Skip to content

Commit d68d86e

Browse files
LauragraLauragra
authored
Merge pull request #25491 from microsoftgraph/disablePermissionsAutomation
Disable permissions automation for auth methods APIs
2 parents 1f296e8 + 495ef2d commit d68d86e

File tree

126 files changed

+433
-437
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

126 files changed

+433
-437
lines changed

‎api-reference/beta/api/authentication-list-emailmethods.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,12 @@ The following tables show the least privileged permission or permissions require
2222

2323
### Permissions acting on self
2424

25-
<!-- { "blockType": "permissions", "name": "authentication_list_emailmethods" } -->
25+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2626
[!INCLUDE [permissions-table](../includes/permissions/authentication-list-emailmethods-permissions.md)]
2727

2828
### Permissions acting on other users
2929

30-
<!-- { "blockType": "permissions", "name": "authentication_list_emailmethods_2" } -->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3131
[!INCLUDE [permissions-table](../includes/permissions/authentication-list-emailmethods-2-permissions.md)]
3232

3333
[!INCLUDE [rbac-authentication-methods-apis-read-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-read-others.md)]

‎api-reference/beta/api/authentication-list-methods.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,12 +27,12 @@ The following tables show the least privileged permission or permissions require
2727

2828
### Permissions acting on self
2929

30-
<!-- { "blockType": "permissions", "name": "authentication_list_methods" } -->
30+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3131
[!INCLUDE [permissions-table](../includes/permissions/authentication-list-methods-permissions.md)]
3232

3333
### Permissions acting on other users
3434

35-
<!-- { "blockType": "permissions", "name": "authentication_list_methods_2" } -->
35+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3636
[!INCLUDE [permissions-table](../includes/permissions/authentication-list-methods-2-permissions.md)]
3737

3838
[!INCLUDE [rbac-authentication-methods-apis-read-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-read-others.md)]

‎api-reference/beta/api/authentication-list-passwordmethods.md

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -23,23 +23,23 @@ One of the following permissions is required to call this API. To learn more, in
2323

2424
### Permissions acting on self
2525
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
26-
|Permission type | Permissions (from least to most privileged) |
27-
|:---------------------------------------|:-------------------------|
28-
| Delegated (work or school account) | UserAuthenticationMethod.Read, UserAuthenticationMethod.ReadWrite |
29-
| Delegated (personal Microsoft account) | Not supported. |
30-
| Application | Not supported. |
26+
|Permission type|Least privileged permissions|Higher privileged permissions|
27+
|:---|:---|:---|
28+
|Delegated (work or school account)|UserAuthenticationMethod.Read|UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite, UserAuthenticationMethod.ReadWrite.All|
29+
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
30+
|Application|Not supported.|Not supported.|
3131

3232
### Permissions acting on other users
3333
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
34-
|Permission type | Permissions (from least to most privileged) |
35-
|:---------------------------------------|:-------------------------|
36-
| Delegated (work or school account) | UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All |
37-
| Delegated (personal Microsoft account) | Not supported. |
38-
| Application | UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All |
34+
|Permission type|Least privileged permissions|Higher privileged permissions|
35+
|:---|:---|:---|
36+
|Delegated (work or school account)|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|
37+
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
38+
|Application|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|
3939

4040
[!INCLUDE [rbac-authentication-methods-apis-read-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-read-others.md)]
4141

42-
Admins with *User Administrator*, *Helpdesk Administrator*, or *Password Administrator* roles can also retrieve password authentication methods for non-admin users and a limited set of admin roles as defined in [Who can reset passwords](/azure/active-directory/roles/privileged-roles-permissions#who-can-reset-passwords).
42+
Admins with *User Administrator*, *Helpdesk Administrator*, or *Password Administrator* roles can also retrieve password authentication methods for non-admin users and a limited set of admin roles as defined in [Who can reset passwords](/graph/api/resources/users#who-can-reset-passwords).
4343

4444
## HTTP request
4545

‎api-reference/beta/api/authentication-list-phonemethods.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,12 +24,12 @@ The following tables show the least privileged permission or permissions require
2424

2525
### Permissions acting on self
2626

27-
<!-- { "blockType": "permissions", "name": "authentication_list_phonemethods" } -->
27+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2828
[!INCLUDE [permissions-table](../includes/permissions/authentication-list-phonemethods-permissions.md)]
2929

3030
### Permissions acting on other users
3131

32-
<!-- { "blockType": "permissions", "name": "authentication_list_phonemethods_2" } -->
32+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3333
[!INCLUDE [permissions-table](../includes/permissions/authentication-list-phonemethods-2-permissions.md)]
3434

3535
[!INCLUDE [rbac-authentication-methods-apis-read-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-read-others.md)]

‎api-reference/beta/api/authentication-list-softwareoathmethods.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -23,19 +23,19 @@ One of the following permissions is required to call this API. To learn more, in
2323

2424
### Permissions acting on self
2525
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
26-
|Permission type | Permissions (from least to most privileged) |
27-
|:---------------------------------------|:-------------------------|
28-
| Delegated (work or school account) | UserAuthenticationMethod.Read, UserAuthenticationMethod.ReadWrite |
29-
| Delegated (personal Microsoft account) | Not supported. |
30-
| Application | Not supported. |
26+
|Permission type|Least privileged permissions|Higher privileged permissions|
27+
|:---|:---|:---|
28+
|Delegated (work or school account)|UserAuthenticationMethod.Read|UserAuthenticationMethod.ReadWrite, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All|
29+
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
30+
|Application|Not supported.|Not supported.|
3131

3232
### Permissions acting on other users
3333
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
34-
|Permission type | Permissions (from least to most privileged) |
35-
|:---------------------------------------|:-------------------------|
36-
| Delegated (work or school account) | UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All |
37-
| Delegated (personal Microsoft account) | Not supported. |
38-
| Application | UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All |
34+
|Permission type|Least privileged permissions|Higher privileged permissions|
35+
|:---|:---|:---|
36+
|Delegated (work or school account)|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|
37+
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
38+
|Application|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|
3939

4040
[!INCLUDE [rbac-authentication-methods-apis-read](../includes/rbac-for-apis/rbac-authentication-methods-apis-read.md)]
4141

‎api-reference/beta/api/authentication-list-temporaryaccesspassmethods.md

Lines changed: 10 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -23,20 +23,19 @@ One of the following permissions is required to call this API. To learn more, in
2323

2424
### Permissions acting on self
2525
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
26-
|Permission type | Permissions (from least to most privileged) |
27-
|:---------------------------------------|:-------------------------|
28-
| Delegated (work or school account) | UserAuthenticationMethod.Read, UserAuthenticationMethod.ReadWrite |
29-
| Delegated (personal Microsoft account) | Not supported. |
30-
| Application | Not supported. |
26+
|Permission type|Least privileged permissions|Higher privileged permissions|
27+
|:---|:---|:---|
28+
|Delegated (work or school account)|UserAuthenticationMethod.Read|UserAuthenticationMethod.ReadWrite, UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All|
29+
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
30+
|Application|Not supported.|Not supported.|
3131

3232
### Permissions acting on other users
3333
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
34-
|Permission type | Permissions (from least to most privileged) |
35-
|:---------------------------------------|:-------------------------|
36-
| Delegated (work or school account) | UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All |
37-
| Delegated (personal Microsoft account) | Not supported. |
38-
| Application | UserAuthenticationMethod.Read.All, UserAuthenticationMethod.ReadWrite.All |
39-
34+
|Permission type|Least privileged permissions|Higher privileged permissions|
35+
|:---|:---|:---|
36+
|Delegated (work or school account)|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|
37+
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
38+
|Application|UserAuthenticationMethod.Read.All|UserAuthenticationMethod.ReadWrite.All|
4039

4140
[!INCLUDE [rbac-authentication-methods-apis-read-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-read-others.md)]
4241

‎api-reference/beta/api/authentication-post-emailmethods.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -15,18 +15,18 @@ Namespace: microsoft.graph
1515

1616
Set a user's [emailAuthenticationMethod](../resources/emailauthenticationmethod.md) object. Email authentication is a self-service password reset method. A user may only have one email authentication method.
1717

18+
Self-service operations aren't supported.
19+
1820
[!INCLUDE [national-cloud-support](../../includes/all-clouds.md)]
1921

2022
## Permissions
2123
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2224

23-
<!-- { "blockType": "permissions", "name": "authentication_post_emailmethods" } -->
25+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2426
[!INCLUDE [permissions-table](../includes/permissions/authentication-post-emailmethods-permissions.md)]
2527

2628
[!INCLUDE [rbac-authentication-methods-apis-write-others](../includes/rbac-for-apis/rbac-authentication-methods-apis-write-others.md)]
2729

28-
Users cannot add an email authentication method to their own account.
29-
3030
## HTTP request
3131

3232
Add an email authentication method to another user's account.

‎api-reference/beta/api/authentication-post-fido2methods.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ Create a new [fido2AuthenticationMethod](../resources/fido2authenticationmethod.
2323

2424
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2525

26-
<!-- { "blockType": "permissions", "name": "authentication_post_fido2methods" } -->
26+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
2727
[!INCLUDE [permissions-table](../includes/permissions/authentication-post-fido2methods-permissions.md)]
2828

2929
## HTTP request

‎api-reference/beta/api/authentication-post-phonemethods.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ Additionally, if a user is enabled by policy to use SMS sign-in and a `mobile` n
2626

2727
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2828

29-
<!-- { "blockType": "permissions", "name": "authentication_post_phonemethods" } -->
29+
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
3030
[!INCLUDE [permissions-table](../includes/permissions/authentication-post-phonemethods-permissions.md)]
3131

3232
[!INCLUDE [rbac-authentication-methods-apis-write](../includes/rbac-for-apis/rbac-authentication-methods-apis-write.md)]

‎api-reference/beta/api/authenticationmethod-resetpassword.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
3333

3434
[!INCLUDE [rbac-authentication-methods-apis-write](../includes/rbac-for-apis/rbac-authentication-methods-apis-write.md)]
3535

36-
Admins with *User Administrator*, *Helpdesk Administrator*, or *Password Administrator* roles can also reset passwords for non-admin users and a limited set of admin roles as defined in [Who can reset passwords](/azure/active-directory/roles/privileged-roles-permissions#who-can-reset-passwords).
36+
Admins with *User Administrator*, *Helpdesk Administrator*, or *Password Administrator* roles can also reset passwords for non-admin users and a limited set of admin roles as defined in [Who can reset passwords](/graph/api/resources/users#who-can-reset-passwords).
3737

3838
## HTTP request
3939

0 commit comments

Comments
 (0)