Skip to content

Weekly Permissions sync 2026-06-03#1548

Open
marabooy wants to merge 1 commit into
masterfrom
permissions-update/2026-06-03
Open

Weekly Permissions sync 2026-06-03#1548
marabooy wants to merge 1 commit into
masterfrom
permissions-update/2026-06-03

Conversation

@marabooy
Copy link
Copy Markdown
Contributor

@marabooy marabooy commented Jun 3, 2026

Weekly Permissions sync 2026-06-03

@marabooy marabooy requested a review from a team as a code owner June 3, 2026 12:07
Copilot AI review requested due to automatic review settings June 3, 2026 12:07
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Weekly permissions content sync updating the permissions catalog and deployment metadata.

Changes:

  • Added deployment metadata for Policy.Read.ApplicationConfiguration in provisioningInfo.json (hidden/disabled entries).
  • Updated route mappings to remove /auditlogs/signins* from Directory.Read.All and added AlsoRequires=Policy.Read.All for /policies/identitysecuritydefaultsenforcementpolicy under relevant write scopes.
  • Removed the Policy.Read.ApplicationConfiguration permission definition from permissions.json.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
permissions/new/provisioningInfo.json Adds provisioning/deployment entries for Policy.Read.ApplicationConfiguration.
permissions/new/permissions.json Adjusts permission-to-route mappings (audit log sign-ins removal from Directory.Read.All, new AlsoRequires for security defaults enforcement policy) and removes the Policy.Read.ApplicationConfiguration permission definition.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines 39450 to +39452
"/identity/conditionalaccess/authenticationcontextclassreferences/{id}": "",
"/identity/continuousaccessevaluationpolicy": "",
"/policies/identitysecuritydefaultsenforcementpolicy": ""
"/policies/identitysecuritydefaultsenforcementpolicy": "AlsoRequires=Policy.Read.All"
Comment on lines 40330 to 40332
"paths": {
"/policies/identitysecuritydefaultsenforcementpolicy": "least=DelegatedWork,Application"
"/policies/identitysecuritydefaultsenforcementpolicy": "least=DelegatedWork,Application;AlsoRequires=Policy.Read.All"
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants