Weekly Permissions sync 2026-01-12 #1402
Conversation
There was a problem hiding this comment.
Pull request overview
This PR performs a weekly permissions synchronization dated 2026-01-12, updating permission definitions and API path mappings in the permissions configuration files.
Changes:
- Added 6 new permission entries (MS-ServicePrincipal.Create and 5 ManagedIdentity permissions)
- Added 6 new Windows Update API paths in permissions.json
- Fixed formatting issues including trailing whitespace and inconsistent indentation throughout provisioningInfo.json
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
| permissions/new/provisioningInfo.json | Added new MS-ServicePrincipal and ManagedIdentity permission definitions; normalized JSON formatting with consistent indentation and removed trailing whitespace |
| permissions/new/permissions.json | Added new Windows Update policy-related API paths for read and write operations |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "MS-ServicePrincipal.Create": [ | ||
| { | ||
| "id": "", | ||
| "scheme": "Application", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| }, | ||
| { | ||
| "id": "", | ||
| "scheme": "DelegatedWork", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| } | ||
| ], |
There was a problem hiding this comment.
The new permission entries for "MS-ServicePrincipal.Create" have empty "id" and "environment" fields. These fields should contain valid values. Empty strings for the "id" field are problematic as this field typically serves as a unique identifier for the permission, and empty "environment" values may cause issues when the permission is applied in specific environments.
| "ManagedIdentity.Read.All": [ | ||
| { | ||
| "id": "", | ||
| "scheme": "DelegatedWork", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| }, | ||
| { | ||
| "id": "", | ||
| "scheme": "Application", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| } | ||
| ], | ||
| "ManagedIdentity.Update.All": [ | ||
| { | ||
| "id": "", | ||
| "scheme": "DelegatedWork", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| }, | ||
| { | ||
| "id": "", | ||
| "scheme": "Application", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| } | ||
| ], | ||
| "ManagedIdentity.Delete.All": [ | ||
| { | ||
| "id": "", | ||
| "scheme": "DelegatedWork", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| }, | ||
| { | ||
| "id": "", | ||
| "scheme": "Application", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| } | ||
| ], | ||
| "ManagedIdentity.HardDelete.All": [ | ||
| { | ||
| "id": "", | ||
| "scheme": "DelegatedWork", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| }, | ||
| { | ||
| "id": "", | ||
| "scheme": "Application", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| } | ||
| ], | ||
| "ManagedIdentity.Restore.All": [ | ||
| { | ||
| "id": "", | ||
| "scheme": "DelegatedWork", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| }, | ||
| { | ||
| "id": "", | ||
| "scheme": "Application", | ||
| "environment": "", | ||
| "isHidden": true, | ||
| "isEnabled": true, | ||
| "resourceAppId": "00000002-0000-0000-c000-000000000000" | ||
| } | ||
| ], |
There was a problem hiding this comment.
All five new ManagedIdentity permission entries (Read.All, Update.All, Delete.All, HardDelete.All, and Restore.All) have empty "id" and "environment" fields. These fields should contain valid values. Empty strings for the "id" field are problematic as this field typically serves as a unique identifier for the permission, and empty "environment" values may cause issues when the permission is applied in specific environments.
Weekly Permissions sync 2026-01-12