiteSegment = if ($ParsedUrl.AbsolutePath -in @('', '/')) {
+ $ParsedUrl.Host
+ } else {
+ "$($ParsedUrl.Host):$($ParsedUrl.AbsolutePath):"
+ }
+ $SiteMeta = New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/sites/$SiteSegment`?`$select=id" -tenantid $TenantFilter -asapp $true
+ $ResolvedSiteId = $SiteMeta.id
+ }
+ if ([string]::IsNullOrWhiteSpace($ResolvedSiteId)) { throw 'Could not resolve Graph site id.' }
+
+ $null = New-GraphPostRequest -uri "https://graph.microsoft.com/v1.0/sites/$ResolvedSiteId/permissions/$PermissionId" -tenantid $TenantFilter -type DELETE -asapp $true
+ $Label = $PrincipalName ?? $PermissionId
+ return "Successfully removed Graph site permission for $Label."
+}
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPGroup.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPGroup.ps1
index 3fda76c25b..ce9770d520 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPGroup.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPGroup.ps1
@@ -1,4 +1,9 @@
function Remove-CIPPGroup {
+ <#
+ .NOTES
+ Permission: Graph | DELETE /groups/{id} | Delegated | Group.ReadWrite.All
+ Permission: Graph | GET /groups/{id} | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group-XTenantIdentitySync.Read.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ #>
[CmdletBinding()]
param (
$Headers,
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPGroupMember.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPGroupMember.ps1
index e6d02dcc13..3c9397c7c9 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPGroupMember.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPGroupMember.ps1
@@ -24,6 +24,8 @@ function Remove-CIPPGroupMember {
.PARAMETER APIName
The API operation name for logging purposes. Default: 'Remove Group Member'.
+ .NOTES
+ Permission: Graph | DELETE /groups/{id}/members/{id}/$ref | Delegated | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPGroupOwner.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPGroupOwner.ps1
index 97433e15cc..23e685d7c1 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPGroupOwner.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPGroupOwner.ps1
@@ -22,6 +22,8 @@ function Remove-CIPPGroupOwner {
.PARAMETER APIName
The API operation name for logging. Default: 'Remove Group Owner'.
+ .NOTES
+ Permission: Graph | DELETE /groups/{id}/owners/{id}/$ref | Delegated | Group.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPGroupOwnerships.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPGroupOwnerships.ps1
index 3c92bbfcbe..6d4dd9adb5 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPGroupOwnerships.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPGroupOwnerships.ps1
@@ -30,6 +30,9 @@ function Remove-CIPPGroupOwnerships {
.PARAMETER Headers
Request headers for logging. Supplied automatically by the API.
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/ownedObjects/microsoft.graph.group | Delegated | User.Read | AgentIdUser.ReadWrite.All, AgentIdUser.ReadWrite.IdentityParentedBy, Directory.Read.All, Directory.ReadWrite.All, User.Read.All, User.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPGroups.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPGroups.ps1
index 7f090dd984..5deaa0a0e8 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPGroups.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPGroups.ps1
@@ -1,4 +1,11 @@
function Remove-CIPPGroups {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | DELETE /groups/{id}/members/{id}/$ref | Application | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/memberOf/microsoft.graph.group | Application | User.Read.All | Directory.ReadWrite.All, Group.ReadBasic.All, GroupMember.ReadBasic.All
+ #>
[CmdletBinding()]
param(
$Username,
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPLicense.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPLicense.ps1
index ce8980fbcd..752853b549 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPLicense.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPLicense.ps1
@@ -1,4 +1,11 @@
function Remove-CIPPLicense {
+ <#
+ .NOTES
+ Permission: Graph | DELETE /groups/{id}/members/{id}/$ref | Delegated | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /users/{id}/assignlicense | Delegated | LicenseAssignment.ReadWrite.All | AgentIdUser.ReadWrite.All, AgentIdUser.ReadWrite.IdentityParentedBy, Directory.ReadWrite.All, User.ReadWrite.All
+ Permission: Graph | GET /users/{id}/memberOf/microsoft.graph.group | Delegated | User.Read | Directory.Read.All, Directory.ReadWrite.All, Group.ReadBasic.All, GroupMember.Read.All, GroupMember.ReadBasic.All
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param (
$Headers,
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPTravelPolicy.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPTravelPolicy.ps1
index c2f6b3a829..643e385ea4 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPTravelPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPTravelPolicy.ps1
@@ -19,6 +19,10 @@ function Remove-CIPPTravelPolicy {
.PARAMETER APIName
The name of the API operation being performed. Defaults to 'Remove-CIPPTravelPolicy'.
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Application | Policy.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | DELETE /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPUser.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPUser.ps1
index 92b9ae2c75..f97828db37 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPUser.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPUser.ps1
@@ -1,4 +1,8 @@
function Remove-CIPPUser {
+ <#
+ .NOTES
+ Permission: Graph | DELETE /users/{id} | Delegated | User.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$Headers,
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPUserMFA.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPUserMFA.ps1
index b5b940ae63..d1bb599e27 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPUserMFA.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPUserMFA.ps1
@@ -21,6 +21,8 @@ function Remove-CIPPUserMFA {
.EXAMPLE
Remove-CIPPUserMFA -UserPrincipalName testuser@contoso.com -TenantFilter contoso.com -MethodId 3179e48a-750b-4051-897c-87b9720928f7
+ .NOTES
+ Permission: Graph | GET /users/{id}/authentication/methods | Application | UserAuthenticationMethod.Read.All | UserAuthenticationMethod.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Remove-CIPPUserTeamsPhoneDIDs.ps1 b/backend/Modules/CIPPCore/Public/Remove-CIPPUserTeamsPhoneDIDs.ps1
index fc7f7db2f8..58da7d2673 100644
--- a/backend/Modules/CIPPCore/Public/Remove-CIPPUserTeamsPhoneDIDs.ps1
+++ b/backend/Modules/CIPPCore/Public/Remove-CIPPUserTeamsPhoneDIDs.ps1
@@ -2,6 +2,11 @@ using namespace System.Net
using namespace System.Collections.Generic
function Remove-CIPPUserTeamsPhoneDIDs {
+ <#
+ .NOTES
+ Permission: Graph | GET /admin/teams/telephoneNumberManagement/numberAssignments | Delegated | TeamsTelephoneNumber.Read.All | TeamsTelephoneNumber.ReadWrite.All
+ Permission: Graph | POST /admin/teams/telephoneNumberManagement/numberAssignments/unassignNumber | Delegated | TeamsTelephoneNumber.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$Headers,
diff --git a/backend/Modules/CIPPCore/Public/Resolve-CIPPCADependencies.ps1 b/backend/Modules/CIPPCore/Public/Resolve-CIPPCADependencies.ps1
index 120636367f..4f3de81b64 100644
--- a/backend/Modules/CIPPCore/Public/Resolve-CIPPCADependencies.ps1
+++ b/backend/Modules/CIPPCore/Public/Resolve-CIPPCADependencies.ps1
@@ -18,6 +18,13 @@ function Resolve-CIPPCADependencies {
LocationInfo / AuthContextInfo) so per-template template-ids never collide across policies.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/authenticationContextClassReferences | Application | AuthenticationContext.Read.All | AuthenticationContext.ReadWrite.All, Policy.Read.ConditionalAccess, Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | POST /identity/conditionalAccess/authenticationContextClassReferences | Application | AuthenticationContext.ReadWrite.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Application | Policy.Read.All
+ Permission: Graph | POST /identity/conditionalAccess/namedLocations | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations/{id} | Application | Policy.Read.All
+ Permission: Graph | PATCH /identity/conditionalAccess/namedLocations/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Resolve-CIPPDirectoryId.ps1 b/backend/Modules/CIPPCore/Public/Resolve-CIPPDirectoryId.ps1
index 1a3f576561..7102191013 100644
--- a/backend/Modules/CIPPCore/Public/Resolve-CIPPDirectoryId.ps1
+++ b/backend/Modules/CIPPCore/Public/Resolve-CIPPDirectoryId.ps1
@@ -26,6 +26,11 @@ function Resolve-CIPPDirectoryId {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /directoryObjects/getByIds | Delegated | Directory.Read.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id} | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group-XTenantIdentitySync.Read.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Resolve-CIPPIntuneAdminTemplateBinding.ps1 b/backend/Modules/CIPPCore/Public/Resolve-CIPPIntuneAdminTemplateBinding.ps1
index 6d0e5a501c..11949f2521 100644
--- a/backend/Modules/CIPPCore/Public/Resolve-CIPPIntuneAdminTemplateBinding.ps1
+++ b/backend/Modules/CIPPCore/Public/Resolve-CIPPIntuneAdminTemplateBinding.ps1
@@ -31,6 +31,10 @@ function Resolve-CIPPIntuneAdminTemplateBinding {
The payload as a JSON string, ready to post to updateDefinitionValues.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/groupPolicyDefinitions | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyDefinitions/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyDefinitions/{id}/presentations | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Resolve-CIPPIntuneTargetedMobileApps.ps1 b/backend/Modules/CIPPCore/Public/Resolve-CIPPIntuneTargetedMobileApps.ps1
index bae616ac6a..ee8f6e5433 100644
--- a/backend/Modules/CIPPCore/Public/Resolve-CIPPIntuneTargetedMobileApps.ps1
+++ b/backend/Modules/CIPPCore/Public/Resolve-CIPPIntuneTargetedMobileApps.ps1
@@ -25,6 +25,8 @@ function Resolve-CIPPIntuneTargetedMobileApps {
The resolved mobileApp ids for the target tenant.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Resolve-CIPPNudgeMFATarget.ps1 b/backend/Modules/CIPPCore/Public/Resolve-CIPPNudgeMFATarget.ps1
new file mode 100644
index 0000000000..84f71e085c
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/Resolve-CIPPNudgeMFATarget.ps1
@@ -0,0 +1,34 @@
+function Resolve-CIPPNudgeMFATarget {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ #>
+ param($Entries, $TenantFilter)
+ $Resolved = [System.Collections.Generic.List[hashtable]]::new()
+ $Failed = $false
+ foreach ($Entry in $Entries) {
+ try {
+ if ($Entry -match '^(all_users|allusers|all users)$') {
+ $Resolved.Add(@{ id = 'all_users'; targetType = 'group' })
+ } else {
+ $EscapedName = $Entry -replace "'", "''"
+ $GroupFilter = [System.Uri]::EscapeDataString("startsWith(displayName,'$EscapedName')")
+ $MatchedGroups = @(New-GraphGetRequest -uri "https://graph.microsoft.com/beta/groups?`$select=id,displayName&`$filter=$GroupFilter" -tenantid $TenantFilter)
+ if ($MatchedGroups.Count -gt 0) {
+ foreach ($Group in $MatchedGroups) { $Resolved.Add(@{ id = $Group.id; targetType = 'group' }) }
+ if ($MatchedGroups.Count -gt 1) {
+ Write-LogMessage -API 'Standards' -tenant $TenantFilter -message "NudgeMFA: Multiple groups matched '$Entry': $($MatchedGroups.displayName -join ', ')" -sev Info
+ }
+ } else {
+ Write-LogMessage -API 'Standards' -tenant $TenantFilter -message "NudgeMFA: No group found matching '$Entry'" -sev Warning
+ $Failed = $true
+ }
+ }
+ } catch {
+ $ErrorMessage = Get-CippException -Exception $_
+ Write-LogMessage -API 'Standards' -tenant $TenantFilter -message "NudgeMFA: Failed to resolve target '$Entry'. Error: $($ErrorMessage.NormalizedError)" -sev Error -LogData $ErrorMessage
+ $Failed = $true
+ }
+ }
+ return [PSCustomObject]@{ Targets = $Resolved; Failed = $Failed }
+}
diff --git a/backend/Modules/CIPPCore/Public/Resolve-CIPPSharePointLibraryRootUri.ps1 b/backend/Modules/CIPPCore/Public/Resolve-CIPPSharePointLibraryRootUri.ps1
index b77073fd61..3aa8078eb0 100644
--- a/backend/Modules/CIPPCore/Public/Resolve-CIPPSharePointLibraryRootUri.ps1
+++ b/backend/Modules/CIPPCore/Public/Resolve-CIPPSharePointLibraryRootUri.ps1
@@ -2,6 +2,8 @@ function Resolve-CIPPSharePointLibraryRootUri {
<#
.SYNOPSIS
Resolves a document library list GUID to its absolute root folder URI via SPO REST.
+ .NOTES
+ Permission: Graph | GET /sites/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Revoke-CIPPSessions.ps1 b/backend/Modules/CIPPCore/Public/Revoke-CIPPSessions.ps1
index 2718233be8..830d574b2f 100644
--- a/backend/Modules/CIPPCore/Public/Revoke-CIPPSessions.ps1
+++ b/backend/Modules/CIPPCore/Public/Revoke-CIPPSessions.ps1
@@ -1,4 +1,8 @@
function Revoke-CIPPSessions {
+ <#
+ .NOTES
+ Permission: Graph | POST /users/{id}/invalidateAllRefreshTokens | Delegated | User.RevokeSessions.All | Directory.ReadWrite.All, User.ReadWrite
+ #>
[CmdletBinding()]
param (
$Headers,
diff --git a/backend/Modules/CIPPCore/Public/SecuritySimulations/Invoke-CIPPCAWhatIf.ps1 b/backend/Modules/CIPPCore/Public/SecuritySimulations/Invoke-CIPPCAWhatIf.ps1
index 942e5a1227..d2c872187a 100644
--- a/backend/Modules/CIPPCore/Public/SecuritySimulations/Invoke-CIPPCAWhatIf.ps1
+++ b/backend/Modules/CIPPCore/Public/SecuritySimulations/Invoke-CIPPCAWhatIf.ps1
@@ -6,6 +6,8 @@ function Invoke-CIPPCAWhatIf {
One body is a single POST to v1.0 identity/conditionalAccess/evaluate.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /identity/conditionalAccess/evaluate | Application | Policy.Read.ConditionalAccess | Policy.Read.All, Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Select-CIPPIntuneAvailableSetting.ps1 b/backend/Modules/CIPPCore/Public/Select-CIPPIntuneAvailableSetting.ps1
index 330f2d6440..d4a26c5dcb 100644
--- a/backend/Modules/CIPPCore/Public/Select-CIPPIntuneAvailableSetting.ps1
+++ b/backend/Modules/CIPPCore/Public/Select-CIPPIntuneAvailableSetting.ps1
@@ -29,6 +29,8 @@ function Select-CIPPIntuneAvailableSetting {
fine with a subset, so they are never validated. The comparison and drift paths never set it.
.EXAMPLE
$Template = Select-CIPPIntuneAvailableSetting -Policy $Template -TenantFilter $TenantFilter
+ .NOTES
+ Permission: Graph | GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Send-CIPPAlert.ps1 b/backend/Modules/CIPPCore/Public/Send-CIPPAlert.ps1
index 6fb8c74ae4..1942c34c25 100644
--- a/backend/Modules/CIPPCore/Public/Send-CIPPAlert.ps1
+++ b/backend/Modules/CIPPCore/Public/Send-CIPPAlert.ps1
@@ -1,5 +1,9 @@
function Send-CIPPAlert {
+ <#
+ .NOTES
+ Permission: Graph | POST /me/sendMail | Delegated | Mail.Send
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param (
$Type,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPAssignedApplication.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPAssignedApplication.ps1
index 8894f4363b..f937c45a30 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPAssignedApplication.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPAssignedApplication.ps1
@@ -1,4 +1,11 @@
function Set-CIPPAssignedApplication {
+ <#
+ .NOTES
+ Permission: Graph | POST /deviceAppManagement/mobileApps/{id}/assign | Delegated | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceAppManagement/mobileApps/{id}/assignments | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/assignmentFilters | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
$GroupName,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPAssignedPolicy.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPAssignedPolicy.ps1
index f96e1e21fe..cfa9d097dc 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPAssignedPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPAssignedPolicy.ps1
@@ -1,4 +1,9 @@
function Set-CIPPAssignedPolicy {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/assignmentFilters | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
$GroupName,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPAuthenticationPolicy.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPAuthenticationPolicy.ps1
index c6229afc71..4b55a4e7c1 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPAuthenticationPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPAuthenticationPolicy.ps1
@@ -1,4 +1,9 @@
function Set-CIPPAuthenticationPolicy {
+ <#
+ .NOTES
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/{id} | Application | Policy.Read.AuthenticationMethod | Policy.Read.All, Policy.ReadWrite.AuthenticationMethod
+ Permission: Graph | PATCH /policies/authenticationmethodspolicy/authenticationMethodConfigurations/{id} | Application | Policy.ReadWrite.AuthenticationMethod
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
# TenantFilter (not Tenant) so the scheduler treats this as the protected tenant scope;
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPCAExclusion.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPCAExclusion.ps1
index ff6a0f1389..79a7e66e9b 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPCAExclusion.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPCAExclusion.ps1
@@ -1,4 +1,10 @@
function Set-CIPPCAExclusion {
+ <#
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All
+ Permission: Graph | PATCH /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPCAPolicyServiceException.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPCAPolicyServiceException.ps1
index 0bfa9150ad..bd6241fa46 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPCAPolicyServiceException.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPCAPolicyServiceException.ps1
@@ -1,4 +1,9 @@
function Set-CIPPCAPolicyServiceException {
+ <#
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All
+ Permission: Graph | PATCH /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPCopyGroupMembers.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPCopyGroupMembers.ps1
index 85ca2badbe..03e947bf10 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPCopyGroupMembers.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPCopyGroupMembers.ps1
@@ -1,4 +1,10 @@
function Set-CIPPCopyGroupMembers {
+ <#
+ .NOTES
+ Permission: Graph | POST /groups/{id}/members/$ref | Delegated | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/memberOf | Delegated | User.Read | Directory.Read.All, Directory.ReadWrite.All, Group.ReadBasic.All, GroupMember.Read.All, GroupMember.ReadBasic.All
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
$Headers,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPDefaultAPDeploymentProfile.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPDefaultAPDeploymentProfile.ps1
index ad8c9105bf..8ce54b79a0 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPDefaultAPDeploymentProfile.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPDefaultAPDeploymentProfile.ps1
@@ -1,4 +1,14 @@
function Set-CIPPDefaultAPDeploymentProfile {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeploymentProfiles | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/windowsAutopilotDeploymentProfiles | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/windowsAutopilotDeploymentProfiles/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPDefaultAPEnrollment.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPDefaultAPEnrollment.ps1
index 171e1d7326..258c03e387 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPDefaultAPEnrollment.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPDefaultAPEnrollment.ps1
@@ -1,4 +1,9 @@
function Set-CIPPDefaultAPEnrollment {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/deviceEnrollmentConfigurations | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/deviceEnrollmentConfigurations/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderASRPolicy.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderASRPolicy.ps1
index 5a67256124..6b87c38045 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderASRPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderASRPolicy.ps1
@@ -2,6 +2,10 @@ function Set-CIPPDefenderASRPolicy {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies/{id}/assign | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderAVPolicy.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderAVPolicy.ps1
index 780c90a057..c4b2b65e7c 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderAVPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderAVPolicy.ps1
@@ -2,6 +2,10 @@ function Set-CIPPDefenderAVPolicy {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies/{id}/assign | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderCompliancePolicy.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderCompliancePolicy.ps1
index 585f61ff78..e02d202e3a 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderCompliancePolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderCompliancePolicy.ps1
@@ -2,6 +2,10 @@ function Set-CIPPDefenderCompliancePolicy {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /deviceManagement/mobileThreatDefenseConnectors | Application | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92 | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92 | Application | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderEDRPolicy.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderEDRPolicy.ps1
index 81296de2ba..a13ad31ca5 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderEDRPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderEDRPolicy.ps1
@@ -2,6 +2,10 @@ function Set-CIPPDefenderEDRPolicy {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies/{id}/assign | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderExclusionPolicy.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderExclusionPolicy.ps1
index 09f99e9f15..c10f59eab1 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPDefenderExclusionPolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPDefenderExclusionPolicy.ps1
@@ -2,6 +2,10 @@ function Set-CIPPDefenderExclusionPolicy {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies/{id}/assign | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPDeviceState.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPDeviceState.ps1
index 583dc58983..923f22178c 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPDeviceState.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPDeviceState.ps1
@@ -35,6 +35,9 @@
Set-CIPPDeviceState -Action Delete -DeviceID "1234abcd-5678-efgh-ijkl-9012mnopqrst" -TenantFilter "contoso.onmicrosoft.com"
This command removes the specified device from the tenant.
+ .NOTES
+ Permission: Graph | DELETE /devices/{id} | Delegated | Directory.AccessAsUser.All
+ Permission: Graph | PATCH /devices/{id} | Delegated | Directory.AccessAsUser.All
#>
param (
[Parameter(Mandatory = $true)][ValidateSet('Enable', 'Disable', 'Delete')]$Action,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPEnrollmentTimeDeviceMembershipTarget.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPEnrollmentTimeDeviceMembershipTarget.ps1
index b1f6602b49..6983d991cb 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPEnrollmentTimeDeviceMembershipTarget.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPEnrollmentTimeDeviceMembershipTarget.ps1
@@ -25,6 +25,8 @@ function Set-CIPPEnrollmentTimeDeviceMembershipTarget {
The tenant to write to.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /deviceManagement/configurationPolicies/{id}/setEnrollmentTimeDeviceMembershipTarget | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPGDAPAutoExtend.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPGDAPAutoExtend.ps1
index 2d8a7dbb75..4c3b552beb 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPGDAPAutoExtend.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPGDAPAutoExtend.ps1
@@ -1,4 +1,9 @@
function Set-CIPPGDAPAutoExtend {
+ <#
+ .NOTES
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | PATCH /tenantRelationships/delegatedAdminRelationships/{id} | Delegated | DelegatedAdminRelationship.ReadWrite.All
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param (
$RelationShipid,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPGDAPInviteGroups.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPGDAPInviteGroups.ps1
index c3a03a7add..1b03afd525 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPGDAPInviteGroups.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPGDAPInviteGroups.ps1
@@ -1,4 +1,10 @@
function Set-CIPPGDAPInviteGroups {
+ <#
+ .NOTES
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | POST /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments | Delegated | DelegatedAdminRelationship.ReadWrite.All
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
Param($Relationship)
$Table = Get-CIPPTable -TableName 'GDAPInvites'
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPGroupLicense.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPGroupLicense.ps1
index 108f198dfc..74c3d7834e 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPGroupLicense.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPGroupLicense.ps1
@@ -1,4 +1,9 @@
function Set-CIPPGroupLicense {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups/{id} | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group-XTenantIdentitySync.Read.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | POST /groups/{id}/assignLicense | Delegated | LicenseAssignment.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ #>
[CmdletBinding()]
param (
[Parameter(Mandatory = $true)][string]$GroupId,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPIntunePolicy.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPIntunePolicy.ps1
index 144c0737da..a5a355dbd2 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPIntunePolicy.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPIntunePolicy.ps1
@@ -1,4 +1,8 @@
function Set-CIPPIntunePolicy {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/depOnboardingSettings | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ #>
param (
[Parameter(Mandatory = $true)]
$TemplateType,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPManager.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPManager.ps1
index b71367bceb..196846d52a 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPManager.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPManager.ps1
@@ -1,4 +1,8 @@
function Set-CIPPManager {
+ <#
+ .NOTES
+ Permission: Graph | PUT /users/{id}/manager/$ref | Delegated | User.ReadWrite.All | AgentIdUser.ReadWrite.All, AgentIdUser.ReadWrite.IdentityParentedBy, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
[Alias('User')]
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPNamedLocation.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPNamedLocation.ps1
index 3e23d70b8e..ec1ea75a58 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPNamedLocation.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPNamedLocation.ps1
@@ -1,4 +1,10 @@
function Set-CIPPNamedLocation {
+ <#
+ .NOTES
+ Permission: Graph | DELETE /identity/conditionalAccess/namedLocations/{id} | Delegated | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations/{id} | Delegated | Policy.Read.All
+ Permission: Graph | PATCH /identity/conditionalAccess/namedLocations/{id} | Delegated | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ #>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
$NamedLocationId,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPOneDriveSharing.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPOneDriveSharing.ps1
index 8b0c8d4ed4..5db9511758 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPOneDriveSharing.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPOneDriveSharing.ps1
@@ -1,4 +1,8 @@
function Set-CIPPOneDriveSharing {
+ <#
+ .NOTES
+ Permission: Graph | GET /users/{id}/drive | Application | Files.Read.All | Files.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$UserId,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPPerUserMFA.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPPerUserMFA.ps1
index 7f1822dcdd..05b1b9e573 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPPerUserMFA.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPPerUserMFA.ps1
@@ -20,6 +20,8 @@ function Set-CIPPPerUserMFA {
.EXAMPLE
Set-CIPPPerUserMFA -TenantFilter 'contoso.onmicrosoft.com' -userId user@contoso.onmicrosoft.com -State 'disabled' -Headers 'mspuser@partner.com'
+ .NOTES
+ Permission: Graph | PATCH /users/{id}/authentication/requirements | Application | Policy.ReadWrite.AuthenticationMethod | UserAuthenticationMethod.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPProfilePhoto.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPProfilePhoto.ps1
index 5bf6225a54..d435c39297 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPProfilePhoto.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPProfilePhoto.ps1
@@ -1,4 +1,10 @@
function Set-CIPPProfilePhoto {
+ <#
+ .NOTES
+ Permission: Graph | PUT /groups/{id}/photo/$value | Delegated | ProfilePhoto.ReadWrite.All | User.ReadWrite, User.ReadWrite.All
+ Permission: Graph | PUT /teams/{id}/photo/$value | Delegated | User.ReadWrite | User.ReadWrite.All
+ Permission: Graph | PUT /users/{id}/photo/$value | Delegated | User.ReadWrite | User.ReadWrite.All
+ #>
[CmdletBinding()]
param(
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPRegistrationCampaign.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPRegistrationCampaign.ps1
index 4300d82beb..8788300a1f 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPRegistrationCampaign.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPRegistrationCampaign.ps1
@@ -13,6 +13,9 @@ function Set-CIPPRegistrationCampaign {
.PARAMETER ExcludeTargets
Array of @{ id; targetType } targets. $null keeps the current exclusions, an empty
array clears them.
+ .NOTES
+ Permission: Graph | GET /policies/authenticationMethodsPolicy | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod, Policy.Read.All
+ Permission: Graph | PATCH /policies/authenticationMethodsPolicy | Delegated | Policy.ReadWrite.AuthenticationMethod
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPRequirePasswordChange.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPRequirePasswordChange.ps1
index f15fe7ae71..14ac6e7e4c 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPRequirePasswordChange.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPRequirePasswordChange.ps1
@@ -5,6 +5,9 @@ function Set-CIPPRequirePasswordChange {
.DESCRIPTION
Sets passwordProfile.forceChangePasswordNextSignIn via Graph. Directory-synced users
are rejected: that flag is not managed for on-premises password authority.
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPResetPassword.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPResetPassword.ps1
index 3741209efd..66e21a2f2c 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPResetPassword.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPResetPassword.ps1
@@ -1,4 +1,10 @@
function Set-CIPPResetPassword {
+ <#
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | POST /users/{id}/authentication/methods/28c10230-6103-485e-b985-444c60001490/resetPassword | Delegated | UserAuthenticationMethod.ReadWrite.All
+ #>
[CmdletBinding()]
param(
$UserID,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPSAMAdminRoles.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPSAMAdminRoles.ps1
index 7ca4ce1dca..4d158152c3 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPSAMAdminRoles.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPSAMAdminRoles.ps1
@@ -8,6 +8,12 @@ function Set-CIPPSAMAdminRoles {
Tenant to apply the SAM roles to
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | POST /directoryRoles | Delegated | RoleManagement.ReadWrite.Directory
+ Permission: Graph | POST /directoryRoles(roleTemplateId='{id}')/members/$ref | Application | RoleManagement.ReadWrite.Directory
+ Permission: Graph | POST /directoryRoles(roleTemplateId='{id}')/members/$ref | Delegated | RoleManagement.ReadWrite.Directory
+ Permission: Graph | GET /servicePrincipals(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}')/memberOf | Application | Application.Read.All | Application.ReadWrite.All, Application.ReadWrite.OwnedBy, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPSharePointObjectPermission.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPSharePointObjectPermission.ps1
index e4ff59066c..da10aa8a94 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPSharePointObjectPermission.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPSharePointObjectPermission.ps1
@@ -26,6 +26,9 @@ function Set-CIPPSharePointObjectPermission {
.PARAMETER TenantFilter
The tenant the site belongs to
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | POST /groups | Application | Group.Create | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPSharePointPerms.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPSharePointPerms.ps1
index ab64cc152c..7465859b58 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPSharePointPerms.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPSharePointPerms.ps1
@@ -33,6 +33,8 @@ function Set-CIPPSharePointPerms {
.OUTPUTS
One { resultText, state } item per user. A user that fails gets state 'error' and does not stop the rest.
+ .NOTES
+ Permission: Graph | GET /users/{id}/drive/root | Application | Files.Read.All | Files.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPSharePointSiteMember.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPSharePointSiteMember.ps1
index 9569aaf43a..419592e7e4 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPSharePointSiteMember.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPSharePointSiteMember.ps1
@@ -34,6 +34,11 @@ function Set-CIPPSharePointSiteMember {
.PARAMETER MemberType
The member type from ListSiteMembers, used on removals to target the SharePoint role group
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | DELETE /groups/{id}/owners/{id}/$ref | Delegated | Group.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | POST /groups/{id}/owners/$ref | Delegated | Group.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPSignInState.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPSignInState.ps1
index ced2b88f70..3b4ea9ee8a 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPSignInState.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPSignInState.ps1
@@ -1,4 +1,9 @@
function Set-CIPPSignInState {
+ <#
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$UserID,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPSponsor.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPSponsor.ps1
index 8bbb7bfb98..295bbd5cbc 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPSponsor.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPSponsor.ps1
@@ -1,4 +1,8 @@
function Set-CIPPSponsor {
+ <#
+ .NOTES
+ Permission: Graph | PUT /users/{id}/sponsors/$ref | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
[Alias('User')]
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPUser.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPUser.ps1
index 83637f004d..a400464f4b 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPUser.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPUser.ps1
@@ -1,4 +1,12 @@
function Set-CIPPUser {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups/{id} | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group-XTenantIdentitySync.Read.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | DELETE /groups/{id}/members/{id}/$ref | Delegated | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | POST /groups/{id}/members/$ref | Delegated | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$UserObj,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPUserJITAdmin.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPUserJITAdmin.ps1
index 5c182815c0..fd8b9c1b50 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPUserJITAdmin.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPUserJITAdmin.ps1
@@ -33,6 +33,16 @@ function Set-CIPPUserJITAdmin {
.EXAMPLE
Set-CIPPUserJITAdmin -TenantFilter 'contoso.onmicrosoft.com' -Headers@{UserPrincipalName = 'jit@contoso.onmicrosoft.com'} -Roles @('62e90394-69f5-4237-9190-012177145e10') -Action 'AddRoles' -Expiration (Get-Date).AddDays(1) -Reason 'Emergency access'
+ .NOTES
+ Permission: Graph | POST /directoryRoles | Delegated | RoleManagement.ReadWrite.Directory
+ Permission: Graph | DELETE /directoryRoles(roleTemplateId='{id}')/members/{id}/$ref | Delegated | RoleManagement.ReadWrite.Directory
+ Permission: Graph | POST /directoryRoles(roleTemplateId='{id}')/members/$ref | Delegated | RoleManagement.ReadWrite.Directory
+ Permission: Graph | DELETE /groups/{id}/members/{id}/$ref | Delegated | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | POST /groups/{id}/members/$ref | Delegated | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | POST /users | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | DELETE /users/{id} | Delegated | User.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPUserJITAdminProperties.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPUserJITAdminProperties.ps1
index 07eb7402ed..ee081f33a1 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPUserJITAdminProperties.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPUserJITAdminProperties.ps1
@@ -1,4 +1,8 @@
function Set-CIPPUserJITAdminProperties {
+ <#
+ .NOTES
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param(
[string]$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPUserLicense.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPUserLicense.ps1
index 4b6e0c6eb3..a8979385cd 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPUserLicense.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPUserLicense.ps1
@@ -1,4 +1,9 @@
function Set-CIPPUserLicense {
+ <#
+ .NOTES
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | POST /users/{id}/assignLicense | Delegated | LicenseAssignment.ReadWrite.All | AgentIdUser.ReadWrite.All, AgentIdUser.ReadWrite.IdentityParentedBy, Directory.ReadWrite.All, User.ReadWrite.All
+ #>
[CmdletBinding()]
param (
[Parameter(ParameterSetName = 'Single', Mandatory)][string]$UserId,
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPUserSchemaProperties.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPUserSchemaProperties.ps1
index 2060e35feb..ebf0c4ca2d 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPUserSchemaProperties.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPUserSchemaProperties.ps1
@@ -15,6 +15,8 @@ function Set-CIPPUserSchemaProperties {
.PARAMETER Properties
Hashtable of properties to set
+ .NOTES
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
Param(
diff --git a/backend/Modules/CIPPCore/Public/Set-CIPPVacationGroupMembership.ps1 b/backend/Modules/CIPPCore/Public/Set-CIPPVacationGroupMembership.ps1
index b54732dd6f..a090558242 100644
--- a/backend/Modules/CIPPCore/Public/Set-CIPPVacationGroupMembership.ps1
+++ b/backend/Modules/CIPPCore/Public/Set-CIPPVacationGroupMembership.ps1
@@ -20,6 +20,8 @@ function Set-CIPPVacationGroupMembership {
Shared key linking the Add and Remove runs of one vacation.
.PARAMETER Headers
The headers to include in the request. This is supplied automatically by the API.
+ .NOTES
+ Permission: Graph | GET /groups/{id}/members | Delegated | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Start-CIPPSharePointLibraryCopy.ps1 b/backend/Modules/CIPPCore/Public/Start-CIPPSharePointLibraryCopy.ps1
index f1614b8180..f314c2e04f 100644
--- a/backend/Modules/CIPPCore/Public/Start-CIPPSharePointLibraryCopy.ps1
+++ b/backend/Modules/CIPPCore/Public/Start-CIPPSharePointLibraryCopy.ps1
@@ -2,6 +2,9 @@ function Start-CIPPSharePointLibraryCopy {
<#
.SYNOPSIS
Preflights or starts a SharePoint library-to-library copy operation.
+ .NOTES
+ Permission: Graph | GET /sites/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/lists/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Sync-CIPPReusablePolicySettings.ps1 b/backend/Modules/CIPPCore/Public/Sync-CIPPReusablePolicySettings.ps1
index 8e88186827..ec4b997272 100644
--- a/backend/Modules/CIPPCore/Public/Sync-CIPPReusablePolicySettings.ps1
+++ b/backend/Modules/CIPPCore/Public/Sync-CIPPReusablePolicySettings.ps1
@@ -1,4 +1,9 @@
function Sync-CIPPReusablePolicySettings {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/reusablePolicySettings | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/reusablePolicySettings | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ #>
param(
[psobject]$TemplateInfo,
[string]$Tenant
diff --git a/backend/Modules/CIPPCore/Public/TenantGroups/Update-CIPPDynamicTenantGroups.ps1 b/backend/Modules/CIPPCore/Public/TenantGroups/Update-CIPPDynamicTenantGroups.ps1
index d995d65832..d8f3848c83 100644
--- a/backend/Modules/CIPPCore/Public/TenantGroups/Update-CIPPDynamicTenantGroups.ps1
+++ b/backend/Modules/CIPPCore/Public/TenantGroups/Update-CIPPDynamicTenantGroups.ps1
@@ -8,6 +8,9 @@ function Update-CIPPDynamicTenantGroups {
The specific group ID to update. If not provided, all dynamic groups will be updated
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /subscribedSkus | Delegated | LicenseAssignment.Read.All | Directory.Read.All, Directory.ReadWrite.All, Organization.Read.All, Organization.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Test-CIPPAccessPermissions.ps1 b/backend/Modules/CIPPCore/Public/Test-CIPPAccessPermissions.ps1
index 607cbab4ca..1b0b16c408 100644
--- a/backend/Modules/CIPPCore/Public/Test-CIPPAccessPermissions.ps1
+++ b/backend/Modules/CIPPCore/Public/Test-CIPPAccessPermissions.ps1
@@ -1,4 +1,9 @@
function Test-CIPPAccessPermissions {
+ <#
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /auditLogs/signIns | Delegated | AuditLog.Read.All
+ #>
[CmdletBinding()]
param (
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Test-CIPPAccessTenant.ps1 b/backend/Modules/CIPPCore/Public/Test-CIPPAccessTenant.ps1
index 6f44afc1a6..21cd65d209 100644
--- a/backend/Modules/CIPPCore/Public/Test-CIPPAccessTenant.ps1
+++ b/backend/Modules/CIPPCore/Public/Test-CIPPAccessTenant.ps1
@@ -1,4 +1,11 @@
function Test-CIPPAccessTenant {
+ <#
+ .NOTES
+ Permission: Graph | GET /me | Delegated | User.Read | User.ReadWrite, User.ReadBasic.All, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /me/transitiveMemberOf | Delegated | User.Read | Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, GroupMember.Read.All, User.Read.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
+ Permission: Graph | GET /roleManagement/exchange/roleDefinitions | Delegated | RoleManagement.Read.Exchange | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
+ #>
[CmdletBinding()]
param (
$Tenant = 'AllTenants',
diff --git a/backend/Modules/CIPPCore/Public/Test-CIPPCACoverageExternalTenantMatch.ps1 b/backend/Modules/CIPPCore/Public/Test-CIPPCACoverageExternalTenantMatch.ps1
new file mode 100644
index 0000000000..8a8f1a3765
--- /dev/null
+++ b/backend/Modules/CIPPCore/Public/Test-CIPPCACoverageExternalTenantMatch.ps1
@@ -0,0 +1,17 @@
+function Test-CIPPCACoverageExternalTenantMatch {
+ param (
+ $User,
+ $ExternalTenants
+ )
+ if ($null -eq $ExternalTenants) { return $true }
+ $Kind = [string]$ExternalTenants.membershipKind
+ if ([string]::IsNullOrWhiteSpace($Kind) -or $Kind -eq 'all') { return $true }
+ if ($Kind -ne 'enumerated') { return $true }
+
+ $Allowed = @($ExternalTenants.members | Where-Object { -not [string]::IsNullOrWhiteSpace($_) })
+ if ($Allowed.Count -eq 0) { return $false }
+
+ $HomeTenantId = Get-CIPPCACoverageGuestHomeTenantId -User $User
+ if (-not $HomeTenantId) { return $false }
+ return ($Allowed -contains $HomeTenantId)
+}
diff --git a/backend/Modules/CIPPCore/Public/Test-CIPPGDAPGroupMappings.ps1 b/backend/Modules/CIPPCore/Public/Test-CIPPGDAPGroupMappings.ps1
index d1c1d1b684..d997db8933 100644
--- a/backend/Modules/CIPPCore/Public/Test-CIPPGDAPGroupMappings.ps1
+++ b/backend/Modules/CIPPCore/Public/Test-CIPPGDAPGroupMappings.ps1
@@ -22,6 +22,9 @@ function Test-CIPPGDAPGroupMappings {
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | POST /groups | Application | Group.Create | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Test-CIPPGDAPRelationships.ps1 b/backend/Modules/CIPPCore/Public/Test-CIPPGDAPRelationships.ps1
index afb53e2966..f2b29c5ce8 100644
--- a/backend/Modules/CIPPCore/Public/Test-CIPPGDAPRelationships.ps1
+++ b/backend/Modules/CIPPCore/Public/Test-CIPPGDAPRelationships.ps1
@@ -1,4 +1,12 @@
function Test-CIPPGDAPRelationships {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups/{id}/memberOf | Delegated | GroupMember.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadBasic.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/$count | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /me | Delegated | User.Read | User.ReadWrite, User.ReadBasic.All, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /me/memberOf | Delegated | User.Read | Directory.Read.All, Directory.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Tools/Get-CippReportTenantName.ps1 b/backend/Modules/CIPPCore/Public/Tools/Get-CippReportTenantName.ps1
index 7c8441f5d8..aab84904b2 100644
--- a/backend/Modules/CIPPCore/Public/Tools/Get-CippReportTenantName.ps1
+++ b/backend/Modules/CIPPCore/Public/Tools/Get-CippReportTenantName.ps1
@@ -15,6 +15,8 @@ function Get-CippReportTenantName {
thing, and finally to the tenant filter itself, so a report always has something to say.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /organization | Application | DeviceManagementServiceConfig.Read.All | Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPCore/Public/Update-CIPPSAMCertificate.ps1 b/backend/Modules/CIPPCore/Public/Update-CIPPSAMCertificate.ps1
index 5477c35d49..61c4b6c8f5 100644
--- a/backend/Modules/CIPPCore/Public/Update-CIPPSAMCertificate.ps1
+++ b/backend/Modules/CIPPCore/Public/Update-CIPPSAMCertificate.ps1
@@ -29,6 +29,9 @@ function Update-CIPPSAMCertificate {
.EXAMPLE
Update-CIPPSAMCertificate -Force
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
#>
[CmdletBinding(SupportsShouldProcess = $true)]
param(
diff --git a/backend/Modules/CIPPCore/Public/Webhooks/Get-CIPPPartnerUserLookup.ps1 b/backend/Modules/CIPPCore/Public/Webhooks/Get-CIPPPartnerUserLookup.ps1
index 5a95ef6ec6..34a376b84e 100644
--- a/backend/Modules/CIPPCore/Public/Webhooks/Get-CIPPPartnerUserLookup.ps1
+++ b/backend/Modules/CIPPCore/Public/Webhooks/Get-CIPPPartnerUserLookup.ps1
@@ -12,6 +12,8 @@ function Get-CIPPPartnerUserLookup {
The audit-log pipeline (Test-CIPPAuditLogRules) and the BEC run share it.
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param()
diff --git a/backend/Modules/CIPPCore/Public/Webhooks/Invoke-CIPPWebhookProcessing.ps1 b/backend/Modules/CIPPCore/Public/Webhooks/Invoke-CIPPWebhookProcessing.ps1
index 26fda86afa..e48e5eefc9 100644
--- a/backend/Modules/CIPPCore/Public/Webhooks/Invoke-CIPPWebhookProcessing.ps1
+++ b/backend/Modules/CIPPCore/Public/Webhooks/Invoke-CIPPWebhookProcessing.ps1
@@ -1,4 +1,8 @@
function Invoke-CippWebhookProcessing {
+ <#
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$TenantFilter,
diff --git a/backend/Modules/CIPPCore/Public/Webhooks/Push-AuditLogDownloadV2.ps1 b/backend/Modules/CIPPCore/Public/Webhooks/Push-AuditLogDownloadV2.ps1
index 686e3340cc..a6a3cae75b 100644
--- a/backend/Modules/CIPPCore/Public/Webhooks/Push-AuditLogDownloadV2.ps1
+++ b/backend/Modules/CIPPCore/Public/Webhooks/Push-AuditLogDownloadV2.ps1
@@ -17,6 +17,8 @@ function Push-AuditLogDownloadV2 {
an earlier one, so an empty or unready window costs no further orchestration.
.FUNCTIONALITY
Entrypoint
+ .NOTES
+ Permission: Graph | GET /security/auditLog/queries/{id} | Application | AuditLogsQuery.Read.All
#>
[CmdletBinding()]
param($Item)
diff --git a/backend/Modules/CIPPCore/Public/Webhooks/Test-CIPPAuditLogRules.ps1 b/backend/Modules/CIPPCore/Public/Webhooks/Test-CIPPAuditLogRules.ps1
index a29bb9f981..f0bbc2cda6 100644
--- a/backend/Modules/CIPPCore/Public/Webhooks/Test-CIPPAuditLogRules.ps1
+++ b/backend/Modules/CIPPCore/Public/Webhooks/Test-CIPPAuditLogRules.ps1
@@ -1,4 +1,11 @@
function Test-CIPPAuditLogRules {
+ <#
+ .NOTES
+ Permission: Graph | GET /devices | Delegated | Device.Read.All | Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheActiveUserDetail.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheActiveUserDetail.ps1
index 3303138c4a..bdaf19f2f5 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheActiveUserDetail.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheActiveUserDetail.ps1
@@ -18,6 +18,8 @@ function Set-CIPPDBCacheActiveUserDetail {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /reports/getOffice365ActiveUserDetail(period='D180') | Delegated | Reports.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheActivityBasedTimeoutPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheActivityBasedTimeoutPolicy.ps1
index dcc5e5797e..8fa07a429e 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheActivityBasedTimeoutPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheActivityBasedTimeoutPolicy.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheActivityBasedTimeoutPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/activityBasedTimeoutPolicies | Delegated | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdminConsentRequestPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdminConsentRequestPolicy.ps1
index 66f32dbde1..e764d78d22 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdminConsentRequestPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdminConsentRequestPolicy.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheAdminConsentRequestPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/adminConsentRequestPolicy | Delegated | Policy.Read.All | Policy.ReadWrite.ConsentRequest, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdminReportSettings.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdminReportSettings.ps1
index 051c944c22..58b0654e27 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdminReportSettings.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdminReportSettings.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheAdminReportSettings {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /admin/reportSettings | Application | ReportSettings.Read.All | ReportSettings.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdministrativeUnits.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdministrativeUnits.ps1
index 8fd7c79166..af0591cd51 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdministrativeUnits.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAdministrativeUnits.ps1
@@ -12,6 +12,8 @@ function Set-CIPPDBCacheAdministrativeUnits {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /directory/administrativeUnits | Delegated | AdministrativeUnit.Read.All | AdministrativeUnit.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAppRoleAssignments.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAppRoleAssignments.ps1
index 799e98e020..87fac05309 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAppRoleAssignments.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAppRoleAssignments.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheAppRoleAssignments {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheApps.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheApps.ps1
index ac1b1d7aec..e1e6e97029 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheApps.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheApps.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheApps {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /applications | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.ReadWrite.All, Directory.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthenticationFlowsPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthenticationFlowsPolicy.ps1
index 476fb63b4c..9e17d0b0fc 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthenticationFlowsPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthenticationFlowsPolicy.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheAuthenticationFlowsPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/authenticationFlowsPolicy | Application | Policy.Read.All | Policy.ReadWrite.AuthenticationFlows
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthenticationMethodsPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthenticationMethodsPolicy.ps1
index f718d39912..29fd51a5ca 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthenticationMethodsPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthenticationMethodsPolicy.ps1
@@ -8,6 +8,9 @@ function Set-CIPPDBCacheAuthenticationMethodsPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/authenticationMethodsPolicy | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod, Policy.Read.All
+ Permission: Graph | GET /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/fido2 | Application | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthorizationPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthorizationPolicy.ps1
index 7811b92867..64832ee560 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthorizationPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAuthorizationPolicy.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheAuthorizationPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/authorizationPolicy | Delegated | Policy.Read.All | Policy.ReadWrite.Authorization
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAutopilotDeploymentProfiles.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAutopilotDeploymentProfiles.ps1
index 36c9266bf2..564ee2ce79 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAutopilotDeploymentProfiles.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheAutopilotDeploymentProfiles.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheAutopilotDeploymentProfiles {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeploymentProfiles | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheB2BManagementPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheB2BManagementPolicy.ps1
index 7107686044..b416f00073 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheB2BManagementPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheB2BManagementPolicy.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheB2BManagementPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/b2bManagementPolicies | Delegated | Policy.Read.B2BManagementPolicy | Policy.ReadWrite.B2BManagementPolicy
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheBitlockerKeys.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheBitlockerKeys.ps1
index 55cf9e7881..0dc84d1ab2 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheBitlockerKeys.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheBitlockerKeys.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheBitlockerKeys {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /informationProtection/bitlocker/recoveryKeys | Delegated | BitlockerKey.ReadBasic.All | BitlockerKey.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheConditionalAccessPolicies.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheConditionalAccessPolicies.ps1
index 9acf4ac8e8..1456143316 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheConditionalAccessPolicies.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheConditionalAccessPolicies.ps1
@@ -8,6 +8,10 @@ function Set-CIPPDBCacheConditionalAccessPolicies {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Delegated | Policy.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/policies | Delegated | Policy.Read.All
+ Permission: Graph | GET /policies/identitySecurityDefaultsEnforcementPolicy | Application | Policy.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotAdminSettings.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotAdminSettings.ps1
index be2452b193..205549f2b4 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotAdminSettings.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotAdminSettings.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheCopilotAdminSettings {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /copilot/admin/settings/limitedMode | Delegated | CopilotSettings-LimitedMode.Read | CopilotSettings-LimitedMode.ReadWrite
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotPolicySettings.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotPolicySettings.ps1
index 1b109b4143..a4543721ea 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotPolicySettings.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotPolicySettings.ps1
@@ -13,6 +13,8 @@ function Set-CIPPDBCacheCopilotPolicySettings {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /copilot/admin/policySettings/{id} | Delegated | CopilotPolicySettings.Read | CopilotPolicySettings.ReadWrite
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotUserCountTrend.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotUserCountTrend.ps1
index 227402889d..1479c160b7 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotUserCountTrend.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCopilotUserCountTrend.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheCopilotUserCountTrend {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /reports/getMicrosoft365CopilotUserCountTrend(period='D7') | Application | Reports.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCrossTenantAccessPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCrossTenantAccessPolicy.ps1
index beeacb65cf..210f4ad88f 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCrossTenantAccessPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheCrossTenantAccessPolicy.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheCrossTenantAccessPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/crossTenantAccessPolicy/default | Delegated | Policy.Read.All | Policy.ReadWrite.CrossTenantAccess
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDefaultAppManagementPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDefaultAppManagementPolicy.ps1
index 56886caa27..0357243ea8 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDefaultAppManagementPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDefaultAppManagementPolicy.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheDefaultAppManagementPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/defaultAppManagementPolicy | Delegated | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDeviceEnrollmentConfigurations.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDeviceEnrollmentConfigurations.ps1
index ffd4054738..c8aba6b996 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDeviceEnrollmentConfigurations.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDeviceEnrollmentConfigurations.ps1
@@ -14,6 +14,8 @@ function Set-CIPPDBCacheDeviceEnrollmentConfigurations {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /deviceManagement/deviceEnrollmentConfigurations | Application | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDeviceRegistrationPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDeviceRegistrationPolicy.ps1
index 24224b44a6..8eec071eb2 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDeviceRegistrationPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDeviceRegistrationPolicy.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheDeviceRegistrationPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/deviceRegistrationPolicy | Delegated | Policy.Read.DeviceConfiguration | Policy.Read.All, Policy.ReadWrite.DeviceConfiguration
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDevices.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDevices.ps1
index 24242b0bbb..f8ea4aa47e 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDevices.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDevices.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheDevices {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /devices | Delegated | Device.Read.All | Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDirectoryRecommendations.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDirectoryRecommendations.ps1
index 3a191fb6a1..386fe28d0e 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDirectoryRecommendations.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDirectoryRecommendations.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheDirectoryRecommendations {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /directory/recommendations | Delegated | DirectoryRecommendations.Read.All | DirectoryRecommendations.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDomains.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDomains.ps1
index 1dbe4a8964..c3f55c3202 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDomains.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheDomains.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheDomains {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheGroups.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheGroups.ps1
index 51a5c32f9e..a1af1df417 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheGroups.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheGroups.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheGroups {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param(
@@ -33,87 +35,15 @@ function Set-CIPPDBCacheGroups {
$Writer = { Add-CIPPDbItem -TenantFilter $TenantFilter -Type 'Groups' -AddCount }.GetSteppablePipeline()
$Writer.Begin($true)
- function Write-GroupBatch {
- param(
- [System.Collections.Generic.List[object]]$Batch,
- $PipelineWriter,
- [ref]$Count
- )
-
- if ($Batch.Count -eq 0) { return }
-
- $MemberRequests = $Batch | ForEach-Object {
- if ($_.id -and $_.groupTypes -notcontains 'DynamicMembership') {
- [PSCustomObject]@{
- id = $_.id
- method = 'GET'
- url = "/groups/$($_.id)/members?`$top=999&`$select=id,displayName,userPrincipalName"
- }
- }
- }
-
- $MembersByGroupId = @{}
- if ($MemberRequests) {
- Write-LogMessage -API 'CIPPDBCache' -tenant $TenantFilter -message "Fetching group members for batch of $($Batch.Count)" -sev Debug
- $MemberResults = New-GraphBulkRequest -Requests @($MemberRequests) -tenantid $TenantFilter
- foreach ($Result in $MemberResults) {
- if ($Result.id) { $MembersByGroupId[$Result.id] = $Result.body.value }
- }
- $MemberResults = $null
- }
-
- foreach ($Group in $Batch) {
- $groupType = if ($Group.groupTypes -contains 'Unified') { 'Microsoft 365' }
- elseif ($Group.mailEnabled -and $Group.securityEnabled) { 'Mail-Enabled Security' }
- elseif (-not $Group.mailEnabled -and $Group.securityEnabled) { 'Security' }
- elseif ([string]::IsNullOrEmpty($Group.groupTypes) -and $Group.mailEnabled -and -not $Group.securityEnabled) { 'Distribution List' }
- else { 'Unknown' }
- $calculatedGroupType = if ($Group.groupTypes -contains 'Unified') { 'm365' }
- elseif ($Group.mailEnabled -and $Group.securityEnabled) { 'security' }
- elseif (-not $Group.mailEnabled -and $Group.securityEnabled) { 'generic' }
- elseif ([string]::IsNullOrEmpty($Group.groupTypes) -and $Group.mailEnabled -and -not $Group.securityEnabled) { 'distributionList' }
- else { 'unknown' }
-
- $NoteProperties = [ordered]@{}
- if ($Group.id -and $Group.groupTypes -notcontains 'DynamicMembership') {
- $NoteProperties['members'] = $MembersByGroupId[$Group.id]
- # Precompute the UPN CSV so the paged list read can stream the stored blob
- # verbatim instead of parsing every member array (heavy on 50k-member groups).
- $NoteProperties['membersCsv'] = ($MembersByGroupId[$Group.id].userPrincipalName -join ',')
- }
- if ($Group.owners) {
- $NoteProperties['ownersCsv'] = ($Group.owners.userPrincipalName -join ',')
- }
- # Set unconditionally (unlike ownersCsv above) so a genuinely owner-less group
- # still gets an explicit false baked into the blob - the AsRawJson paged read
- # streams this stored blob verbatim and never recomputes it.
- $NoteProperties['hasOwner'] = [bool]($Group.owners -and $Group.owners.Count -gt 0)
- $NoteProperties['primDomain'] = ($Group.mail -split '@' | Select-Object -Last 1)
- $NoteProperties['teamsEnabled'] = ($Group.resourceProvisioningOptions -contains 'Team')
- $NoteProperties['dynamicGroupBool'] = ($Group.groupTypes -contains 'DynamicMembership')
- $NoteProperties['groupType'] = $groupType
- $NoteProperties['calculatedGroupType'] = $calculatedGroupType
-
- # Same as Add-Member -Force without its pipeline: half the allocation per row
- $Props = $Group.PSObject.Properties
- foreach ($Name in $NoteProperties.Keys) { $Props.Remove($Name); $Props.Add([psnoteproperty]::new($Name, $NoteProperties[$Name])) }
- $Count.Value++
- $PipelineWriter.Process($Group)
- }
-
- $Batch.Clear()
- $MembersByGroupId = $null
- }
-
try {
New-GraphGetRequest -uri $GroupUri -tenantid $TenantFilter -Stream | ForEach-Object {
$PendingBatch.Add($_)
if ($PendingBatch.Count -ge $MemberBatchSize) {
- Write-GroupBatch -Batch $PendingBatch -PipelineWriter $Writer -Count ([ref]$CachedCount)
+ Write-CIPPDBCacheGroupBatch -TenantFilter $TenantFilter -Batch $PendingBatch -PipelineWriter $Writer -Count ([ref]$CachedCount)
}
}
- Write-GroupBatch -Batch $PendingBatch -PipelineWriter $Writer -Count ([ref]$CachedCount)
+ Write-CIPPDBCacheGroupBatch -TenantFilter $TenantFilter -Batch $PendingBatch -PipelineWriter $Writer -Count ([ref]$CachedCount)
if ($CachedCount -gt 0) {
$Writer.End()
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheGuests.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheGuests.ps1
index a9345b5979..4afd41baeb 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheGuests.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheGuests.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheGuests {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheHomeRealmDiscoveryPolicy.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheHomeRealmDiscoveryPolicy.ps1
index 36d23a0db6..5e1e203c40 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheHomeRealmDiscoveryPolicy.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheHomeRealmDiscoveryPolicy.ps1
@@ -13,6 +13,8 @@ function Set-CIPPDBCacheHomeRealmDiscoveryPolicy {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/homeRealmDiscoveryPolicies | Delegated | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAppProtectionPolicies.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAppProtectionPolicies.ps1
index d88db38e0f..0291f63fbe 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAppProtectionPolicies.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAppProtectionPolicies.ps1
@@ -1,4 +1,10 @@
function Set-CIPPDBCacheIntuneAppProtectionPolicies {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/managedAppPolicies | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceAppManagement/mobileAppConfigurations | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAppleUserInitiatedEnrollmentProfiles.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAppleUserInitiatedEnrollmentProfiles.ps1
index acb4a77660..46843b743f 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAppleUserInitiatedEnrollmentProfiles.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAppleUserInitiatedEnrollmentProfiles.ps1
@@ -12,6 +12,9 @@ function Set-CIPPDBCacheIntuneAppleUserInitiatedEnrollmentProfiles {
.PARAMETER TenantFilter
The tenant to cache Apple enrollment type profiles for
+ .NOTES
+ Permission: Graph | GET /deviceManagement/appleUserInitiatedEnrollmentProfiles | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/appleUserInitiatedEnrollmentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneApplications.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneApplications.ps1
index 880b1007c6..c70d8c7b7b 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneApplications.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneApplications.ps1
@@ -1,4 +1,9 @@
function Set-CIPPDBCacheIntuneApplications {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAssignmentFilters.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAssignmentFilters.ps1
index 2528eee0c1..757fbb71dc 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAssignmentFilters.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneAssignmentFilters.ps1
@@ -1,4 +1,8 @@
function Set-CIPPDBCacheIntuneAssignmentFilters {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/assignmentFilters | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneBrandingProfile.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneBrandingProfile.ps1
index 30137eeeb6..716593caf4 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneBrandingProfile.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneBrandingProfile.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheIntuneBrandingProfile {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /deviceManagement/intuneBrandingProfiles | Application | DeviceManagementApps.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneCompliancePolicies.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneCompliancePolicies.ps1
index 2c85d76673..8e245ee348 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneCompliancePolicies.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneCompliancePolicies.ps1
@@ -1,4 +1,9 @@
function Set-CIPPDBCacheIntuneCompliancePolicies {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/deviceCompliancePolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneConfigurationPolicies.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneConfigurationPolicies.ps1
index c8e858b7a5..1482a463c8 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneConfigurationPolicies.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneConfigurationPolicies.ps1
@@ -12,6 +12,8 @@ function Set-CIPPDBCacheIntuneConfigurationPolicies {
.PARAMETER TenantFilter
The tenant to cache settings catalog policies for
+ .NOTES
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneDeviceEnrollmentConfigurations.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneDeviceEnrollmentConfigurations.ps1
index 7070867b23..8420375d02 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneDeviceEnrollmentConfigurations.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneDeviceEnrollmentConfigurations.ps1
@@ -14,6 +14,9 @@ function Set-CIPPDBCacheIntuneDeviceEnrollmentConfigurations {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /deviceManagement/deviceEnrollmentConfigurations | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceEnrollmentConfigurations/{id}/assignments | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneMobileApps.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneMobileApps.ps1
index 50465f7f3e..1a6c398d97 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneMobileApps.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneMobileApps.ps1
@@ -13,6 +13,8 @@ function Set-CIPPDBCacheIntuneMobileApps {
.PARAMETER TenantFilter
The tenant to cache mobile apps for
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntunePolicies.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntunePolicies.ps1
index 51bfceb7b0..9b1a6fb867 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntunePolicies.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntunePolicies.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheIntunePolicies {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneReusableSettings.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneReusableSettings.ps1
index 065e579e93..5f36a7f152 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneReusableSettings.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneReusableSettings.ps1
@@ -1,4 +1,8 @@
function Set-CIPPDBCacheIntuneReusableSettings {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/reusablePolicySettings | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneScripts.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneScripts.ps1
index 9f5746b472..634c985765 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneScripts.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneScripts.ps1
@@ -1,4 +1,12 @@
function Set-CIPPDBCacheIntuneScripts {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceHealthScripts | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementScripts.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceManagementScripts | Delegated | DeviceManagementScripts.Read.All | DeviceManagementScripts.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceShellScripts | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementScripts.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneWindowsAutopilotDeploymentProfiles.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneWindowsAutopilotDeploymentProfiles.ps1
index 86f2997b4f..0064cf6c1b 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneWindowsAutopilotDeploymentProfiles.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheIntuneWindowsAutopilotDeploymentProfiles.ps1
@@ -11,6 +11,8 @@ function Set-CIPPDBCacheIntuneWindowsAutopilotDeploymentProfiles {
.PARAMETER TenantFilter
The tenant to cache Autopilot deployment profiles for
+ .NOTES
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeploymentProfiles | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheM365AppUserDetail.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheM365AppUserDetail.ps1
index 7550891361..54c4921bcb 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheM365AppUserDetail.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheM365AppUserDetail.ps1
@@ -22,6 +22,8 @@ function Set-CIPPDBCacheM365AppUserDetail {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /reports/getM365AppUserDetail(period='D180') | Delegated | Reports.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMDEOnboarding.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMDEOnboarding.ps1
index ea251b0c8f..5221df8171 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMDEOnboarding.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMDEOnboarding.ps1
@@ -6,6 +6,8 @@ function Set-CIPPDBCacheMDEOnboarding {
The tenant to cache MDE onboarding status for
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92 | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMailboxUsage.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMailboxUsage.ps1
index f523adf31f..7ff4640687 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMailboxUsage.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMailboxUsage.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheMailboxUsage {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /reports/getMailboxUsageDetail(period='D7') | Delegated | Reports.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMailboxes.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMailboxes.ps1
index e9f4351e2e..ed1def7c1d 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMailboxes.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMailboxes.ps1
@@ -12,6 +12,8 @@ function Set-CIPPDBCacheMailboxes {
.PARAMETER Types
Optional array of types to cache. Valid values: 'All', 'Permissions', 'CalendarPermissions', 'Rules'
If not specified, defaults to 'All' which caches all types.
+ .NOTES
+ Permission: Graph | GET /reports/getMailboxUsageDetail(period='D7') | Delegated | Reports.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDeviceCleanupRules.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDeviceCleanupRules.ps1
index 7d85f2412d..b112a464f4 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDeviceCleanupRules.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDeviceCleanupRules.ps1
@@ -12,6 +12,8 @@ function Set-CIPPDBCacheManagedDeviceCleanupRules {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDeviceCleanupRules | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDeviceEncryptionStates.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDeviceEncryptionStates.ps1
index e31ea64e46..d6ea0b714c 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDeviceEncryptionStates.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDeviceEncryptionStates.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheManagedDeviceEncryptionStates {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDeviceEncryptionStates | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDevices.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDevices.ps1
index 9a84751fa9..8ca40fdcf2 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDevices.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheManagedDevices.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheManagedDevices {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMessageCenterMessages.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMessageCenterMessages.ps1
index a301cb2bc6..597b6b7ee4 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMessageCenterMessages.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMessageCenterMessages.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheMessageCenterMessages {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /admin/serviceAnnouncement/messages | Delegated | ServiceMessage.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMobileDeviceManagementPolicies.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMobileDeviceManagementPolicies.ps1
index 4d741e4a98..021b51a7eb 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMobileDeviceManagementPolicies.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMobileDeviceManagementPolicies.ps1
@@ -13,6 +13,8 @@ function Set-CIPPDBCacheMobileDeviceManagementPolicies {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/mobileDeviceManagementPolicies/0000000a-0000-0000-c000-000000000000 | Delegated | Policy.Read.All | Policy.ReadWrite.MobilityManagement
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMoeraDmarc.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMoeraDmarc.ps1
index eb4efddfe1..3fd1f7c366 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMoeraDmarc.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheMoeraDmarc.ps1
@@ -15,6 +15,8 @@ function Set-CIPPDBCacheMoeraDmarc {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheNamePronunciation.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheNamePronunciation.ps1
index 9c436d203b..4af0bdc373 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheNamePronunciation.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheNamePronunciation.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheNamePronunciation {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /admin/people/namePronunciation | Delegated | PeopleSettings.Read.All | PeopleSettings.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheNetworkAccess.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheNetworkAccess.ps1
index 55325461dc..e71aae3c09 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheNetworkAccess.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheNetworkAccess.ps1
@@ -10,6 +10,10 @@ function Set-CIPPDBCacheNetworkAccess {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /networkAccess/forwardingProfiles | Application | NetworkAccess.Read.All | NetworkAccess.ReadWrite.All
+ Permission: Graph | GET /networkAccess/settings/conditionalAccess | Application | NetworkAccess.Read.All | NetworkAccess.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id} | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOAuth2PermissionGrants.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOAuth2PermissionGrants.ps1
index 8589ee6eaa..956b3781d4 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOAuth2PermissionGrants.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOAuth2PermissionGrants.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheOAuth2PermissionGrants {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /oauth2PermissionGrants | Delegated | Directory.Read.All | DelegatedPermissionGrant.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOfficeActivations.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOfficeActivations.ps1
index c3592e6f25..bc1cd21896 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOfficeActivations.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOfficeActivations.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheOfficeActivations {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /reports/getOffice365ActivationsUserDetail | Delegated | Reports.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveLongPaths.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveLongPaths.ps1
index 6578cf1fed..1553438a31 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveLongPaths.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveLongPaths.ps1
@@ -19,6 +19,10 @@ function Set-CIPPDBCacheOneDriveLongPaths {
.PARAMETER QueueId
Optional queue ID for progress tracking
+ .NOTES
+ Permission: Graph | GET /organization | Application | DeviceManagementServiceConfig.Read.All | Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /reports/getOneDriveUsageAccountDetail(period='D7') | Application | Reports.Read.All
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveQuotas.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveQuotas.ps1
index 1c0529abed..8415d5f811 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveQuotas.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveQuotas.ps1
@@ -14,6 +14,8 @@ function Set-CIPPDBCacheOneDriveQuotas {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /users/{id}/drive | Application | Files.Read.All | Files.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveRootPermissions.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveRootPermissions.ps1
index 53d549dadd..10c4a0cfdb 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveRootPermissions.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveRootPermissions.ps1
@@ -39,6 +39,8 @@ function Set-CIPPDBCacheOneDriveRootPermissions {
.PARAMETER QueueId
Optional queue ID for progress tracking
+ .NOTES
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveRootShortcuts.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveRootShortcuts.ps1
index a4f4403fb5..292f5daaff 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveRootShortcuts.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveRootShortcuts.ps1
@@ -15,6 +15,8 @@ function Set-CIPPDBCacheOneDriveRootShortcuts {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /users/{id}/drive/root/children | Application | Files.Read.All | Files.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveUsage.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveUsage.ps1
index d4ecdf8b46..3892955305 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveUsage.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOneDriveUsage.ps1
@@ -8,6 +8,9 @@ function Set-CIPPDBCacheOneDriveUsage {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /reports/getOneDriveUsageAccountDetail(period='D7') | Application | Reports.Read.All
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOrganization.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOrganization.ps1
index af291016ea..2887e9f93f 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOrganization.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOrganization.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheOrganization {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOrganizationBranding.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOrganizationBranding.ps1
index fdd7cccbce..1e92481865 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOrganizationBranding.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheOrganizationBranding.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheOrganizationBranding {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /organization/{id}/branding/localizations | Application | OrganizationalBranding.Read.All | Organization.Read.All, Organization.ReadWrite.All, OrganizationalBranding.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePIMSettings.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePIMSettings.ps1
index f5999cdd7c..7dd8177ef6 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePIMSettings.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePIMSettings.ps1
@@ -8,6 +8,9 @@ function Set-CIPPDBCachePIMSettings {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/roleManagementPolicyAssignments | Delegated | RoleManagementPolicy.Read.Directory | RoleManagementPolicy.ReadWrite.AzureADGroup
+ Permission: Graph | GET /roleManagement/directory/roleEligibilityScheduleInstances | Delegated | RoleEligibilitySchedule.Read.Directory | RoleEligibilitySchedule.ReadWrite.Directory, RoleManagement.Read.All, RoleManagement.Read.Directory, RoleManagement.ReadWrite.Directory
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePermissionGrantPolicies.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePermissionGrantPolicies.ps1
index 6b58076d61..5d8f3e8cba 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePermissionGrantPolicies.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePermissionGrantPolicies.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCachePermissionGrantPolicies {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/permissionGrantPolicies | Delegated | Policy.Read.PermissionGrant | Policy.ReadWrite.PermissionGrant
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePhotoUpdateSettings.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePhotoUpdateSettings.ps1
index 9c38b92a65..6e5d8f6340 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePhotoUpdateSettings.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePhotoUpdateSettings.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCachePhotoUpdateSettings {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /admin/people/photoUpdateSettings | Delegated | PeopleSettings.Read.All | PeopleSettings.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePlannerUserPolicies.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePlannerUserPolicies.ps1
index 0deed97d7f..a44e5b7f91 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePlannerUserPolicies.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePlannerUserPolicies.ps1
@@ -14,6 +14,8 @@ function Set-CIPPDBCachePlannerUserPolicies {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePronouns.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePronouns.ps1
index 87ea93e87f..d94ea1cbb4 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePronouns.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCachePronouns.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCachePronouns {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /admin/people/pronouns | Delegated | PeopleSettings.Read.All | PeopleSettings.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskDetections.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskDetections.ps1
index 2935805b50..4acd4e03e0 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskDetections.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskDetections.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheRiskDetections {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /identityProtection/riskDetections | Delegated | IdentityRiskEvent.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskyServicePrincipals.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskyServicePrincipals.ps1
index 36349c3a7e..0b6f632393 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskyServicePrincipals.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskyServicePrincipals.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheRiskyServicePrincipals {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /identityProtection/riskyServicePrincipals | Delegated | IdentityRiskyServicePrincipal.Read.All | IdentityRiskyServicePrincipal.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskyUsers.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskyUsers.ps1
index dc46fc8bae..d85fe8c05e 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskyUsers.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRiskyUsers.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheRiskyUsers {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /identityProtection/riskyUsers | Delegated | IdentityRiskyUser.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleAssignmentScheduleInstances.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleAssignmentScheduleInstances.ps1
index 06387748b9..0af8904a50 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleAssignmentScheduleInstances.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleAssignmentScheduleInstances.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheRoleAssignmentScheduleInstances {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /roleManagement/directory/roleAssignmentScheduleInstances | Application | RoleAssignmentSchedule.Read.Directory | RoleAssignmentSchedule.ReadWrite.Directory, RoleManagement.Read.All, RoleManagement.Read.Directory, RoleManagement.ReadWrite.Directory
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleAssignments.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleAssignments.ps1
index 6faf4a752d..623b9b0ad6 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleAssignments.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleAssignments.ps1
@@ -17,6 +17,9 @@ function Set-CIPPDBCacheRoleAssignments {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | POST /directoryObjects/getByIds | Delegated | Directory.Read.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleDefinitions.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleDefinitions.ps1
index 7a81c17cb6..1665e9c4a1 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleDefinitions.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleDefinitions.ps1
@@ -14,6 +14,8 @@ function Set-CIPPDBCacheRoleDefinitions {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Delegated | RoleManagement.Read.Directory | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleEligibilitySchedules.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleEligibilitySchedules.ps1
index cdef0a857e..cb3daeaec7 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleEligibilitySchedules.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleEligibilitySchedules.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheRoleEligibilitySchedules {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /roleManagement/directory/roleEligibilitySchedules | Application | RoleEligibilitySchedule.Read.Directory | RoleEligibilitySchedule.ReadWrite.Directory, RoleManagement.Read.All, RoleManagement.Read.Directory, RoleManagement.ReadWrite.Directory
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleManagementPolicies.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleManagementPolicies.ps1
index 6e53f422aa..19c6dbe501 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleManagementPolicies.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoleManagementPolicies.ps1
@@ -31,6 +31,7 @@ function Set-CIPPDBCacheRoleManagementPolicies {
A tenant that has never onboarded PIM returns "MissingProvider: The provider is missing"
regardless of query or permissions. That is tenant state, not a bug in this call.
+ Permission: Graph | GET /policies/roleManagementPolicyAssignments | Application | RoleManagement.Read.All | RoleManagementPolicy.ReadWrite.AzureADGroup
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoles.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoles.ps1
index 3668cdaf18..578c5cfbea 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoles.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheRoles.ps1
@@ -8,6 +8,9 @@ function Set-CIPPDBCacheRoles {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /directoryRoles | Delegated | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /directoryRoles/{id}/members | Delegated | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecureScore.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecureScore.ps1
index a8c52decd8..9ea6314d48 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecureScore.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecureScore.ps1
@@ -8,6 +8,9 @@ function Set-CIPPDBCacheSecureScore {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /security/secureScoreControlProfiles | Delegated | SecurityEvents.Read.All | SecurityEvents.ReadWrite.All
+ Permission: Graph | GET /security/secureScores | Delegated | SecurityEvents.Read.All | SecurityEvents.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecureScoreControlProfiles.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecureScoreControlProfiles.ps1
index be01d912b0..e8731df62f 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecureScoreControlProfiles.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecureScoreControlProfiles.ps1
@@ -13,6 +13,8 @@ function Set-CIPPDBCacheSecureScoreControlProfiles {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /security/secureScoreControlProfiles | Delegated | SecurityEvents.Read.All | SecurityEvents.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecurityDefaults.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecurityDefaults.ps1
index 460d92e958..df029e0177 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecurityDefaults.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSecurityDefaults.ps1
@@ -15,6 +15,8 @@ function Set-CIPPDBCacheSecurityDefaults {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /policies/identitySecurityDefaultsEnforcementPolicy | Application | Policy.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSensitivityLabels.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSensitivityLabels.ps1
index 6891d3c87c..5dbf6675a5 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSensitivityLabels.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSensitivityLabels.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheSensitivityLabels {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /security/informationProtection/sensitivityLabels | Application | InformationProtectionPolicy.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServiceHealthIssues.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServiceHealthIssues.ps1
index 8e375357dc..4710e29374 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServiceHealthIssues.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServiceHealthIssues.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheServiceHealthIssues {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /admin/serviceAnnouncement/issues | Delegated | ServiceHealth.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServiceHealthOverviews.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServiceHealthOverviews.ps1
index 0e410961dc..5d35a30180 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServiceHealthOverviews.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServiceHealthOverviews.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheServiceHealthOverviews {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /admin/serviceAnnouncement/healthOverviews | Delegated | ServiceHealth.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServicePrincipalRiskDetections.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServicePrincipalRiskDetections.ps1
index 892e195117..a78a6260c9 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServicePrincipalRiskDetections.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServicePrincipalRiskDetections.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheServicePrincipalRiskDetections {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /identityProtection/servicePrincipalRiskDetections | Delegated | IdentityRiskEvent.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServicePrincipals.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServicePrincipals.ps1
index c36e84f913..ca1e377794 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServicePrincipals.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheServicePrincipals.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheServicePrincipals {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSettings.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSettings.ps1
index 0deef29fb4..3fa63fe375 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSettings.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSettings.ps1
@@ -8,6 +8,9 @@ function Set-CIPPDBCacheSettings {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /admin/appsAndServices | Delegated | OrgSettings-AppsAndServices.Read.All | OrgSettings-AppsAndServices.ReadWrite.All
+ Permission: Graph | GET /settings | Delegated | GroupSettings.Read.All | GroupSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointAdminSettings.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointAdminSettings.ps1
index 72e16e325f..8bbc7fb3dd 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointAdminSettings.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointAdminSettings.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheSharePointAdminSettings {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointPermissions.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointPermissions.ps1
index aba09b03ea..33ee0c86df 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointPermissions.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointPermissions.ps1
@@ -23,6 +23,8 @@ function Set-CIPPDBCacheSharePointPermissions {
.PARAMETER QueueId
Optional queue ID for progress tracking
+ .NOTES
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointSharingLinks.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointSharingLinks.ps1
index 591bcf460e..0357905836 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointSharingLinks.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointSharingLinks.ps1
@@ -31,6 +31,9 @@
.PARAMETER ForceFullSync
Ignore stored delta tokens and rescan every drive in full.
+ .NOTES
+ Permission: Graph | GET /domains | Application | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSiteActivity.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSiteActivity.ps1
index 2113e6ac04..44a375263d 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSiteActivity.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSiteActivity.ps1
@@ -43,6 +43,13 @@ function Set-CIPPDBCacheSiteActivity {
.PARAMETER QueueId
Optional queue context passed by orchestrators; reserved for queue-aware cache flows.
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id}/sites/root | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /reports/getOneDriveUsageAccountDetail(period='D180') | Application | Reports.Read.All
+ Permission: Graph | GET /reports/getSharePointSiteUsageDetail(period='D180') | Application | Reports.Read.All
+ Permission: Graph | GET /reports/getTeamsTeamActivityDetail(period='D180') | Application | Reports.Read.All
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheStorageCleanupScan.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheStorageCleanupScan.ps1
index 324fe6fe2a..ffa3604eff 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheStorageCleanupScan.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheStorageCleanupScan.ps1
@@ -20,6 +20,8 @@ function Set-CIPPDBCacheStorageCleanupScan {
.PARAMETER QueueId
Optional queue ID for progress tracking
+ .NOTES
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeams.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeams.ps1
index 86a7dc8593..a6a354ac8a 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeams.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeams.ps1
@@ -1,4 +1,8 @@
function Set-CIPPDBCacheTeams {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeamsActivity.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeamsActivity.ps1
index f5fbfb639a..0c6b62c144 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeamsActivity.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeamsActivity.ps1
@@ -1,4 +1,8 @@
function Set-CIPPDBCacheTeamsActivity {
+ <#
+ .NOTES
+ Permission: Graph | GET /reports/getTeamsUserActivityUserDetail(period='D30') | Delegated | Reports.Read.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeamsVoice.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeamsVoice.ps1
index fd19b710ca..7583a9ba83 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeamsVoice.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheTeamsVoice.ps1
@@ -1,4 +1,8 @@
function Set-CIPPDBCacheTeamsVoice {
+ <#
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param(
[Parameter(Mandatory = $true)]
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheUserRegistrationDetails.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheUserRegistrationDetails.ps1
index 85f935916a..06c345758a 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheUserRegistrationDetails.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheUserRegistrationDetails.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheUserRegistrationDetails {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /reports/authenticationMethods/userRegistrationDetails | Delegated | AuditLog.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheUsers.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheUsers.ps1
index deb536b7aa..c2e5b0120c 100644
--- a/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheUsers.ps1
+++ b/backend/Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheUsers.ps1
@@ -8,6 +8,8 @@ function Set-CIPPDBCacheUsers {
.PARAMETER QueueId
The queue ID to update with total tasks (optional)
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CIPPDB/Public/DBCache/Write-CIPPDBCacheGroupBatch.ps1 b/backend/Modules/CIPPDB/Public/DBCache/Write-CIPPDBCacheGroupBatch.ps1
new file mode 100644
index 0000000000..5834286901
--- /dev/null
+++ b/backend/Modules/CIPPDB/Public/DBCache/Write-CIPPDBCacheGroupBatch.ps1
@@ -0,0 +1,76 @@
+function Write-CIPPDBCacheGroupBatch {
+ <#
+ .NOTES
+ Permission: Graph | GET /groups/{id}/members | Delegated | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ #>
+ param(
+ [string]$TenantFilter,
+ [System.Collections.Generic.List[object]]$Batch,
+ $PipelineWriter,
+ [ref]$Count
+ )
+
+ if ($Batch.Count -eq 0) { return }
+
+ $MemberRequests = $Batch | ForEach-Object {
+ if ($_.id -and $_.groupTypes -notcontains 'DynamicMembership') {
+ [PSCustomObject]@{
+ id = $_.id
+ method = 'GET'
+ url = "/groups/$($_.id)/members?`$top=999&`$select=id,displayName,userPrincipalName"
+ }
+ }
+ }
+
+ $MembersByGroupId = @{}
+ if ($MemberRequests) {
+ Write-LogMessage -API 'CIPPDBCache' -tenant $TenantFilter -message "Fetching group members for batch of $($Batch.Count)" -sev Debug
+ $MemberResults = New-GraphBulkRequest -Requests @($MemberRequests) -tenantid $TenantFilter
+ foreach ($Result in $MemberResults) {
+ if ($Result.id) { $MembersByGroupId[$Result.id] = $Result.body.value }
+ }
+ $MemberResults = $null
+ }
+
+ foreach ($Group in $Batch) {
+ $groupType = if ($Group.groupTypes -contains 'Unified') { 'Microsoft 365' }
+ elseif ($Group.mailEnabled -and $Group.securityEnabled) { 'Mail-Enabled Security' }
+ elseif (-not $Group.mailEnabled -and $Group.securityEnabled) { 'Security' }
+ elseif ([string]::IsNullOrEmpty($Group.groupTypes) -and $Group.mailEnabled -and -not $Group.securityEnabled) { 'Distribution List' }
+ else { 'Unknown' }
+ $calculatedGroupType = if ($Group.groupTypes -contains 'Unified') { 'm365' }
+ elseif ($Group.mailEnabled -and $Group.securityEnabled) { 'security' }
+ elseif (-not $Group.mailEnabled -and $Group.securityEnabled) { 'generic' }
+ elseif ([string]::IsNullOrEmpty($Group.groupTypes) -and $Group.mailEnabled -and -not $Group.securityEnabled) { 'distributionList' }
+ else { 'unknown' }
+
+ $NoteProperties = [ordered]@{}
+ if ($Group.id -and $Group.groupTypes -notcontains 'DynamicMembership') {
+ $NoteProperties['members'] = $MembersByGroupId[$Group.id]
+ # Precompute the UPN CSV so the paged list read can stream the stored blob
+ # verbatim instead of parsing every member array (heavy on 50k-member groups).
+ $NoteProperties['membersCsv'] = ($MembersByGroupId[$Group.id].userPrincipalName -join ',')
+ }
+ if ($Group.owners) {
+ $NoteProperties['ownersCsv'] = ($Group.owners.userPrincipalName -join ',')
+ }
+ # Set unconditionally (unlike ownersCsv above) so a genuinely owner-less group
+ # still gets an explicit false baked into the blob - the AsRawJson paged read
+ # streams this stored blob verbatim and never recomputes it.
+ $NoteProperties['hasOwner'] = [bool]($Group.owners -and $Group.owners.Count -gt 0)
+ $NoteProperties['primDomain'] = ($Group.mail -split '@' | Select-Object -Last 1)
+ $NoteProperties['teamsEnabled'] = ($Group.resourceProvisioningOptions -contains 'Team')
+ $NoteProperties['dynamicGroupBool'] = ($Group.groupTypes -contains 'DynamicMembership')
+ $NoteProperties['groupType'] = $groupType
+ $NoteProperties['calculatedGroupType'] = $calculatedGroupType
+
+ # Same as Add-Member -Force without its pipeline: half the allocation per row
+ $Props = $Group.PSObject.Properties
+ foreach ($Name in $NoteProperties.Keys) { $Props.Remove($Name); $Props.Add([psnoteproperty]::new($Name, $NoteProperties[$Name])) }
+ $Count.Value++
+ $PipelineWriter.Process($Group)
+ }
+
+ $Batch.Clear()
+ $MembersByGroupId = $null
+}
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecSAMCertificate.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecSAMCertificate.ps1
index c9f5a740c7..ad86bf7571 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecSAMCertificate.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecSAMCertificate.ps1
@@ -10,6 +10,8 @@ function Invoke-ExecSAMCertificate {
Entrypoint
.ROLE
CIPP.AppSettings.ReadWrite
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecServicePrincipals.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecServicePrincipals.ps1
index 190abef183..ea986d8876 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecServicePrincipals.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ExecServicePrincipals.ps1
@@ -4,6 +4,11 @@ function Invoke-ExecServicePrincipals {
Entrypoint,AnyTenant
.ROLE
Tenant.Application.ReadWrite
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}') | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id} | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ListDirectoryObjects.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ListDirectoryObjects.ps1
index f48c21e1a4..33c0275497 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ListDirectoryObjects.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Core/Invoke-ListDirectoryObjects.ps1
@@ -6,6 +6,8 @@ function Invoke-ListDirectoryObjects {
CIPP.Core.Read
.DESCRIPTION
Resolves Entra ID directory objects by their IDs using the directoryObjects/getByIds batch endpoint. Accepts an array of object IDs in the request body.
+ .NOTES
+ Permission: Graph | POST /directoryObjects/getByIds | Delegated | Directory.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/MCP/Invoke-PublicMcpRegister.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/MCP/Invoke-PublicMcpRegister.ps1
index 6183ccd9a1..5bc1d844f9 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/MCP/Invoke-PublicMcpRegister.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/MCP/Invoke-PublicMcpRegister.ps1
@@ -21,6 +21,9 @@ function Invoke-PublicMcpRegister {
Entrypoint,AnyTenant
.ROLE
Public
+ .NOTES
+ Permission: Graph | GET /applications | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecApiClient.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecApiClient.ps1
index 38ef0ce02d..71954e8869 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecApiClient.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecApiClient.ps1
@@ -4,6 +4,11 @@ function Invoke-ExecApiClient {
Entrypoint
.ROLE
CIPP.Extension.ReadWrite
+ .NOTES
+ Permission: Graph | GET /applications | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | DELETE /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecCustomData.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecCustomData.ps1
index 2c9ee1b524..460a973e33 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecCustomData.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecCustomData.ps1
@@ -4,6 +4,12 @@ function Invoke-ExecCustomData {
Entrypoint,AnyTenant
.ROLE
CIPP.AppSettings.ReadWrite
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}')/extensionProperties | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /applications(appId='{id}')/extensionProperties | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | DELETE /applications(appId='{id}')/extensionProperties/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /applications(appId='{id}')/extensionProperties/{id} | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All
+ Permission: Graph | DELETE /schemaExtensions/{id} | Application | Application.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecCustomRole.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecCustomRole.ps1
index 9f7e017f44..fd9caf879b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecCustomRole.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecCustomRole.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecCustomRole {
Entrypoint
.ROLE
CIPP.SuperAdmin.ReadWrite
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecExchangeRoleRepair.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecExchangeRoleRepair.ps1
index 27005800b4..1c379e339b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecExchangeRoleRepair.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecExchangeRoleRepair.ps1
@@ -4,6 +4,9 @@ function Invoke-ExecExchangeRoleRepair {
Entrypoint
.ROLE
CIPP.AppSettings.ReadWrite
+ .NOTES
+ Permission: Graph | POST /roleManagement/exchange/roleAssignments | Application | RoleManagement.ReadWrite.Exchange
+ Permission: Graph | GET /roleManagement/exchange/roleDefinitions | Delegated | RoleManagement.Read.Exchange | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecGDAPTrace.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecGDAPTrace.ps1
index 151835bc5a..ddb4e67e4a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecGDAPTrace.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Settings/Invoke-ExecGDAPTrace.ps1
@@ -39,6 +39,13 @@ function Invoke-ExecGDAPTrace {
Entrypoint
.ROLE
CIPP.AppSettings.Read
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id}/members | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/transitiveMemberOf | Application | User.Read.All | Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadBasic.All, GroupMember.Read.All, GroupMember.ReadBasic.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
@@ -214,104 +221,6 @@ function Invoke-ExecGDAPTrace {
Write-LogMessage -Headers $Headers -API $APIName -message "Could not get user group memberships: $($_.Exception.Message)" -sev 'Warning'
}
- # ============================================================================
- # HELPER FUNCTION: Find complete transitive path from user to target group
- # ============================================================================
- # This recursive function finds the complete path through nested groups,
- # handling any depth of nesting (User → Group A → Group B → ... → Target Group)
- #
- # Examples of paths it can trace:
- # - User → Target Group (direct membership)
- # - User → Group A → Target Group (2 levels)
- # - User → Group A → Group B → Target Group (3 levels)
- # - User → Group A → Group B → Group C → Target Group (4 levels)
- # - And so on, up to MaxDepth (10 levels)
- #
- # The function recursively traverses the group membership hierarchy by:
- # 1. Checking if user is directly in the target group
- # 2. If not, checking each group that is a member of the target group
- # 3. Recursively checking if the user is in those intermediate groups
- # 4. Building the complete path from user to target group
- # ============================================================================
- function Find-TransitiveGroupPath {
- param(
- [string]$UserId,
- [string]$TargetGroupId,
- [string]$TargetGroupName,
- [hashtable]$VisitedGroups = @{},
- [int]$MaxDepth = 10
- )
-
- # Prevent infinite loops and excessive depth
- if ($VisitedGroups.ContainsKey($TargetGroupId) -or $MaxDepth -le 0) {
- return $null
- }
- $VisitedGroups[$TargetGroupId] = $true
-
- try {
- # Check if user is directly in target group
- $DirectMembers = New-GraphGetRequest -Uri "https://graph.microsoft.com/beta/groups/$TargetGroupId/members?`$select=id,displayName,userPrincipalName" -tenantid $env:TenantID -NoAuthCheck $true -AsApp $true -ErrorAction SilentlyContinue
- if ($DirectMembers.value | Where-Object { $_.id -eq $UserId }) {
- # User is directly in target group
- return @(
- @{
- sequence = 0
- groupId = $TargetGroupId
- groupName = $TargetGroupName
- membershipType = 'direct'
- }
- )
- }
-
- # User is not directly in target group, check nested groups
- $GroupMembers = New-GraphGetRequest -Uri "https://graph.microsoft.com/beta/groups/$TargetGroupId/members?`$select=id,displayName,@odata.type" -tenantid $env:TenantID -NoAuthCheck $true -AsApp $true -ErrorAction SilentlyContinue
-
- if ($GroupMembers.value) {
- foreach ($Member in $GroupMembers.value) {
- # Only check groups, not users
- if ($Member.'@odata.type' -eq '#microsoft.graph.group') {
- $IntermediateGroupId = $Member.id
- $IntermediateGroupName = $Member.displayName
-
- # Recursively check if user is in this intermediate group
- $SubPath = Find-TransitiveGroupPath -UserId $UserId -TargetGroupId $IntermediateGroupId -TargetGroupName $IntermediateGroupName -VisitedGroups $VisitedGroups -MaxDepth ($MaxDepth - 1)
-
- if ($SubPath) {
- # Found a path! Build the complete chain
- $Path = @()
- $Sequence = 0
-
- # Add intermediate groups from sub-path
- foreach ($PathItem in $SubPath) {
- $Path += @{
- sequence = $Sequence++
- groupId = $PathItem.groupId
- groupName = $PathItem.groupName
- membershipType = $PathItem.membershipType # Preserve membership type from sub-path
- }
- }
-
- # Add target group at the end (intermediate group is nested in target)
- $Path += @{
- sequence = $Sequence
- groupId = $TargetGroupId
- groupName = $TargetGroupName
- membershipType = 'nested'
- }
-
- return $Path
- }
- }
- }
- }
- } catch {
- # If we can't check (permissions, API error), return null
- # Silently fail - errors are expected when checking group memberships
- }
-
- return $null
- }
-
# ============================================================================
# STEP 6: Collect all relationships, groups, and build role mapping
# ============================================================================
@@ -544,7 +453,7 @@ function Invoke-ExecGDAPTrace {
# nested, try to find the path through intermediate groups.
# ============================================================
$IsPathComplete = $true
- # Path will be determined by Find-TransitiveGroupPath function
+ # Path will be determined by Find-CIPPGDAPTransitiveGroupPath function
# Initialize empty - will be populated below
$MembershipPath = @()
@@ -558,7 +467,7 @@ function Invoke-ExecGDAPTrace {
# ============================================================
try {
# Use recursive function to find the complete path
- $FullPath = Find-TransitiveGroupPath -UserId $UserId -TargetGroupId $GroupId -TargetGroupName $Group.displayName
+ $FullPath = Find-CIPPGDAPTransitiveGroupPath -UserId $UserId -TargetGroupId $GroupId -TargetGroupName $Group.displayName
if ($FullPath) {
# Found the complete path - use it
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecAddTenant.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecAddTenant.ps1
index b29573905a..b6bb2c5021 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecAddTenant.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecAddTenant.ps1
@@ -4,6 +4,9 @@ function Invoke-ExecAddTenant {
Entrypoint,AnyTenant
.ROLE
CIPP.AppSettings.ReadWrite
+ .NOTES
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecListAppId.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecListAppId.ps1
index da952f45ea..a9117685d1 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecListAppId.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecListAppId.ps1
@@ -4,6 +4,11 @@ function Invoke-ExecListAppId {
Entrypoint
.ROLE
CIPP.Core.ReadWrite
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Delegated | Application.ReadWrite.All
+ Permission: Graph | GET /me | Delegated | User.Read | User.ReadWrite, User.ReadBasic.All, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecSSOSetup.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecSSOSetup.ps1
index c39e32caea..008c7dda94 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecSSOSetup.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/CIPP/Setup/Invoke-ExecSSOSetup.ps1
@@ -4,6 +4,9 @@ function Invoke-ExecSSOSetup {
Entrypoint,AnyTenant
.ROLE
CIPP.AppSettings.ReadWrite
+ .NOTES
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications/{id} | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
#>
[System.Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingConvertToSecureStringWithPlainText', '')]
[CmdletBinding()]
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Contacts/Invoke-ListContacts.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Contacts/Invoke-ListContacts.ps1
index 52acc4d314..9d9f1943d5 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Contacts/Invoke-ListContacts.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Contacts/Invoke-ListContacts.ps1
@@ -6,6 +6,8 @@ function Invoke-ListContacts {
Exchange.Contact.Read
.DESCRIPTION
Lists Exchange Online mail contacts for a tenant, with optional filtering by contact ID for detailed view.
+ .NOTES
+ Permission: Graph | GET /contacts | Delegated | OrgContact.Read.All | Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecHVEUser.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecHVEUser.ps1
index 2380108bb1..a1ecc425d8 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecHVEUser.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecHVEUser.ps1
@@ -4,6 +4,10 @@ function Invoke-ExecHVEUser {
Entrypoint
.ROLE
Exchange.Mailbox.ReadWrite
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/policies | Delegated | Policy.Read.All
+ Permission: Graph | PATCH /identity/conditionalAccess/policies/{id} | Delegated | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
+ Permission: Graph | GET /policies/identitySecurityDefaultsEnforcementPolicy | Delegated | Policy.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyCalPerms.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyCalPerms.ps1
index 9dd304612a..8fea54f83b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyCalPerms.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyCalPerms.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecModifyCalPerms {
Entrypoint
.ROLE
Exchange.Mailbox.ReadWrite
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyContactPerms.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyContactPerms.ps1
index 17fc7fae44..8d7f19576b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyContactPerms.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyContactPerms.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecModifyContactPerms {
Entrypoint
.ROLE
Exchange.Mailbox.ReadWrite
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyMBPerms.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyMBPerms.ps1
index 87496dccc0..8082954f08 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyMBPerms.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecModifyMBPerms.ps1
@@ -4,6 +4,9 @@ function Invoke-ExecModifyMBPerms {
Entrypoint
.ROLE
Exchange.Mailbox.ReadWrite
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Reports/Invoke-ListSharedMailboxAccountEnabled.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Reports/Invoke-ListSharedMailboxAccountEnabled.ps1
index 8ab041101e..41298d7b5d 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Reports/Invoke-ListSharedMailboxAccountEnabled.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Reports/Invoke-ListSharedMailboxAccountEnabled.ps1
@@ -7,6 +7,8 @@ function Invoke-ListSharedMailboxAccountEnabled {
.DESCRIPTION
Lists shared mailboxes that have direct sign-in enabled (account not disabled), which is a security concern.
Supports UseReportDB=true to read cached data from the reporting database (required for AllTenants).
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Resources/Invoke-ListRoomLists.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Resources/Invoke-ListRoomLists.ps1
index b9af8cf9d5..515e327d7f 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Resources/Invoke-ListRoomLists.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Resources/Invoke-ListRoomLists.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListRoomLists {
Exchange.Room.Read
.DESCRIPTION
Lists room list distribution groups and their members in Exchange Online.
+ .NOTES
+ Permission: Graph | POST /directoryObjects/getByIds | Delegated | Directory.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ExecMailQuarantineSubmit.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ExecMailQuarantineSubmit.ps1
index cc59181bbf..1fab5cfabd 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ExecMailQuarantineSubmit.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ExecMailQuarantineSubmit.ps1
@@ -6,6 +6,8 @@ function Invoke-ExecMailQuarantineSubmit {
Exchange.SpamFilter.ReadWrite
.DESCRIPTION
Submits a quarantined email message to Microsoft for review (threat submission) via the Graph API.
+ .NOTES
+ Permission: Graph | POST /security/threatSubmission/emailThreats | Application | ThreatSubmission.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListMailQuarantineMessageDetails.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListMailQuarantineMessageDetails.ps1
index 44a41c5ec1..c6c5e4fda4 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListMailQuarantineMessageDetails.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListMailQuarantineMessageDetails.ps1
@@ -9,6 +9,8 @@ function Invoke-ListMailQuarantineMessageDetails {
for a quarantined message via the Graph beta security/collaboration/analyzedEmails API.
Falls back to parsing the message headers (Authentication-Results and X-Forefront-Antispam-Report)
for tenants without Defender for Office 365 Plan 2.
+ .NOTES
+ Permission: Graph | GET /security/collaboration/analyzedEmails | Application | SecurityAnalyzedMessage.Read.All | SecurityAnalyzedMessage.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListUserReportedMessage.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListUserReportedMessage.ps1
index 1a2bfce141..771a77b63c 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListUserReportedMessage.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListUserReportedMessage.ps1
@@ -6,6 +6,9 @@ function Invoke-ListUserReportedMessage {
Exchange.SpamFilter.Read
.DESCRIPTION
Retrieves the raw EML content of a user reported message by its Internet Message ID. Tries the quarantine store first (Export-QuarantineMessage), then falls back to reading the message from the recipient's or reporter's mailbox via Graph.
+ .NOTES
+ Permission: Graph | GET /users/{id}/messages | Delegated | Mail.ReadBasic | Mail.ReadWrite, Mail.Read
+ Permission: Graph | GET /users/{id}/messages/{id}/$value | Delegated | Mail.Read
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListUserReportedMessages.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListUserReportedMessages.ps1
index 673bd9bcf8..8459a9110a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListUserReportedMessages.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Spamfilter/Invoke-ListUserReportedMessages.ps1
@@ -7,6 +7,8 @@ function Invoke-ListUserReportedMessages {
.DESCRIPTION
Lists user reported messages (Outlook Report button) for a tenant. Source=AuditLog (default) reads the unified
audit log two weeks per page, Source=Submissions reads the Defender Submissions list from Graph.
+ .NOTES
+ Permission: Graph | GET /security/threatSubmission/emailThreats | Application | ThreatSubmission.Read.All | ThreatSubmission.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Tools/Invoke-ExecMailTest.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Tools/Invoke-ExecMailTest.ps1
index 44817caf9c..05c66ba1bf 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Tools/Invoke-ExecMailTest.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Tools/Invoke-ExecMailTest.ps1
@@ -6,6 +6,9 @@ Function Invoke-ExecMailTest {
CIPP.Core.Read
.DESCRIPTION
Checks the mailbox configuration behind CIPP's message trace tooling. Action=CheckConfig reports whether the CIPP-SAM app holds the delegated Mail.Read permission and which mailbox the current token resolves to.
+ .NOTES
+ Permission: Graph | GET /me | Delegated | User.Read | User.ReadWrite, User.ReadBasic.All, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /me/mailFolders/Inbox/messages | Delegated | Mail.ReadBasic | Mail.ReadWrite, Mail.Read
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Tools/Invoke-ListMessageTrace.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Tools/Invoke-ListMessageTrace.ps1
index f4e0607f86..6ecf76934a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Tools/Invoke-ListMessageTrace.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Email-Exchange/Tools/Invoke-ListMessageTrace.ps1
@@ -12,6 +12,11 @@ function Invoke-ListMessageTrace {
(8bd644d1-64a1-4d4b-ae52-2e0cbf64e373) in the tenant; it is provisioned on demand. Until
that SP activates (which can take hours), or where the Graph permission is not yet
consented, the request falls back to Get-MessageTraceV2 so results are returned immediately.
+ .NOTES
+ Permission: Graph | GET /admin/exchange/tracing/messageTraces | Application | ExchangeMessageTrace.Read.All
+ Permission: Graph | GET /admin/exchange/tracing/messageTraces/{id}/getDetailsByRecipient(recipientAddress='{id}') | Application | ExchangeMessageTrace.Read.All
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='8bd644d1-64a1-4d4b-ae52-2e0cbf64e373') | Delegated | Application.Read.All | Directory.Read.All, Application.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-AddEdgeApp.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-AddEdgeApp.ps1
index fc4cac3df5..211cee317b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-AddEdgeApp.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-AddEdgeApp.ps1
@@ -4,6 +4,9 @@ function Invoke-AddEdgeApp {
Entrypoint,AnyTenant
.ROLE
Endpoint.Application.ReadWrite
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | POST /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-AddOfficeApp.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-AddOfficeApp.ps1
index 08cfe14f6a..c9c938dcb1 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-AddOfficeApp.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-AddOfficeApp.ps1
@@ -4,6 +4,9 @@ function Invoke-AddOfficeApp {
Entrypoint,AnyTenant
.ROLE
Endpoint.Application.ReadWrite
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | POST /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ExecAssignApp.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ExecAssignApp.ps1
index dac3e6bba0..347e534711 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ExecAssignApp.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ExecAssignApp.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecAssignApp {
Entrypoint
.ROLE
Endpoint.Application.ReadWrite
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps/{id} | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ExecSyncVPP.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ExecSyncVPP.ps1
index 91a3eab64f..8be0e78240 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ExecSyncVPP.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ExecSyncVPP.ps1
@@ -4,6 +4,9 @@ function Invoke-ExecSyncVPP {
Entrypoint
.ROLE
Endpoint.Application.ReadWrite
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/vppTokens | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementApps.ReadWrite.All, DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | POST /deviceAppManagement/vppTokens/{id}/syncLicenses | Delegated | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListApps.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListApps.ps1
index 32d75fdc50..f5da389dbc 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListApps.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListApps.ps1
@@ -6,6 +6,9 @@ function Invoke-ListApps {
Endpoint.Application.Read
.DESCRIPTION
Lists Intune managed applications for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListDetectedAppDevices.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListDetectedAppDevices.ps1
index 7a030d60b2..8ad5dc032d 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListDetectedAppDevices.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListDetectedAppDevices.ps1
@@ -6,6 +6,8 @@ function Invoke-ListDetectedAppDevices {
Identity.Device.Read
.DESCRIPTION
Lists Intune-managed devices that have a specific detected application installed, identified by App ID.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/detectedApps/{id}/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListDetectedApps.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListDetectedApps.ps1
index 6d85c56ea4..24252322ec 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListDetectedApps.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-ListDetectedApps.ps1
@@ -6,6 +6,10 @@ function Invoke-ListDetectedApps {
Identity.Device.Read
.DESCRIPTION
Lists applications detected on Intune-managed devices in a tenant, optionally including device associations.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/detectedApps | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/detectedApps/{id}/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/managedDevices/{id}/detectedApps | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-RemoveApp.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-RemoveApp.ps1
index 16f5f44441..1d79d1f4d9 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-RemoveApp.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Applications/Invoke-RemoveApp.ps1
@@ -4,6 +4,8 @@ Function Invoke-RemoveApp {
Entrypoint
.ROLE
Endpoint.Application.ReadWrite
+ .NOTES
+ Permission: Graph | DELETE /deviceAppManagement/mobileApps/{id} | Delegated | DeviceManagementApps.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-AddCorporateDeviceIdentifier.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-AddCorporateDeviceIdentifier.ps1
index 54f7320b99..9e7b093a60 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-AddCorporateDeviceIdentifier.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-AddCorporateDeviceIdentifier.ps1
@@ -6,6 +6,8 @@ function Invoke-AddCorporateDeviceIdentifier {
Endpoint.Autopilot.ReadWrite
.DESCRIPTION
Uploads corporate device identifiers (manufacturer, model and serial number) for Windows Autopilot device preparation via the Graph importedDeviceIdentities API
+ .NOTES
+ Permission: Graph | POST /deviceManagement/importedDeviceIdentities/importDeviceIdentityList | Delegated | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecAssignAPDevice.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecAssignAPDevice.ps1
index 8910572b56..c7799c5f2a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecAssignAPDevice.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecAssignAPDevice.ps1
@@ -4,6 +4,8 @@ Function Invoke-ExecAssignAPDevice {
Entrypoint
.ROLE
Endpoint.Autopilot.ReadWrite
+ .NOTES
+ Permission: Graph | POST /deviceManagement/windowsAutopilotDeviceIdentities/{id}/UpdateDeviceProperties | Delegated | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecAssignAutopilotProfile.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecAssignAutopilotProfile.ps1
index 743cb752d3..f792ee9d25 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecAssignAutopilotProfile.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecAssignAutopilotProfile.ps1
@@ -4,6 +4,10 @@ function Invoke-ExecAssignAutopilotProfile {
Entrypoint
.ROLE
Endpoint.Autopilot.ReadWrite
+ .NOTES
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecRenameAPDevice.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecRenameAPDevice.ps1
index 8666329016..c25cebfbef 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecRenameAPDevice.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecRenameAPDevice.ps1
@@ -4,6 +4,8 @@ Function Invoke-ExecRenameAPDevice {
Entrypoint
.ROLE
Endpoint.Autopilot.ReadWrite
+ .NOTES
+ Permission: Graph | POST /deviceManagement/windowsAutopilotDeviceIdentities/{id}/UpdateDeviceProperties | Delegated | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecSetAPDeviceGroupTag.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecSetAPDeviceGroupTag.ps1
index bbc95c5f2d..4f7fc5b81f 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecSetAPDeviceGroupTag.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecSetAPDeviceGroupTag.ps1
@@ -4,6 +4,8 @@ Function Invoke-ExecSetAPDeviceGroupTag {
Entrypoint
.ROLE
Endpoint.Autopilot.ReadWrite
+ .NOTES
+ Permission: Graph | POST /deviceManagement/windowsAutopilotDeviceIdentities/{id}/UpdateDeviceProperties | Delegated | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecSyncAPDevices.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecSyncAPDevices.ps1
index 2a1e8e7ccb..53510ea5e1 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecSyncAPDevices.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ExecSyncAPDevices.ps1
@@ -4,6 +4,8 @@ Function Invoke-ExecSyncAPDevices {
Entrypoint
.ROLE
Endpoint.Autopilot.ReadWrite
+ .NOTES
+ Permission: Graph | POST /deviceManagement/windowsAutopilotSettings/sync | Delegated | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ListAPDevices.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ListAPDevices.ps1
index e906e41f22..66b0d7ffac 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ListAPDevices.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ListAPDevices.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListAPDevices {
Endpoint.Autopilot.Read
.DESCRIPTION
Lists Windows Autopilot device identities registered in a tenant.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeviceIdentities | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ListAutopilotconfig.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ListAutopilotconfig.ps1
index 0b4d0a8305..6ccb6b91ee 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ListAutopilotconfig.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-ListAutopilotconfig.ps1
@@ -6,6 +6,10 @@ function Invoke-ListAutopilotconfig {
Endpoint.Autopilot.Read
.DESCRIPTION
Lists Windows Autopilot deployment profiles, Enrollment Status Page configurations, or Windows Hello for Business policies for a tenant.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/deviceEnrollmentConfigurations | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeploymentProfiles | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-RemoveAPDevice.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-RemoveAPDevice.ps1
index 466801ea9e..2fcb47e07a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-RemoveAPDevice.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Autopilot/Invoke-RemoveAPDevice.ps1
@@ -4,6 +4,9 @@ Function Invoke-RemoveAPDevice {
Entrypoint
.ROLE
Endpoint.Autopilot.ReadWrite
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/windowsAutopilotDeviceIdentities/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/windowsAutopilotSettings/sync | Delegated | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-AddIntuneReusableSetting.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-AddIntuneReusableSetting.ps1
index e13b0d5039..d67fa47e9f 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-AddIntuneReusableSetting.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-AddIntuneReusableSetting.ps1
@@ -4,6 +4,9 @@ function Invoke-AddIntuneReusableSetting {
Entrypoint
.ROLE
Endpoint.MEM.ReadWrite
+ .NOTES
+ Permission: Graph | GET /deviceManagement/reusablePolicySettings | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/reusablePolicySettings | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-EditAssignmentFilter.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-EditAssignmentFilter.ps1
index 29a488aede..3b3d8ce3fc 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-EditAssignmentFilter.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-EditAssignmentFilter.ps1
@@ -4,6 +4,8 @@ function Invoke-EditAssignmentFilter {
Entrypoint
.ROLE
Endpoint.MEM.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /deviceManagement/assignmentFilters/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-EditPolicy.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-EditPolicy.ps1
index f13c30a51e..0cbe8e82b1 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-EditPolicy.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-EditPolicy.ps1
@@ -4,6 +4,9 @@ Function Invoke-EditPolicy {
Entrypoint
.ROLE
Endpoint.MEM.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /deviceManagement/groupPolicyConfigurations/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/groupPolicyConfigurations/{id}/assign | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecAssignmentFilter.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecAssignmentFilter.ps1
index 6ed0f7eddc..eaabfff65a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecAssignmentFilter.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecAssignmentFilter.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecAssignmentFilter {
Entrypoint
.ROLE
Endpoint.MEM.ReadWrite
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/assignmentFilters/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecDeviceAction.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecDeviceAction.ps1
index bad51eddf0..b3c7f4e239 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecDeviceAction.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecDeviceAction.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecDeviceAction {
Entrypoint
.ROLE
Endpoint.MEM.ReadWrite
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices/{id} | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecRemoveEnrollmentProfile.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecRemoveEnrollmentProfile.ps1
index 6d47cb0405..deb01fd83c 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecRemoveEnrollmentProfile.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecRemoveEnrollmentProfile.ps1
@@ -6,6 +6,9 @@ function Invoke-ExecRemoveEnrollmentProfile {
Endpoint.MEM.ReadWrite
.DESCRIPTION
Deletes an Apple ADE or Android Enterprise enrollment profile.
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/androidDeviceOwnerEnrollmentProfiles/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/depOnboardingSettings/{id}/enrollmentProfiles/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecSyncDEP.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecSyncDEP.ps1
index 73e4d46ade..44bb44f091 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecSyncDEP.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ExecSyncDEP.ps1
@@ -6,6 +6,9 @@ function Invoke-ExecSyncDEP {
Endpoint.MEM.ReadWrite
.DESCRIPTION
Syncs devices from Apple Business Manager to Intune
+ .NOTES
+ Permission: Graph | GET /deviceManagement/depOnboardingSettings | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/depOnboardingSettings/{id}/syncWithAppleDeviceEnrollmentProgram | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAndroidEnrollmentProfiles.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAndroidEnrollmentProfiles.ps1
index cd1010b076..aaa3af17fd 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAndroidEnrollmentProfiles.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAndroidEnrollmentProfiles.ps1
@@ -6,6 +6,9 @@ function Invoke-ListAndroidEnrollmentProfiles {
Endpoint.Autopilot.Read
.DESCRIPTION
Lists Android Enterprise enrollment profiles and hydrates token fields when Graph omits them from the list response.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/androidDeviceOwnerEnrollmentProfiles | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/androidDeviceOwnerEnrollmentProfiles/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAppProtectionPolicies.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAppProtectionPolicies.ps1
index 7e60112458..e48ae7517d 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAppProtectionPolicies.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAppProtectionPolicies.ps1
@@ -6,6 +6,10 @@ function Invoke-ListAppProtectionPolicies {
Endpoint.MEM.Read
.DESCRIPTION
Lists Intune app protection policies for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/managedAppPolicies | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceAppManagement/mobileAppConfigurations | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAppleEnrollmentProfiles.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAppleEnrollmentProfiles.ps1
index 92ee7324c1..ea469ed303 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAppleEnrollmentProfiles.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAppleEnrollmentProfiles.ps1
@@ -6,6 +6,9 @@ function Invoke-ListAppleEnrollmentProfiles {
Endpoint.Autopilot.Read
.DESCRIPTION
Lists Apple Automated Device Enrollment tokens and enrollment profiles.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/depOnboardingSettings | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/depOnboardingSettings/{id}/enrollmentProfiles | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAssignmentFilters.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAssignmentFilters.ps1
index 21c5656aa6..a32495e073 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAssignmentFilters.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListAssignmentFilters.ps1
@@ -6,6 +6,9 @@ function Invoke-ListAssignmentFilters {
Endpoint.MEM.Read
.DESCRIPTION
Lists Intune assignment filters for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/assignmentFilters | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/assignmentFilters/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListCompliancePolicies.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListCompliancePolicies.ps1
index 98e30a522c..52c007ab01 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListCompliancePolicies.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListCompliancePolicies.ps1
@@ -6,6 +6,9 @@ function Invoke-ListCompliancePolicies {
Endpoint.MEM.Read
.DESCRIPTION
Lists Intune device compliance policies for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/deviceCompliancePolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListDefenderState.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListDefenderState.ps1
index da1bdea1cb..91c018784c 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListDefenderState.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListDefenderState.ps1
@@ -6,6 +6,9 @@ Function Invoke-ListDefenderState {
Endpoint.MEM.Read
.DESCRIPTION
Lists Microsoft Defender antivirus state and detected threats for Intune-managed devices in a tenant.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/managedDevices/{id} | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListDeviceDetails.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListDeviceDetails.ps1
index 6b5092aebd..833d85726e 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListDeviceDetails.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListDeviceDetails.ps1
@@ -6,6 +6,10 @@ Function Invoke-ListDeviceDetails {
Identity.Device.Read
.DESCRIPTION
Retrieves detailed information about a specific Intune-managed device by ID, name, or serial number.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/managedDevices/{id} | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | GET /devices(deviceID='{id}')/memberOf | Delegated | Device.Read.All | Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneApprovalRequests.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneApprovalRequests.ps1
index 95e47ff1bb..8d67d6500a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneApprovalRequests.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneApprovalRequests.ps1
@@ -10,6 +10,8 @@ function Invoke-ListIntuneApprovalRequests {
Lists the multi-admin approval (MAA) requests raised in a tenant. When an access policy protects
a resource type, Intune defers the change and records it here until a second administrator
approves it, so this is where a change made from CIPP that appears to have done nothing ends up.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/operationApprovalRequests | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementRBAC.Read.All, DeviceManagementRBAC.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneIntents.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneIntents.ps1
index 661e8d5fc9..0f2f916c27 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneIntents.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneIntents.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListIntuneIntents {
Endpoint.MEM.Read
.DESCRIPTION
Lists Intune security baseline and endpoint protection intents (legacy template-based policies) with their settings and categories.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/Intents | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntunePolicy.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntunePolicy.ps1
index cfb4cca984..3a26b60ac1 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntunePolicy.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntunePolicy.ps1
@@ -6,6 +6,15 @@ function Invoke-ListIntunePolicy {
Endpoint.MEM.Read
.DESCRIPTION
Lists Intune device configuration policies for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicies/{id}/settings/{id}/settingDefinitions | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicyTemplates/{id}/settingTemplates | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyConfigurations/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyConfigurations/{id}/definitionValues/{id}/presentationValues | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/groupPolicyDefinitions/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneScript.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneScript.ps1
index 8f55a5b2a0..394e1bef70 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneScript.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-ListIntuneScript.ps1
@@ -6,6 +6,12 @@ function Invoke-ListIntuneScript {
Endpoint.MEM.Read
.DESCRIPTION
Lists Intune device management scripts (Windows, macOS, Linux, and remediation scripts) for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceHealthScripts | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementScripts.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceManagementScripts | Delegated | DeviceManagementScripts.Read.All | DeviceManagementScripts.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceShellScripts | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementScripts.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-RemoveIntuneReusableSetting.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-RemoveIntuneReusableSetting.ps1
index 03b42a4c6c..a4af410738 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-RemoveIntuneReusableSetting.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/MEM/Invoke-RemoveIntuneReusableSetting.ps1
@@ -4,6 +4,8 @@ function Invoke-RemoveIntuneReusableSetting {
Entrypoint
.ROLE
Endpoint.MEM.ReadWrite
+ .NOTES
+ Permission: Graph | DELETE /deviceManagement/reusablePolicySettings/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Reports/Invoke-ListAllTenantDeviceCompliance.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Reports/Invoke-ListAllTenantDeviceCompliance.ps1
index 976ebc467d..dfa935dae3 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Reports/Invoke-ListAllTenantDeviceCompliance.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Reports/Invoke-ListAllTenantDeviceCompliance.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListAllTenantDeviceCompliance {
Tenant.DeviceCompliance.Read
.DESCRIPTION
Lists device compliance summary across all managed tenants using the Lighthouse managedDeviceCompliances API, or for a single tenant via Intune.
+ .NOTES
+ Permission: Graph | GET /tenantRelationships/managedTenants/managedDeviceCompliances | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Reports/Invoke-ListDevices.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Reports/Invoke-ListDevices.ps1
index de41705dcf..bac20aa776 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Reports/Invoke-ListDevices.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Endpoint/Reports/Invoke-ListDevices.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListDevices {
Endpoint.Device.Read
.DESCRIPTION
Lists Intune-managed devices for a tenant, including device compliance and configuration status.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-AddGroupTeam.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-AddGroupTeam.ps1
index f1c93f4d54..ac7e6cab41 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-AddGroupTeam.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-AddGroupTeam.ps1
@@ -4,6 +4,8 @@ function Invoke-AddGroupTeam {
Entrypoint
.ROLE
Identity.Group.ReadWrite
+ .NOTES
+ Permission: Graph | PUT /groups/{id}/team | Application | Group.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-EditGroup.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-EditGroup.ps1
index eaf9675db2..7da2706c08 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-EditGroup.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-EditGroup.ps1
@@ -4,6 +4,15 @@ function Invoke-EditGroup {
Entrypoint
.ROLE
Identity.Group.ReadWrite
+ .NOTES
+ Permission: Graph | GET /devices(deviceId='{id}') | Delegated | Device.Read.All | Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /groups/{id} | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group-XTenantIdentitySync.Read.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | PATCH /groups/{id} | Application | Group.ManageProtection.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | PATCH /groups/{id} | Delegated | Group.ManageProtection.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | DELETE /groups/{id}/members/{id}/$ref | Application | GroupMember.ReadWrite.All | Directory.ReadWrite.All, Group.ReadWrite.All
+ Permission: Graph | DELETE /groups/{id}/owners/{id}/$ref | Application | Group.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | POST /groups/{id}/owners/$ref | Application | Group.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-ListGroups.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-ListGroups.ps1
index 3b1a984f10..a89426d646 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-ListGroups.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Groups/Invoke-ListGroups.ps1
@@ -6,6 +6,12 @@ function Invoke-ListGroups {
Identity.Group.Read
.DESCRIPTION
Lists Entra ID groups for a tenant, including group members and owners. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants. When manualPagination is also set on a cached read, one page is returned per request as { Results, Metadata } with a continuation token in Metadata.nextLink.
+ .NOTES
+ Permission: Graph | POST /directoryObjects/getByIds | Application | Directory.Read.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id} | Application | Group.Read.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group-XTenantIdentitySync.Read.All, Group.ManageProtection.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id}/members | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /groups/{id}/owners | Application | Group.Read.All | Group.ReadWrite.All, Directory.Read.All, GroupMember.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Roles/Invoke-ListPIMRoles.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Roles/Invoke-ListPIMRoles.ps1
index d2f980641f..0a46155e9b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Roles/Invoke-ListPIMRoles.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Roles/Invoke-ListPIMRoles.ps1
@@ -8,6 +8,8 @@ function Invoke-ListPIMRoles {
List Entra directory roles grouped with their PIM assignment breakdown.
.DESCRIPTION
Returns one row per role (per tenant when AllTenants is selected) with the role's definition details, how many principals hold it permanently, eligibly or with a time-bound active assignment, the role's PIM policy summary, a slim Members list and the full assignment rows for drill-in. Roles nobody holds are included for a single tenant so the result is also the role catalogue. Supports UseReportDB=true to read a single tenant from the reporting database cache (sync with ExecCIPPDBCache Name=RolesAndAssignments); AllTenants always reads the cache. Powers the Roles & PIM page; ListRoles keeps its original per-definition shape and ListRoleAssignments stays one flat row per assignment.
+ .NOTES
+ Permission: Graph | GET /directoryRoles | Delegated | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Roles/Invoke-ListRoles.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Roles/Invoke-ListRoles.ps1
index 18de308681..eca5142c91 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Roles/Invoke-ListRoles.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Roles/Invoke-ListRoles.ps1
@@ -6,6 +6,11 @@ function Invoke-ListRoles {
Identity.Role.Read
.DESCRIPTION
Lists a tenant's Entra ID role definitions along with the active members of each, via the unified RBAC API. Unlike the legacy /directoryRoles endpoint this includes every built-in and custom role definition, even ones with no assignments.
+ .NOTES
+ Permission: Graph | POST /directoryObjects/getByIds | Delegated | Directory.Read.All
+ Permission: Graph | GET /directoryRoles | Delegated | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-AddGuest.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-AddGuest.ps1
index dc329031da..ff8e2de86e 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-AddGuest.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-AddGuest.ps1
@@ -4,6 +4,8 @@ function Invoke-AddGuest {
Entrypoint
.ROLE
Identity.User.ReadWrite
+ .NOTES
+ Permission: Graph | POST /invitations | Application | User.Invite.All | Directory.ReadWrite.All, User.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-AddUserBulk.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-AddUserBulk.ps1
index 19969aa58c..c155a7f1bd 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-AddUserBulk.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-AddUserBulk.ps1
@@ -4,6 +4,8 @@ function Invoke-AddUserBulk {
Entrypoint
.ROLE
Identity.User.ReadWrite
+ .NOTES
+ Permission: Graph | POST /users | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBECBulkCheck.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBECBulkCheck.ps1
index eaf3c6be94..d5cd4afc06 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBECBulkCheck.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBECBulkCheck.ps1
@@ -8,6 +8,8 @@ function Invoke-ExecBECBulkCheck {
Queues Business Email Compromise investigations for many users at once.
.DESCRIPTION
Queues one BEC investigation per user, each its own sequential orchestration, with a queue entry for progress. Accepts either an array of { UserIds, tenantFilter } items (the Users table bulk action) or one object with UserIds[]. Each run gets its own case id; results appear on the BEC Reports page and each user's Compromise Remediation tab.
+ .NOTES
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBECRemediate.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBECRemediate.ps1
index 15653597b7..027d80abb8 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBECRemediate.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBECRemediate.ps1
@@ -8,6 +8,8 @@ function Invoke-ExecBECRemediate {
Runs selectable Business Email Compromise containment for a user.
.DESCRIPTION
Runs the selected containment actions (see ListBECRemediationActions) for a user. With no Actions the default set runs (the DefaultSelected actions, configurable instance-wide from CIPP settings). Actions marked Critical require Confirmation to equal the user's UPN. With Async the request is validated, queued as a scheduled task that runs straight away, and answered with a DeploymentId whose per-action progress ListOffboardingProgress returns; without it the actions run inline and their results are returned. Pass CaseId to resolve default targets (flagged consents, delegations, rules, devices) from that BEC run and to record the outcome on it; Parameters carries explicit per-action targets (MfaMethodIds, GrantIds, AppRoleAssignmentIds, ServicePrincipalIds, RuleIds, Delegations, TransportRuleIds, AddInIds, Protocols, MobileDeviceIds, RegisteredDeviceIds, CAPolicy).
+ .NOTES
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBulkLicense.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBulkLicense.ps1
index 346eb443b6..87260917e5 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBulkLicense.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecBulkLicense.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecBulkLicense {
Entrypoint
.ROLE
Identity.User.ReadWrite
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param (
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecDismissRiskyUser.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecDismissRiskyUser.ps1
index 2dee3de818..df72409919 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecDismissRiskyUser.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecDismissRiskyUser.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecDismissRiskyUser {
Entrypoint
.ROLE
Identity.User.ReadWrite
+ .NOTES
+ Permission: Graph | POST /riskyUsers/dismiss | Delegated | IdentityRiskyUser.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecJITAdmin.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecJITAdmin.ps1
index 0b5d465cff..12c0fcd413 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecJITAdmin.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecJITAdmin.ps1
@@ -7,6 +7,10 @@ function Invoke-ExecJITAdmin {
.DESCRIPTION
Just-in-time admin management API endpoint. This function can create users, add roles, remove roles, delete, or disable a user.
+ .NOTES
+ Permission: Graph | GET /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/TemporaryAccessPass | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /users/{id}@{id}/authentication/temporaryAccessPassMethods | Delegated | UserAuthenticationMethod.ReadWrite.All | UserAuthenticationMethod.Read, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite, UserAuthMethod-TAP.Read.All, UserAuthMethod-TAP.ReadWrite, UserAuthMethod-TAP.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecPasswordNeverExpires.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecPasswordNeverExpires.ps1
index fce05e6224..9af259fc7f 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecPasswordNeverExpires.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecPasswordNeverExpires.ps1
@@ -5,6 +5,8 @@ function Invoke-ExecPasswordNeverExpires {
.ROLE
Identity.User.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
#>
Param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecRemoveOneDriveShortCut.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecRemoveOneDriveShortCut.ps1
index 015174bc2c..53b85c9a0f 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecRemoveOneDriveShortCut.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecRemoveOneDriveShortCut.ps1
@@ -4,6 +4,8 @@ Function Invoke-ExecRemoveOneDriveShortCut {
Entrypoint
.ROLE
Identity.User.ReadWrite
+ .NOTES
+ Permission: Graph | DELETE /users/{id}/drive/items/{id} | Application | Files.ReadWrite.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecReprocessUserLicenses.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecReprocessUserLicenses.ps1
index 3aaf3829e0..fb5210cef4 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecReprocessUserLicenses.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecReprocessUserLicenses.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecReprocessUserLicenses {
Entrypoint
.ROLE
Identity.User.ReadWrite
+ .NOTES
+ Permission: Graph | POST /users/{id}/reprocessLicenseAssignment | Application | User.ReadWrite.All | AgentIdUser.ReadWrite.All, AgentIdUser.ReadWrite.IdentityParentedBy, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecRestoreDeleted.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecRestoreDeleted.ps1
index 17636856ba..d7265c86b7 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecRestoreDeleted.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecRestoreDeleted.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecRestoreDeleted {
Entrypoint
.ROLE
Tenant.Directory.ReadWrite
+ .NOTES
+ Permission: Graph | POST /directory/deletedItems/{id}/restore | Delegated | User.DeleteRestore.All | User.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSendPush.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSendPush.ps1
index 7368fc455c..0e134fbe22 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSendPush.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSendPush.ps1
@@ -6,6 +6,8 @@ function Invoke-ExecSendPush {
Identity.User.Read
.DESCRIPTION
Sends a test MFA push notification to a user's authenticator app and reports whether it was approved, or - when an OTP code is supplied - verifies that typed code without sending a push. Used to confirm a user's MFA registration works. The push path causes a real prompt on the user's device.
+ .NOTES
+ Permission: Graph | GET /users/{id}/authentication/methods | Delegated | UserAuthenticationMethod.Read.All | UserAuthenticationMethod.ReadWrite, UserAuthenticationMethod.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSetDefaultMFAMethod.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSetDefaultMFAMethod.ps1
index 3f934c394b..ed1ad8acec 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSetDefaultMFAMethod.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSetDefaultMFAMethod.ps1
@@ -9,6 +9,8 @@ function Invoke-ExecSetDefaultMFAMethod {
.DESCRIPTION
Sets the default second factor a user is prompted with, by patching signInPreferences.
Note this is ignored at sign-in while system-preferred MFA is enabled for the user.
+ .NOTES
+ Permission: Graph | PATCH /users/{id}/authentication/signInPreferences | Application | UserAuthenticationMethod.ReadWrite | UserAuthenticationMethod.ReadWrite.All
#>
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSetUserPhoto.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSetUserPhoto.ps1
index bb62ec5a15..e96da69f16 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSetUserPhoto.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ExecSetUserPhoto.ps1
@@ -4,6 +4,9 @@ function Invoke-ExecSetUserPhoto {
Entrypoint
.ROLE
Identity.User.ReadWrite
+ .NOTES
+ Permission: Graph | DELETE /users/{id}/photo/$value | Delegated | User.ReadWrite | Group.ReadWrite.All
+ Permission: Graph | PUT /users/{id}/photo/$value | Delegated | User.ReadWrite | User.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListGuestUsers.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListGuestUsers.ps1
index 981052311f..28f406eb1d 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListGuestUsers.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListGuestUsers.ps1
@@ -8,6 +8,8 @@ function Invoke-ListGuestUsers {
List guest users with lifecycle status
.DESCRIPTION
Lists all guest accounts in a tenant with a computed lifecycle status (Active, Pending Acceptance, Stale, Never Signed In or Disabled) based on the invitation state and sign-in activity. Supports UseReportDB=true to serve cached data from the reporting database; AllTenants always uses the cache. When manualPagination is set on a cached read, one page is returned per request as { Results, Metadata } with a continuation token in Metadata.nextLink.
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListJITAdmin.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListJITAdmin.ps1
index 06830b6c18..7ee514054c 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListJITAdmin.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListJITAdmin.ps1
@@ -7,6 +7,10 @@
.DESCRIPTION
List Just-in-time admin users for a tenant or all tenants.
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/memberOf | Delegated | User.Read | Directory.Read.All, Directory.ReadWrite.All, Group.ReadBasic.All, GroupMember.Read.All, GroupMember.ReadBasic.All
+ Permission: Graph | GET /users/{id}/memberOf/microsoft.graph.directoryRole | Delegated | User.Read | Directory.Read.All, Directory.ReadWrite.All, Group.ReadBasic.All, GroupMember.Read.All, GroupMember.ReadBasic.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserCounts.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserCounts.ps1
index b897bf97e8..d030ef91d5 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserCounts.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserCounts.ps1
@@ -6,6 +6,9 @@ Function Invoke-ListUserCounts {
Identity.User.Read
.DESCRIPTION
Returns summary counts of total users, licensed users, and global administrators for a tenant.
+ .NOTES
+ Permission: Graph | GET /directoryRoles/roleTemplateId=62e90394-69f5-4237-9190-012177145e10/members/$count | Delegated | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/$count | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserDevices.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserDevices.ps1
index 19b218c198..2eb31bda54 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserDevices.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserDevices.ps1
@@ -6,6 +6,9 @@ Function Invoke-ListUserDevices {
Identity.User.Read
.DESCRIPTION
Lists Intune-managed devices registered to a specific user, including compliance status and endpoint protection details.
+ .NOTES
+ Permission: Graph | GET /users/{id}/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | GET /users/{id}/ownedDevices | Delegated | User.Read | Directory.Read.All, Directory.ReadWrite.All, User.Read.All, User.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserGroups.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserGroups.ps1
index da79a08e6d..4112031f73 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserGroups.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserGroups.ps1
@@ -6,6 +6,8 @@ function Invoke-ListUserGroups {
Identity.User.Read
.DESCRIPTION
Lists Entra ID group memberships for a specific user.
+ .NOTES
+ Permission: Graph | GET /users/{id}/memberOf/$/microsoft.graph.group | Delegated | User.Read
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserMailboxDetails.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserMailboxDetails.ps1
index 3ba8feec79..b4422195c6 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserMailboxDetails.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserMailboxDetails.ps1
@@ -6,6 +6,9 @@ function Invoke-ListUserMailboxDetails {
Exchange.Mailbox.Read
.DESCRIPTION
Retrieves detailed Exchange Online mailbox properties for a specific user, including quotas, archive status, and protocols.
+ .NOTES
+ Permission: Graph | GET /contacts | Delegated | OrgContact.Read.All | Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserOneDriveShortcuts.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserOneDriveShortcuts.ps1
index 4dce26840f..e6ad854d18 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserOneDriveShortcuts.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserOneDriveShortcuts.ps1
@@ -6,6 +6,10 @@ Function Invoke-ListUserOneDriveShortcuts {
Identity.User.Read
.DESCRIPTION
Lists OneDrive remoteItem shortcuts for a user from the drive root and the Shortcuts folder.
+ .NOTES
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/drive/root/children | Application | Files.Read.All | Files.ReadWrite.All
+ Permission: Graph | GET /users/{id}/drive/special/shortcuts/children | Application | Files.Read.All | Files.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserPhoto.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserPhoto.ps1
index 99f16e1fc9..3596916cf4 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserPhoto.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserPhoto.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListUserPhoto {
Identity.User.Read
.DESCRIPTION
Retrieves the profile photo for a specific Entra ID user, returned as a base64-encoded image.
+ .NOTES
+ Permission: Graph | GET /users/{id}/photo/$value | Delegated | User.Read | ProfilePhoto.ReadWrite.All, User.ReadBasic.All, User.Read.All, User.ReadWrite, User.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserSigninLogs.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserSigninLogs.ps1
index 53cf9dd2f0..6d50ae9a96 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserSigninLogs.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUserSigninLogs.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListUserSigninLogs {
Identity.User.Read
.DESCRIPTION
Lists recent sign-in log entries for a specific Entra ID user, ordered by most recent.
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Delegated | AuditLog.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUsers.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUsers.ps1
index bd03fe54c6..fd29b75ff9 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUsers.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-ListUsers.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListUsers {
Identity.User.Read
.DESCRIPTION
Lists Entra ID users for a tenant with license and sign-in details, or retrieves a specific user by ID. Supports UseReportDB=true to serve cached users from the reporting database; AllTenants always uses the cache. When manualPagination is set on a cached read, one page is returned per request as { Results, Metadata } with a continuation token in Metadata.nextLink.
+ .NOTES
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-PatchUser.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-PatchUser.ps1
index 4e968b156d..fd33a77a0d 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-PatchUser.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Administration/Users/Invoke-PatchUser.ps1
@@ -4,6 +4,8 @@ function Invoke-PatchUser {
Entrypoint
.ROLE
Identity.User.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListAzureADConnectStatus.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListAzureADConnectStatus.ps1
index d0327d674a..2bb0143f3b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListAzureADConnectStatus.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListAzureADConnectStatus.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListAzureADConnectStatus {
Tenant.Directory.Read
.DESCRIPTION
Retrieves Entra ID Connect (Azure AD Connect) synchronization status and configuration for a tenant, including sync intervals, password sync, and pass-through authentication settings.
+ .NOTES
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListBasicAuth.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListBasicAuth.ps1
index 943777494b..2cbe0d79b0 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListBasicAuth.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListBasicAuth.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListBasicAuth {
Identity.AuditLog.Read
.DESCRIPTION
Lists sign-in events using basic authentication (legacy protocols) for a tenant from the audit logs.
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Delegated | AuditLog.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListObjectHistory.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListObjectHistory.ps1
index 048e549a24..ac9eca1f56 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListObjectHistory.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListObjectHistory.ps1
@@ -14,6 +14,8 @@ function Invoke-ListObjectHistory {
Entrypoint
.ROLE
Identity.AuditLog.Read
+ .NOTES
+ Permission: Graph | GET /auditLogs/directoryAudits | Delegated | AuditLog.Read.All | Directory.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListSignIns.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListSignIns.ps1
index 9fe2afde0a..2804673016 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListSignIns.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Identity/Reports/Invoke-ListSignIns.ps1
@@ -10,6 +10,8 @@ Function Invoke-ListSignIns {
Deprecated: use ListGraphRequest with Endpoint=auditLogs/signIns instead, which supports $filter, $top,
$orderby, and manualPagination with nextLink continuation. This endpoint returns at most one page of
results and will be removed in a future release.
+ .NOTES
+ Permission: Graph | GET /auditLogs/signIns | Delegated | AuditLog.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Compliance-SensitivityLabel/Invoke-AddSensitivityLabelTemplate.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Compliance-SensitivityLabel/Invoke-AddSensitivityLabelTemplate.ps1
index 747e124ed0..a93d095404 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Compliance-SensitivityLabel/Invoke-AddSensitivityLabelTemplate.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Compliance-SensitivityLabel/Invoke-AddSensitivityLabelTemplate.ps1
@@ -4,6 +4,8 @@ Function Invoke-AddSensitivityLabelTemplate {
Entrypoint
.ROLE
Security.SensitivityLabel.ReadWrite
+ .NOTES
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Defender/Invoke-ListMDEOnboarding.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Defender/Invoke-ListMDEOnboarding.ps1
index 3399624e34..1afafb3edb 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Defender/Invoke-ListMDEOnboarding.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Defender/Invoke-ListMDEOnboarding.ps1
@@ -6,6 +6,8 @@ function Invoke-ListMDEOnboarding {
Security.Defender.Read
.DESCRIPTION
Lists Microsoft Defender for Endpoint onboarding status for devices in a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance. Automatically uses the reporting database when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92 | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecAlertsList.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecAlertsList.ps1
index a23518204f..b57d3bf287 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecAlertsList.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecAlertsList.ps1
@@ -6,6 +6,8 @@ function Invoke-ExecAlertsList {
Security.Alert.Read
.DESCRIPTION
Lists Microsoft 365 Defender security alerts for a tenant. tenantFilter=AllTenants reads the cached alert table instead of querying each tenant live, so those results are as fresh as the last cache run.
+ .NOTES
+ Permission: Graph | GET /security/alerts_v2 | Delegated | SecurityAlert.Read.All | SecurityAlert.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecIncidentsList.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecIncidentsList.ps1
index c073395931..83b5883ac0 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecIncidentsList.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecIncidentsList.ps1
@@ -6,6 +6,8 @@ function Invoke-ExecIncidentsList {
Security.Incident.Read
.DESCRIPTION
Lists Microsoft 365 Defender security incidents for a tenant, optionally bounded by StartDate and EndDate (both YYYYMMDD). tenantFilter=AllTenants reads the cached incident table rather than querying each tenant live.
+ .NOTES
+ Permission: Graph | GET /security/incidents | Application | SecurityIncident.Read.All | SecurityIncident.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecMdoAlertsList.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecMdoAlertsList.ps1
index 1ad4bdbadd..4d64896652 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecMdoAlertsList.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecMdoAlertsList.ps1
@@ -6,6 +6,8 @@ function Invoke-ExecMDOAlertsList {
Security.Alert.Read
.DESCRIPTION
Lists Microsoft Defender for Office 365 and Defender for Endpoint alerts for a tenant, filtered to those service sources. tenantFilter=AllTenants reads the cached alert table rather than querying each tenant live.
+ .NOTES
+ Permission: Graph | GET /security/alerts_v2 | Delegated | SecurityAlert.Read.All | SecurityAlert.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetMdoAlert.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetMdoAlert.ps1
index 740e725259..5e5fa87497 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetMdoAlert.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetMdoAlert.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecSetMdoAlert {
Entrypoint
.ROLE
Security.Incident.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /security/alerts_v2/{id} | Application | SecurityAlert.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetSecurityAlert.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetSecurityAlert.ps1
index 5196bc171f..ff33bff3b8 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetSecurityAlert.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetSecurityAlert.ps1
@@ -4,6 +4,8 @@ Function Invoke-ExecSetSecurityAlert {
Entrypoint
.ROLE
Security.Alert.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /security/alerts_v2/{id} | Delegated | SecurityAlert.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetSecurityIncident.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetSecurityIncident.ps1
index d6f01ab145..1e71d7a4c5 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetSecurityIncident.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Security/Incidents/Invoke-ExecSetSecurityIncident.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecSetSecurityIncident {
Entrypoint
.ROLE
Security.Incident.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /security/incidents/{id} | Application | SecurityIncident.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-AddTeam.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-AddTeam.ps1
index 13d4360dfd..9c42afe01b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-AddTeam.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-AddTeam.ps1
@@ -4,6 +4,8 @@ Function Invoke-AddTeam {
Entrypoint
.ROLE
Teams.Group.ReadWrite
+ .NOTES
+ Permission: Graph | POST /teams | Application | Team.Create | Directory.ReadWrite.All, Group.ReadWrite.All, Teamwork.Migrate.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecBulkRemoveSharingLinks.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecBulkRemoveSharingLinks.ps1
index 6bef813030..51c9b9f1e6 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecBulkRemoveSharingLinks.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecBulkRemoveSharingLinks.ps1
@@ -10,6 +10,8 @@ function Invoke-ExecBulkRemoveSharingLinks {
are revoked: Anonymous (anyone links only), External (anonymous + external), or All
(every cached link on the site, including internal). Because the source is the cache,
links created after the last sharing sync are not covered.
+ .NOTES
+ Permission: Graph | DELETE /drives/{id}/items/{id}/permissions/{id} | Application | Files.ReadWrite.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecReactivateSite.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecReactivateSite.ps1
index 48bc23506f..bebfdee8d9 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecReactivateSite.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecReactivateSite.ps1
@@ -13,6 +13,9 @@ function Invoke-ExecReactivateSite {
Reactivation is asynchronous (can take up to 24 hours) and, for fully-archived
accounts, may incur Microsoft 365 Archive charges and require Unlicensed OneDrive
billing to be enabled on the tenant.
+ .NOTES
+ Permission: Graph | POST /sites/{id},{id},{id}/unarchive | Application | Sites.Archive.All | Sites.FullControl.All
+ Permission: Graph | GET /sites/{id}:/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveSPOExternalUser.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveSPOExternalUser.ps1
index e6b3bd0854..7ff41464f9 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveSPOExternalUser.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveSPOExternalUser.ps1
@@ -11,6 +11,9 @@ function Invoke-ExecRemoveSPOExternalUser {
SharePoint external-store entry cannot be deleted (Microsoft deprecated
RemoveExternalUsers) and ages out on its own; sharing links the user received are
revoked separately via the Sharing Report.
+ .NOTES
+ Permission: Graph | DELETE /users/{id} | Application | User.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveSharingLink.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveSharingLink.ps1
index d7d0cc78ee..1f2b93144e 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveSharingLink.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveSharingLink.ps1
@@ -8,6 +8,8 @@ function Invoke-ExecRemoveSharingLink {
Revokes a sharing link (or direct sharing grant) on a SharePoint or OneDrive item by
deleting the permission from the drive item. Also removes the revoked link from the
cached sharing links so the sharing report reflects it immediately.
+ .NOTES
+ Permission: Graph | DELETE /drives/{id}/items/{id}/permissions/{id} | Application | Files.ReadWrite.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveTeamsVoicePhoneNumberAssignment.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveTeamsVoicePhoneNumberAssignment.ps1
index f80c5dd02d..44138190a2 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveTeamsVoicePhoneNumberAssignment.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecRemoveTeamsVoicePhoneNumberAssignment.ps1
@@ -6,6 +6,8 @@ Function Invoke-ExecRemoveTeamsVoicePhoneNumberAssignment {
Teams.Voice.ReadWrite
.DESCRIPTION
Unassigns a phone number from a user or resource account via the Teams administration Graph API.
+ .NOTES
+ Permission: Graph | POST /admin/teams/telephoneNumberManagement/numberAssignments/unassignNumber | Delegated | TeamsTelephoneNumber.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecSiteBrowserActions.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecSiteBrowserActions.ps1
index 7f2f6d9c1d..87304b8f2a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecSiteBrowserActions.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecSiteBrowserActions.ps1
@@ -9,6 +9,8 @@ function Invoke-ExecSiteBrowserActions {
Body.Action selects the operation. SiteUrl + tenantFilter are always required.
Version cleanup: StartVersionCleanup, GetVersionCleanupStatus.
Site admin properties (incl. version policy): GetSiteProperties.
+ .NOTES
+ Permission: Graph | GET /sites/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecSiteBrowserPermissions.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecSiteBrowserPermissions.ps1
index 2d0f30d20a..544e5b5be0 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecSiteBrowserPermissions.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecSiteBrowserPermissions.ps1
@@ -376,31 +376,6 @@ function Invoke-ExecSiteBrowserPermissions {
return "Successfully restored permission inheritance on $TargetLabel. The permissions that were unique to it have been discarded and it now follows the site."
}
- function Invoke-BrowserRemoveGraphSitePermission {
- $PermissionId = $Request.Body.PermissionId
- if ([string]::IsNullOrWhiteSpace($PermissionId)) {
- $Outcome.Status = [HttpStatusCode]::BadRequest
- throw 'PermissionId is required.'
- }
-
- $ResolvedSiteId = $SiteId
- if ([string]::IsNullOrWhiteSpace($ResolvedSiteId)) {
- $ParsedUrl = [System.Uri]$SiteUrl
- $SiteSegment = if ($ParsedUrl.AbsolutePath -in @('', '/')) {
- $ParsedUrl.Host
- } else {
- "$($ParsedUrl.Host):$($ParsedUrl.AbsolutePath):"
- }
- $SiteMeta = New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/sites/$SiteSegment`?`$select=id" -tenantid $TenantFilter -asapp $true
- $ResolvedSiteId = $SiteMeta.id
- }
- if ([string]::IsNullOrWhiteSpace($ResolvedSiteId)) { throw 'Could not resolve Graph site id.' }
-
- $null = New-GraphPostRequest -uri "https://graph.microsoft.com/v1.0/sites/$ResolvedSiteId/permissions/$PermissionId" -tenantid $TenantFilter -type DELETE -asapp $true
- $Label = $Request.Body.PrincipalName ?? $PermissionId
- return "Successfully removed Graph site permission for $Label."
- }
-
if ([string]::IsNullOrWhiteSpace($TenantFilter)) {
return ([HttpResponseContext]@{ StatusCode = [HttpStatusCode]::BadRequest; Body = @{ 'Results' = 'tenantFilter is required.' } })
}
@@ -424,7 +399,13 @@ function Invoke-ExecSiteBrowserPermissions {
'RemoveSiteAdmin' { Invoke-BrowserSiteAdmin -Add $false }
'BreakInheritance' { Invoke-BrowserInheritance -Mode 'Break' }
'RestoreInheritance' { Invoke-BrowserInheritance -Mode 'Reset' }
- 'RemoveGraphSitePermission' { Invoke-BrowserRemoveGraphSitePermission }
+ 'RemoveGraphSitePermission' {
+ if ([string]::IsNullOrWhiteSpace($Request.Body.PermissionId)) {
+ $Outcome.Status = [HttpStatusCode]::BadRequest
+ throw 'PermissionId is required.'
+ }
+ Remove-CIPPGraphSitePermission -TenantFilter $TenantFilter -SiteUrl $SiteUrl -SiteId $SiteId -PermissionId $Request.Body.PermissionId -PrincipalName $Request.Body.PrincipalName
+ }
default {
$Outcome.Status = [HttpStatusCode]::BadRequest
throw "Unknown Action '$Action'. Supported: GrantAccess, ReplaceAccess, RemoveAccess, AddGroupMember, RemoveGroupMember, AddSiteAdmin, RemoveSiteAdmin, BreakInheritance, RestoreInheritance, RemoveGraphSitePermission."
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecTeamsVoicePhoneNumberAssignment.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecTeamsVoicePhoneNumberAssignment.ps1
index 128b8d6ed5..99fef3b193 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecTeamsVoicePhoneNumberAssignment.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ExecTeamsVoicePhoneNumberAssignment.ps1
@@ -7,6 +7,10 @@ Function Invoke-ExecTeamsVoicePhoneNumberAssignment {
.DESCRIPTION
Assigns a phone number to a user or resource account, or sets the emergency location on a
number, via the Teams administration Graph API.
+ .NOTES
+ Permission: Graph | POST /admin/teams/telephoneNumberManagement/numberAssignments/assignNumber | Delegated | TeamsTelephoneNumber.ReadWrite.All
+ Permission: Graph | POST /admin/teams/telephoneNumberManagement/numberAssignments/updateNumber | Delegated | TeamsTelephoneNumber.ReadWrite.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSharePointExternalUsers.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSharePointExternalUsers.ps1
index 452e03357b..a7aa9de10b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSharePointExternalUsers.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSharePointExternalUsers.ps1
@@ -11,6 +11,9 @@ function Invoke-ListSharePointExternalUsers {
Every entry is classified against Entra: 'Entra B2B' (live Entra guest), 'Orphaned B2B'
(the Entra guest was deleted but SharePoint still references them) or 'SharePoint-only'
(legacy email-authenticated guest that never had an Entra object).
+ .NOTES
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSharepointSettings.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSharepointSettings.ps1
index 6f0538c5b4..d8a55229f5 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSharepointSettings.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSharepointSettings.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListSharepointSettings {
Sharepoint.Admin.Read
.DESCRIPTION
Retrieves SharePoint Online tenant-level settings and configuration.
+ .NOTES
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteBrowser.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteBrowser.ps1
index 0dce74e79d..a42d34bf51 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteBrowser.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteBrowser.ps1
@@ -10,6 +10,11 @@ function Invoke-ListSiteBrowser {
StorageUsed / NumOfFiles / TemplateName in one paged call.
Graph getAllSites joins only for Graph site.id (drill-in).
With SiteId/SiteUrl: root document/page libraries (Graph lists + SPO StorageMetrics).
+ .NOTES
+ Permission: Graph | GET /sites/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}:{id} | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/lists | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteBrowserPermissions.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteBrowserPermissions.ps1
index 4ec388ab0b..8c67e8fdb7 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteBrowserPermissions.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteBrowserPermissions.ps1
@@ -11,6 +11,9 @@ function Invoke-ListSiteBrowserPermissions {
(Sites.Selected / app-only grants). Partial failures are returned in Errors so the UI
can still show what was collected. SiteUrl is required; ListId targets a library.
Sharing links / Graph drive permissions are intentionally out of scope (handled elsewhere).
+ .NOTES
+ Permission: Graph | GET /sites/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/permissions | Application | Sites.FullControl.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteLibraries.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteLibraries.ps1
index 8e5d74488e..c56b9662c9 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteLibraries.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteLibraries.ps1
@@ -8,6 +8,8 @@ function Invoke-ListSiteLibraries {
Lists the visible document libraries of a SharePoint site via the Graph API. The site can
be addressed by SiteId or by SiteUrl (hostname:path addressing). Returns the SharePoint
list GUID as Id so the result can be used directly against the SharePoint REST API.
+ .NOTES
+ Permission: Graph | GET /sites/{id}/lists | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteMembers.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteMembers.ps1
index 891355b014..7f0ebac72b 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteMembers.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteMembers.ps1
@@ -12,6 +12,10 @@ Function Invoke-ListSiteMembers {
the real people are returned. Falls back to the site's hidden User Information List
via Graph when the SharePoint REST API is unavailable (e.g. the tenant does not have
the SharePoint application permission consented yet).
+ .NOTES
+ Permission: Graph | GET /sites/{id} | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/lists | Application | Sites.Read.All | Sites.ReadWrite.All
+ Permission: Graph | GET /sites/{id}/lists/{id}/items | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteUserAccess.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteUserAccess.ps1
index d7a7ac5fa3..7e97df4107 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteUserAccess.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSiteUserAccess.ps1
@@ -28,6 +28,9 @@ function Invoke-ListSiteUserAccess {
Limited Access is reported but flagged, because on its own it grants no ability to open
or list anything - SharePoint adds it so a user can traverse to an item they were given
access to further down.
+ .NOTES
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/transitiveMemberOf | Application | User.Read.All | Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadBasic.All, GroupMember.Read.All, GroupMember.ReadBasic.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSites.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSites.ps1
index 34a9475c42..3b35d99f23 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSites.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListSites.ps1
@@ -6,6 +6,8 @@ function Invoke-ListSites {
Sharepoint.Site.Read
.DESCRIPTION
Lists SharePoint sites or OneDrive usage for a tenant. Requires a Type parameter (SharePointSiteUsage or OneDriveUsageAccount). SharePoint live data uses SPO admin RLD plus Graph enrichment; OneDrive live data uses Graph usage reports. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListTeams.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListTeams.ps1
index 5f5faccbbd..3fb30f1185 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListTeams.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListTeams.ps1
@@ -6,6 +6,12 @@ Function Invoke-ListTeams {
Teams.Group.Read
.DESCRIPTION
Lists Microsoft Teams teams for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /teams/{id} | Application | TeamSettings.Read.Group | TeamSettings.ReadWrite.Group, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All
+ Permission: Graph | GET /teams/{id}/Channels | Application | ChannelSettings.Read.Group | Channel.ReadBasic.All, ChannelSettings.Read.All, ChannelSettings.ReadWrite.All, ChannelSettings.ReadWrite.Group, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | GET /teams/{id}/installedApps | Application | TeamsAppInstallation.Read.Group | TeamsAppInstallation.ReadWriteSelfForTeam.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All, TeamsAppInstallation.ManageSelectedForTeam.All, TeamsAppInstallation.Read.All, TeamsAppInstallation.ReadForTeam.All, TeamsAppInstallation.ReadWriteAndConsentForTeam.All, TeamsAppInstallation.ReadWriteAndConsentSelfForTeam.All, TeamsAppInstallation.ReadWriteForTeam.All
+ Permission: Graph | GET /teams/{id}/Members | Application | TeamMember.Read.Group | TeamMember.ReadWrite.All, TeamMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListTeamsVoice.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListTeamsVoice.ps1
index 80b6589de1..6af89e52c7 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListTeamsVoice.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Teams-Sharepoint/Invoke-ListTeamsVoice.ps1
@@ -6,6 +6,8 @@ function Invoke-ListTeamsVoice {
Teams.Voice.Read
.DESCRIPTION
Lists Microsoft Teams voice and PSTN usage for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ExecCopilotSettings.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ExecCopilotSettings.ps1
index 1a1860312a..d14f687c67 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ExecCopilotSettings.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ExecCopilotSettings.ps1
@@ -6,6 +6,8 @@ function Invoke-ExecCopilotSettings {
Tenant.AI.ReadWrite
.DESCRIPTION
Sets a single Microsoft 365 Copilot policy setting to Enabled (1), Disabled (0) or Not configured (cleared).
+ .NOTES
+ Permission: Graph | PATCH /copilot/admin/policySettings/{id} | Delegated | CopilotPolicySettings.ReadWrite
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ListAgent365PackageDetail.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ListAgent365PackageDetail.ps1
index caae513e33..b760bafc27 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ListAgent365PackageDetail.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ListAgent365PackageDetail.ps1
@@ -8,6 +8,8 @@ function Invoke-ListAgent365PackageDetail {
Gets the full detail for a single Microsoft Agent 365 / Copilot package by id, including the
allowedUsersAndGroups, acquireUsersAndGroups and elementDetails that the list endpoint omits.
Uses delegated auth: this call returns 424 Failed Dependency under application context.
+ .NOTES
+ Permission: Graph | GET /copilot/admin/catalog/packages/{id} | Delegated | CopilotPackages.Read.All | CopilotPackages.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ListCopilotSettings.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ListCopilotSettings.ps1
index 3d65c77b39..56cd260640 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ListCopilotSettings.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/AI/Invoke-ListCopilotSettings.ps1
@@ -7,6 +7,8 @@ function Invoke-ListCopilotSettings {
.DESCRIPTION
Lists the Microsoft 365 Copilot admin policy settings for a tenant, one row per setting,
with the current raw value and a friendly state (Enabled / Disabled / Not configured).
+ .NOTES
+ Permission: Graph | GET /copilot/admin/policySettings/{id} | Delegated | CopilotPolicySettings.Read | CopilotPolicySettings.ReadWrite
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Alerts/Invoke-ExecAuditLogSearch.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Alerts/Invoke-ExecAuditLogSearch.ps1
index 1f5f1af1b3..b6303ca978 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Alerts/Invoke-ExecAuditLogSearch.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Alerts/Invoke-ExecAuditLogSearch.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecAuditLogSearch {
Entrypoint
.ROLE
Tenant.Alert.ReadWrite
+ .NOTES
+ Permission: Graph | GET /security/auditLog/queries/{id} | Application | AuditLogsQuery.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecApplication.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecApplication.ps1
index 4ecea69ba9..75d3155758 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecApplication.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecApplication.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecApplication {
Entrypoint
.ROLE
Tenant.Application.ReadWrite
+ .NOTES
+ Permission: Graph | GET /policies/defaultAppManagementPolicy | Application | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecCreateAppTemplate.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecCreateAppTemplate.ps1
index 173dc4ba99..fa92b6213d 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecCreateAppTemplate.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecCreateAppTemplate.ps1
@@ -6,6 +6,15 @@ function Invoke-ExecCreateAppTemplate {
Entrypoint
.ROLE
Tenant.Application.ReadWrite
+ .NOTES
+ Permission: Graph | GET /applications | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | POST /applications | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All
+ Permission: Graph | GET /applications(appId='{id}') | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | POST /servicePrincipals | Application | Application.ReadWrite.OwnedBy | Application.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}')/appRoleAssignments | Application | Application.Read.All | Application.ReadWrite.All, Application.ReadWrite.OwnedBy, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals(appId='{id}')/oauth2PermissionGrants | Application | Directory.Read.All | DelegatedPermissionGrant.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals/{id} | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecManageAppCredentials.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecManageAppCredentials.ps1
index 5715084610..6d4278d278 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecManageAppCredentials.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ExecManageAppCredentials.ps1
@@ -27,22 +27,6 @@ function Invoke-ExecManageAppCredentials {
$IdPath = if ($Id) { "/$Id" } else { "(appId='$AppId')" }
$Uri = "https://graph.microsoft.com/beta/$AppType$IdPath"
- # Max credential end date allowed by the tenant default app management policy's passwordLifetime
- # restriction, or $null when not enforced/readable. Custom per-app policies aren't read here.
- function Get-PasswordPolicyMaxEnd {
- param([datetime]$From)
- try {
- $Policy = New-GraphGetRequest -uri 'https://graph.microsoft.com/v1.0/policies/defaultAppManagementPolicy' -tenantid $TenantFilter -AsApp $true
- $Lifetime = $Policy.applicationRestrictions.passwordCredentials | Where-Object { $_.restrictionType -eq 'passwordLifetime' }
- if ($Lifetime -and -not ($Lifetime.state -eq 'disabled' -or $null -eq $Lifetime.state) -and $Lifetime.maxLifetime) {
- return $From.Add([System.Xml.XmlConvert]::ToTimeSpan($Lifetime.maxLifetime))
- }
- } catch {
- Write-LogMessage -API $APIName -tenant $TenantFilter -headers $Headers -message "Could not read app management policy for expiry clamping: $($_.Exception.Message)" -sev Debug
- }
- return $null
- }
-
try {
$Results = switch ($Action) {
'Remove' {
@@ -81,7 +65,7 @@ function Invoke-ExecManageAppCredentials {
# Clamp the expiry to the tenant policy maximum so the add isn't rejected outright.
$ClampNote = ''
- $MaxAllowedEnd = Get-PasswordPolicyMaxEnd -From $Now
+ $MaxAllowedEnd = Get-CIPPAppPasswordPolicyMaxEnd -From $Now -TenantFilter $TenantFilter -APIName $APIName -Headers $Headers
if ($MaxAllowedEnd -and $RequestedEnd -gt $MaxAllowedEnd) {
$RequestedEnd = $MaxAllowedEnd
$ClampNote = " Expiry was reduced to the tenant policy maximum of $([math]::Round(($MaxAllowedEnd - $Now).TotalDays)) day(s)."
@@ -116,7 +100,7 @@ function Invoke-ExecManageAppCredentials {
$Now = (Get-Date).ToUniversalTime()
$RequestedEnd = $Now.AddMonths(12)
$ClampNote = ''
- $MaxAllowedEnd = Get-PasswordPolicyMaxEnd -From $Now
+ $MaxAllowedEnd = Get-CIPPAppPasswordPolicyMaxEnd -From $Now -TenantFilter $TenantFilter -APIName $APIName -Headers $Headers
if ($MaxAllowedEnd -and $RequestedEnd -gt $MaxAllowedEnd) {
$RequestedEnd = $MaxAllowedEnd
$ClampNote = " New secret expiry was set to the tenant policy maximum of $([math]::Round(($MaxAllowedEnd - $Now).TotalDays)) day(s)."
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ListAppConsentRequests.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ListAppConsentRequests.ps1
index 061ac00f9e..7158c98f02 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ListAppConsentRequests.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Application Approval/Invoke-ListAppConsentRequests.ps1
@@ -6,6 +6,9 @@ function Invoke-ListAppConsentRequests {
Tenant.Administration.Read
.DESCRIPTION
Lists pending application consent requests in a tenant, filterable by request status.
+ .NOTES
+ Permission: Graph | GET /identityGovernance/appConsent/appConsentRequests | Delegated | ConsentRequest.Read.All | ConsentRequest.ReadWrite.All
+ Permission: Graph | GET /identityGovernance/appConsent/appConsentRequests/{id}/userConsentRequests | Delegated | ConsentRequest.Read.All | ConsentRequest.ReadWrite.All
#>
param($Request, $TriggerMetadata)
# Interact with query parameters or the body of the request.
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-AddDomain.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-AddDomain.ps1
index e2716bd757..6140858f4e 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-AddDomain.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-AddDomain.ps1
@@ -4,6 +4,8 @@ function Invoke-AddDomain {
Entrypoint
.ROLE
Tenant.Administration.ReadWrite
+ .NOTES
+ Permission: Graph | POST /domains | Application | Domain.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-ExecDomainAction.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-ExecDomainAction.ps1
index f143332dc6..44e6b6b725 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-ExecDomainAction.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-ExecDomainAction.ps1
@@ -4,6 +4,10 @@ function Invoke-ExecDomainAction {
Entrypoint
.ROLE
Tenant.Administration.ReadWrite
+ .NOTES
+ Permission: Graph | DELETE /domains/{id} | Application | Domain.ReadWrite.All
+ Permission: Graph | PATCH /domains/{id} | Application | Domain.ReadWrite.All
+ Permission: Graph | POST /domains/{id}/verify | Application | Domain.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-ListDomains.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-ListDomains.ps1
index a72a62587c..d04f2a6eec 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-ListDomains.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Domains/Invoke-ListDomains.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListDomains {
Tenant.Administration.Read
.DESCRIPTION
Lists verified domains for a tenant, showing default and initial domain status.
+ .NOTES
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-AddTenant.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-AddTenant.ps1
index 1045467272..a9ba75345c 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-AddTenant.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-AddTenant.ps1
@@ -4,6 +4,8 @@ function Invoke-AddTenant {
Entrypoint,AnyTenant
.ROLE
Tenant.Config.ReadWrite
+ .NOTES
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecAddSPN.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecAddSPN.ps1
index e1fd10c4b3..cd3d417772 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecAddSPN.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecAddSPN.ps1
@@ -4,6 +4,8 @@ Function Invoke-ExecAddSPN {
Entrypoint
.ROLE
Tenant.Administration.ReadWrite
+ .NOTES
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecOffboardTenant.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecOffboardTenant.ps1
index e85142768f..d163675d55 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecOffboardTenant.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecOffboardTenant.ps1
@@ -4,6 +4,16 @@ function Invoke-ExecOffboardTenant {
Entrypoint
.ROLE
Tenant.Administration.ReadWrite
+ .NOTES
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /organization/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | DELETE /serviceprincipals/{id} | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | POST /tenantRelationships/delegatedAdminRelationships/{id}/requests | Delegated | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | DELETE /users/{id} | Delegated | User.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecUpdateSecureScore.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecUpdateSecureScore.ps1
index c7593f0ab1..32a6cdb7c6 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecUpdateSecureScore.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ExecUpdateSecureScore.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecUpdateSecureScore {
Entrypoint
.ROLE
Tenant.Administration.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /security/secureScoreControlProfiles/{id} | Delegated | SecurityEvents.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListExternalTenantInfo.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListExternalTenantInfo.ps1
index cd142ee417..e2d8b4e63a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListExternalTenantInfo.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListExternalTenantInfo.ps1
@@ -6,6 +6,8 @@ function Invoke-ListExternalTenantInfo {
CIPP.Core.Read
.DESCRIPTION
Looks up publicly available tenant information for an external Entra ID tenant by domain or tenant ID.
+ .NOTES
+ Permission: Graph | GET /tenantRelationships/findTenantInformationByTenantId(tenantId='{id}') | Delegated | CrossTenantInformation.ReadBasic.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListOrg.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListOrg.ps1
index 428af19780..03ad298e7d 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListOrg.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListOrg.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListOrg {
CIPP.Core.Read
.DESCRIPTION
Retrieves the Entra ID organization profile for a tenant, including display name, addresses, and tenant metadata.
+ .NOTES
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListTenantDetails.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListTenantDetails.ps1
index f70ad515aa..dc101070c7 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListTenantDetails.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListTenantDetails.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListTenantDetails {
CIPP.Core.Read
.DESCRIPTION
Retrieves detailed organization information for a tenant, including addresses, assigned plans, sync status, and custom properties.
+ .NOTES
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListUsersAndGroups.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListUsersAndGroups.ps1
index 6ee9a9c6e8..e291a53ba1 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListUsersAndGroups.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Administration/Tenant/Invoke-ListUsersAndGroups.ps1
@@ -6,6 +6,9 @@ function Invoke-ListUsersAndGroups {
Tenant.Directory.Read
.DESCRIPTION
Lists both users and groups for a tenant in a single batch call, returning ID and display name for selection/lookup purposes.
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-AddNamedLocation.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-AddNamedLocation.ps1
index 8aa0a6d1f5..8b95f41e7f 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-AddNamedLocation.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-AddNamedLocation.ps1
@@ -4,6 +4,8 @@ function Invoke-AddNamedLocation {
Entrypoint,AnyTenant
.ROLE
Tenant.ConditionalAccess.ReadWrite
+ .NOTES
+ Permission: Graph | POST /identity/conditionalAccess/namedLocations | Delegated | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-EditCAPolicy.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-EditCAPolicy.ps1
index fee3c24bce..523a85b234 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-EditCAPolicy.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-EditCAPolicy.ps1
@@ -4,6 +4,8 @@ Function Invoke-EditCAPolicy {
Entrypoint
.ROLE
Tenant.ConditionalAccess.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ExecCAExclusion.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ExecCAExclusion.ps1
index 0543359359..873a0194ad 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ExecCAExclusion.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ExecCAExclusion.ps1
@@ -4,6 +4,10 @@ function Invoke-ExecCAExclusion {
Entrypoint
.ROLE
Tenant.ConditionalAccess.ReadWrite
+ .NOTES
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All
+ Permission: Graph | GET /users/{id} | Delegated | User.ReadBasic.All | User.ReadWrite, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ExecEditCAPolicyFull.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ExecEditCAPolicyFull.ps1
index 73dcab5cea..66e6315db9 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ExecEditCAPolicyFull.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ExecEditCAPolicyFull.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecEditCAPolicyFull {
Entrypoint
.ROLE
Tenant.ConditionalAccess.ReadWrite
+ .NOTES
+ Permission: Graph | PATCH /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListConditionalAccessPolicies.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListConditionalAccessPolicies.ps1
index 6ac9fc75a0..a5fd6cfbdf 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListConditionalAccessPolicies.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListConditionalAccessPolicies.ps1
@@ -6,6 +6,14 @@ function Invoke-ListConditionalAccessPolicies {
Tenant.ConditionalAccess.Read
.DESCRIPTION
Lists Conditional Access policies for a tenant with resolved display names for users, groups, applications, and locations. When manualPagination is set on an AllTenants read, one page is returned per request with a continuation token in Metadata.nextLink.
+ .NOTES
+ Permission: Graph | GET /applications | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Application | Policy.Read.All
+ Permission: Graph | GET /identity/conditionalAccess/policies | Application | Policy.Read.All
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Application | RoleManagement.Read.Directory | RoleManagement.Read.All, RoleManagement.ReadWrite.Exchange
+ Permission: Graph | GET /servicePrincipals | Application | Application.Read.All | Application.ReadWrite.OwnedBy, Application.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListConditionalAccessPolicyChanges.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListConditionalAccessPolicyChanges.ps1
index e2bce4754d..8233befbd3 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListConditionalAccessPolicyChanges.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListConditionalAccessPolicyChanges.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListConditionalAccessPolicyChanges {
Tenant.ConditionalAccess.Read
.DESCRIPTION
Lists audit log entries showing changes to a specific Conditional Access policy, including before/after values.
+ .NOTES
+ Permission: Graph | GET /auditLogs/directoryAudits | Delegated | AuditLog.Read.All | Directory.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListNamedLocations.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListNamedLocations.ps1
index 6623ada2cb..d78e5e175a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListNamedLocations.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-ListNamedLocations.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListNamedLocations {
Tenant.ConditionalAccess.Read
.DESCRIPTION
Lists Conditional Access named locations (IP ranges and country-based locations) configured in a tenant.
+ .NOTES
+ Permission: Graph | GET /identity/conditionalAccess/namedLocations | Delegated | Policy.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-RemoveCAPolicy.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-RemoveCAPolicy.ps1
index 552b1f8572..fe32ba8887 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-RemoveCAPolicy.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Conditional/Invoke-RemoveCAPolicy.ps1
@@ -4,6 +4,8 @@ Function Invoke-RemoveCAPolicy {
Entrypoint
.ROLE
Tenant.ConditionalAccess.ReadWrite
+ .NOTES
+ Permission: Graph | DELETE /identity/conditionalAccess/policies/{id} | Application | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecAddGDAPRole.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecAddGDAPRole.ps1
index c18da4b46a..95b78dc03e 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecAddGDAPRole.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecAddGDAPRole.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecAddGDAPRole {
Entrypoint,AnyTenant
.ROLE
Tenant.Relationship.ReadWrite
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecDeleteGDAPRelationship.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecDeleteGDAPRelationship.ps1
index d0f4ed0b23..b4216c138a 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecDeleteGDAPRelationship.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecDeleteGDAPRelationship.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecDeleteGDAPRelationship {
Entrypoint,AnyTenant
.ROLE
Tenant.Relationship.ReadWrite
+ .NOTES
+ Permission: Graph | POST /tenantRelationships/delegatedAdminRelationships/{id}/requests | Delegated | DelegatedAdminRelationship.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPAccessAssignment.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPAccessAssignment.ps1
index 042452758f..915db9094d 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPAccessAssignment.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPAccessAssignment.ps1
@@ -4,6 +4,13 @@ function Invoke-ExecGDAPAccessAssignment {
Entrypoint,AnyTenant
.ROLE
Tenant.Relationship.ReadWrite
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id} | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | POST /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments | Delegated | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | DELETE /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments/{id} | Delegated | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | PATCH /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments/{id} | Delegated | DelegatedAdminRelationship.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPInvite.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPInvite.ps1
index 44f2235c16..cbf1055a01 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPInvite.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPInvite.ps1
@@ -4,6 +4,11 @@ function Invoke-ExecGDAPInvite {
Entrypoint,AnyTenant
.ROLE
Tenant.Relationship.ReadWrite
+ .NOTES
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
+ Permission: Graph | POST /tenantRelationships/delegatedAdminRelationships | Delegated | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id} | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | POST /tenantRelationships/delegatedAdminRelationships/{id}/requests | Delegated | DelegatedAdminRelationship.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPRemoveGArole.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPRemoveGArole.ps1
index bceea24c18..97de71976e 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPRemoveGArole.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPRemoveGArole.ps1
@@ -4,6 +4,9 @@ Function Invoke-ExecGDAPRemoveGArole {
Entrypoint,AnyTenant
.ROLE
Tenant.Relationship.ReadWrite
+ .NOTES
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id} | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | PATCH /tenantRelationships/delegatedAdminRelationships/{id} | Delegated | DelegatedAdminRelationship.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPRepairRoleMappings.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPRepairRoleMappings.ps1
index e1316106f2..0b16d97f7d 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPRepairRoleMappings.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ExecGDAPRepairRoleMappings.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecGDAPRepairRoleMappings {
Entrypoint,AnyTenant
.ROLE
Tenant.Relationship.ReadWrite
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPAccessAssignments.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPAccessAssignments.ps1
index e10e6e54c0..b32cf97bd3 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPAccessAssignments.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPAccessAssignments.ps1
@@ -6,6 +6,10 @@ function Invoke-ListGDAPAccessAssignments {
Tenant.Relationship.Read
.DESCRIPTION
Lists GDAP access assignments for a specific delegated admin relationship, including security group members and their role mappings.
+ .NOTES
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id}/members | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id}/accessAssignments | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPContracts.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPContracts.ps1
index 79660fd2a9..21a2388fa6 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPContracts.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPContracts.ps1
@@ -6,6 +6,8 @@ function Invoke-ListGDAPContracts {
Tenant.Relationship.Read
.DESCRIPTION
Lists Microsoft partner contracts (customer tenant relationships) from the Graph API.
+ .NOTES
+ Permission: Graph | GET /contracts | Delegated | Directory.Read.All | Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPRelationships.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPRelationships.ps1
index aff983bb0e..bc213d4faf 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPRelationships.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPRelationships.ps1
@@ -6,6 +6,9 @@ function Invoke-ListGDAPRelationships {
Tenant.Relationship.Read
.DESCRIPTION
Lists GDAP delegated admin relationships with customer tenants, with optional filtering by relationship ID or OData filter.
+ .NOTES
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
+ Permission: Graph | GET /tenantRelationships/delegatedAdminRelationships/{id} | Delegated | DelegatedAdminRelationship.Read.All | DelegatedAdminRelationship.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPServicePrincipals.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPServicePrincipals.ps1
index db5dacef2f..368d50aad1 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPServicePrincipals.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/GDAP/Invoke-ListGDAPServicePrincipals.ps1
@@ -6,6 +6,8 @@ function Invoke-ListGDAPServicePrincipals {
Tenant.Relationship.Read
.DESCRIPTION
Lists service principals in a customer tenant owned by the partner or specified vendor tenant IDs, useful for identifying GDAP-related app registrations.
+ .NOTES
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListGraphReports.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListGraphReports.ps1
index 201ce003a9..b0dd3e7ac3 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListGraphReports.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListGraphReports.ps1
@@ -6,6 +6,8 @@ function Invoke-ListGraphReports {
Tenant.Reports.Read
.DESCRIPTION
Retrieves Microsoft 365 usage reports (Graph or Office reports) for a tenant, such as email activity, OneDrive usage, or Teams device usage.
+ .NOTES
+ Permission: Graph | GET /reports | Application | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListMessageCenterMessages.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListMessageCenterMessages.ps1
index 5f04f7345b..f6c6ca7dc2 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListMessageCenterMessages.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListMessageCenterMessages.ps1
@@ -6,6 +6,8 @@ function Invoke-ListMessageCenterMessages {
Tenant.Administration.Read
.DESCRIPTION
Lists Microsoft 365 message center messages for a tenant: the change notices, announcements of new and retiring features, planned changes and action-required posts Microsoft publishes, with category, severity, services, tags and action-required-by dates. For AllTenants each message is returned once with the tenants it was posted to (Tenants, TenantCount). Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /admin/serviceAnnouncement/messages | Delegated | ServiceMessage.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListOAuthApps.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListOAuthApps.ps1
index c1c6146c6e..52306c07e7 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListOAuthApps.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListOAuthApps.ps1
@@ -6,6 +6,9 @@ function Invoke-ListOAuthApps {
Tenant.Application.Read
.DESCRIPTION
Lists OAuth application consent grants and permissions for a tenant. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /oauth2PermissionGrants | Delegated | Directory.Read.All | DelegatedPermissionGrant.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealth.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealth.ps1
index 14aadf4e6d..011c107a88 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealth.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealth.ps1
@@ -6,6 +6,8 @@ Function Invoke-ListServiceHealth {
Tenant.Administration.Read
.DESCRIPTION
Lists active Microsoft 365 service health issues and advisories for a tenant or all tenants.
+ .NOTES
+ Permission: Graph | GET /admin/serviceAnnouncement/issues | Delegated | ServiceHealth.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealthIssues.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealthIssues.ps1
index d388055c3e..2a635c1770 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealthIssues.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealthIssues.ps1
@@ -6,6 +6,8 @@ function Invoke-ListServiceHealthIssues {
Tenant.Administration.Read
.DESCRIPTION
Lists Microsoft 365 service health issues for a tenant: the incidents and advisories Microsoft has posted about service outages, degradations and their status, impact, affected services and timeline. For AllTenants each issue is returned once with the tenants it affects (Tenants, TenantCount). Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants. Pass Open=true to return only unresolved issues.
+ .NOTES
+ Permission: Graph | GET /admin/serviceAnnouncement/issues | Delegated | ServiceHealth.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealthOverviews.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealthOverviews.ps1
index 70f28c4d84..62e6ab0c61 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealthOverviews.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Reports/Invoke-ListServiceHealthOverviews.ps1
@@ -6,6 +6,8 @@ function Invoke-ListServiceHealthOverviews {
Tenant.Administration.Read
.DESCRIPTION
Lists the Microsoft 365 service health overview for a tenant: the current health status of each cloud service (Exchange Online, SharePoint Online, Microsoft Teams, Entra ID, Intune and others), for example serviceOperational, serviceDegradation or serviceInterruption. Supports UseReportDB=true query parameter to retrieve cached data from the reporting database for significantly better performance, especially when querying AllTenants.
+ .NOTES
+ Permission: Graph | GET /admin/serviceAnnouncement/healthOverviews | Delegated | ServiceHealth.Read.All
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Standards/Invoke-ExecUpdateDriftDeviation.ps1 b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Standards/Invoke-ExecUpdateDriftDeviation.ps1
index 33421c0615..18aa0c98f6 100644
--- a/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Standards/Invoke-ExecUpdateDriftDeviation.ps1
+++ b/backend/Modules/CIPPHTTP/Public/Entrypoints/HTTP Functions/Tenant/Standards/Invoke-ExecUpdateDriftDeviation.ps1
@@ -4,6 +4,8 @@ function Invoke-ExecUpdateDriftDeviation {
Entrypoint
.ROLE
Tenant.Standards.ReadWrite
+ .NOTES
+ Permission: Graph | DELETE /identity/conditionalAccess/policies/{id} | Delegated | Policy.Read.All | Policy.ReadWrite.ConditionalAccess
#>
[CmdletBinding()]
param($Request, $TriggerMetadata)
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardActivityBasedTimeout.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardActivityBasedTimeout.ps1
index 73e5730b46..d4ba9f36de 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardActivityBasedTimeout.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardActivityBasedTimeout.ps1
@@ -33,6 +33,9 @@ function Invoke-CIPPStandardActivityBasedTimeout {
"CIS"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/activityBasedTimeoutPolicies | Delegated | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | POST /policies/activityBasedTimeoutPolicies | Delegated | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | PATCH /policies/activityBasedTimeoutPolicies/{id} | Delegated | Policy.ReadWrite.ApplicationConfiguration
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAddDMARCToMOERA.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAddDMARCToMOERA.ps1
index 5bbefbaa92..9126106c3a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAddDMARCToMOERA.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAddDMARCToMOERA.ps1
@@ -33,6 +33,7 @@ function Invoke-CIPPStandardAddDMARCToMOERA {
{"remediate":true}
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAdminSSPR.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAdminSSPR.ps1
index 5b1d44875e..eaebbac350 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAdminSSPR.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAdminSSPR.ps1
@@ -30,6 +30,7 @@
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAnonReportDisable.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAnonReportDisable.ps1
index 7dc3ef6701..684be12528 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAnonReportDisable.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAnonReportDisable.ps1
@@ -26,6 +26,8 @@ function Invoke-CIPPStandardAnonReportDisable {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/reportSettings | Application | ReportSettings.Read.All | ReportSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/reportSettings | Application | ReportSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppDeploy.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppDeploy.ps1
index 947611abfe..f7e210bd95 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppDeploy.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppDeploy.ps1
@@ -28,6 +28,11 @@ function Invoke-CIPPStandardAppDeploy {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | POST /applications | Delegated | AppRegistration.Create | Application.ReadWrite.All
+ Permission: Graph | GET /applications(appId='{id}') | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /applications(appId='{id}') | Delegated | Application.ReadWrite.All
+ Permission: Graph | POST /applicationTemplates/{id}/instantiate | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppManagementPolicy.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppManagementPolicy.ps1
index 247ada03a9..89fe5f972e 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppManagementPolicy.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppManagementPolicy.ps1
@@ -29,6 +29,8 @@ function Invoke-CIPPStandardAppManagementPolicy {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/defaultAppManagementPolicy | Application | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | PATCH /policies/defaultAppManagementPolicy | Application | Policy.ReadWrite.ApplicationConfiguration
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppleEnrollmentTypeProfile.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppleEnrollmentTypeProfile.ps1
index f9652d773d..a0f8834972 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppleEnrollmentTypeProfile.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAppleEnrollmentTypeProfile.ps1
@@ -42,6 +42,13 @@ function Invoke-CIPPStandardAppleEnrollmentTypeProfile {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/appleUserInitiatedEnrollmentProfiles | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/appleUserInitiatedEnrollmentProfiles | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/appleUserInitiatedEnrollmentProfiles/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/appleUserInitiatedEnrollmentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/appleUserInitiatedEnrollmentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/appleUserInitiatedEnrollmentProfiles/{id}/assignments/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAssignmentFilterTemplate.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAssignmentFilterTemplate.ps1
index 4e63aaaa7d..2b5404ae78 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAssignmentFilterTemplate.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAssignmentFilterTemplate.ps1
@@ -32,6 +32,8 @@ function Invoke-CIPPStandardAssignmentFilterTemplate {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/assignmentFilters | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/assignmentFilters/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthMethodsPolicyMigration.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthMethodsPolicyMigration.ps1
index 0e0cfb1a18..597716aba3 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthMethodsPolicyMigration.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthMethodsPolicyMigration.ps1
@@ -27,6 +27,8 @@ function Invoke-CIPPStandardAuthMethodsPolicyMigration {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationMethodsPolicy | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod, Policy.Read.All
+ Permission: Graph | PATCH /policies/authenticationMethodsPolicy | Delegated | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthMethodsSettings.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthMethodsSettings.ps1
index 3da179ab6b..b7e66b034b 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthMethodsSettings.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthMethodsSettings.ps1
@@ -32,6 +32,8 @@ function Invoke-CIPPStandardAuthMethodsSettings {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationMethodsPolicy | Application | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod, Policy.Read.All
+ Permission: Graph | PATCH /policies/authenticationMethodsPolicy | Application | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthenticationMethods.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthenticationMethods.ps1
index a7f36107c2..d39e54ab32 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthenticationMethods.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAuthenticationMethods.ps1
@@ -61,6 +61,8 @@ function Invoke-CIPPStandardAuthenticationMethods {
{"report":false,"warn":false,"remediate":false}
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /policies/authenticationMethodsPolicy | Application | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod, Policy.Read.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAutopilotProfile.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAutopilotProfile.ps1
index 3ac241c00c..e9b298b006 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAutopilotProfile.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAutopilotProfile.ps1
@@ -47,6 +47,9 @@ function Invoke-CIPPStandardAutopilotProfile {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeploymentProfiles | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/windowsAutopilotDeploymentProfiles/{id}/assignments | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAutopilotStatusPage.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAutopilotStatusPage.ps1
index 92827e9f7c..64078c365e 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAutopilotStatusPage.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardAutopilotStatusPage.ps1
@@ -40,6 +40,7 @@ function Invoke-CIPPStandardAutopilotStatusPage {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/deviceEnrollmentConfigurations | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardBitLockerKeysForOwnedDevice.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardBitLockerKeysForOwnedDevice.ps1
index c23a14d715..2fd19b628a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardBitLockerKeysForOwnedDevice.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardBitLockerKeysForOwnedDevice.ps1
@@ -27,6 +27,7 @@ function Invoke-CIPPStandardBitLockerKeysForOwnedDevice {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardBranding.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardBranding.ps1
index 89b00ce1a4..8a492941f2 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardBranding.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardBranding.ps1
@@ -35,6 +35,9 @@ function Invoke-CIPPStandardBranding {
"OFFICE_BUSINESS"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /organization/{id}/branding/localizations | Application | OrganizationalBranding.Read.All | Organization.Read.All, Organization.ReadWrite.All, OrganizationalBranding.ReadWrite.All
+ Permission: Graph | POST /organization/{id}/branding/localizations | Application | OrganizationalBranding.ReadWrite.All | Organization.ReadWrite.All
+ Permission: Graph | GET /organization/{id}/branding/localizations/0 | Application | OrganizationalBranding.Read.All | Organization.Read.All, Organization.ReadWrite.All, OrganizationalBranding.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCollaborationDomainRestriction.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCollaborationDomainRestriction.ps1
index afc2518471..43e0e52ebd 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCollaborationDomainRestriction.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCollaborationDomainRestriction.ps1
@@ -29,6 +29,9 @@ function Invoke-CIPPStandardCollaborationDomainRestriction {
REQUIREDCAPABILITIES
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/b2bManagementPolicies | Delegated | Policy.Read.B2BManagementPolicy | Policy.ReadWrite.B2BManagementPolicy
+ Permission: Graph | POST /policies/b2bManagementPolicies | Delegated | Policy.ReadWrite.B2BManagementPolicy
+ Permission: Graph | PATCH /policies/b2bManagementPolicies/{id} | Delegated | Policy.ReadWrite.B2BManagementPolicy
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/list-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCopilotLimitedMode.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCopilotLimitedMode.ps1
index 4779ab0480..36f6c1d42a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCopilotLimitedMode.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCopilotLimitedMode.ps1
@@ -27,6 +27,9 @@ function Invoke-CIPPStandardCopilotLimitedMode {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /copilot/admin/settings/limitedMode | Delegated | CopilotSettings-LimitedMode.Read | CopilotSettings-LimitedMode.ReadWrite
+ Permission: Graph | PATCH /copilot/admin/settings/limitedMode | Delegated | CopilotSettings-LimitedMode.ReadWrite
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCopilotSettings.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCopilotSettings.ps1
index 310bf245c8..9b33b7af8a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCopilotSettings.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCopilotSettings.ps1
@@ -30,6 +30,8 @@ function Invoke-CIPPStandardCopilotSettings {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /copilot/admin/policySettings/{id} | Delegated | CopilotPolicySettings.Read | CopilotPolicySettings.ReadWrite
+ Permission: Graph | PATCH /copilot/admin/policySettings/{id} | Delegated | CopilotPolicySettings.ReadWrite
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCustomBannedPasswordList.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCustomBannedPasswordList.ps1
index a1ca3f72d4..9fdbdfae35 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCustomBannedPasswordList.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardCustomBannedPasswordList.ps1
@@ -37,6 +37,9 @@ function Invoke-CIPPStandardCustomBannedPasswordList {
"AAD_PREMIUM_P2"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /settings | Delegated | GroupSettings.Read.All | GroupSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | POST /settings | Delegated | GroupSettings.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /settings/{id} | Delegated | GroupSettings.ReadWrite.All | Directory.ReadWrite.All, Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefaultPlatformRestrictions.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefaultPlatformRestrictions.ps1
index 7646077895..80a0c2d0de 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefaultPlatformRestrictions.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefaultPlatformRestrictions.ps1
@@ -50,6 +50,8 @@ function Invoke-CIPPStandardDefaultPlatformRestrictions {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/deviceEnrollmentConfigurations | Application | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/deviceEnrollmentConfigurations/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderASRPolicy.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderASRPolicy.ps1
index 8672858f82..63f8a5dcec 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderASRPolicy.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderASRPolicy.ps1
@@ -47,6 +47,9 @@ function Invoke-CIPPStandardDefenderASRPolicy {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderAVPolicy.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderAVPolicy.ps1
index c09e218d5d..035b628c08 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderAVPolicy.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderAVPolicy.ps1
@@ -55,6 +55,9 @@ function Invoke-CIPPStandardDefenderAVPolicy {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderCompliancePolicy.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderCompliancePolicy.ps1
index 392c7d8ebb..ba2a6c3e05 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderCompliancePolicy.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderCompliancePolicy.ps1
@@ -45,6 +45,9 @@ function Invoke-CIPPStandardDefenderCompliancePolicy {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | POST /deviceManagement/mobileThreatDefenseConnectors | Application | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92 | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/mobileThreatDefenseConnectors/fc780465-2017-40d4-a0c5-307022471b92 | Application | DeviceManagementServiceConfig.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderEDRPolicy.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderEDRPolicy.ps1
index ead3429d1d..b6592c55ce 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderEDRPolicy.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderEDRPolicy.ps1
@@ -29,6 +29,9 @@ function Invoke-CIPPStandardDefenderEDRPolicy {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderExclusionPolicy.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderExclusionPolicy.ps1
index dc2b4bf2fa..325ef54373 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderExclusionPolicy.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDefenderExclusionPolicy.ps1
@@ -30,6 +30,9 @@ function Invoke-CIPPStandardDefenderExclusionPolicy {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeletedUserRentention.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeletedUserRentention.ps1
index 672445e29e..e224f3d037 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeletedUserRentention.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeletedUserRentention.ps1
@@ -34,6 +34,8 @@ function Invoke-CIPPStandardDeletedUserRentention {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeployCheckChromeExtension.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeployCheckChromeExtension.ps1
index 9db33b2bda..ef335eeedb 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeployCheckChromeExtension.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeployCheckChromeExtension.ps1
@@ -56,6 +56,10 @@ function Invoke-CIPPStandardDeployCheckChromeExtension {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | DELETE /deviceAppManagement/mobileApps/{id} | Delegated | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceConfigurations | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/deviceConfigurations/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeployMailContact.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeployMailContact.ps1
index a891f21fdf..bd9ef3f9bb 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeployMailContact.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDeployMailContact.ps1
@@ -36,6 +36,7 @@ function Invoke-CIPPStandardDeployMailContact {
"EXCHANGE_LITE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /contacts/{id} | Delegated | OrgContact.Read.All | Directory.Read.All, Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDevicePrepProfile.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDevicePrepProfile.ps1
index af64a16d16..a359cf917e 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDevicePrepProfile.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDevicePrepProfile.ps1
@@ -46,6 +46,15 @@ function Invoke-CIPPStandardDevicePrepProfile {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | DELETE /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/configurationPolicies/{id} | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/configurationPolicies/{id}/assign | Delegated | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | POST /groups | Delegated | Group.ReadWrite.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | POST /servicePrincipals | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableAgentBlueprintCreation.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableAgentBlueprintCreation.ps1
index 371ac26627..82c8a834aa 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableAgentBlueprintCreation.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableAgentBlueprintCreation.ps1
@@ -26,6 +26,7 @@ function Invoke-CIPPStandardDisableAgentBlueprintCreation {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableAppCreation.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableAppCreation.ps1
index 453358da2e..c1a4b45087 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableAppCreation.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableAppCreation.ps1
@@ -33,6 +33,7 @@ function Invoke-CIPPStandardDisableAppCreation {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableEmail.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableEmail.ps1
index e26cacff1a..d7bc76be88 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableEmail.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableEmail.ps1
@@ -27,6 +27,7 @@ function Invoke-CIPPStandardDisableEmail {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/Email | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableExchangeOnlinePowerShell.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableExchangeOnlinePowerShell.ps1
index baa895ff58..5202764da4 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableExchangeOnlinePowerShell.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableExchangeOnlinePowerShell.ps1
@@ -35,6 +35,8 @@ function Invoke-CIPPStandardDisableExchangeOnlinePowerShell {
"EXCHANGE_LITE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /groups/{id}/transitiveMembers/microsoft.graph.user | Delegated | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /roleManagement/directory/roleAssignments | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableGuestDirectory.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableGuestDirectory.ps1
index c8d8f9fd8e..a4bfea9d3b 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableGuestDirectory.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableGuestDirectory.ps1
@@ -35,6 +35,7 @@ function Invoke-CIPPStandardDisableGuestDirectory {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableGuests.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableGuests.ps1
index 958db835e2..c6482b3538 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableGuests.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableGuests.ps1
@@ -34,6 +34,10 @@ function Invoke-CIPPStandardDisableGuests {
"AAD_PREMIUM_P2"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /auditLogs/directoryAudits | Delegated | AuditLog.Read.All | Directory.Read.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | DELETE /users/{id} | Delegated | User.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableInactiveUsers.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableInactiveUsers.ps1
index a90826a762..3a5c165d5a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableInactiveUsers.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableInactiveUsers.ps1
@@ -33,6 +33,9 @@ function Invoke-CIPPStandardDisableInactiveUsers {
"AAD_PREMIUM_P2"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /auditLogs/directoryAudits | Delegated | AuditLog.Read.All | Directory.Read.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableM365GroupUsers.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableM365GroupUsers.ps1
index f6b954985c..a725c9689d 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableM365GroupUsers.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableM365GroupUsers.ps1
@@ -37,6 +37,11 @@ function Invoke-CIPPStandardDisableM365GroupUsers {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /directorySettingTemplates/62375ab9-6b52-47ed-826b-58e47e0e304b | Delegated | GroupSettings.Read.All | Directory.Read.All, Directory.ReadWrite.All, GroupSettings.ReadWrite.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /settings | Delegated | GroupSettings.Read.All | GroupSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | POST /settings | Application | GroupSettings.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /settings/{id} | Application | GroupSettings.ReadWrite.All | Directory.ReadWrite.All, Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableQRCodePin.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableQRCodePin.ps1
index ac15f88c71..0c3983d7cc 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableQRCodePin.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableQRCodePin.ps1
@@ -25,6 +25,7 @@ function Invoke-CIPPStandardDisableQRCodePin {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/QRCodePin | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableReshare.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableReshare.ps1
index 83e70bcdc4..0564aa1213 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableReshare.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableReshare.ps1
@@ -40,6 +40,8 @@ function Invoke-CIPPStandardDisableReshare {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableResourceMailbox.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableResourceMailbox.ps1
index 45a2e3418d..62baf45ada 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableResourceMailbox.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableResourceMailbox.ps1
@@ -34,6 +34,7 @@ function Invoke-CIPPStandardDisableResourceMailbox {
"EXCHANGE_LITE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSMS.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSMS.ps1
index 860ad448cd..f0d655b630 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSMS.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSMS.ps1
@@ -30,6 +30,7 @@ function Invoke-CIPPStandardDisableSMS {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/SMS | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSecurityGroupUsers.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSecurityGroupUsers.ps1
index e158383785..328f66b8e0 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSecurityGroupUsers.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSecurityGroupUsers.ps1
@@ -28,6 +28,7 @@ function Invoke-CIPPStandardDisableSecurityGroupUsers {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSelfServiceLicenses.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSelfServiceLicenses.ps1
index 8ed1c4364c..309377a468 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSelfServiceLicenses.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSelfServiceLicenses.ps1
@@ -27,6 +27,8 @@ function Invoke-CIPPStandardDisableSelfServiceLicenses {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authorizationPolicy | Delegated | Policy.Read.All | Policy.ReadWrite.Authorization
+ Permission: Graph | PATCH /policies/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSharePointLegacyAuth.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSharePointLegacyAuth.ps1
index afe654b1ab..d86e7a0893 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSharePointLegacyAuth.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSharePointLegacyAuth.ps1
@@ -42,6 +42,8 @@ function Invoke-CIPPStandardDisableSharePointLegacyAuth {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSharedMailbox.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSharedMailbox.ps1
index 90b0f39215..12ead9238a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSharedMailbox.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableSharedMailbox.ps1
@@ -30,6 +30,7 @@ function Invoke-CIPPStandardDisableSharedMailbox {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableTenantCreation.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableTenantCreation.ps1
index c9eb296ee4..bc06765826 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableTenantCreation.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableTenantCreation.ps1
@@ -31,6 +31,7 @@ function Invoke-CIPPStandardDisableTenantCreation {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableUserSiteCreate.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableUserSiteCreate.ps1
index f251bad1c7..75bdef6ad5 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableUserSiteCreate.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableUserSiteCreate.ps1
@@ -33,6 +33,8 @@ function Invoke-CIPPStandardDisableUserSiteCreate {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableViva.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableViva.ps1
index 82bcae8df2..00e9ac1e57 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableViva.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableViva.ps1
@@ -25,6 +25,7 @@ function Invoke-CIPPStandardDisableViva {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /organization/{id}/settings/peopleInsights | Application | Organization.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableVoice.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableVoice.ps1
index 4affebd6fd..5d9202a710 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableVoice.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisableVoice.ps1
@@ -30,6 +30,7 @@ function Invoke-CIPPStandardDisableVoice {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/Voice | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisablex509Certificate.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisablex509Certificate.ps1
index cb26d483bb..30a09884ea 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisablex509Certificate.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardDisablex509Certificate.ps1
@@ -25,6 +25,7 @@ function Invoke-CIPPStandardDisablex509Certificate {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/x509Certificate | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEmailAsAlternateLoginId.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEmailAsAlternateLoginId.ps1
index 6acf008957..4bce69082e 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEmailAsAlternateLoginId.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEmailAsAlternateLoginId.ps1
@@ -27,6 +27,9 @@
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/homeRealmDiscoveryPolicies | Delegated | Policy.Read.All | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | POST /policies/homeRealmDiscoveryPolicies | Delegated | Policy.ReadWrite.ApplicationConfiguration
+ Permission: Graph | PATCH /policies/homeRealmDiscoveryPolicies/{id} | Delegated | Policy.ReadWrite.ApplicationConfiguration
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableAppConsentRequests.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableAppConsentRequests.ps1
index c50dc9eb17..01ec660cde 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableAppConsentRequests.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableAppConsentRequests.ps1
@@ -46,6 +46,9 @@ function Invoke-CIPPStandardEnableAppConsentRequests {
"CIS"
UPDATECOMMENTBLOCK
Run the tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/adminConsentRequestPolicy | Delegated | Policy.Read.All | Policy.ReadWrite.ConsentRequest, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PUT /policies/adminConsentRequestPolicy | Delegated | Policy.ReadWrite.ConsentRequest | Directory.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableFIDO2.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableFIDO2.ps1
index 50d04ba984..fd19ba6506 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableFIDO2.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableFIDO2.ps1
@@ -39,6 +39,7 @@ function Invoke-CIPPStandardEnableFIDO2 {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/Fido2 | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableHardwareOAuth.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableHardwareOAuth.ps1
index 183fb9d3b7..f6d6d7eede 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableHardwareOAuth.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableHardwareOAuth.ps1
@@ -25,6 +25,7 @@ function Invoke-CIPPStandardEnableHardwareOAuth {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/HardwareOath | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableNamePronunciation.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableNamePronunciation.ps1
index 8e4f3784d1..d4441b52c7 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableNamePronunciation.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnableNamePronunciation.ps1
@@ -24,6 +24,8 @@ function Invoke-CIPPStandardEnableNamePronunciation {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/people/namePronunciation | Delegated | PeopleSettings.Read.All | PeopleSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/people/namePronunciation | Application | PeopleSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnablePronouns.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnablePronouns.ps1
index e9101f395a..eff13d42c5 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnablePronouns.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnablePronouns.ps1
@@ -25,6 +25,8 @@ function Invoke-CIPPStandardEnablePronouns {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/people/pronouns | Delegated | PeopleSettings.Read.All | PeopleSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/people/pronouns | Application | PeopleSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnforcePrivateGroups.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnforcePrivateGroups.ps1
index a5fcba87c0..946394c853 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnforcePrivateGroups.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnforcePrivateGroups.ps1
@@ -36,6 +36,8 @@ function Invoke-CIPPStandardEnforcePrivateGroups {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | PATCH /groups/{id} | Delegated | Group.ManageProtection.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/list-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnrollmentWindowsHelloForBusinessConfiguration.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnrollmentWindowsHelloForBusinessConfiguration.ps1
index 8d4f734f8c..034c54da54 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnrollmentWindowsHelloForBusinessConfiguration.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardEnrollmentWindowsHelloForBusinessConfiguration.ps1
@@ -45,6 +45,8 @@ function Invoke-CIPPStandardEnrollmentWindowsHelloForBusinessConfiguration {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/deviceEnrollmentConfigurations | Application | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/deviceEnrollmentConfigurations/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExcludedfileExt.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExcludedfileExt.ps1
index e3f87a6861..817c3bdbfe 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExcludedfileExt.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExcludedfileExt.ps1
@@ -34,6 +34,8 @@ function Invoke-CIPPStandardExcludedfileExt {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExternalComplianceTrusted.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExternalComplianceTrusted.ps1
index e31824ff1a..2219ac40a8 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExternalComplianceTrusted.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExternalComplianceTrusted.ps1
@@ -26,6 +26,8 @@ function Invoke-CIPPStandardExternalComplianceTrusted {
"AAD_PREMIUM_P2"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/crossTenantAccessPolicy/default | Delegated | Policy.Read.All | Policy.ReadWrite.CrossTenantAccess
+ Permission: Graph | PATCH /policies/crossTenantAccessPolicy/default | Delegated | Policy.ReadWrite.CrossTenantAccess
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExternalMFATrusted.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExternalMFATrusted.ps1
index 63ec92e4a9..f8ee72b8a7 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExternalMFATrusted.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardExternalMFATrusted.ps1
@@ -31,6 +31,8 @@ function Invoke-CIPPStandardExternalMFATrusted {
"AAD_PREMIUM_P2"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/crossTenantAccessPolicy/default | Delegated | Policy.Read.All | Policy.ReadWrite.CrossTenantAccess
+ Permission: Graph | PATCH /policies/crossTenantAccessPolicy/default | Delegated | Policy.ReadWrite.CrossTenantAccess
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardFIDO2PasskeyProfiles.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardFIDO2PasskeyProfiles.ps1
index 8cea7ca956..9e95a7b20a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardFIDO2PasskeyProfiles.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardFIDO2PasskeyProfiles.ps1
@@ -29,6 +29,8 @@ function Invoke-CIPPStandardFIDO2PasskeyProfiles {
{"report":false,"warn":false,"remediate":false}
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/Fido2 | Application | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
+ Permission: Graph | PATCH /policies/authenticationmethodspolicy/authenticationMethodConfigurations/Fido2 | Application | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardGroupTemplate.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardGroupTemplate.ps1
index 50c6fd6135..15d12f7c23 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardGroupTemplate.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardGroupTemplate.ps1
@@ -30,6 +30,8 @@ function Invoke-CIPPStandardGroupTemplate {
"EXCHANGE_LITE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | PATCH /groups/{id} | Delegated | Group.ManageProtection.All | Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardGuestInvite.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardGuestInvite.ps1
index 61100197ea..ae52654d7a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardGuestInvite.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardGuestInvite.ps1
@@ -30,6 +30,7 @@ function Invoke-CIPPStandardGuestInvite {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardIntuneAppTemplateDeploy.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardIntuneAppTemplateDeploy.ps1
index 4071ccd04b..0a7f97b35e 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardIntuneAppTemplateDeploy.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardIntuneAppTemplateDeploy.ps1
@@ -26,6 +26,7 @@ function Invoke-CIPPStandardIntuneAppTemplateDeploy {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardIntuneComplianceSettings.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardIntuneComplianceSettings.ps1
index 08d70e93f5..9c7a5ce68b 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardIntuneComplianceSettings.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardIntuneComplianceSettings.ps1
@@ -33,6 +33,7 @@ function Invoke-CIPPStandardIntuneComplianceSettings {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /deviceManagement | Application | DeviceManagementApps.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardLegacyEmailReportAddins.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardLegacyEmailReportAddins.ps1
index 63d223d5e9..cd2e3fde15 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardLegacyEmailReportAddins.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardLegacyEmailReportAddins.ps1
@@ -27,6 +27,8 @@ function Invoke-CIPPStandardLegacyEmailReportAddins {
"Microsoft"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /applications | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.ReadWrite.All, Directory.Read.All
+ Permission: Graph | DELETE /applications/{id} | Delegated | Application.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMDMEnrollmentDuringRegistration.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMDMEnrollmentDuringRegistration.ps1
index ecc6d03391..7a4453c5d7 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMDMEnrollmentDuringRegistration.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMDMEnrollmentDuringRegistration.ps1
@@ -32,6 +32,8 @@ function Invoke-CIPPStandardMDMEnrollmentDuringRegistration {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/mobileDeviceManagementPolicies/0000000a-0000-0000-c000-000000000000 | Delegated | Policy.Read.All | Policy.ReadWrite.MobilityManagement
+ Permission: Graph | PATCH /policies/mobileDeviceManagementPolicies/0000000a-0000-0000-c000-000000000000 | Delegated | Policy.ReadWrite.MobilityManagement
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMDMScope.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMDMScope.ps1
index e129ba20ae..3d3d02f4f0 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMDMScope.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMDMScope.ps1
@@ -33,6 +33,9 @@ function Invoke-CIPPStandardMDMScope {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /groups | Application | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /policies/mobileDeviceManagementPolicies/0000000a-0000-0000-c000-000000000000 | Delegated | Policy.Read.All | Policy.ReadWrite.MobilityManagement
+ Permission: Graph | PATCH /policies/mobileDeviceManagementPolicies/0000000a-0000-0000-c000-000000000000 | Delegated | Policy.ReadWrite.MobilityManagement
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMailContacts.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMailContacts.ps1
index e9f4b09809..52cca16d32 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMailContacts.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardMailContacts.ps1
@@ -29,6 +29,9 @@ function Invoke-CIPPStandardMailContacts {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /organization/{id} | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /organization/{id} | Application | DeviceManagementServiceConfig.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardNudgeMFA.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardNudgeMFA.ps1
index feccce2f58..0031d86b41 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardNudgeMFA.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardNudgeMFA.ps1
@@ -32,6 +32,7 @@ function Invoke-CIPPStandardNudgeMFA {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationMethodsPolicy | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod, Policy.Read.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
@@ -44,38 +45,6 @@ function Invoke-CIPPStandardNudgeMFA {
# and is supported by CippFormCondition. Changing state to a 'select' field would allow 'is', but
# would break existing saved NudgeMFA templates that already store the object shape.
- # Resolves comma separated group name entries to registration campaign targets
- function Resolve-NudgeMFATarget {
- param($Entries, $TenantFilter)
- $Resolved = [System.Collections.Generic.List[hashtable]]::new()
- $Failed = $false
- foreach ($Entry in $Entries) {
- try {
- if ($Entry -match '^(all_users|allusers|all users)$') {
- $Resolved.Add(@{ id = 'all_users'; targetType = 'group' })
- } else {
- $EscapedName = $Entry -replace "'", "''"
- $GroupFilter = [System.Uri]::EscapeDataString("startsWith(displayName,'$EscapedName')")
- $MatchedGroups = @(New-GraphGetRequest -uri "https://graph.microsoft.com/beta/groups?`$select=id,displayName&`$filter=$GroupFilter" -tenantid $TenantFilter)
- if ($MatchedGroups.Count -gt 0) {
- foreach ($Group in $MatchedGroups) { $Resolved.Add(@{ id = $Group.id; targetType = 'group' }) }
- if ($MatchedGroups.Count -gt 1) {
- Write-LogMessage -API 'Standards' -tenant $TenantFilter -message "NudgeMFA: Multiple groups matched '$Entry': $($MatchedGroups.displayName -join ', ')" -sev Info
- }
- } else {
- Write-LogMessage -API 'Standards' -tenant $TenantFilter -message "NudgeMFA: No group found matching '$Entry'" -sev Warning
- $Failed = $true
- }
- }
- } catch {
- $ErrorMessage = Get-CippException -Exception $_
- Write-LogMessage -API 'Standards' -tenant $TenantFilter -message "NudgeMFA: Failed to resolve target '$Entry'. Error: $($ErrorMessage.NormalizedError)" -sev Error -LogData $ErrorMessage
- $Failed = $true
- }
- }
- return [PSCustomObject]@{ Targets = $Resolved; Failed = $Failed }
- }
-
# Get state value using null-coalescing operator
$State = $Settings.state.value ?? $Settings.state
@@ -103,7 +72,7 @@ function Invoke-CIPPStandardNudgeMFA {
# $Remediation*Targets are passed to Set-CIPPRegistrationCampaign ($null = keep current targets);
# $Desired*Targets are the fully resolved lists used for the compliance comparison below.
if ($IncludeEntries.Count -gt 0) {
- $IncludeResolution = Resolve-NudgeMFATarget -Entries $IncludeEntries -TenantFilter $Tenant
+ $IncludeResolution = Resolve-CIPPNudgeMFATarget -Entries $IncludeEntries -TenantFilter $Tenant
if ($IncludeResolution.Failed -or $IncludeResolution.Targets.Count -eq 0) {
Write-LogMessage -API 'Standards' -tenant $Tenant -message 'NudgeMFA: Could not resolve all include groups, skipping to avoid removing intended targets.' -sev Error
return
@@ -120,7 +89,7 @@ function Invoke-CIPPStandardNudgeMFA {
$ManageExcludeTargets = $ExcludeEntries.Count -gt 0
if ($ManageExcludeTargets) {
- $ExcludeResolution = Resolve-NudgeMFATarget -Entries $ExcludeEntries -TenantFilter $Tenant
+ $ExcludeResolution = Resolve-CIPPNudgeMFATarget -Entries $ExcludeEntries -TenantFilter $Tenant
if ($ExcludeResolution.Failed) {
Write-LogMessage -API 'Standards' -tenant $Tenant -message 'NudgeMFA: Could not resolve all exclude groups, skipping to avoid excluding the wrong groups.' -sev Error
return
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOauthConsent.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOauthConsent.ps1
index 21f818a044..86ed9843fd 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOauthConsent.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOauthConsent.ps1
@@ -42,6 +42,11 @@ function Invoke-CIPPStandardOauthConsent {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
+ Permission: Graph | GET /policies/permissionGrantPolicies | Delegated | Policy.Read.PermissionGrant | Policy.ReadWrite.PermissionGrant
+ Permission: Graph | POST /policies/permissionGrantPolicies | Delegated | Policy.ReadWrite.PermissionGrant
+ Permission: Graph | GET /policies/permissionGrantPolicies/cipp-consent-policy/includes | Delegated | Policy.Read.PermissionGrant | Directory.Read.All
+ Permission: Graph | POST /policies/permissionGrantPolicies/cipp-consent-policy/includes | Delegated | Policy.ReadWrite.PermissionGrant
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOauthConsentLowSec.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOauthConsentLowSec.ps1
index d9340b2e63..28cb02c0c3 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOauthConsentLowSec.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOauthConsentLowSec.ps1
@@ -25,6 +25,8 @@ function Invoke-CIPPStandardOauthConsentLowSec {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
+ Permission: Graph | GET /servicePrincipals(appId='00000003-0000-0000-c000-000000000000')/delegatedPermissionClassifications | Delegated | Application.Read.All | Directory.Read.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOneDriveLicensedQuota.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOneDriveLicensedQuota.ps1
index c309f3666b..bdd57dadcb 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOneDriveLicensedQuota.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardOneDriveLicensedQuota.ps1
@@ -30,6 +30,8 @@ function Invoke-CIPPStandardOneDriveLicensedQuota {
"ONEDRIVEENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /users | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /users/{id}/drive | Application | Files.Read.All | Files.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPIMRoleSettings.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPIMRoleSettings.ps1
index 3d583f23f4..14ed731327 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPIMRoleSettings.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPIMRoleSettings.ps1
@@ -33,6 +33,9 @@ function Invoke-CIPPStandardPIMRoleSettings {
"AAD_PREMIUM_P2"
UPDATECOMMENTBLOCK
Run the tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /roleManagement/directory/roleDefinitions | Delegated | RoleManagement.Read.Directory | EntitlementManagement.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPWcompanionAppAllowedState.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPWcompanionAppAllowedState.ps1
index 61fe903d73..241bfd432a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPWcompanionAppAllowedState.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPWcompanionAppAllowedState.ps1
@@ -27,6 +27,8 @@ function Invoke-CIPPStandardPWcompanionAppAllowedState {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/microsoftAuthenticator | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
+ Permission: Graph | PATCH /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/microsoftAuthenticator | Delegated | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPWdisplayAppInformationRequiredState.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPWdisplayAppInformationRequiredState.ps1
index 26f7b65f2d..b1a4bb5e25 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPWdisplayAppInformationRequiredState.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPWdisplayAppInformationRequiredState.ps1
@@ -41,6 +41,7 @@ function Invoke-CIPPStandardPWdisplayAppInformationRequiredState {
"CIS"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/microsoftAuthenticator | Application | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPasswordExpireDisabled.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPasswordExpireDisabled.ps1
index ac7622a0df..dbddd316c4 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPasswordExpireDisabled.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPasswordExpireDisabled.ps1
@@ -29,6 +29,8 @@ function Invoke-CIPPStandardPasswordExpireDisabled {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
+ Permission: Graph | PATCH /domains/{id} | Delegated | Domain.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPhishProtection.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPhishProtection.ps1
index 09def9619a..1ebdab838b 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPhishProtection.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPhishProtection.ps1
@@ -32,6 +32,10 @@ function Invoke-CIPPStandardPhishProtection {
"OFFICE_BUSINESS"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /organization/{id}/branding/localizations | Application | OrganizationalBranding.Read.All | Organization.Read.All, Organization.ReadWrite.All, OrganizationalBranding.ReadWrite.All
+ Permission: Graph | POST /organization/{id}/branding/localizations | Application | OrganizationalBranding.ReadWrite.All | Organization.ReadWrite.All
+ Permission: Graph | GET /organization/{id}/branding/localizations/0/customCSS | Delegated | OrganizationalBranding.Read.All | Organization.Read.All, Organization.ReadWrite.All, OrganizationalBranding.ReadWrite.All
+ Permission: Graph | PUT /organization/{id}/branding/localizations/0/customCSS | Application | OrganizationalBranding.ReadWrite.All | Organization.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPlannerBlockTaskDelete.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPlannerBlockTaskDelete.ps1
index c327d2a668..d93cb72a30 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPlannerBlockTaskDelete.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardPlannerBlockTaskDelete.ps1
@@ -29,6 +29,8 @@ function Invoke-CIPPStandardPlannerBlockTaskDelete {
"PROJECTWORKMANAGEMENT"
UPDATECOMMENTBLOCK
Run the tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id}/transitiveMembers/microsoft.graph.user | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardProfilePhotos.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardProfilePhotos.ps1
index 2828bc5442..caae3a25ab 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardProfilePhotos.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardProfilePhotos.ps1
@@ -32,6 +32,9 @@ function Invoke-CIPPStandardProfilePhotos {
"EXCHANGE_LITE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | DELETE /admin/people/photoUpdateSettings | Application | PeopleSettings.ReadWrite.All
+ Permission: Graph | GET /admin/people/photoUpdateSettings | Delegated | PeopleSettings.Read.All | PeopleSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/people/photoUpdateSettings | Application | PeopleSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardRestrictThirdPartyStorageServices.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardRestrictThirdPartyStorageServices.ps1
index 5f648e0003..a036539378 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardRestrictThirdPartyStorageServices.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardRestrictThirdPartyStorageServices.ps1
@@ -35,6 +35,8 @@ function Invoke-CIPPStandardRestrictThirdPartyStorageServices {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /servicePrincipals | Delegated | Application.Read.All | Application.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | PATCH /servicePrincipals(appId='c1f33bc0-bdb4-4248-ba9b-096807ddb43e') | Delegated | Application.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardReusableSettingsTemplate.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardReusableSettingsTemplate.ps1
index 6391728f00..f7d6b4965a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardReusableSettingsTemplate.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardReusableSettingsTemplate.ps1
@@ -29,6 +29,8 @@ function Invoke-CIPPStandardReusableSettingsTemplate {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/reusablePolicySettings | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All, DeviceManagementEndpointSecurity.Read.All, DeviceManagementEndpointSecurity.ReadWrite.All
+ Permission: Graph | POST /deviceManagement/reusablePolicySettings | Delegated | DeviceManagementConfiguration.ReadWrite.All | DeviceManagementEndpointSecurity.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSPOVersionControl.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSPOVersionControl.ps1
index 20ed666ca7..bf8b2f7b9a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSPOVersionControl.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSPOVersionControl.ps1
@@ -38,6 +38,7 @@ function Invoke-CIPPStandardSPOVersionControl {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /sites/getAllSites | Application | Sites.Read.All | Sites.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSecureScoreRemediation.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSecureScoreRemediation.ps1
index 8ea46d6c33..51af349dab 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSecureScoreRemediation.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSecureScoreRemediation.ps1
@@ -27,6 +27,8 @@ function Invoke-CIPPStandardSecureScoreRemediation {
New-GraphPostRequest to /beta/security/secureScoreControlProfiles/{id}
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /security/secureScoreControlProfiles | Delegated | SecurityEvents.Read.All | SecurityEvents.ReadWrite.All
+ Permission: Graph | PATCH /security/secureScoreControlProfiles/{id} | Delegated | SecurityEvents.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSecurityDefaults.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSecurityDefaults.ps1
index b2d2e5b7bf..d11658f077 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSecurityDefaults.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSecurityDefaults.ps1
@@ -27,6 +27,8 @@ function Invoke-CIPPStandardSecurityDefaults {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/identitySecurityDefaultsEnforcementPolicy | Delegated | Policy.Read.All
+ Permission: Graph | PATCH /policies/identitySecurityDefaultsEnforcementPolicy | Delegated | Policy.Read.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSmartLockout.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSmartLockout.ps1
index d201df9338..9f2b770d28 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSmartLockout.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardSmartLockout.ps1
@@ -33,6 +33,9 @@ function Invoke-CIPPStandardSmartLockout {
"AAD_PREMIUM_P2"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /settings | Delegated | GroupSettings.Read.All | GroupSettings.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All
+ Permission: Graph | POST /settings | Delegated | GroupSettings.ReadWrite.All | Directory.ReadWrite.All
+ Permission: Graph | PATCH /settings/{id} | Delegated | GroupSettings.ReadWrite.All | Directory.ReadWrite.All, Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardStaleEntraDevices.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardStaleEntraDevices.ps1
index 5e6a8177e3..a52776f7e7 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardStaleEntraDevices.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardStaleEntraDevices.ps1
@@ -33,6 +33,9 @@ function Invoke-CIPPStandardStaleEntraDevices {
REQUIREDCAPABILITIES
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /devices | Delegated | Device.Read.All | Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | DELETE /devices/{id} | Delegated | Directory.AccessAsUser.All
+ Permission: Graph | PATCH /devices/{id} | Delegated | Directory.AccessAsUser.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTAP.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTAP.ps1
index f9d47d0c01..b0ac1e7e09 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTAP.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTAP.ps1
@@ -36,6 +36,7 @@ function Invoke-CIPPStandardTAP {
"CIPP"
UPDATECOMMENTBLOCK
Run the tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationmethodspolicy/authenticationMethodConfigurations/TemporaryAccessPass | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTeamsDisableResourceAccounts.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTeamsDisableResourceAccounts.ps1
index 844700d8f7..b9af7a866d 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTeamsDisableResourceAccounts.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTeamsDisableResourceAccounts.ps1
@@ -28,6 +28,7 @@ function Invoke-CIPPStandardTeamsDisableResourceAccounts {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /users/{id} | Delegated | User.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTenantDefaultTimezone.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTenantDefaultTimezone.ps1
index 8903679dbf..d71e698c18 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTenantDefaultTimezone.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardTenantDefaultTimezone.ps1
@@ -34,6 +34,8 @@ function Invoke-CIPPStandardTenantDefaultTimezone {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUndoOauth.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUndoOauth.ps1
index 372d1c6800..417301d8c2 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUndoOauth.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUndoOauth.ps1
@@ -25,6 +25,7 @@ function Invoke-CIPPStandardUndoOauth {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /policies/authorizationPolicy/authorizationPolicy | Delegated | Policy.ReadWrite.Authorization
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUsageLocation.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUsageLocation.ps1
index 997ff151d7..f7bee2a13b 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUsageLocation.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUsageLocation.ps1
@@ -29,6 +29,9 @@ function Invoke-CIPPStandardUsageLocation {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{id}/transitiveMembers/microsoft.graph.user | Application | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | PATCH /users/{id} | Application | User.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUserPreferredLanguage.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUserPreferredLanguage.ps1
index c7294f042e..df8833c94a 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUserPreferredLanguage.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardUserPreferredLanguage.ps1
@@ -24,6 +24,7 @@ function Invoke-CIPPStandardUserPreferredLanguage {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | PATCH /users/{id} | Application | User.ReadWrite.All | Directory.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardWindowsBackupRestore.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardWindowsBackupRestore.ps1
index 9470677110..363ec24244 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardWindowsBackupRestore.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardWindowsBackupRestore.ps1
@@ -32,6 +32,8 @@ function Invoke-CIPPStandardWindowsBackupRestore {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/deviceEnrollmentConfigurations | Delegated | DeviceManagementServiceConfig.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/deviceEnrollmentConfigurations/{id} | Delegated | DeviceManagementServiceConfig.ReadWrite.All | DeviceManagementConfiguration.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardallowOAuthTokens.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardallowOAuthTokens.ps1
index 0dafcf5dd6..62a113e81e 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardallowOAuthTokens.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardallowOAuthTokens.ps1
@@ -27,6 +27,7 @@ function Invoke-CIPPStandardallowOAuthTokens {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/softwareOath | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardallowOTPTokens.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardallowOTPTokens.ps1
index 6d80029fd6..0590b0e4ee 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardallowOTPTokens.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardallowOTPTokens.ps1
@@ -27,6 +27,7 @@ function Invoke-CIPPStandardallowOTPTokens {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/authenticationMethodsPolicy/authenticationMethodConfigurations/microsoftAuthenticator | Delegated | Policy.Read.AuthenticationMethod | Policy.ReadWrite.AuthenticationMethod
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandarddisableMacSync.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandarddisableMacSync.ps1
index bbec836f6a..0bada1e86d 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandarddisableMacSync.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandarddisableMacSync.ps1
@@ -33,6 +33,8 @@ function Invoke-CIPPStandarddisableMacSync {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneBrandingProfile.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneBrandingProfile.ps1
index 0693daae42..2e7153c755 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneBrandingProfile.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneBrandingProfile.ps1
@@ -41,6 +41,8 @@ function Invoke-CIPPStandardintuneBrandingProfile {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/intuneBrandingProfiles/c3a59481-1bf2-46ce-94b3-66eec07a8d60 | Application | DeviceManagementApps.Read.All | DeviceManagementServiceConfig.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/intuneBrandingProfiles/c3a59481-1bf2-46ce-94b3-66eec07a8d60 | Application | DeviceManagementApps.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceReg.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceReg.ps1
index 5736ef01bf..34d118e315 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceReg.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceReg.ps1
@@ -35,6 +35,8 @@ function Invoke-CIPPStandardintuneDeviceReg {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/deviceRegistrationPolicy | Delegated | Policy.Read.DeviceConfiguration | Policy.Read.All, Policy.ReadWrite.DeviceConfiguration
+ Permission: Graph | PUT /policies/deviceRegistrationPolicy | Delegated | Policy.ReadWrite.DeviceConfiguration
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceRegLocalAdmins.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceRegLocalAdmins.ps1
index 6ccf1484cc..26dd6d48aa 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceRegLocalAdmins.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceRegLocalAdmins.ps1
@@ -27,6 +27,8 @@ function Invoke-CIPPStandardintuneDeviceRegLocalAdmins {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/deviceRegistrationPolicy | Delegated | Policy.Read.DeviceConfiguration | Policy.Read.All, Policy.ReadWrite.DeviceConfiguration
+ Permission: Graph | PUT /policies/deviceRegistrationPolicy | Delegated | Policy.ReadWrite.DeviceConfiguration
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceRetirementDays.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceRetirementDays.ps1
index 47cab7f26e..53ee9de7b0 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceRetirementDays.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneDeviceRetirementDays.ps1
@@ -33,6 +33,8 @@ function Invoke-CIPPStandardintuneDeviceRetirementDays {
"MICROSOFTINTUNEPLAN1"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /deviceManagement/managedDeviceCleanupRules | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | PATCH /deviceManagement/managedDeviceCleanupRules/{id} | Delegated | DeviceManagementManagedDevices.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRequireMFA.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRequireMFA.ps1
index 0489d1a2b4..610db2bc2f 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRequireMFA.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRequireMFA.ps1
@@ -27,6 +27,8 @@ function Invoke-CIPPStandardintuneRequireMFA {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/deviceRegistrationPolicy | Delegated | Policy.Read.DeviceConfiguration | Policy.Read.All, Policy.ReadWrite.DeviceConfiguration
+ Permission: Graph | PUT /policies/deviceRegistrationPolicy | Delegated | Policy.ReadWrite.DeviceConfiguration
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRestrictUserDeviceJoin.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRestrictUserDeviceJoin.ps1
index b4c2d3d5f6..43f8abf9ab 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRestrictUserDeviceJoin.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRestrictUserDeviceJoin.ps1
@@ -26,6 +26,8 @@ function Invoke-CIPPStandardintuneRestrictUserDeviceJoin {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/deviceRegistrationPolicy | Delegated | Policy.Read.DeviceConfiguration | Policy.Read.All, Policy.ReadWrite.DeviceConfiguration
+ Permission: Graph | PUT /policies/deviceRegistrationPolicy | Delegated | Policy.ReadWrite.DeviceConfiguration
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRestrictUserDeviceRegistration.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRestrictUserDeviceRegistration.ps1
index 2a65baeb67..18c0d9bc77 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRestrictUserDeviceRegistration.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardintuneRestrictUserDeviceRegistration.ps1
@@ -26,6 +26,8 @@ function Invoke-CIPPStandardintuneRestrictUserDeviceRegistration {
RECOMMENDEDBY
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/deviceRegistrationPolicy | Delegated | Policy.Read.DeviceConfiguration | Policy.Read.All, Policy.ReadWrite.DeviceConfiguration
+ Permission: Graph | PUT /policies/deviceRegistrationPolicy | Delegated | Policy.ReadWrite.DeviceConfiguration
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardlaps.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardlaps.ps1
index a5f41e6953..97d709cdb9 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardlaps.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardlaps.ps1
@@ -29,6 +29,8 @@ function Invoke-CIPPStandardlaps {
"CIPP"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /policies/deviceRegistrationPolicy | Delegated | Policy.Read.DeviceConfiguration | Policy.Read.All, Policy.ReadWrite.DeviceConfiguration
+ Permission: Graph | PUT /policies/deviceRegistrationPolicy | Delegated | Policy.ReadWrite.DeviceConfiguration
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardsharingCapability.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardsharingCapability.ps1
index ce083ddf38..b927f3c4d1 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardsharingCapability.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardsharingCapability.ps1
@@ -41,6 +41,8 @@ function Invoke-CIPPStandardsharingCapability {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardsharingDomainRestriction.ps1 b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardsharingDomainRestriction.ps1
index 42964b7836..300afadac1 100644
--- a/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardsharingDomainRestriction.ps1
+++ b/backend/Modules/CIPPStandards/Public/Standards/Invoke-CIPPStandardsharingDomainRestriction.ps1
@@ -40,6 +40,8 @@ function Invoke-CIPPStandardsharingDomainRestriction {
"ONEDRIVE_ENTERPRISE"
UPDATECOMMENTBLOCK
Run the Tools\Update-StandardsComments.ps1 script to update this comment block
+ Permission: Graph | GET /admin/sharepoint/settings | Application | SharePointTenantSettings.Read.All | SharePointTenantSettings.ReadWrite.All
+ Permission: Graph | PATCH /admin/sharepoint/settings | Application | SharePointTenantSettings.ReadWrite.All
.LINK
https://docs.cipp.app/user-documentation/tenant/standards/alignment/templates/available-standards
#>
diff --git a/backend/Modules/CippExtensions/Public/Extension Functions/Sync-CippExtensionData.ps1 b/backend/Modules/CippExtensions/Public/Extension Functions/Sync-CippExtensionData.ps1
index fa0ae80d76..a69463a187 100644
--- a/backend/Modules/CippExtensions/Public/Extension Functions/Sync-CippExtensionData.ps1
+++ b/backend/Modules/CippExtensions/Public/Extension Functions/Sync-CippExtensionData.ps1
@@ -2,6 +2,24 @@ function Sync-CippExtensionData {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /deviceAppManagement/mobileApps | Delegated | DeviceManagementApps.Read.All | DeviceManagementApps.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceCompliancePolicies | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/deviceCompliancePolicies/{0}/deviceStatuses | Delegated | DeviceManagementConfiguration.Read.All | DeviceManagementConfiguration.ReadWrite.All
+ Permission: Graph | GET /deviceManagement/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | GET /directory/subscriptions | Delegated | Organization.Read.All | Directory.Read.All
+ Permission: Graph | GET /directoryRoles | Delegated | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /directoryRoles/{0}/members | Delegated | RoleManagement.Read.Directory | RoleManagement.ReadWrite.Directory, Directory.Read.All, Directory.ReadWrite.All
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
+ Permission: Graph | GET /groups | Delegated | Group.ReadBasic.All | Directory.Read.All, Directory.ReadWrite.All, Group-PreferredDataLocation.ReadWrite.All, Group.ManageProtection.All, Group.Read.All, Group.ReadWrite.All, GroupMember.Read.All
+ Permission: Graph | GET /groups/{0}/members | Delegated | GroupMember.ReadBasic.All | Directory.Read.All, Group.Read.All, Group.ReadBasic.All, Group.ReadWrite.All, GroupMember.Read.All, GroupMember.ReadWrite.All
+ Permission: Graph | GET /identity/conditionalAccess/policies | Delegated | Policy.Read.All
+ Permission: Graph | GET /organization | Delegated | DeviceManagementServiceConfig.Read.All | Organization.Read.All, Directory.Read.All, Organization.ReadWrite.All, Directory.ReadWrite.All
+ Permission: Graph | GET /reports/getMailboxUsageDetail(period='D7') | Delegated | Reports.Read.All
+ Permission: Graph | GET /reports/getOneDriveUsageAccountDetail(period='D7') | Delegated | Reports.Read.All
+ Permission: Graph | GET /security/secureScoreControlProfiles | Delegated | SecurityEvents.Read.All | SecurityEvents.ReadWrite.All
+ Permission: Graph | GET /subscribedSkus | Delegated | LicenseAssignment.Read.All | Directory.Read.All, Directory.ReadWrite.All, Organization.Read.All, Organization.ReadWrite.All
+ Permission: Graph | GET /users | Delegated | User.ReadBasic.All | User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CippExtensions/Public/HIBP/Get-BreachInfo.ps1 b/backend/Modules/CippExtensions/Public/HIBP/Get-BreachInfo.ps1
index f90f478b0e..4305dcf6a2 100644
--- a/backend/Modules/CippExtensions/Public/HIBP/Get-BreachInfo.ps1
+++ b/backend/Modules/CippExtensions/Public/HIBP/Get-BreachInfo.ps1
@@ -1,4 +1,8 @@
function Get-BreachInfo {
+ <#
+ .NOTES
+ Permission: Graph | GET /domains | Delegated | Domain.Read.All | Domain.ReadWrite.All, Directory.Read.All
+ #>
[CmdletBinding()]
param(
[Parameter()]
diff --git a/backend/Modules/CippExtensions/Public/Hudu/Invoke-HuduExtensionSync.ps1 b/backend/Modules/CippExtensions/Public/Hudu/Invoke-HuduExtensionSync.ps1
index e7a1521439..4ed37d7ee0 100644
--- a/backend/Modules/CippExtensions/Public/Hudu/Invoke-HuduExtensionSync.ps1
+++ b/backend/Modules/CippExtensions/Public/Hudu/Invoke-HuduExtensionSync.ps1
@@ -2,6 +2,8 @@ function Invoke-HuduExtensionSync {
<#
.FUNCTIONALITY
Internal
+ .NOTES
+ Permission: Graph | GET /directory/deviceLocalCredentials | Delegated | DeviceLocalCredential.ReadBasic.All | DeviceLocalCredential.Read.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Modules/CippExtensions/Public/New-CippExtAlert.ps1 b/backend/Modules/CippExtensions/Public/New-CippExtAlert.ps1
index e160c5095a..b912ebf73c 100644
--- a/backend/Modules/CippExtensions/Public/New-CippExtAlert.ps1
+++ b/backend/Modules/CippExtensions/Public/New-CippExtAlert.ps1
@@ -1,4 +1,8 @@
function New-CippExtAlert {
+ <#
+ .NOTES
+ Permission: Graph | GET /users/{id} | Application | User.Read.All | User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
[switch]$TestRun = $false,
diff --git a/backend/Modules/CippExtensions/Public/NinjaOne/Invoke-NinjaOneDeviceWebhook.ps1 b/backend/Modules/CippExtensions/Public/NinjaOne/Invoke-NinjaOneDeviceWebhook.ps1
index a5e8cae010..eb35331263 100644
--- a/backend/Modules/CippExtensions/Public/NinjaOne/Invoke-NinjaOneDeviceWebhook.ps1
+++ b/backend/Modules/CippExtensions/Public/NinjaOne/Invoke-NinjaOneDeviceWebhook.ps1
@@ -1,4 +1,9 @@
function Invoke-NinjaOneDeviceWebhook {
+ <#
+ .NOTES
+ Permission: Graph | GET /deviceManagement/managedDevices | Delegated | DeviceManagementManagedDevices.Read.All | DeviceManagementManagedDevices.ReadWrite.All
+ Permission: Graph | GET /devices/{id} | Delegated | Device.Read.All | Directory.Read.All, Directory.ReadWrite.All
+ #>
[CmdletBinding()]
param (
$Data,
diff --git a/backend/Modules/CippExtensions/Public/Sherweb/Invoke-SherwebScheduledLicenseRemoval.ps1 b/backend/Modules/CippExtensions/Public/Sherweb/Invoke-SherwebScheduledLicenseRemoval.ps1
index a0d8a81f1f..772fc9cf4c 100644
--- a/backend/Modules/CippExtensions/Public/Sherweb/Invoke-SherwebScheduledLicenseRemoval.ps1
+++ b/backend/Modules/CippExtensions/Public/Sherweb/Invoke-SherwebScheduledLicenseRemoval.ps1
@@ -22,6 +22,8 @@ function Invoke-SherwebScheduledLicenseRemoval {
.PARAMETER Headers
Optional headers for logging context. Supplied by the scheduler.
+ .NOTES
+ Permission: Graph | GET /subscribedSkus | Delegated | LicenseAssignment.Read.All | Directory.Read.All, Directory.ReadWrite.All, Organization.Read.All, Organization.ReadWrite.All
#>
[CmdletBinding()]
param(
diff --git a/backend/Tests/DBCache/Set-CIPPDBCache.Memory.Tests.ps1 b/backend/Tests/DBCache/Set-CIPPDBCache.Memory.Tests.ps1
index 7758dfbffe..0247ce1218 100644
--- a/backend/Tests/DBCache/Set-CIPPDBCache.Memory.Tests.ps1
+++ b/backend/Tests/DBCache/Set-CIPPDBCache.Memory.Tests.ps1
@@ -89,6 +89,7 @@ BeforeAll {
. (Join-Path $RepoRoot 'Modules/CIPPCore/Public/Start-CIPPMailboxDataStage.ps1')
. (Get-CollectorPath 'Set-CIPPDBCacheGroups')
+ . (Get-CollectorPath 'Write-CIPPDBCacheGroupBatch')
. (Get-CollectorPath 'Set-CIPPDBCacheTeams')
. (Get-CollectorPath 'Set-CIPPDBCacheSiteActivity')
. (Get-CollectorPath 'Set-CIPPDBCacheSharePointSiteUsage')
diff --git a/backend/Tests/DBCache/SharePointSharingLinks.Resume.Tests.ps1 b/backend/Tests/DBCache/SharePointSharingLinks.Resume.Tests.ps1
index 27973a7c96..ff688e7567 100644
--- a/backend/Tests/DBCache/SharePointSharingLinks.Resume.Tests.ps1
+++ b/backend/Tests/DBCache/SharePointSharingLinks.Resume.Tests.ps1
@@ -155,9 +155,9 @@ BeforeAll {
. $HelperFile.FullName
}
. (Join-Path $RepoRoot 'Modules/CIPPDB/Public/DBCache/Set-CIPPDBCacheSharePointSharingLinks.ps1')
- . (Join-Path $RepoRoot 'Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Push-DBCacheSharePointSiteSharingLinks.ps1')
- . (Join-Path $RepoRoot 'Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Push-StoreSharePointSharingLinks.ps1')
- . (Join-Path $RepoRoot 'Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing/Push-SharingLinksDispatchDrives.ps1')
+ foreach ($HelperFile in (Get-ChildItem (Join-Path $RepoRoot 'Modules/CIPPActivityTriggers/Public/Entrypoints/Activity Triggers/SharePoint Sharing') -Filter '*.ps1')) {
+ . $HelperFile.FullName
+ }
# --- shared builders ------------------------------------------------------------------------
function New-SiteItem {
diff --git a/backend/Tests/Private/Get-CIPPCAPolicyIdentityCoverage.Tests.ps1 b/backend/Tests/Private/Get-CIPPCAPolicyIdentityCoverage.Tests.ps1
index f26f289f1c..b2ed0278b9 100644
--- a/backend/Tests/Private/Get-CIPPCAPolicyIdentityCoverage.Tests.ps1
+++ b/backend/Tests/Private/Get-CIPPCAPolicyIdentityCoverage.Tests.ps1
@@ -3,6 +3,9 @@
BeforeAll {
$RepoRoot = Split-Path -Parent (Split-Path -Parent (Split-Path -Parent $PSCommandPath))
. (Join-Path $RepoRoot 'Modules/CIPPCore/Public/Get-CIPPCAPolicyIdentityCoverage.ps1')
+ foreach ($Helper in 'Add-CIPPCACoverageReason', 'New-CIPPCACoverageReason', 'Expand-CIPPCACoverageGuestBlock', 'Get-CIPPCACoverageGuestCategory', 'Get-CIPPCACoverageGuestHomeTenantId', 'Test-CIPPCACoverageExternalTenantMatch') {
+ . (Join-Path $RepoRoot "Modules/CIPPCore/Public/$Helper.ps1")
+ }
function New-GraphGetRequest { param($uri, $tenantid, $AsApp, $ErrorAction, $noPagination, $ComplexFilter) }
function New-GraphBulkRequest { param($Requests, $tenantid, $asapp, $Version) }
diff --git a/backend/Tests/Private/Invoke-CIPPPIMAssignmentAction.Tests.ps1 b/backend/Tests/Private/Invoke-CIPPPIMAssignmentAction.Tests.ps1
index a220a89608..fe2be04236 100644
--- a/backend/Tests/Private/Invoke-CIPPPIMAssignmentAction.Tests.ps1
+++ b/backend/Tests/Private/Invoke-CIPPPIMAssignmentAction.Tests.ps1
@@ -12,6 +12,8 @@ BeforeAll {
$RepoRoot = Split-Path -Parent (Split-Path -Parent (Split-Path -Parent $PSCommandPath))
. (Join-Path $RepoRoot 'Modules/CIPPCore/Public/PIM/New-CIPPPIMScheduleRequest.ps1')
. (Join-Path $RepoRoot 'Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMAssignmentAction.ps1')
+ . (Join-Path $RepoRoot 'Modules/CIPPCore/Public/PIM/Send-CIPPPIMScheduleRequest.ps1')
+ . (Join-Path $RepoRoot 'Modules/CIPPCore/Public/PIM/Invoke-CIPPPIMActiveAssignmentRemoval.ps1')
function Test-CIPPStandardLicense { param($StandardName, $TenantFilter, $Preset, [switch]$SkipLog) $true }
function Get-CIPPPIMRoleAssignments { param($TenantFilter, $PrincipalId, $RoleDefinitionId, [switch]$FromCache, [switch]$IncludePolicy) }
diff --git a/backend/Tests/Static/PIMSecureDirection.Tests.ps1 b/backend/Tests/Static/PIMSecureDirection.Tests.ps1
index 403a2984d7..9569e76773 100644
--- a/backend/Tests/Static/PIMSecureDirection.Tests.ps1
+++ b/backend/Tests/Static/PIMSecureDirection.Tests.ps1
@@ -72,7 +72,7 @@ Describe 'PIM secure-direction invariants' {
It 'keeps every secure-direction action inside Invoke-CIPPPIMAssignmentAction or the builder' {
# The endpoint and the standards must delegate; they may not post schedule requests directly.
$Direct = @($script:Sources | Where-Object {
- $_.Name -notin @('New-CIPPPIMScheduleRequest.ps1', 'Invoke-CIPPPIMAssignmentAction.ps1') -and
+ $_.Name -notin @('New-CIPPPIMScheduleRequest.ps1', 'Invoke-CIPPPIMAssignmentAction.ps1', 'Invoke-CIPPPIMActiveAssignmentRemoval.ps1') -and
$_.Text -match 'New-CIPPPIMScheduleRequest\b'
} | ForEach-Object { $_.Name })
$Direct | Should -BeNullOrEmpty