Conversation
There was a problem hiding this comment.
Pull request overview
Weekly permissions sync updating Microsoft Graph permission path mappings to include new Data Security & Governance content upload session endpoints.
Changes:
- Add
/me/.../contentUploadSessionand/users/{userId}/.../contentUploadSessionpaths underContent.Process.All. - Add the same new paths under
Content.Process.User.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "/me/dataSecurityAndGovernance/contentUploadSession": "", | ||
| "/me/dataSecurityAndGovernance/processContent": "least=Application,DelegatedWork", | ||
| "/users/{userId}/dataSecurityAndGovernance/contentUploadSession": "", | ||
| "/users/{userId}/dataSecurityAndGovernance/processContent": "least=Application,DelegatedWork" |
There was a problem hiding this comment.
In Content.Process.User, the existing /me/.../processContent and /users/{userId}/.../processContent entries specify least=Application,DelegatedWork, but the newly-added .../contentUploadSession paths have an empty value. If empty values are treated differently by the tooling (e.g., no least-privilege annotation), this will make the new endpoints inconsistent with the rest of this permission and could lead to incorrect least-privilege calculations. Please align the contentUploadSession entries with the other paths in this same paths block (likely by adding the same least=Application,DelegatedWork value).
Weekly Permissions sync 2026-03-29