From 6b32cb80fe433406ed6cf06d53b462eb7fd40de9 Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Mon, 13 Jul 2026 03:45:56 +0300
Subject: [PATCH 1/2] Weekly Permissions sync 2026-07-13

---
 permissions/new/permissions.json | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json
index 0fa53e27..a3aab9f2 100644
--- a/permissions/new/permissions.json
+++ b/permissions/new/permissions.json
@@ -12576,8 +12576,6 @@
             "/me/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
             "/me/distributionlists": "least=DelegatedWork,DelegatedPersonal,Application",
             "/me/distributionlists/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
-            "/me/distributionlists/{id}/distributionlistmembers": "least=DelegatedWork,DelegatedPersonal,Application",
-            "/me/distributionlists/{id}/distributionlistmembers/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
             "/users/{id}/contactfolders": "least=DelegatedWork,DelegatedPersonal,Application",
             "/users/{id}/contactfolders/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
             "/users/{id}/contactfolders/{id}/childfolders": "least=DelegatedWork,DelegatedPersonal,Application",
@@ -12592,9 +12590,7 @@
             "/users/{id}/contacts": "least=DelegatedWork,DelegatedPersonal,Application",
             "/users/{id}/contacts/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
             "/users/{id}/distributionlists": "least=DelegatedWork,DelegatedPersonal,Application",
-            "/users/{id}/distributionlists/{id}": "least=DelegatedWork,DelegatedPersonal,Application",
-            "/users/{id}/distributionlists/{id}/distributionlistmembers": "least=DelegatedWork,DelegatedPersonal,Application",
-            "/users/{id}/distributionlists/{id}/distributionlistmembers/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
+            "/users/{id}/distributionlists/{id}": "least=DelegatedWork,DelegatedPersonal,Application"
           }
         },
         {
@@ -30130,7 +30126,8 @@
           "paths": {
             "/auditlogs/signins/confirmcompromised": "least=Application",
             "/auditlogs/signins/confirmsafe": "least=Application",
-            "/auditlogs/signins/dismiss": "least=Application"
+            "/auditlogs/signins/dismiss": "least=Application",
+            "/identityProtection/agentRiskDetections/submit": "least=Application"
           }
         }
       ],

From bbb5ce67f1de00a7158ff782cb8047da41392143 Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Mon, 13 Jul 2026 14:14:34 +0300
Subject: [PATCH 2/2] Weekly Permissions sync 2026-07-13

---
 permissions/new/permissions.json      | 36 +++++++++++++++++++++++++++
 permissions/new/provisioningInfo.json | 20 +++++++--------
 2 files changed, 46 insertions(+), 10 deletions(-)

diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json
index a3aab9f2..668490a7 100644
--- a/permissions/new/permissions.json
+++ b/permissions/new/permissions.json
@@ -4836,6 +4836,42 @@
         "ownerSecurityGroup": "IdentityReq"
       }
     },
+    "AppRegistration.Create": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Register new applications",
+          "adminDescription": "Allows the app to create new registrations for applications on behalf of the signed-in user.",
+          "userDisplayName": "Register new applications",
+          "userDescription": "Allows the app to create new registrations for applications on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        },
+        "Application": {
+          "adminDisplayName": "Register new applications",
+          "adminDescription": "Allows the app to create new registrations for applications without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "POST"
+          ],
+          "paths": {
+            "/applications": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "idappcore"
+      }
+    },
     "AppRoleAssignment.ReadWrite.All": {
       "authorizationType": "oAuth2",
       "schemes": {
diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json
index af813e33..75c07f32 100644
--- a/permissions/new/provisioningInfo.json
+++ b/permissions/new/provisioningInfo.json
@@ -1182,18 +1182,18 @@
       {
         "id": "",
         "scheme": "DelegatedWork",
-        "environment": "",
-        "isHidden": true,
+        "environment": "public",
+        "isHidden": false,
         "isEnabled": true,
-        "resourceAppId": "00000003-0000-0000-c000-000000000000"
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
       },
       {
         "id": "",
         "scheme": "Application",
-        "environment": "",
-        "isHidden": true,
+        "environment": "public",
+        "isHidden": false,
         "isEnabled": true,
-        "resourceAppId": "00000003-0000-0000-c000-000000000000"
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
       }
     ],
     "AppRegistration.DeleteRestore.All": [
@@ -1203,7 +1203,7 @@
         "environment": "",
         "isHidden": true,
         "isEnabled": true,
-        "resourceAppId": "00000003-0000-0000-c000-000000000000"
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
       },
       {
         "id": "",
@@ -1211,7 +1211,7 @@
         "environment": "",
         "isHidden": true,
         "isEnabled": true,
-        "resourceAppId": "00000003-0000-0000-c000-000000000000"
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
       }
     ],
     "AppRegistration.EnableDisable.All": [
@@ -1221,7 +1221,7 @@
         "environment": "",
         "isHidden": true,
         "isEnabled": true,
-        "resourceAppId": "00000003-0000-0000-c000-000000000000"
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
       },
       {
         "id": "",
@@ -1229,7 +1229,7 @@
         "environment": "",
         "isHidden": true,
         "isEnabled": true,
-        "resourceAppId": "00000003-0000-0000-c000-000000000000"
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
       }
     ],
     "AppManagementOnboarding.Read.All": [