Skip to content

Weekly Permissions sync 2026-03-26#1481

Closed
marabooy wants to merge 2 commits intomasterfrom
permissions-update/2026-03-26
Closed

Weekly Permissions sync 2026-03-26#1481
marabooy wants to merge 2 commits intomasterfrom
permissions-update/2026-03-26

Conversation

@marabooy
Copy link
Copy Markdown
Contributor

Weekly Permissions sync 2026-03-26

@marabooy marabooy requested a review from a team as a code owner March 26, 2026 00:30
Copilot AI review requested due to automatic review settings March 26, 2026 00:30
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Weekly sync updating the permissions metadata used by the repo’s permissions catalog, adding newly introduced permissions and API path mappings.

Changes:

  • Added provisioning entries for AgentIdentityBlueprint.UpdateManagerApps.All, AgentRegistration.Read.All, AgentRegistration.ReadWrite.All, and Calls.ReportSyntheticMedia.All.
  • Extended Entitlement Management permissions to include Access Evaluation detections/policies endpoints and CRUD mappings.
  • Extended Network Access permissions to include mcpPolicies and related policyRules endpoints.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
permissions/new/provisioningInfo.json Adds/updates provisioning metadata entries for several new permissions.
permissions/new/permissions.json Adds new API path mappings under existing permissions (EntitlementManagement, NetworkAccess).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

"resourceAppId": "00000002-0000-0000-c000-000000000000"
}
],
"AgentRegistration.Read.All": [
Copy link

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The permission key at this indentation level is misaligned (one extra leading space before the opening quote). Please align it with the surrounding keys to keep JSON indentation consistent (2 spaces per level / consistent column alignment).

Suggested change
"AgentRegistration.Read.All": [
"AgentRegistration.Read.All": [

Copilot uses AI. Check for mistakes.
Comment on lines +22770 to +22783
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"GET"
],
"paths": {
"/identitygovernance/accessevaluationdetections": "least=DelegatedWork,Application",
"/identitygovernance/accessevaluationdetections/{id}": "least=DelegatedWork,Application",
"/identitygovernance/accessevaluationpolicies": "least=DelegatedWork,Application",
"/identitygovernance/accessevaluationpolicies/{id}": "least=DelegatedWork,Application"
}
Copy link

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This adds a second pathSet with the same schemeKeys and methods (DelegatedWork+Application, GET) as an existing pathSet just above. Consider merging these new paths into the existing GET pathSet to avoid redundant blocks and keep the permission mapping easier to maintain.

Copilot uses AI. Check for mistakes.
Comment on lines +23029 to +23042
{
"schemeKeys": [
"DelegatedWork",
"Application"
],
"methods": [
"GET"
],
"paths": {
"/identitygovernance/accessevaluationdetections": "",
"/identitygovernance/accessevaluationdetections/{id}": "",
"/identitygovernance/accessevaluationpolicies": "",
"/identitygovernance/accessevaluationpolicies/{id}": ""
}
Copy link

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is already a GET pathSet for the same schemeKeys (DelegatedWork+Application) earlier in this permission that lists many GET paths with empty values. Consider adding these new access evaluation GET paths to that existing GET pathSet instead of introducing a separate, identical GET block.

Copilot uses AI. Check for mistakes.
@jasonjoh jasonjoh closed this Mar 27, 2026
@jasonjoh jasonjoh deleted the permissions-update/2026-03-26 branch March 27, 2026 16:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants