Skip to content

Commit cf808f3

Browse files
authored
Merge pull request #25611 from microsoftgraph/fixGroupSettingsPermissions
Deactivate autogeneration of permissions tables for directory/group s…
2 parents c06f183 + 97c1e42 commit cf808f3

24 files changed

+161
-82
lines changed

api-reference/beta/api/directorysetting-delete.md

Lines changed: 4 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,16 +21,14 @@ Delete a directory setting.
2121
## Permissions
2222
The following tables show the least privileged permission or permissions required to call this API on each supported resource type. Follow [best practices](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions) to request least privileged permissions. For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2323

24-
### For all settings except the Consent Policy Settings object
24+
### For tenant-wide settings
2525

26-
<!-- { "blockType": "permissions", "name": "directorysetting_delete" } -->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2727
[!INCLUDE [permissions-table](../includes/permissions/directorysetting-delete-permissions.md)]
2828

29-
### For the Consent Policy Settings object
29+
### For group-specific settings
3030

31-
The following permissions are required to update the "Consent Policy Settings" **directorySetting** object.
32-
33-
<!-- { "blockType": "permissions", "name": "directorysetting_delete_2" } -->
31+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3432
[!INCLUDE [permissions-table](../includes/permissions/directorysetting-delete-2-permissions.md)]
3533

3634
[!INCLUDE [rbac-group-directorysettings-all](../includes/rbac-for-apis/rbac-group-directorysettings-all.md)]

api-reference/beta/api/directorysetting-get.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,12 +24,12 @@ The following tables show the least privileged permission or permissions require
2424

2525
### List tenant-wide settings
2626

27-
<!-- { "blockType": "permissions", "name": "directorysetting_get" } -->
27+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2828
[!INCLUDE [permissions-table](../includes/permissions/directorysetting-get-permissions.md)]
2929

3030
### List group-specific settings
3131

32-
<!-- { "blockType": "permissions", "name": "directorysetting_get_2" } -->
32+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3333
[!INCLUDE [permissions-table](../includes/permissions/directorysetting-get-2-permissions.md)]
3434

3535
[!INCLUDE [rbac-group-directorysettings-all](../includes/rbac-for-apis/rbac-group-directorysettings-all.md)]

api-reference/beta/api/directorysetting-update.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,16 +22,16 @@ Update the properties of a specific directory setting object.
2222
## Permissions
2323
The following tables show the least privileged permission or permissions required to call this API on each supported resource type. Follow [best practices](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions) to request least privileged permissions. For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

25-
### For all settings except the Consent Policy Settings object
25+
### For all settings *except* the Consent Policy Settings object
2626

27-
<!-- { "blockType": "permissions", "name": "directorysetting_update" } -->
27+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2828
[!INCLUDE [permissions-table](../includes/permissions/directorysetting-update-permissions.md)]
2929

3030
### For the Consent Policy Settings object
3131

3232
The following permissions are required to update the "Consent Policy Settings" **directorySetting** object.
3333

34-
<!-- { "blockType": "permissions", "name": "directorysetting_update_2" } -->
34+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3535
[!INCLUDE [permissions-table](../includes/permissions/directorysetting-update-2-permissions.md)]
3636

3737
[!INCLUDE [rbac-group-directorysettings-all](../includes/rbac-for-apis/rbac-group-directorysettings-all.md)]

api-reference/beta/api/group-list-settings.md

Lines changed: 4 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -23,19 +23,13 @@ One of the following permissions is required to call this API. To learn more, in
2323

2424
### List tenant-wide settings
2525
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
26-
|Permission type | Permissions (from least to most privileged) |
27-
|:--------------------|:---------------------------------------------------------|
28-
|Delegated (work or school account) | Directory.Read.All, Directory.ReadWrite.All |
29-
|Delegated (personal Microsoft account) | Not supported. |
30-
|Application | Directory.Read.All, Directory.ReadWrite.All |
26+
27+
[!INCLUDE [permissions-table](../includes/permissions/group-list-settings-permissions.md)]
3128

3229
### List group-specific settings
3330
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
34-
|Permission type | Permissions (from least to most privileged) |
35-
|:--------------------|:---------------------------------------------------------|
36-
|Delegated (work or school account) | Group.Read.All, Group.ReadWrite.All |
37-
|Delegated (personal Microsoft account) | Not supported. |
38-
|Application | Group.Read.All, Group.ReadWrite.All |
31+
32+
[!INCLUDE [permissions-table](../includes/permissions/group-list-settings-2-permissions.md)]
3933

4034
[!INCLUDE [rbac-group-directorysettings-all](../includes/rbac-for-apis/rbac-group-directorysettings-all.md)]
4135

api-reference/beta/includes/permissions/directorysetting-delete-2-permissions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
66

77
|Permission type|Least privileged permissions|Higher privileged permissions|
88
|:---|:---|:---|
9-
|Delegated (work or school account)|Directory.ReadWrite.All|Policy.ReadWrite.Authorization|
9+
|Delegated (work or school account)|Group.ReadWrite.All|Directory.ReadWrite.All|
1010
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
11-
|Application|Directory.ReadWrite.All|Policy.ReadWrite.Authorization|
11+
|Application|Group.ReadWrite.All|Directory.ReadWrite.All|
1212

api-reference/beta/includes/permissions/directorysetting-delete-permissions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
66

77
|Permission type|Least privileged permissions|Higher privileged permissions|
88
|:---|:---|:---|
9-
|Delegated (work or school account)|Directory.ReadWrite.All|Policy.ReadWrite.Authorization|
9+
|Delegated (work or school account)|Directory.ReadWrite.All|Not available.|
1010
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
11-
|Application|Directory.ReadWrite.All|Policy.ReadWrite.Authorization|
11+
|Application|Directory.ReadWrite.All|Not available.|
1212

api-reference/beta/includes/permissions/directorysetting-get-2-permissions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
66

77
|Permission type|Least privileged permissions|Higher privileged permissions|
88
|:---|:---|:---|
9-
|Delegated (work or school account)|Directory.Read.All|Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
9+
|Delegated (work or school account)|Group.Read.All|Directory.Read.All, Directory.ReadWrite.All, Group.ReadWrite.All|
1010
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
11-
|Application|Directory.Read.All|Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
11+
|Application|Group.Read.All|Directory.Read.All, Directory.ReadWrite.All, Group.ReadWrite.All|
1212

api-reference/beta/includes/permissions/directorysetting-get-permissions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
66

77
|Permission type|Least privileged permissions|Higher privileged permissions|
88
|:---|:---|:---|
9-
|Delegated (work or school account)|Directory.Read.All|Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
9+
|Delegated (work or school account)|Directory.Read.All|Directory.ReadWrite.Al|
1010
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
11-
|Application|Directory.Read.All|Directory.ReadWrite.All, Group.Read.All, Group.ReadWrite.All|
11+
|Application|Directory.Read.All|Directory.ReadWrite.All|
1212

api-reference/beta/includes/permissions/directorysetting-update-2-permissions.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.localizationpriority: medium
66

77
|Permission type|Least privileged permissions|Higher privileged permissions|
88
|:---|:---|:---|
9-
|Delegated (work or school account)|Directory.ReadWrite.All|Policy.ReadWrite.Authorization|
9+
|Delegated (work or school account)|Policy.ReadWrite.Authorization|Directory.ReadWrite.All|
1010
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
11-
|Application|Directory.ReadWrite.All|Policy.ReadWrite.Authorization|
11+
|Application|Policy.ReadWrite.Authorization|Directory.ReadWrite.All|
1212

api-reference/beta/includes/permissions/directorysetting-update-permissions.md

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,6 @@ ms.localizationpriority: medium
66

77
|Permission type|Least privileged permissions|Higher privileged permissions|
88
|:---|:---|:---|
9-
|Delegated (work or school account)|Directory.ReadWrite.All|Policy.ReadWrite.Authorization|
9+
|Delegated (work or school account)|Directory.ReadWrite.All|Not available.|
1010
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
11-
|Application|Directory.ReadWrite.All|Policy.ReadWrite.Authorization|
12-
11+
|Application|Directory.ReadWrite.All|Not available.|

0 commit comments

Comments
 (0)