Skip to content

Commit 8b83a2a

Browse files
FaithOmbongiFaithOmbongi
authored
Overrride permissions automation for user-specific hardware OATH token APIs
1 parent 00b6996 commit 8b83a2a

25 files changed

+41
-78
lines changed

‎.vscode/settings.json

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
{
22
"githubPullRequests.ignoredPullRequestBranches": [
3+
"main",
34
"main",
45
"main"
56
],

‎api-reference/beta/api/authentication-delete-hardwareoathmethods.md

Lines changed: 2 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -23,20 +23,11 @@ Unassign a [hardware token](../resources/hardwareoathauthenticationmethod.md) fr
2323
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

2525
### Permissions acting on self
26-
<!-- {
27-
"blockType": "permissions",
28-
"name": "authentication-delete-hardwareoathmethods-permissions"
29-
}
30-
-->
31-
<!-- { "blockType": "permissions", "name": "authentication_delete_hardwareoathmethods" } -->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3227
[!INCLUDE [permissions-table](../includes/permissions/authentication-delete-hardwareoathmethods-permissions.md)]
3328

3429
## Permissions acting on other users
35-
<!-- {
36-
"blockType": "permissions",
37-
"name": "authentication-delete-hardwareoathmethods-2-permissions"
38-
}
39-
-->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
4031
[!INCLUDE [permissions-table](../includes/permissions/authentication-delete-hardwareoathmethods-2-permissions.md)]
4132

4233
[!INCLUDE [rbac-authentication-methods-apis-write-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-write-others.md)]

‎api-reference/beta/api/authentication-list-hardwareoathmethods.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,11 +23,11 @@ Get a list of the [hardware tokens](../resources/hardwareoathauthenticationmetho
2323
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

2525
### Permissions acting on self
26-
<!-- { "blockType": "permissions", "name": "authentication_list_hardwareoathmethods" } -->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2727
[!INCLUDE [permissions-table](../includes/permissions/authentication-list-hardwareoathmethods-permissions.md)]
2828

2929
### Permissions acting on other users
30-
<!-- { "blockType": "permissions", "name": "authentication_list_hardwareoathmethods_2" } -->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3131
[!INCLUDE [permissions-table](../includes/permissions/authentication-list-hardwareoathmethods-2-permissions.md)]
3232

3333
[!INCLUDE [rbac-authentication-methods-apis-read-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-read-others.md)]

‎api-reference/beta/api/authentication-post-hardwareoathmethods.md

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,15 +23,11 @@ Assign a [hardware token](../resources/hardwareoathauthenticationmethod.md) to a
2323
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

2525
## Permissions acting on self
26-
<!-- { "blockType": "permissions", "name": "authentication_post_hardwareoathmethods" } -->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2727
[!INCLUDE [permissions-table](../includes/permissions/authentication-post-hardwareoathmethods-permissions.md)]
2828

2929
## Permissions acting on other users
30-
<!-- {
31-
"blockType": "permissions",
32-
"name": "authentication-post-hardwareoathmethods-2-permissions"
33-
}
34-
-->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3531
[!INCLUDE [permissions-table](../includes/permissions/authentication-post-hardwareoathmethods-2-permissions.md)]
3632

3733
[!INCLUDE [rbac-authentication-methods-apis-write-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-write-others.md)]

‎api-reference/beta/api/hardwareoathauthenticationmethod-activate.md

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,15 +23,11 @@ Activate a [hardware OATH token](../resources/hardwareoathauthenticationmethod.m
2323
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

2525
## Permissions acting on self
26-
<!-- { "blockType": "permissions", "name": "hardwareoathauthenticationmethod_activate" } -->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2727
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-activate-permissions.md)]
2828

2929
## Permissions acting on other users
30-
<!-- {
31-
"blockType": "permissions",
32-
"name": "hardwareoathauthenticationmethod-activate-2-permissions"
33-
}
34-
-->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3531
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-activate-2-permissions.md)]
3632

3733
[!INCLUDE [rbac-authentication-methods-apis-write-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-write-others.md)]

‎api-reference/beta/api/hardwareoathauthenticationmethod-assignandactivate.md

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,15 +23,11 @@ Assign and activate a [hardware token](../resources/hardwareoathtokenauthenticat
2323
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

2525
## Permissions acting on self
26-
<!-- { "blockType": "permissions", "name": "hardwareoathauthenticationmethod_assignandactivate" } -->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2727
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-assignandactivate-permissions.md)]
2828

2929
## Permissions acting on another user
30-
<!-- {
31-
"blockType": "permissions",
32-
"name": "hardwareoathauthenticationmethod-assignandactivate-2-permissions"
33-
}
34-
-->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3531
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-assignandactivate-2-permissions.md)]
3632

3733
[!INCLUDE [rbac-authentication-methods-apis-write-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-write-others.md)]

‎api-reference/beta/api/hardwareoathauthenticationmethod-assignandactivatebyserialnumber.md

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,15 +23,11 @@ Assign and activate a [hardware token](../resources/hardwareoathauthenticationme
2323
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

2525
## Permissions acting on self
26-
<!-- { "blockType": "permissions", "name": "hardwareoathauthenticationmethod_assignandactivatebyserialnumber" } -->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2727
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-assignandactivatebyserialnumber-permissions.md)]
2828

2929
## Permissions acting on another user
30-
<!-- {
31-
"blockType": "permissions",
32-
"name": "hardwareoathauthenticationmethod-assignandactivatebyserialnumber-2-permissions"
33-
}
34-
-->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3531
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-assignandactivatebyserialnumber-2-permissions.md)]
3632

3733
[!INCLUDE [rbac-authentication-methods-apis-write-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-write-others.md)]

‎api-reference/beta/api/hardwareoathauthenticationmethod-deactivate.md

Lines changed: 2 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -23,19 +23,11 @@ Deactive a [hardware OATH token](../resources/hardwareoathauthenticationmethod.m
2323
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

2525
## Permissions acting on self
26-
<!-- {
27-
"blockType": "permissions",
28-
"name": "hardwareoathauthenticationmethod-deactivate-permissions"
29-
}
30-
-->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3127
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-deactivate-permissions.md)]
3228

3329
## Permissions acting on another user
34-
<!-- {
35-
"blockType": "permissions",
36-
"name": "hardwareoathauthenticationmethod-deactivate-2-permissions"
37-
}
38-
-->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3931
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-deactivate-2-permissions.md)]
4032

4133
[!INCLUDE [rbac-authentication-methods-apis-write-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-write-others.md)]

‎api-reference/beta/api/hardwareoathauthenticationmethod-get.md

Lines changed: 2 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,15 +23,11 @@ Get the details of the [hardware token](../resources/hardwareoathauthenticationm
2323
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

2525
## Permissions acting on self
26-
<!-- { "blockType": "permissions", "name": "hardwareoathauthenticationmethod_get" } -->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2727
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-get-permissions.md)]
2828

2929
## Permissions acting on another user
30-
<!-- {
31-
"blockType": "permissions",
32-
"name": "hardwareoathauthenticationmethod-get-2-permissions"
33-
}
34-
-->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3531
[!INCLUDE [permissions-table](../includes/permissions/hardwareoathauthenticationmethod-get-2-permissions.md)]
3632

3733
[!INCLUDE [rbac-authentication-methods-apis-read-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-read-others.md)]

‎api-reference/beta/includes/permissions/authentication-delete-hardwareoathmethods-2-permissions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
66

77
|Permission type|Least privileged permission|Higher privileged permissions|
88
|:---|:---|:---|
9-
|Delegated (work or school account)|Not supported.|Not supported.|
9+
|Delegated (work or school account)|UserAuthenticationMethod.ReadWrite.All|Not available.|
1010
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
11-
|Application|Not supported.|Not supported.|
11+
|Application|UserAuthenticationMethod.ReadWrite.All|Not available.|
1212

0 commit comments

Comments
 (0)