Merge branch 'main' into networkaccess-privateaccess-tutorial

Author: FaithOmbongi

.gdn/.gdnbaselines

@@ -0,0 +1,31 @@
+{
+  "hydrated": true,
+  "properties": {
+    "helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/baselines",
+    "hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
+  },
+  "version": "1.0.0",
+  "baselines": {
+    "default": {
+      "name": "default",
+      "createdDate": "2024-08-26 12:06:54Z",
+      "lastUpdatedDate": "2024-08-26 12:06:54Z"
+    }
+  },
+  "results": {
+    "b3d46ea406a66acd0fa8b1130ec9be5b501ad4a933d98ce70193c68771b6e7be": {
+      "signature": "b3d46ea406a66acd0fa8b1130ec9be5b501ad4a933d98ce70193c68771b6e7be",
+      "alternativeSignatures": [
+        "79e125fb7927450b0ebb02d6b3ddb03d7a6a971e21dfdc1c246ba8fd39f0969e"
+      ],
+      "target": "update-permissions-reference.ps1",
+      "line": 170,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "psscriptanalyzer",
+      "ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
+      "createdDate": "2024-08-26 12:06:54Z"
+    }
+  }
+}

.gdn/.gdnsuppress

@@ -0,0 +1,31 @@
+{
+  "hydrated": true,
+  "properties": {
+    "helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/suppressions",
+    "hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
+  },
+  "version": "1.0.0",
+  "suppressionSets": {
+    "default": {
+      "name": "default",
+      "createdDate": "2024-08-26 12:06:54Z",
+      "lastUpdatedDate": "2024-08-26 12:06:54Z"
+    }
+  },
+  "results": {
+    "b3d46ea406a66acd0fa8b1130ec9be5b501ad4a933d98ce70193c68771b6e7be": {
+      "signature": "b3d46ea406a66acd0fa8b1130ec9be5b501ad4a933d98ce70193c68771b6e7be",
+      "alternativeSignatures": [
+        "79e125fb7927450b0ebb02d6b3ddb03d7a6a971e21dfdc1c246ba8fd39f0969e"
+      ],
+      "target": "update-permissions-reference.ps1",
+      "line": 170,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "psscriptanalyzer",
+      "ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
+      "createdDate": "2024-08-26 12:06:54Z"
+    }
+  }
+}

.github/CODEOWNERS

@@ -37,7 +37,7 @@ jobs:
       run: dotnet build --configuration Release
     - name: Install hidi
       run: dotnet tool install microsoft.openapi.hidi -g
-    - name: Create metadata output director
+    - name: Create metadata output directory
       run: |
         mkdir openapi
         cd openapi
@@ -55,21 +55,22 @@ jobs:
         ./transforms/csdl/transform.ps1 -xslPath preprocess_csdl.xsl -inputPath ../../schemas/beta-Mooncake.csdl -outputPath ../../transformed_beta-Mooncake.csdl -addInnerErrorDescription $true -removeCapabilityAnnotations $false -csdlVersion v1.0
     - name: Transform CSDL with hidi
       working-directory: ./metadata
+      shell: pwsh
       env:
         SETTINGS: ./conversion-settings/openapi.json
       run: |
-        hidi transform --cs transformed_v1.0-Prod.csdl -o ../openapi/v1.0/Prod.yml --co -f Yaml --sp $SETTINGS
-        hidi transform --cs transformed_v1.0-Fairfax.csdl -o ../openapi/v1.0/Fairfax.yml --co -f Yaml --sp $SETTINGS
-        hidi transform --cs transformed_v1.0-Mooncake.csdl -o ../openapi/v1.0/Mooncake.yml --co -f Yaml --sp $SETTINGS
-        hidi transform --cs transformed_beta-Prod.csdl -o ../openapi/beta/Prod.yml --co -f Yaml --sp $SETTINGS
-        hidi transform --cs transformed_beta-Fairfax.csdl -o ../openapi/beta/Fairfax.yml --co -f Yaml --sp $SETTINGS
-        hidi transform --cs transformed_beta-Mooncake.csdl -o ../openapi/beta/Mooncake.yml --co -f Yaml --sp $SETTINGS
+        hidi transform --cs transformed_v1.0-Prod.csdl -o ../openapi/v1.0/Prod.yml --co -f Yaml --sp $Env:SETTINGS
+        hidi transform --cs transformed_v1.0-Fairfax.csdl -o ../openapi/v1.0/Fairfax.yml --co -f Yaml --sp $Env:SETTINGS
+        hidi transform --cs transformed_v1.0-Mooncake.csdl -o ../openapi/v1.0/Mooncake.yml --co -f Yaml --sp $Env:SETTINGS
+        hidi transform --cs transformed_beta-Prod.csdl -o ../openapi/beta/Prod.yml --co -f Yaml --sp $Env:SETTINGS
+        hidi transform --cs transformed_beta-Fairfax.csdl -o ../openapi/beta/Fairfax.yml --co -f Yaml --sp $Env:SETTINGS
+        hidi transform --cs transformed_beta-Mooncake.csdl -o ../openapi/beta/Mooncake.yml --co -f Yaml --sp $Env:SETTINGS
     - name: Run cloud support tool
       env:
         TOOL: ./tool/src/bin/Release/net8.0/CheckCloudSupport
       run: |
-        $TOOL --open-api ./openapi/v1.0 --api-docs ./docs/api-reference/v1.0/api --remove-old-includes
-        $TOOL --open-api ./openapi/beta --api-docs ./docs/api-reference/beta/api --remove-old-includes
+        $TOOL --open-api ./openapi/v1.0 --api-docs ./docs/api-reference/v1.0/api --overrides ./docs/api-reference/cloud.api.overrides.json --excludes ./docs/api-reference/cloud.exclusions.json --remove-old-includes
+        $TOOL --open-api ./openapi/beta --api-docs ./docs/api-reference/beta/api --overrides ./docs/api-reference/cloud.api.overrides.json --excludes ./docs/api-reference/cloud.exclusions.json --remove-old-includes
     - name: Get token
       id: get_token
       uses: microsoftgraph/get-app-token@v1.0.4

.github/workflows/cloud-support.yml

@@ -2,7 +2,7 @@ name: Daily reference TOC generation
 
 on:
   schedule:
-  - cron: 0 11 * * *
+  - cron: 0 11 * * 1-5
   workflow_dispatch:
 
 permissions:

.github/workflows/daily-ref-toc-gen.yml

@@ -0,0 +1,83 @@
+name: Update permissions reference file
+
+on:
+  schedule:
+    - cron: 0 6 * * 1  # Runs every Monday at 6 AM UTC
+  workflow_dispatch:  # Allows manual triggering of the workflow
+    
+permissions:
+  contents: write
+  pull-requests: write
+  
+jobs:
+  update-permissions-reference:
+    name: Update permissions reference
+    runs-on: windows-latest
+    
+    steps:
+    - name: Set up Git to handle long paths
+      run: git config --system core.longpaths true
+
+    - name: Checkout microsoft-graph-docs
+      uses: actions/checkout@v4.1.3
+      with:
+        path: docs
+
+    - name: Run PowerShell script to update permissions
+      shell: pwsh
+      run: | 
+        $ClientId = "${{ secrets.GRAPH_CLIENT_ID }}"
+        $TenantId = "${{ secrets.GRAPH_TENANT_ID }}"
+        $ClientSecret = "${{ secrets.GRAPH_CLIENT_SECRET }}"
+        ./docs/update-permissions-reference.ps1 -ClientId $ClientId -TenantId $TenantId -ClientSecret $ClientSecret
+        
+    - name: Get token
+      id: get_token
+      uses: microsoftgraph/get-app-token@v1.0.4
+      with: 
+        application-id: ${{ secrets.APPLICATION_ID }}
+        application-private-key: ${{ secrets.APPLICATION_PRIVATE_KEY }}
+        
+    - name: Commit updates from service principal
+      working-directory: ./docs
+      shell: pwsh
+      env:
+        GH_TOKEN: ${{ steps.get_token.outputs.app-token }}
+      run: |
+        $status = git status --porcelain
+        if ($status -eq $null) {
+          Write-Host "No changes to commit." -ForegroundColor Green
+        }
+        else {          
+          git config user.email "GraphTooling@service.microsoft.com"
+          git config user.name "Microsoft Graph DevX Tooling"
+          git add .
+          git commit -m "Update permissions reference"
+        } 
+    
+    - name: Run PowerShell script to correct errors in permissions descriptions
+      shell: pwsh
+      run: | 
+        ./docs/correct-permissions-reference-errors.ps1
+    
+    - name: Commit errors correction and open a pull request
+      working-directory: ./docs
+      shell: pwsh
+      env:
+       GH_TOKEN: ${{ steps.get_token.outputs.app-token }}
+      run: |
+        $status = git status --porcelain
+        if ($status -eq $null) {
+          Write-Host "No changes to commit." -ForegroundColor Green
+        } else { 
+          $dateToday = Get-Date -Format 'yyyy-MM-dd'
+          $branchName = "permissions-reference/$dateToday" 
+          $prTitle = "${dateToday}: Automated permissions reference update"
+          
+          git add .
+          git commit -m "Correct errors in permissions reference"
+          git checkout -b $branchName
+          git push --set-upstream origin $branchName -f
+          
+          gh pr create --base main --title $prTitle --body "Scheduled permissions reference update" --reviewer "FaithOmbongi,msewaweru" --label "ready for content review"
+        }

.github/workflows/permissions-reference-gen.yml

@@ -234,6 +234,41 @@
             "source_path": "api-reference/beta/api/industrydata-industrydataconnector-update.md",
             "redirect_url": "/graph/api/industrydata-azuredatalakeconnector-update?view=graph-rest-beta",
             "redirect_document_id": true
+        },
+        {
+            "source_path": "graph/data-connect-pam.md",
+            "redirect_url": "/concepts/data-connect-concept-overview",
+            "redirect_document_id": true
+        },
+        {
+            "source_path": "api-reference/beta/api/formatprotection-get.md ",
+            "redirect_url": "/graph/api/workbookformatprotection-get.md?view=graph-rest-beta",
+            "redirect_document_id": false
+        },
+        {
+            "source_path": "api-reference/v1.0/api/formatprotection-get.md",
+            "redirect_url": "/graph/api/workbookformatprotection-get.md?view=graph-rest-1.0",
+            "redirect_document_id": false
+        },
+        {
+            "source_path": "api-reference/beta/api/formatprotection-update.md",
+            "redirect_url": "/graph/api/workbookformatprotection-update.md?view=graph-rest-beta",
+            "redirect_document_id": false
+        },
+        {
+            "source_path": "api-reference/v1.0/api/formatprotection-update.md ",
+            "redirect_url": "/graph/api/workbookformatprotection-update.md?view=graph-rest-1.0",
+            "redirect_document_id": false
+        },
+        {
+            "source_path": "api-reference/beta/resources/formatprotection.md",
+            "redirect_url": "/graph/api/resources/workbookformatprotection.md?view=graph-rest-beta",
+            "redirect_document_id": false
+        },
+        {
+            "source_path": "api-reference/v1.0/resources/formatprotection.md",
+            "redirect_url": "/graph/api/resources/workbookformatprotection.md?view=graph-rest-1.0",
+            "redirect_document_id": false
         }
     ]
-}
+}

.openpublishing.redirection.json

@@ -0,0 +1,19 @@
+{
+    "githubPullRequests.ignoredPullRequestBranches": [
+        "main"
+    ],
+    "json.schemas": [
+        {
+            "fileMatch": [
+                "cloud.api.overrides.json"
+            ],
+            "url": "https://raw.githubusercontent.com/microsoftgraph/msgraph-cloud-support/main/schema/api.overrides.schema.json"
+        },
+        {
+            "fileMatch": [
+                "cloud.exclusions.json"
+            ],
+            "url": "https://raw.githubusercontent.com/microsoftgraph/msgraph-cloud-support/main/schema/cloud.exclusions.schema.json"
+        }
+    ]
+}

.vscode/settings.json

@@ -249,7 +249,6 @@ Content-type: application/json
 
 The following example shows a request to retrieve the collection of custom extension stage settings that are defined for a policy and their associated access package custom workflow extension.
 
-
 # [HTTP](#tab/http)
 <!-- {
   "blockType": "request",