Conversation
There was a problem hiding this comment.
Pull request overview
Weekly sync updating the generated permissions artifacts under permissions/new/ with newly discovered scopes/endpoints and refreshed IDs.
Changes:
- Added new WorkIQ-related delegated permission entries to
provisioningInfo.json. - Added new Drive archive/unarchive endpoints and expanded Place.ReadWrite.All to include Application scheme coverage in
permissions.json. - Updated several UserAuthMethodAuthApp permission IDs/resourceAppIds in
provisioningInfo.json.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.
| File | Description |
|---|---|
| permissions/new/provisioningInfo.json | Adds new WorkIQ permission blocks and updates IDs/resourceAppId mappings for several auth-method permissions. |
| permissions/new/permissions.json | Adds Drive archive/unarchive paths, adds Application scheme for Place.ReadWrite.All, and adds SharePoint cross-tenant migration app routes. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "WorkIQAgent.Ask": [ | ||
| { | ||
| "id": "", | ||
| "scheme": "DelegatedWork", | ||
| "environment": "public", |
There was a problem hiding this comment.
The "WorkIQAgent.Ask" key is indented inconsistently compared to adjacent keys (extra leading space). This repo appears to require exactly 4-space indentation per JSON nesting level; please align this key’s indentation with the surrounding entries to avoid formatting/validation issues.
| "/solutions/sharepoint/migrations/crossorganizationmigrationapps": "least=DelegatedWork,Application", | ||
| "/solutions/sharepoint/migrations/crossorganizationmigrationapps/{appId}/unregister": "least=DelegatedWork,Application", | ||
| "/solutions/sharepoint/migrations/crossOrganizationmigrationtasks": "least=DelegatedWork,Application", | ||
| "/solutions/sharepoint/migrations/crossOrganizationmigrationtasks/{id}/cancel": "least=DelegatedWork,Application" |
There was a problem hiding this comment.
The newly added SharePoint migrations paths use the segment "crossorganizationmigrationapps" (lowercase 'o'), while related existing paths in this same block use "crossOrganization..." casing. If path matching is case-sensitive in the permission resolution logic, this inconsistency can prevent these entries from ever matching. Please confirm the canonical Graph route name and use consistent casing (likely "crossOrganizationmigrationapps") across all related paths.
| ], | ||
| "paths": { | ||
| "/solutions/sharepoint/migrations/crossOrganizationGroupMappings(sourceGroupObjectId={sourceGroupObjectId})": "least=DelegatedWork,Application", | ||
| "/solutions/sharepoint/migrations/crossorganizationmigrationapps/{appId}": "least=DelegatedWork,Application", |
There was a problem hiding this comment.
This GET path also uses "crossorganizationmigrationapps" casing, which is inconsistent with the existing "crossOrganization..." routes nearby. Please verify the correct route name and keep casing consistent to ensure permission lookups match.
2 participants
Weekly Permissions sync 2026-02-07