From 3fef49f6b94490ff15d2effb8402fdc34cca9f6d Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Mon, 24 Nov 2025 03:27:10 +0300
Subject: [PATCH] Weekly Permissions sync 2025-11-24

---
 permissions/new/permissions.json      | 132 +++++++++++++++++++++++++-
 permissions/new/provisioningInfo.json |  14 +--
 2 files changed, 136 insertions(+), 10 deletions(-)

diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json
index 56d1a974..3e855e55 100644
--- a/permissions/new/permissions.json
+++ b/permissions/new/permissions.json
@@ -5705,7 +5705,6 @@
             "/me/calendars/delta": "",
             "/me/calendarview/delta": "",
             "/me/events/delta": "",
-            "/places/{id}/checkIns/{calendarEventId}": "least=DelegatedWork,Application,DelegatedPersonal",
             "/users/{id}/calendar/calendarview": "",
             "/users/{id}/calendar/events/delta": "",
             "/users/{id}/calendargroups/{id}/calendars/{id}/calendarview": "",
@@ -5721,6 +5720,17 @@
             "/users/{id}/reminderview(startdatetime={value},enddatetime={value})": ""
           }
         },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/places/{id}/checkIns/{calendarEventId}": "least=DelegatedWork"
+          }
+        },
         {
           "schemeKeys": [
             "DelegatedWork"
@@ -5773,11 +5783,21 @@
           "paths": {
             "/me/calendar/getschedule": "",
             "/me/calendar/permanentDelete": "least=DelegatedWork,Application",
-            "/places/{id}/checkIns": "least=DelegatedWork,Application",
             "/users/{id}/calendar/getschedule": "",
             "/users/{id}/calendar/permanentDelete": "least=DelegatedWork,Application"
           }
         },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "POST"
+          ],
+          "paths": {
+            "/places/{id}/checkIns": "least=DelegatedWork"
+          }
+        },
         {
           "schemeKeys": [
             "DelegatedWork"
@@ -9017,7 +9037,6 @@
             "POST"
           ],
           "paths": {
-            "/devicemanagement/virtualendpoint/deviceimages": "least=DelegatedWork,Application",
             "/devicemanagement/virtualendpoint/externalpartnersettings": "least=DelegatedWork,Application",
             "/devicemanagement/virtualendpoint/provisioningpolicies": "least=DelegatedWork,Application",
             "/devicemanagement/virtualendpoint/settingprofiles": "least=DelegatedWork,Application",
@@ -9178,6 +9197,7 @@
             "POST"
           ],
           "paths": {
+            "/devicemanagement/virtualendpoint/deviceimages": "least=DelegatedWork,Application",
             "/rolemanagement/cloudpc/roleassignments": "least=DelegatedWork,Application",
             "/rolemanagement/devicemanagement/roleassignments": "least=DelegatedWork,Application"
           }
@@ -29501,6 +29521,52 @@
         "ownerSecurityGroup": "stisaprvc"
       }
     },
+    "MailboxConfigItem.Read": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read user's UserConfiguration objects",
+          "adminDescription": "Allows the app to read user's UserConfiguration objects, on behalf of the the signed-in user.",
+          "userDisplayName": "Read your UserConfiguration objects",
+          "userDescription": "Allows the app to read your UserConfiguration objects.",
+          "requiresAdminConsent": false,
+          "privilegeLevel": 2
+        },
+        "DelegatedPersonal": {
+          "adminDisplayName": "Read user's UserConfiguration objects",
+          "adminDescription": "Allows the app to read user's UserConfiguration objects, on behalf of the the signed-in user.",
+          "userDisplayName": "Read your UserConfiguration objects",
+          "userDescription": "Allows the app to read your UserConfiguration objects.",
+          "requiresAdminConsent": false,
+          "privilegeLevel": 2
+        },
+        "Application": {
+          "adminDisplayName": "Read all users' UserConfiguration objects",
+          "adminDescription": "Allows the app to read all users' UserConfiguration objects.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "DelegatedPersonal",
+            "Application"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/me/mailFolders/{id}/userConfigurations/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
+            "/users/{id}/mailFolders/{id}/userConfigurations/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "GraphExoSchemaAdmin"
+      }
+    },
     "MailboxFolder.Read": {
       "authorizationType": "oAuth2",
       "schemes": {
@@ -34363,6 +34429,42 @@
           "paths": {
             "/identity/conditionalaccess/vpnconnectivitycertificates/{thumbprint}": "least=DelegatedWork"
           }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/identity/conditionalaccess/claimProviders": "least=DelegatedWork",
+            "/identity/conditionalaccess/claimProviders/getControls": "least=DelegatedWork"
+          }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "POST"
+          ],
+          "paths": {
+            "/identity/conditionalaccess/claimProviders": "least=DelegatedWork",
+            "/identity/conditionalaccess/claimProviders/validate": "least=DelegatedWork"
+          }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "DELETE",
+            "PATCH"
+          ],
+          "paths": {
+            "/identity/conditionalaccess/claimProviders/{name}": "least=DelegatedWork"
+          }
         }
       ],
       "ownerInfo": {
@@ -35540,6 +35642,30 @@
           "paths": {
             "/identity/conditionalaccess/vpnconnectivitycertificates/{thumbprint}": ""
           }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "POST"
+          ],
+          "paths": {
+            "/identity/conditionalaccess/claimProviders": "",
+            "/identity/conditionalaccess/claimProviders/validate": ""
+          }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "DELETE",
+            "PATCH"
+          ],
+          "paths": {
+            "/identity/conditionalaccess/claimProviders/{name}": ""
+          }
         }
       ],
       "ownerInfo": {
diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json
index ff2e0c2b..23f73e26 100644
--- a/permissions/new/provisioningInfo.json
+++ b/permissions/new/provisioningInfo.json
@@ -8142,19 +8142,19 @@
     ],
     "MailboxConfigItem.Read": [
       {
-        "id": "",
+        "id": "27d9d776-f4d2-426d-80ad-5f22f2b01b0a",
         "scheme": "DelegatedWork",
         "environment": "public",
-        "isHidden": true,
-        "isEnabled": false,
+        "isHidden": false,
+        "isEnabled": true,
         "resourceAppId": "c999ed3e-27ae-4cb3-b3a2-46b056af63d3"
       },
       {
-        "id": "",
+        "id": "aa6d92d4-b25a-4640-aefe-3e3231e5e736",
         "scheme": "Application",
         "environment": "public",
-        "isHidden": true,
-        "isEnabled": false,
+        "isHidden": false,
+        "isEnabled": true,
         "resourceAppId": "c999ed3e-27ae-4cb3-b3a2-46b056af63d3"
       }
     ],
@@ -24434,4 +24434,4 @@
 			}
 		]
   }
-}
\ No newline at end of file
+}