Skip to content

Commit fd64eaf

Browse files
LauragraLauragra
authored
Merge pull request #25820 from microsoftgraph/preview-permissions-tables-update/172846
Permissions tables update
2 parents 7565e74 + a2cfcae commit fd64eaf

File tree

70 files changed

+463
-267
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

70 files changed

+463
-267
lines changed

‎api-reference/beta/api/application-post-onlinemeetings.md

Lines changed: 3 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ Create an online meeting on behalf of a user.
2424
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
2525

2626
## Permissions
27-
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
27+
The following tables show the least privileged permission or permissions required to call this API on each supported resource type. Follow [best practices](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions) to request least privileged permissions. For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2828

2929
Permissions for the following HTTP request:
3030

@@ -39,12 +39,7 @@ POST /me/onlineMeetings
3939
"name": "application_post_onlinemeetings",
4040
"requestUrls": ["POST /me/onlineMeetings"]
4141
} -->
42-
43-
|Permission type|Least privileged permissions|Higher privileged permissions|
44-
|:---|:---|:---|
45-
|Delegated (work or school account)|OnlineMeetings.ReadWrite|Not available.|
46-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
47-
|Application|Not supported.|Not supported.|
42+
[!INCLUDE [permissions-table](../includes/permissions/application-post-onlinemeetings-permissions.md)]
4843

4944

5045
Permissions for the following HTTP request:
@@ -60,12 +55,7 @@ POST /users/{userId}/onlineMeetings
6055
"name": "application_post_onlinemeetings_2",
6156
"requestUrls": ["POST /users/{userId}/onlineMeetings"]
6257
} -->
63-
64-
|Permission type|Least privileged permissions|Higher privileged permissions|
65-
|:---|:---|:---|
66-
|Delegated (work or school account)|OnlineMeetings.ReadWrite|Not available.|
67-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
68-
|Application|OnlineMeetings.ReadWrite.All|Not available.|
58+
[!INCLUDE [permissions-table](../includes/permissions/application-post-onlinemeetings-2-permissions.md)]
6959

7060
> [!NOTE]
7161
> To use the OnlineMeetings.ReadWrite.All application permission for this API, tenant administrators must create an [application access policy](/graph/cloud-communication-online-meeting-application-access-policy) and grant it to a user to authorize the app configured in the policy to create online meetings on behalf of that user (with user ID specified in the request path).

‎api-reference/beta/api/onlinemeeting-delete.md

Lines changed: 3 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ Delete an [onlineMeeting](../resources/onlinemeeting.md) object.
1818
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
1919

2020
## Permissions
21-
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
21+
The following tables show the least privileged permission or permissions required to call this API on each supported resource type. Follow [best practices](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions) to request least privileged permissions. For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2222

2323
Permissions for the following HTTP request:
2424

@@ -33,12 +33,7 @@ DELETE /me/onlineMeetings/{meetingId}
3333
"name": "onlinemeeting_delete",
3434
"requestUrls": ["DELETE /me/onlineMeetings/{meetingId}"]
3535
} -->
36-
37-
|Permission type|Least privileged permissions|Higher privileged permissions|
38-
|:---|:---|:---|
39-
|Delegated (work or school account)|OnlineMeetings.ReadWrite|Not available.|
40-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
41-
|Application|Not supported.|Not supported.|
36+
[!INCLUDE [permissions-table](../includes/permissions/onlinemeeting-delete-permissions.md)]
4237

4338
Permissions for the following HTTP request:
4439

@@ -53,12 +48,7 @@ DELETE /users/{userId}/onlineMeetings/{meetingId}
5348
"name": "onlinemeeting_delete_2",
5449
"requestUrls": ["DELETE /users/{userId}/onlineMeetings/{meetingId}"]
5550
} -->
56-
57-
|Permission type|Least privileged permissions|Higher privileged permissions|
58-
|:---|:---|:---|
59-
|Delegated (work or school account)|OnlineMeetings.ReadWrite|Not available.|
60-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
61-
|Application|OnlineMeetings.ReadWrite.All|Not available.|
51+
[!INCLUDE [permissions-table](../includes/permissions/onlinemeeting-delete-2-permissions.md)]
6252

6353
> [!IMPORTANT]
6454
> To use application permission for this API, tenant administrators must create an [application access policy](/graph/cloud-communication-online-meeting-application-access-policy) and grant it to a user to authorize the app configured in the policy to delete online meetings on behalf of that user (with user ID specified in the request path).

‎api-reference/beta/api/onlinemeeting-get.md

Lines changed: 11 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ Teams live event attendee report **(deprecated)** and Teams live event recording
3131

3232
## Permissions
3333

34-
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
34+
The following tables show the least privileged permission or permissions required to call this API on each supported resource type. Follow [best practices](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions) to request least privileged permissions. For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
3535

3636
Permissions for the following HTTP requests:
3737

@@ -46,15 +46,10 @@ GET /me/onlineMeetings?$filter=joinMeetingIdSettings/joinMeetingId%20eq%20'{join
4646
<!-- {
4747
"blockType": "permissions",
4848
"name": "onlinemeeting_get",
49-
"requestUrls": ["GET /me/onlineMeetings/{meetingId}","GET /me/onlineMeetings?$filter=JoinWebUrl%20eq%20'{joinWebUrl}'","GET /me/onlineMeetings?$filter=joinMeetingIdSettings/joinMeetingId%20eq%20'{joinMeetingId}'"],
49+
"requestUrls": ["GET /me/onlineMeetings/{meetingId}", "GET /me/onlineMeetings?$filter=JoinWebUrl%20eq%20'{joinWebUrl}'", "GET /me/onlineMeetings?$filter=joinMeetingIdSettings/joinMeetingId%20eq%20'{joinMeetingId}'"],
5050
"mergePermissions": true
5151
} -->
52-
53-
|Permission type|Least privileged permissions|Higher privileged permissions|
54-
|:---|:---|:---|
55-
|Delegated (work or school account)|OnlineMeetings.Read|OnlineMeetings.ReadWrite|
56-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
57-
|Application|Not supported.|Not supported.|
52+
[!INCLUDE [permissions-table](../includes/permissions/onlinemeeting-get-permissions.md)]
5853

5954
Permissions for the following HTTP requests:
6055

@@ -71,15 +66,10 @@ GET /communications/onlineMeetings/?$filter=VideoTeleconferenceId%20eq%20'{video
7166
<!-- {
7267
"blockType": "permissions",
7368
"name": "onlinemeeting_get_2",
74-
"requestUrls": ["GET /users/{userId}/onlineMeetings/{meetingId}","GET /users/{userId}/onlineMeetings?$filter=JoinWebUrl%20eq%20'{joinWebUrl}'","GET /users/{userId}/onlineMeetings?$filter=joinMeetingIdSettings/joinMeetingId%20eq%20'{joinMeetingId}'","GET /app/onlineMeetings/?$filter=VideoTeleconferenceId%20eq%20'{videoTeleconferenceId}'","GET /communications/onlineMeetings/?$filter=VideoTeleconferenceId%20eq%20'{videoTeleconferenceId}'"],
69+
"requestUrls": ["GET /users/{userId}/onlineMeetings/{meetingId}", "GET /users/{userId}/onlineMeetings?$filter=JoinWebUrl%20eq%20'{joinWebUrl}'", "GET /users/{userId}/onlineMeetings?$filter=joinMeetingIdSettings/joinMeetingId%20eq%20'{joinMeetingId}'", "GET /app/onlineMeetings/?$filter=VideoTeleconferenceId%20eq%20'{videoTeleconferenceId}'", "GET /communications/onlineMeetings/?$filter=VideoTeleconferenceId%20eq%20'{videoTeleconferenceId}'"],
7570
"mergePermissions": true
7671
} -->
77-
78-
|Permission type|Least privileged permissions|Higher privileged permissions|
79-
|:---|:---|:---|
80-
|Delegated (work or school account)|OnlineMeetings.Read|OnlineMeetings.ReadWrite|
81-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
82-
|Application|OnlineMeetings.Read.All|OnlineMeetings.ReadWrite.All|
72+
[!INCLUDE [permissions-table](../includes/permissions/onlinemeeting-get-2-permissions.md)]
8373

8474
Permissions for the following HTTP requests:
8575

@@ -93,15 +83,10 @@ GET /users/{userId}/onlineMeetings/{meetingId}/attendeeReport
9383
<!-- {
9484
"blockType": "permissions",
9585
"name": "onlinemeeting_get_3",
96-
"requestUrls": ["GET /me/onlineMeetings/{meetingId}/attendeeReport","GET /users/{userId}/onlineMeetings/{meetingId}/attendeeReport"],
86+
"requestUrls": ["GET /me/onlineMeetings/{meetingId}/attendeeReport", "GET /users/{userId}/onlineMeetings/{meetingId}/attendeeReport"],
9787
"mergePermissions": true
9888
} -->
99-
100-
|Permission type|Least privileged permissions|Higher privileged permissions|
101-
|:---|:---|:---|
102-
|Delegated (work or school account)|OnlineMeetingArtifact.Read.All|Not available.|
103-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
104-
|Application|OnlineMeetingArtifact.Read.All|Not available.|
89+
[!INCLUDE [permissions-table](../includes/permissions/onlinemeeting-get-3-permissions.md)]
10590

10691
Permissions for the following HTTP requests:
10792

@@ -115,15 +100,10 @@ GET /me/onlineMeetings/{meetingId}/alternativeRecording
115100
<!-- {
116101
"blockType": "permissions",
117102
"name": "onlinemeeting_get_4",
118-
"requestUrls": ["GET /me/onlineMeetings/{meetingId}/recording","GET /me/onlineMeetings/{meetingId}/alternativeRecording"],
103+
"requestUrls": ["GET /me/onlineMeetings/{meetingId}/recording", "GET /me/onlineMeetings/{meetingId}/alternativeRecording"],
119104
"mergePermissions": true
120105
} -->
121-
122-
|Permission type|Least privileged permissions|Higher privileged permissions|
123-
|:---|:---|:---|
124-
|Delegated (work or school account)|OnlineMeetingArtifact.Read.All|OnlineMeetings.Read, OnlineMeetings.ReadWrite|
125-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
126-
|Application|OnlineMeetingArtifact.Read.All|Not available.|
106+
[!INCLUDE [permissions-table](../includes/permissions/onlinemeeting-get-4-permissions.md)]
127107

128108
Permissions for the following HTTP requests:
129109

@@ -137,15 +117,10 @@ GET /users/{userId}/onlineMeetings/{meetingId}/alternativeRecording
137117
<!-- {
138118
"blockType": "permissions",
139119
"name": "onlinemeeting_get_5",
140-
"requestUrls": ["GET /users/{userId}/onlineMeetings/{meetingId}/recording","GET /users/{userId}/onlineMeetings/{meetingId}/alternativeRecording"],
120+
"requestUrls": ["GET /users/{userId}/onlineMeetings/{meetingId}/recording", "GET /users/{userId}/onlineMeetings/{meetingId}/alternativeRecording"],
141121
"mergePermissions": true
142122
} -->
143-
144-
|Permission type|Least privileged permissions|Higher privileged permissions|
145-
|:---|:---|:---|
146-
|Delegated (work or school account)|OnlineMeetingArtifact.Read.All|OnlineMeetings.Read, OnlineMeetings.ReadWrite|
147-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
148-
|Application|OnlineMeetingArtifact.Read.All|OnlineMeetings.Read.All, OnlineMeetings.ReadWrite.All|
123+
[!INCLUDE [permissions-table](../includes/permissions/onlinemeeting-get-5-permissions.md)]
149124

150125
> [!NOTE]
151126
> To use application permission for this API, tenant administrators must create an [application access policy](/graph/cloud-communication-online-meeting-application-access-policy) and grant it to a user to authorize the app configured in the policy to fetch online meetings and/or online meeting artifacts on behalf of that user (with user ID specified in the request path).

‎api-reference/beta/api/onlinemeeting-update.md

Lines changed: 3 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ For the list of properties that support updating, see the [Request body](#reques
2020
[!INCLUDE [national-cloud-support](../../includes/global-only.md)]
2121

2222
## Permissions
23-
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
23+
The following tables show the least privileged permission or permissions required to call this API on each supported resource type. Follow [best practices](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions) to request least privileged permissions. For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2424

2525
Permissions for the following HTTP request:
2626

@@ -35,12 +35,7 @@ PATCH /me/onlineMeetings/{meetingId}
3535
"name": "onlinemeeting_update",
3636
"requestUrls": ["PATCH /me/onlineMeetings/{meetingId}"]
3737
} -->
38-
39-
|Permission type|Least privileged permissions|Higher privileged permissions|
40-
|:---|:---|:---|
41-
|Delegated (work or school account)|OnlineMeetings.ReadWrite|Not available.|
42-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
43-
|Application|Not supported.|Not supported.|
38+
[!INCLUDE [permissions-table](../includes/permissions/onlinemeeting-update-permissions.md)]
4439

4540
Permissions for the following HTTP request:
4641

@@ -55,12 +50,7 @@ DELETE /users/{userId}/onlineMeetings/{meetingId}
5550
"name": "onlinemeeting_update_2",
5651
"requestUrls": ["PATCH /users/{userId}/onlineMeetings/{meetingId}"]
5752
} -->
58-
59-
|Permission type|Least privileged permissions|Higher privileged permissions|
60-
|:---|:---|:---|
61-
|Delegated (work or school account)|OnlineMeetings.ReadWrite|Not available.|
62-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
63-
|Application|OnlineMeetings.ReadWrite.All|Not available.|
53+
[!INCLUDE [permissions-table](../includes/permissions/onlinemeeting-update-2-permissions.md)]
6454

6555
To use application permission for this API, tenant administrators must create an [application access policy](/graph/cloud-communication-online-meeting-application-access-policy) and grant it to a user to authorize the app configured in the policy to update online meetings on behalf of that user (with user ID specified in the request path).
6656

‎api-reference/beta/api/serviceactivity-getactiveusermetricsfordesktopmailbyreademail.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,8 @@ Get all the active usage based on the number of users who successfully read emai
1818
## Permissions
1919
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2020

21-
|Permission type|Least privileged permissions|Higher privileged permissions|
22-
|:---|:---|:---|
23-
|Delegated (work or school account)|ServiceActivity-Exchange.Read.All|Not available.|
24-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
25-
|Application|ServiceActivity-Exchange.Read.All|Not available.|
21+
<!-- { "blockType": "permissions", "name": "serviceactivity_getactiveusermetricsfordesktopmailbyreademail" } -->
22+
[!INCLUDE [permissions-table](../includes/permissions/serviceactivity-getactiveusermetricsfordesktopmailbyreademail-permissions.md)]
2623

2724
## HTTP request
2825

‎api-reference/beta/api/serviceactivity-getactiveusermetricsforemailbymodernauthentication.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,8 @@ Get all the active usage based on the number of users who signed in with modern
1818
## Permissions
1919
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2020

21-
|Permission type|Least privileged permissions|Higher privileged permissions|
22-
|:---|:---|:---|
23-
|Delegated (work or school account)|ServiceActivity-Exchange.Read.All|Not available.|
24-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
25-
|Application|ServiceActivity-Exchange.Read.All|Not available.|
21+
<!-- { "blockType": "permissions", "name": "serviceactivity_getactiveusermetricsforemailbymodernauthentication" } -->
22+
[!INCLUDE [permissions-table](../includes/permissions/serviceactivity-getactiveusermetricsforemailbymodernauthentication-permissions.md)]
2623

2724
## HTTP request
2825

‎api-reference/beta/api/serviceactivity-getactiveusermetricsforexcelweb.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,8 @@ Get all the active usage based on the number of active users who open or save Ex
1818
## Permissions
1919
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2020

21-
|Permission type|Least privileged permissions|Higher privileged permissions|
22-
|:---|:---|:---|
23-
|Delegated (work or school account)|ServiceActivity-Microsoft365Web.Read.All|Not available.|
24-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
25-
|Application|ServiceActivity-Microsoft365Web.Read.All|Not available.|
21+
<!-- { "blockType": "permissions", "name": "serviceactivity_getactiveusermetricsforexcelweb" } -->
22+
[!INCLUDE [permissions-table](../includes/permissions/serviceactivity-getactiveusermetricsforexcelweb-permissions.md)]
2623

2724
## HTTP request
2825

‎api-reference/beta/api/serviceactivity-getactiveusermetricsforiosorandroidmailbyreademail.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,8 @@ Get all the active usage based on the number of users who successfully read emai
1818
## Permissions
1919
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions [only if your app requires it](/graph/permissions-overview#best-practices-for-using-microsoft-graph-permissions). For details about delegated and application permissions, see [Permission types](/graph/permissions-overview#permission-types). To learn more about these permissions, see the [permissions reference](/graph/permissions-reference).
2020

21-
|Permission type|Least privileged permissions|Higher privileged permissions|
22-
|:---|:---|:---|
23-
|Delegated (work or school account)|ServiceActivity-Exchange.Read.All|Not available.|
24-
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
25-
|Application|ServiceActivity-Exchange.Read.All|Not available.|
21+
<!-- { "blockType": "permissions", "name": "serviceactivity_getactiveusermetricsforiosorandroidmailbyreademail" } -->
22+
[!INCLUDE [permissions-table](../includes/permissions/serviceactivity-getactiveusermetricsforiosorandroidmailbyreademail-permissions.md)]
2623

2724
## HTTP request
2825

0 commit comments

Comments
 (0)