Merge pull request #26140 from microsoftgraph/owinfreyATL-TermsOfUse-Notes

Terms of Use RBAC note updates

Author: FaithOmbongi

api-reference/beta/api/agreement-get.md

@@ -24,7 +24,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "agreement_get" } -->
 [!INCLUDE [permissions-table](../includes/permissions/agreement-get-permissions.md)]
 
-[!INCLUDE [rbac-tou-apis](../includes/rbac-for-apis/rbac-tou-apis.md)]
+[!INCLUDE [rbac-tou-security-reader-apis](../includes/rbac-for-apis/rbac-tou-security-reader-apis.md)]
 
 ## HTTP request
 <!-- { "blockType": "ignored" } -->

api-reference/beta/api/agreement-list-acceptances.md

@@ -23,6 +23,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "agreement_list_acceptances" } -->
 [!INCLUDE [permissions-table](../includes/permissions/agreement-list-acceptances-permissions.md)]
 
+[!INCLUDE [rbac-tou-security-reader-apis](../includes/rbac-for-apis/rbac-tou-security-reader-apis.md)]
+
 ## HTTP request
 
 <!-- {

api-reference/beta/api/agreement-list-files.md

@@ -23,6 +23,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "agreement_list_files" } -->
 [!INCLUDE [permissions-table](../includes/permissions/agreement-list-files-permissions.md)]
 
+[!INCLUDE [rbac-tou-security-reader-apis](../includes/rbac-for-apis/rbac-tou-security-reader-apis.md)]
+
 
 ## HTTP request
 

api-reference/beta/api/agreement-post-files.md

@@ -23,6 +23,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "agreement_post_files" } -->
 [!INCLUDE [permissions-table](../includes/permissions/agreement-post-files-permissions.md)]
 
+[!INCLUDE [rbac-tou-apis](../includes/rbac-for-apis/rbac-tou-apis.md)]
+
 ## HTTP request
 
 <!-- {

api-reference/beta/api/agreementfile-get.md

@@ -23,6 +23,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "agreementfile_get" } -->
 [!INCLUDE [permissions-table](../includes/permissions/agreementfile-get-permissions.md)]
 
+[!INCLUDE [rbac-tou-security-reader-apis](../includes/rbac-for-apis/rbac-tou-security-reader-apis.md)]
+
 ## HTTP request
 
 <!-- {

api-reference/beta/api/agreementfile-list-localizations.md

@@ -23,6 +23,8 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "agreementfile_list_localizations" } -->
 [!INCLUDE [permissions-table](../includes/permissions/agreementfile-list-localizations-permissions.md)]
 
+[!INCLUDE [rbac-tou-security-reader-apis](../includes/rbac-for-apis/rbac-tou-security-reader-apis.md)]
+
 ## HTTP request
 
 <!-- {

api-reference/beta/api/termsofusecontainer-list-agreements.md

@@ -24,7 +24,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "termsofusecontainer_list_agreements" } -->
 [!INCLUDE [permissions-table](../includes/permissions/termsofusecontainer-list-agreements-permissions.md)]
 
-[!INCLUDE [rbac-tou-apis](../includes/rbac-for-apis/rbac-tou-apis.md)]
+[!INCLUDE [rbac-tou-security-reader-apis](../includes/rbac-for-apis/rbac-tou-security-reader-apis.md)]
 
 ## HTTP request
 <!-- { "blockType": "ignored" } -->

api-reference/beta/api/user-list-agreementacceptances.md

@@ -14,7 +14,7 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Retrieve a user's [agreementAcceptance](../resources/agreementacceptance.md) objects.
+Allows the signed-in user to retrieve their [agreementAcceptance](../resources/agreementacceptance.md) objects.
 
 [!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
 
@@ -24,6 +24,9 @@ Choose the permission or permissions marked as least privileged for this API. Us
 <!-- { "blockType": "permissions", "name": "user_list_agreementacceptances" } -->
 [!INCLUDE [permissions-table](../includes/permissions/user-list-agreementacceptances-permissions.md)]
 
+> [!IMPORTANT]
+> This API allows the signed-in user to retrieve their [agreementAcceptance](../resources/agreementacceptance.md) objects. It doesn't require them to have any additional [Microsoft Entra roles](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) as the [Default user role](/entra/fundamentals/users-default-permissions?toc=%2Fgraph%2Ftoc.json) authorizes them to retrieve their agreement acceptances.
+
 ## HTTP request
 <!-- { "blockType": "ignored" } -->
 ```http

api-reference/beta/includes/rbac-for-apis/rbac-tou-apis.md

@@ -4,5 +4,5 @@ ms.topic: include
 ---
 
 > [!IMPORTANT]
-> In delegated scenarios with work or school accounts, the signed-in user must be an owner or member of the group or be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) or a custom role with a supported role permission. *Security Administrator* and *Conditional Access Administrator* are the least privileged roles supported for this operation.
+> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json). *Conditional Access Administrator* is the least privileged role supported for this operation. Security Administrator is a more privileged role supported for this operation.
 

api-reference/beta/includes/rbac-for-apis/rbac-tou-security-reader-apis.md

@@ -0,0 +1,11 @@
+---
+author: AlexFilipin
+ms.topic: include
+---
+
+> [!IMPORTANT]
+> In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported [Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json). *Security Reader* is the least privileged role supported for this operation. More privileged roles supported for this operation: Global Reader, Conditional Access Administrator, Security Administrator.
+
+
+
+