From bb0f3cf2dbfd086f6199c5bf8dc62a52d79857a4 Mon Sep 17 00:00:00 2001
From: David <1511024+marabooy@users.noreply.github.com>
Date: Sun, 1 Mar 2026 03:35:01 +0300
Subject: [PATCH] Weekly Permissions sync 2026-03-01

---
 permissions/new/permissions.json      | 78 +++++++++++++++++++++++++++
 permissions/new/provisioningInfo.json |  4 +-
 2 files changed, 80 insertions(+), 2 deletions(-)

diff --git a/permissions/new/permissions.json b/permissions/new/permissions.json
index 5651fc71..2dd309a8 100644
--- a/permissions/new/permissions.json
+++ b/permissions/new/permissions.json
@@ -60918,6 +60918,84 @@
         "ownerSecurityGroup": "RtsAvengersSG"
       }
     },
+    "WindowsUpdates.Read.All": {
+      "authorizationType": "oAuth2",
+      "schemes": {
+        "DelegatedWork": {
+          "adminDisplayName": "Read all Windows update deployment settings",
+          "adminDescription": "Allows the app to read all Windows update deployment settings for the organization on behalf of the signed-in user.",
+          "userDisplayName": "Read all Windows update deployment settings",
+          "userDescription": "Allows the app to read all Windows update deployment settings for the organization on your behalf.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 3
+        },
+        "Application": {
+          "adminDisplayName": "Read all Windows update deployment settings",
+          "adminDescription": "Allows the app to read all Windows update deployment settings for the organization without a signed-in user.",
+          "requiresAdminConsent": true,
+          "privilegeLevel": 4
+        }
+      },
+      "pathSets": [
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "GET"
+          ],
+          "paths": {
+            "/admin/windows/updates/catalog/entries": "least=DelegatedWork,Application",
+            "/admin/windows/updates/deploymentaudiences": "least=DelegatedWork,Application",
+            "/admin/windows/updates/deploymentaudiences/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/deploymentaudiences/{id}/exclusions": "least=DelegatedWork,Application",
+            "/admin/windows/updates/deploymentaudiences/{id}/members": "least=DelegatedWork,Application",
+            "/admin/windows/updates/deployments": "least=DelegatedWork,Application",
+            "/admin/windows/updates/deployments/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/knownIssues": "least=DelegatedWork,Application",
+            "/admin/windows/updates/knownIssues/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/knownIssues/Default.findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/knownIssues/findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/policies": "least=DelegatedWork,Application",
+            "/admin/windows/updates/policies/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/policies/{id}/applicableContent": "least=DelegatedWork,Application",
+            "/admin/windows/updates/policies/{id}/approvals": "least=DelegatedWork,Application",
+            "/admin/windows/updates/policies/{id}/approvals/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/policies/{id}/rings": "least=DelegatedWork,Application",
+            "/admin/windows/updates/policies/{id}/rings/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/{id}/Default.getKnownIssuesByTimeRange(daysInPast={daysInPast},includeAllActive={includeAllActive})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/{id}/editions": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/{id}/getKnownIssuesByTimeRange(daysInPast={daysInPast},includeAllActive={includeAllActive})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/{id}/knownIssues": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/Default.findByCatalogId(catalogID={catalogID})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/Default.findByEndOfService(monthsFromToday={monthsFromToday})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/Default.findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/findByCatalogId(catalogID={catalogID})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/findByEndOfService(monthsFromToday={monthsFromToday})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/products/findByKbNumber(kbNumber={kbNumber})": "least=DelegatedWork,Application",
+            "/admin/windows/updates/resourceconnections": "least=DelegatedWork,Application",
+            "/admin/windows/updates/resourceconnections/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/resourceconnections/microsoft.graph.windowsupdates.operationalinsightsconnection": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatableassets": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatableassets/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatableassets/{id}/microsoft.graph.windowsupdates.updatableassetgroup/members": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatableassets/microsoft.graph.windowsupdates.azureaddevice": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatableassets/microsoft.graph.windowsupdates.updatableassetgroup": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatepolicies": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatepolicies/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatepolicies/{id}/compliancechanges": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatepolicies/{id}/compliancechanges/{id}": "least=DelegatedWork,Application",
+            "/admin/windows/updates/updatepolicies/{id}/compliancechanges/microsoft.graph.windowsupdates.contentapproval": "least=DelegatedWork,Application"
+          }
+        }
+      ],
+      "ownerInfo": {
+        "ownerSecurityGroup": "autopatchgraph"
+      }
+    },
     "WindowsUpdates.ReadWrite.All": {
       "authorizationType": "oAuth2",
       "schemes": {
diff --git a/permissions/new/provisioningInfo.json b/permissions/new/provisioningInfo.json
index 9cccf79b..5ccd6d02 100644
--- a/permissions/new/provisioningInfo.json
+++ b/permissions/new/provisioningInfo.json
@@ -18336,7 +18336,7 @@
         "id": "9528CE37-154E-4E4F-A0FC-12BAEFD85D51",
         "scheme": "DelegatedWork",
         "environment": "public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "61ae9cd9-7bca-458c-affc-861e2f24ba3b"
       },
@@ -18344,7 +18344,7 @@
         "id": "FA099153-0225-489C-980E-384DC674AB81",
         "scheme": "Application",
         "environment": "public",
-        "isHidden": true,
+        "isHidden": false,
         "isEnabled": true,
         "resourceAppId": "61ae9cd9-7bca-458c-affc-861e2f24ba3b"
       }