[msgraph-onboarding-access-app]

Weekly Permissions sync 2026-11-03

[Copilot]

🔵 Needs a closer look

Service-owner validation is needed for expanded app-only access to identity-attributed Copilot data and licensing mutations because backend authorization and rollout evidence are unavailable, and UserData’s Application deployment still has an empty ID.

No open issues 🎉

What changed in this PR

This weekly sync updates the Microsoft Graph permission catalog and deployment metadata for security automation, Copilot cost management, and cloud licensing.

Changes:

• Adds eight security automation permissions with endpoint mappings, and updates their deployment IDs, visibility, and environments.
• Extends application-permission coverage for Copilot cost management reads and updates consent descriptions.
• Adds cloud licensing allotment-source and management mappings, plus hidden, disabled deployment entries for new allotment permissions.

File	Description
permissions/​new/​provisioningInfo.json	Updates automation deployments and adds cloud licensing deployment entries.
permissions/​new/​permissions.json	Adds automation permissions and expands Copilot cost management and cloud licensing mappings.

_{Review effort: Balanced}