Conversation
There was a problem hiding this comment.
Pull request overview
Weekly permissions sync updating the permissions dataset under permissions/new/ by adding new permission variants and adjusting endpoint-to-permission mappings.
Changes:
- Added new permission entries to
provisioningInfo.json(AgentIdentityBlueprintPrincipal.UpdateSponsors.All, OneDrive.Provision.All, ServicePrincipal.*). - Added
/security/dataSecurityAndGovernance/processContentto theContent.Process.Allpath set inpermissions.json.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| permissions/new/provisioningInfo.json | Adds new permission variant records for additional scopes/roles. |
| permissions/new/permissions.json | Adds a missing /security/.../processContent path mapping under Content.Process.All. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "OneDrive.Provision.All": [ | ||
| { | ||
| "id": "00000000-0000-0000-0000-000000000000", | ||
| "scheme": "Application", | ||
| "environment": "public", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000003-0000-0ff1-ce00-000000000000" |
There was a problem hiding this comment.
OneDrive.Provision.All uses an all-zero GUID for the id field. Elsewhere in this file, unknown/placeholder permission IDs are represented as an empty string (""), so using 00000000-0000-0000-0000-000000000000 is inconsistent and may be treated as a real ID by downstream tooling. Please replace this with an empty string if the real permission ID is unknown, or populate the actual GUID if available.
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| } | ||
| ], | ||
| "AgentRegistration.Read.All": [ |
There was a problem hiding this comment.
There is an extra leading space before the "AgentRegistration.Read.All" key compared to surrounding entries, which breaks the otherwise consistent indentation/formatting of this JSON file. Please align this key's indentation with the other top-level permission keys in the same object.
| "AgentRegistration.Read.All": [ | |
| "AgentRegistration.Read.All": [ |
Weekly Permissions sync 2026-04-08