Merge pull request #25063 from microsoftgraph/main

Merge to publish.

Author: Lauragra

.gdn/.gdnbaselines

@@ -0,0 +1,31 @@
+{
+  "hydrated": true,
+  "properties": {
+    "helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/baselines",
+    "hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
+  },
+  "version": "1.0.0",
+  "baselines": {
+    "default": {
+      "name": "default",
+      "createdDate": "2024-08-26 12:06:54Z",
+      "lastUpdatedDate": "2024-08-26 12:06:54Z"
+    }
+  },
+  "results": {
+    "b3d46ea406a66acd0fa8b1130ec9be5b501ad4a933d98ce70193c68771b6e7be": {
+      "signature": "b3d46ea406a66acd0fa8b1130ec9be5b501ad4a933d98ce70193c68771b6e7be",
+      "alternativeSignatures": [
+        "79e125fb7927450b0ebb02d6b3ddb03d7a6a971e21dfdc1c246ba8fd39f0969e"
+      ],
+      "target": "update-permissions-reference.ps1",
+      "line": 170,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "psscriptanalyzer",
+      "ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
+      "createdDate": "2024-08-26 12:06:54Z"
+    }
+  }
+}

.gdn/.gdnsuppress

@@ -0,0 +1,31 @@
+{
+  "hydrated": true,
+  "properties": {
+    "helpUri": "https://eng.ms/docs/microsoft-security/security/azure-security/cloudai-security-fundamentals-engineering/security-integration/guardian-wiki/microsoft-guardian/general/suppressions",
+    "hydrationStatus": "This file does not contain identifying data. It is safe to check into your repo. To hydrate this file with identifying data, run `guardian hydrate --help` and follow the guidance."
+  },
+  "version": "1.0.0",
+  "suppressionSets": {
+    "default": {
+      "name": "default",
+      "createdDate": "2024-08-26 12:06:54Z",
+      "lastUpdatedDate": "2024-08-26 12:06:54Z"
+    }
+  },
+  "results": {
+    "b3d46ea406a66acd0fa8b1130ec9be5b501ad4a933d98ce70193c68771b6e7be": {
+      "signature": "b3d46ea406a66acd0fa8b1130ec9be5b501ad4a933d98ce70193c68771b6e7be",
+      "alternativeSignatures": [
+        "79e125fb7927450b0ebb02d6b3ddb03d7a6a971e21dfdc1c246ba8fd39f0969e"
+      ],
+      "target": "update-permissions-reference.ps1",
+      "line": 170,
+      "memberOf": [
+        "default"
+      ],
+      "tool": "psscriptanalyzer",
+      "ruleId": "PSAvoidUsingConvertToSecureStringWithPlainText",
+      "createdDate": "2024-08-26 12:06:54Z"
+    }
+  }
+}

.github/workflows/permissions-reference-gen.yml

@@ -23,7 +23,7 @@ jobs:
       with:
         path: docs
 
-    - name: Run PowerShell script
+    - name: Run PowerShell script to update permissions
       shell: pwsh
       run: | 
         $ClientId = "${{ secrets.GRAPH_CLIENT_ID }}"
@@ -38,22 +38,46 @@ jobs:
         application-id: ${{ secrets.APPLICATION_ID }}
         application-private-key: ${{ secrets.APPLICATION_PRIVATE_KEY }}
 
-    - name: Commit updates and open a pull request
+    - name: Commit updates from service principal
       working-directory: ./docs
       shell: pwsh
       env:
-       GH_TOKEN: ${{ steps.get_token.outputs.app-token }}
+        GH_TOKEN: ${{ steps.get_token.outputs.app-token }}
       run: |
         $status = git status --porcelain
         if ($status -eq $null) {
           Write-Host "No changes to commit." -ForegroundColor Green
-        } else {
-          $timestamp = Get-Date -Format FileDateTimeUniversal
+        }
+        else {          
           git config user.email "GraphTooling@service.microsoft.com"
           git config user.name "Microsoft Graph DevX Tooling"
-          git checkout -b permissions-reference/$timestamp
           git add .
           git commit -m "Update permissions reference"
-          git push --set-upstream origin permissions-reference/$timestamp
-          gh pr create --base main --title "Automated permissons reference update" --body "Scheduled permissions reference update" --reviewer "FaithOmbongi","msewaweru" --label "ready for content review"
+        } 
+    
+    - name: Run PowerShell script to correct errors in permissions descriptions
+      shell: pwsh
+      run: | 
+        ./docs/correct-permissions-reference-errors.ps1
+    
+    - name: Commit errors correction and open a pull request
+      working-directory: ./docs
+      shell: pwsh
+      env:
+       GH_TOKEN: ${{ steps.get_token.outputs.app-token }}
+      run: |
+        $status = git status --porcelain
+        if ($status -eq $null) {
+          Write-Host "No changes to commit." -ForegroundColor Green
+        } else { 
+          $dateToday = Get-Date -Format 'yyyy-MM-dd'
+          $branchName = "permissions-reference/$dateToday" 
+          $prTitle = "${dateToday}: Automated permissions reference update"
+          
+          git add .
+          git commit -m "Correct errors in permissions reference"
+          git checkout -b $branchName
+          git push --set-upstream origin $branchName
+          
+          gh pr create --base main --title $prTitle --body "Scheduled permissions reference update" --reviewer "FaithOmbongi,msewaweru" --label "ready for content review"
         }

api-reference/beta/api/backuprestoreroot-enable.md

@@ -16,6 +16,8 @@ Namespace: microsoft.graph
 
 Enable the [Microsoft 365 Backup Storage](../resources/backuprestoreroot.md) service for a tenant.
 
+Before you call this API, call [List protection policies](../api/backuprestoreroot-list-protectionpolicies.md) to initialize the data store in the tenant. Data store initialization takes about 5 minutes. If you call this API before the data store is initialized, the call results in an error.
+
 [!INCLUDE [national-cloud-support](../../includes/global-only.md)]
 
 ## Permissions

api-reference/beta/api/backuprestoreroot-list-driveprotectionunits.md

@@ -49,6 +49,8 @@ Don't supply a request body for this method.
 
 If successful, this method returns a `200 OK` response code and a collection of [driveProtectionUnit](../resources/driveprotectionunit.md) in the response body.
 
+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).
+
 ## Examples
 
 ### Example 1: List all the driveProtectionUnits in a tenant

api-reference/beta/api/backuprestoreroot-list-mailboxprotectionunits.md

@@ -50,6 +50,8 @@ Don't supply a request body for this method.
 
 If successful, this method returns a `200 OK` response code and a [mailboxProtectionUnit](../resources/mailboxprotectionunit.md) in the response body.
 
+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).
+
 ## Examples
 
 ### Example 1: List all mailboxProtectionUnits in a tenant

api-reference/beta/api/backuprestoreroot-list-restorepoints.md

@@ -1,6 +1,6 @@
 ---
 title: "List restorePoints"
-description: "Get a list of the restorePoint objects and their properties."
+description: "Get a list of restorePoint objects and their properties."
 author: "tushar20"
 ms.reviewer: "manikantsinghms"
 ms.localizationpriority: medium
@@ -14,7 +14,9 @@ Namespace: microsoft.graph
 
 [!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
 
-Get a list of the [restorePoint](../resources/restorepoint.md) objects and their properties.
+Get a list of [restorePoint](../resources/restorepoint.md) objects and their properties. 
+
+> **Note:** This API returns a maximum of five **restorePoint** objects. If you don't include the `orderBy` parameter, the five most recent restore points are returned.
 
 [!INCLUDE [national-cloud-support](../../includes/global-only.md)]
 
@@ -28,7 +30,6 @@ Choose the permission or permissions marked as least privileged for this API. Us
 |Delegated (personal Microsoft account)|Not supported.|Not supported.|
 |Application|BackupRestore-Restore.Read.All|BackupRestore-Restore.ReadWrite.All|
 
-
 ## HTTP request
 
 <!-- {
@@ -40,9 +41,10 @@ GET /solutions/backupRestore/restorePoints?$expand=protectionUnit($filter=id eq
 ```
 
 ## Optional query parameters
-This method supports the `$expand` and `$filter` [OData puery parameters](/graph/query-parameters), as shown in the following [example](../api/backuprestoreroot-list-restorepoints.md#request). 
 
-The two query parameters are required.
+This method supports the `$expand`, `$filter` and `orderBy` [OData query parameters](/graph/query-parameters), as shown in the [example](../api/backuprestoreroot-list-restorepoints.md#request) later in this topic.
+
+The `$expand` and `$filter` query parameters are required.
 
 ## Request headers
 
@@ -58,6 +60,8 @@ Don't supply a request body for this method.
 
 If successful, this method returns a `200 OK` response code and a collection of [restorePoint](../resources/restorepoint.md) object in the response body.
 
+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).
+
 ## Examples
 
 ### Request

api-reference/beta/api/backuprestoreroot-list-siteprotectionunits.md

@@ -50,6 +50,8 @@ Don't supply a request body for this method.
 
 If successful, this method returns a `200 OK` response code and a [siteProtectionUnit](../resources/siteprotectionunit.md) in the response body.
 
+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).
+
 ## Examples
 
 ### Example 1: List all the siteProtectionUnits in a tenant

api-reference/beta/api/backuprestoreroot-post-exchangeprotectionpolicies.md

@@ -56,6 +56,8 @@ In the request body, include a JSON representation of the [exchangeProtectionPol
 
 If successful, this method returns a `201 Created` response code and an [exchangeProtectionPolicy](../resources/exchangeprotectionpolicy.md) object in the response body.
 
+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).
+
 ## Examples
 
 ### Request

api-reference/beta/api/backuprestoreroot-post-exchangerestoresessions.md

@@ -60,6 +60,8 @@ You can specify the following properties when you create an **exchangeRestoreSes
 
 If successful, this method returns a `201 Created` response code and an [exchangeRestoreSession](../resources/exchangerestoresession.md) object in the response body.
 
+For a list of possible error responses, see [Backup Storage API error responses](/graph/backup-storage-error-codes).
+
 ## Examples
 
 ### Example 1: Create exchangeRestoreSession with mailboxRestoreArtifacts